$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft File: DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft (raw, json) Hash identifier: t7ogapzpEEz4gvfvNHUkyOCfmDeDerWd+33Pic8ag/M= Subject key identifier: E0:D8:AD:41:1A:0E:04:02:99:25:50:5F:45:7A:3A:AF:F0:81:AC:34 Authority key identifier: 0C:4C:17:22:9C:6A:B6:7F:54:3F:EC:9C:4D:03:E5:FE:E4:ED:2F:F6 Certificate issuer: /CN=A9157ADC/serialNumber=0C4C17229C6AB67F543FEC9C4D03E5FEE4ED2FF6 Certificate serial: 0331 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft Manifest number: 032A Signing time: Wed 07 Oct 2026 01:10:23 +0000 Manifest this update: Wed 07 Oct 2026 01:10:22 +0000 Manifest next update: Wed 14 Oct 2026 01:10:22 +0000 Files and hashes: 1: DEwXIpxqtn9UP-ycTQPl_uTtL_Y.crl (hash: RiSBPOURZd9iUnHY2hybMIsOdIYKfsxJ0jwd04+q1cM=) 2: 88FCD2C62DBA11ED94AFED62C4F9AE02.roa (hash: /6WdSynf7V0vN/nZ8NChu2HHIyeykBoMxKn2RuUgb30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.crl rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 01:10:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 817 (0x331) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157ADC, serialNumber=0C4C17229C6AB67F543FEC9C4D03E5FEE4ED2FF6 Validity Not Before: Oct 7 01:10:22 2026 GMT Not After : Oct 14 01:10:22 2026 GMT Subject: CN=6ac59bff-9889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e9:a6:f3:68:f8:76:c8:f4:a2:f7:66:ae:bb: 1d:8c:f5:c9:f5:2c:e1:84:0c:1f:54:0c:a7:e6:4c: 40:e8:d1:8c:56:a9:27:e6:b5:42:98:33:64:43:7d: 00:9b:11:cc:57:15:e5:a1:02:ba:69:0f:d6:5a:67: 50:6b:fb:74:1c:da:b7:d9:82:aa:4d:4f:09:48:90: a4:77:6b:1d:07:1a:4e:b4:63:15:bb:0d:7b:64:81: d2:1a:85:65:24:fb:47:e7:94:60:b3:0e:e0:4c:ca: b1:f3:0e:f6:ef:bb:e8:a2:82:65:39:da:aa:20:4d: 92:37:81:26:72:ab:96:91:76:0c:57:07:63:39:2e: be:d7:5b:6e:01:b6:fb:56:ad:9e:6a:35:bd:ef:a2: de:24:54:fe:cb:e8:e2:cf:c8:5a:74:32:3f:76:d5: 73:d8:ec:5d:5b:02:4c:20:03:58:e0:35:09:f2:e1: f6:d9:fb:f1:38:6a:b6:df:d7:6b:69:6f:1d:9d:49: 44:40:ae:ee:f6:a5:90:2f:cd:b3:14:a5:35:56:31: 93:df:aa:de:b3:3f:86:5b:a1:8b:06:7e:40:b4:cb: f8:18:b5:af:bf:e9:f9:34:9f:26:78:cc:69:d8:8e: eb:3f:31:9c:4b:3a:c5:f0:2b:a5:fa:d6:15:7c:c9: 81:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:D8:AD:41:1A:0E:04:02:99:25:50:5F:45:7A:3A:AF:F0:81:AC:34 X509v3 Authority Key Identifier: keyid:0C:4C:17:22:9C:6A:B6:7F:54:3F:EC:9C:4D:03:E5:FE:E4:ED:2F:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:64:90:5c:82:a4:ea:7a:42:1c:f7:79:2a:85:7f:5a:14:db: