$ rpki-client -vvvf rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.mft File: 909zX9xaW5M28yTDLLpVjrvSjZc.mft (raw, json) Hash identifier: gO6vQVUlpWZNB7Jft1Br5gR9/Y9z34QcB5+cgfw59MI= Subject key identifier: 74:D7:6B:31:3D:F6:46:31:42:E9:EF:81:4F:71:FE:D3:F1:A4:3C:A7 Authority key identifier: F7:4F:73:5F:DC:5A:5B:93:36:F3:24:C3:2C:BA:55:8E:BB:D2:8D:97 Certificate issuer: /CN=A915123C/serialNumber=F74F735FDC5A5B9336F324C32CBA558EBBD28D97 Certificate serial: 1386 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/909zX9xaW5M28yTDLLpVjrvSjZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.mft Manifest number: 137D Signing time: Mon 12 Oct 2026 17:02:03 +0000 Manifest this update: Mon 12 Oct 2026 17:02:02 +0000 Manifest next update: Mon 19 Oct 2026 17:02:02 +0000 Files and hashes: 1: 909zX9xaW5M28yTDLLpVjrvSjZc.crl (hash: dgo8MwG48D+JwxTFm5/iLaGrdFCeSV7YN+RsNKgokdQ=) 2: 51C3E830926B11F09CB88A3FC4F9AE02.roa (hash: qokabZtBOAlQ/LOtlITa957LjkcWQQzpeDyYnXOKXSA=) 3: 5232D4B6926B11F09CB88A3FC4F9AE02.roa (hash: TXksggudhoYnYZG8XJQZOjMGiQeEQ88l8YGg9Asd64Y=) 4: 5144F80E926B11F09CB88A3FC4F9AE02.roa (hash: sFjuCeK0cCGXi+GkdmGnHvDeHOKZWdP9M+7beoSSfAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.crl rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/909zX9xaW5M28yTDLLpVjrvSjZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 16:59:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4998 (0x1386) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915123C, serialNumber=F74F735FDC5A5B9336F324C32CBA558EBBD28D97 Validity Not Before: Oct 12 17:02:02 2026 GMT Not After : Oct 19 17:02:02 2026 GMT Subject: CN=6acd128b-726c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:84:74:4d:f3:af:d8:07:71:a8:f0:2e:dc:7a: 7d:a3:9e:0f:56:8a:dd:a0:91:4b:86:61:02:56:45: d9:60:1f:bc:c0:00:78:5f:9a:02:f9:2f:8f:15:97: c2:08:3b:fd:1e:31:55:46:81:d1:18:85:c1:f6:cb: 01:a4:82:2d:cf:82:9c:8f:33:ad:36:1a:27:9a:3e: 8d:c9:d7:d2:79:34:88:2d:2a:79:e3:0b:2e:5f:8d: 6f:01:23:4c:6b:56:23:37:77:96:26:03:d7:62:0c: dc:f0:4d:39:24:bf:7d:60:fc:9c:60:23:1d:0c:7b: 33:77:09:41:94:9f:68:ef:d8:9a:38:d8:ed:ae:63: ff:85:53:32:84:33:53:6b:cc:82:e6:83:89:e0:97: 6e:f4:f9:76:cb:cd:86:a3:51:57:f8:cb:94:37:89: f7:2f:75:d8:3b:ee:d3:fa:03:1c:e5:c8:99:c6:c2: 66:cb:c4:81:da:81:ca:c6:70:04:2f:e9:ce:e2:85: ad:6e:56:d7:32:6f:a5:46:90:bc:8e:6d:9c:60:0e: bd:c6:5e:4b:46:21:aa:6c:c5:fc:f0:c1:ca:3c:23: 99:fc:e4:22:ac:82:e7:1f:48:3e:fd:38:7c:37:c7: e1:84:5a:c6:41:14:c9:93:c6:49:55:07:35:b3:b4: 42:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:D7:6B:31:3D:F6:46:31:42:E9:EF:81:4F:71:FE:D3:F1:A4:3C:A7 X509v3 Authority Key