ad:c7:fd:3c:29:87:96:47:b8:08:73:fe:92:16:3c:bc:b6:66: bf:94:e5:1e:8c:44:f2:75:c5:93:76:97:cf:7b:82:f2:7a:f1: b6:cb:46:c8:40:99:98:ff:a0:6f:45:66:bc:45:45:a9:a7:8d: 02:33:d0:de:e3:a0:e8:c1:2a:52:87:8c:04:d7:7e:38:c8:a2: 02:fd:bd:e9:07:d0:69:f9:d4:3d:24:00:62:29:e9:9f:da:17: 1d:34:d8:af:9d:40:9f:9f:e1:20:b4:e9:08:04:0c:b5:85:f4: c8:38:8f:c2:8d:81:93:e3:5f:6a:e6:d6:c2:15:3c:58:94:27: df:40:03:1c:90:f9:e0:b2:cf:e4:ca:64:e6:11:43:a8:44:e7: e0:2d:5a:a7:b6:27:f2:16:6d:d8:a2:cc:92:8c:f8:89:e4:0b: 49:57:b2:0b:f8:4d:89:78:d9:01:5c:d5:a1:24:74:3d:7c:ae: 3e:48:55:fb:50:d8:7b:21:63:43:38:b0:ef:ce:24:dd:d9:75: 44:fb:75:26:cd:0f:2f:ea:11:bb:f8:72:28:67:6e:78:de:55: 10:e4:bb:a2:8a:5b:ea:01:87:a4:5a:a3:1f:f3:2f:fa:f8:89: 82:e4:95:a3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAzEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdBREMxMTAvBgNVBAUTKDBDNEMxNzIyOUM2QUI2N0Y1NDNGRUM5QzREMDNFNUZF RTRFRDJGRjYwHhcNMjYxMDA3MDExMDIyWhcNMjYxMDE0MDExMDIyWjAYMRYwFAYD VQQDEw02YWM1OWJmZi05ODg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhemm82j4dsj0ovdmrrsdjPXJ9SzhhAwfVAyn5kxA6NGMVqkn5rVCmDNkQ30A mxHMVxXloQK6aQ/WWmdQa/t0HNq32YKqTU8JSJCkd2sdBxpOtGMVuw17ZIHSGoVl JPtH55Rgsw7gTMqx8w7277voooJlOdqqIE2SN4EmcquWkXYMVwdjOS6+11tuAbb7 Vq2eajW976LeJFT+y+jiz8hadDI/dtVz2OxdWwJMIANY4DUJ8uH22fvxOGq239dr aW8dnUlEQK7u9qWQL82zFKU1VjGT36resz+GW6GLBn5AtMv4GLWvv+n5NJ8meMxp 2I7rPzGcSzrF8Cul+tYVfMmBtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFODYrUEa DgQCmSVQX0V6Oq/wgaw0MB8GA1UdIwQYMBaAFAxMFyKcarZ/VD/snE0D5f7k7S/2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0FEQy9GNTc1ODlFMjJE QjYxMUVEODIxNTlCNUVDNEY5QUUwMi9ERXdYSXB4cXRuOVVQLXljVFFQbF91VHRM X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RFd1hJcHhxdG45VVAteWNUUVBsX3VUdExfWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0FEQy9GNTc1ODlFMjJEQjYxMUVEODIxNTlCNUVDNEY5QUUwMi9ERXdYSXB4cXRu OVVQLXljVFFQbF91VHRMX1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAU2SQXIKk6npCHPd5KoV/WhTbrcf9PCmHlke4CHP+khY8vLZmv5TlHoxE8nXF k3aXz3uC8nrxtstGyECZmP+gb0VmvEVFqaeNAjPQ3uOg6MEqUoeMBNd+OMiiAv29 6QfQafnUPSQAYinpn9oXHTTYr51An5/hILTpCAQMtYX0yDiPwo2Bk+NfaubWwhU8 WJQn30ADHJD54LLP5Mpk5hFDqETn4C1ap7Yn8hZt2KLMkoz4ieQLSVeyC/hNiXjZ AVzVoSR0PXyuPkhV+1DYeyFjQziw784k3dl1RPt1Js0PL+oRu/hyKGdueN5VEOS7 oopb6gGHpFqjH/Mv+viJguSVow== -----END CERTIFICATE-----Generated at Thu Oct 8 14:26:28 2026 by rpki-client