Identifier: keyid:F7:4F:73:5F:DC:5A:5B:93:36:F3:24:C3:2C:BA:55:8E:BB:D2:8D:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/909zX9xaW5M28yTDLLpVjrvSjZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:aa:e6:7c:29:4d:a1:2b:39:d0:4d:e2:42:1d:e0:11:71:49: e1:e8:41:78:4c:ae:3b:52:7e:94:cf:01:48:81:2f:38:10:42: 9d:07:e0:ae:34:2c:9d:ad:cc:9a:86:54:65:60:75:c2:57:d7: 39:78:93:4a:f2:aa:29:45:f6:3d:02:4b:43:0b:ce:6e:09:d1: 93:82:9c:0e:3e:0e:02:72:2c:fc:fc:e9:a6:c3:7a:5f:f0:24: 1f:b1:b3:88:7e:67:0d:32:91:4e:b8:81:da:cc:63:f7:d2:05: e9:b4:b5:93:95:be:33:3b:9b:2e:d4:40:5f:0e:11:0d:8b:82: de:54:08:1f:90:19:c5:8c:9f:5e:96:62:8c:e8:66:c4:c3:cf: e6:d3:00:ca:d0:40:84:3e:36:27:86:24:d9:91:89:7c:4a:f8: ce:17:be:75:48:a4:44:1e:93:10:bc:0f:72:2d:4c:e8:bd:92: 1b:fe:98:c3:1b:b4:4e:66:f0:0e:d6:a0:39:c6:84:ab:4b:3a: 09:f8:a5:b0:70:94:07:f9:9a:ba:85:46:e0:80:46:da:38:2e: da:7f:29:59:37:ee:10:d9:73:26:f1:5c:d7:c4:bc:3a:0f:16: 73:1a:19:ee:7e:ee:7e:3d:46:a5:b1:0a:ec:7a:63:07:62:71: fd:f8:17:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICE4YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEyM0MxMTAvBgNVBAUTKEY3NEY3MzVGREM1QTVCOTMzNkYzMjRDMzJDQkE1NThF QkJEMjhEOTcwHhcNMjYxMDEyMTcwMjAyWhcNMjYxMDE5MTcwMjAyWjAYMRYwFAYD VQQDEw02YWNkMTI4Yi03MjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqIR0TfOv2AdxqPAu3Hp9o54PVordoJFLhmECVkXZYB+8wAB4X5oC+S+PFZfC CDv9HjFVRoHRGIXB9ssBpIItz4KcjzOtNhonmj6NydfSeTSILSp54wsuX41vASNM a1YjN3eWJgPXYgzc8E05JL99YPycYCMdDHszdwlBlJ9o79iaONjtrmP/hVMyhDNT a8yC5oOJ4Jdu9Pl2y82Go1FX+MuUN4n3L3XYO+7T+gMc5ciZxsJmy8SB2oHKxnAE L+nO4oWtblbXMm+lRpC8jm2cYA69xl5LRiGqbMX88MHKPCOZ/OQirILnH0g+/Th8 N8fhhFrGQRTJk8ZJVQc1s7RCNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHTXazE9 9kYxQunvgU9x/tPxpDynMB8GA1UdIwQYMBaAFPdPc1/cWluTNvMkwyy6VY670o2X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTIzQy82OEY1M0YzMkNC M0UxMUU4ODgyQ0RBM0FDNEY5QUUwMi85MDl6WDl4YVc1TTI4eVRETExwVmpydlNq WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkwOXpYOXhhVzVNMjh5VERMTHBWanJ2U2paYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTIzQy82OEY1M0YzMkNCM0UxMUU4ODgyQ0RBM0FDNEY5QUUwMi85MDl6WDl4YVc1 TTI4eVRETExwVmpydlNqWmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARarmfClNoSs50E3iQh3gEXFJ4ehBeEyuO1J+lM8BSIEvOBBCnQfgrjQsna3M moZUZWB1wlfXOXiTSvKqKUX2PQJLQwvObgnRk4KcDj4OAnIs/PzppsN6X/AkH7Gz iH5nDTKRTriB2sxj99IF6bS1k5W+MzubLtRAXw4RDYuC3lQIH5AZxYyfXpZijOhm xMPP5tMAytBAhD42J4Yk2ZGJfEr4zhe+dUikRB6TELwPci1M6L2SG/6Ywxu0Tmbw DtagOcaEq0s6CfilsHCUB/mauoVG4IBG2jgu2n8pWTfuENlzJvFc18S8Og8WcxoZ 7n7ufj1GpbEK7HpjB2Jx/fgXjw== -----END CERTIFICATE-----Generated at Mon Oct 12 23:34:42 2026 by rpki-client