$ rpki-client -vvvf rpki.apnic.net/member_repository/A915D584/36687F8EB00F11F1AC3501026C11F970/Ds4z88KBZm0B4ouSeJXC3fas2EQ.mft File: Ds4z88KBZm0B4ouSeJXC3fas2EQ.mft (raw, json) Hash identifier: AEshSAPBYS3a8LGcAfdHQW3gzeT3D0byb/jmbQ9UUEs= Subject key identifier: 31:DC:F8:15:97:51:E4:D3:F7:B1:0C:A6:35:E0:BA:23:3D:A7:4F:2D Authority key identifier: 0E:CE:33:F3:C2:81:66:6D:01:E2:8B:92:78:95:C2:DD:F6:AC:D8:44 Certificate issuer: /CN=A915D584/serialNumber=0ECE33F3C281666D01E28B927895C2DDF6ACD844 Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ds4z88KBZm0B4ouSeJXC3fas2EQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D584/36687F8EB00F11F1AC3501026C11F970/Ds4z88KBZm0B4ouSeJXC3fas2EQ.mft Manifest number: 07 Signing time: Mon 21 Sep 2026 09:13:32 +0000 Manifest this update: Mon 21 Sep 2026 09:13:31 +0000 Manifest next update: Mon 28 Sep 2026 09:13:31 +0000 Files and hashes: 1: Ds4z88KBZm0B4ouSeJXC3fas2EQ.crl (hash: mYdXlC1OUq1bBwldaTqRQJy89BhfX9swSnO3Y19m308=) 2: 872AD682B01011F1B04156A36C11F970.roa (hash: jm/+G31po+MJ2sktkg8jDrLvytQSl9uDM6fJdHyue+U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D584/36687F8EB00F11F1AC3501026C11F970/Ds4z88KBZm0B4ouSeJXC3fas2EQ.crl rsync://rpki.apnic.net/member_repository/A915D584/36687F8EB00F11F1AC3501026C11F970/Ds4z88KBZm0B4ouSeJXC3fas2EQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ds4z88KBZm0B4ouSeJXC3fas2EQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 09:13:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D584, serialNumber=0ECE33F3C281666D01E28B927895C2DDF6ACD844 Validity Not Before: Sep 21 09:13:31 2026 GMT Not After : Sep 28 09:13:31 2026 GMT Subject: CN=6ab0f53b-4a8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:01:f2:e4:bf:21:05:82:af:3a:ab:4f:81:a6: eb:0d:e7:e1:0c:a6:58:68:69:54:51:80:ec:c0:2b: 25:da:27:6d:da:2f:c6:d7:7f:8b:f9:6d:3c:16:1f: cc:3f:98:99:09:31:21:b3:d0:63:ea:83:84:11:17: 92:11:18:d1:78:ce:31:5e:2a:c4:ae:6d:42:2f:22: 98:05:c3:0d:5d:9f:44:70:64:a4:3d:f3:75:18:45: e3:ff:3c:94:39:95:b6:ce:3c:29:2d:ed:a4:f7:9b: 6e:68:8e:b8:99:05:fe:cc:8d:06:d9:a1:90:5c:84: 80:f8:63:53:84:39:9e:69:7b:e4:b3:c4:8d:ba:87: d1:01:99:79:d2:bc:60:a4:0e:4e:7c:ef:fa:5f:97: 3c:7e:8b:6b:f2:97:4a:90:dd:18:26:ad:5d:d6:77: d9:f2:a0:01:ba:c9:ee:2b:85:ec:15:1d:f8:ff:d9: 10:f5:cd:fc:43:c6:ba:57:11:dd:5c:3c:e8:0c:cd: 64:3c:2c:2f:a2:c3:2e:e3:d2:14:8f:5c:df:13:6c: 48:e3:71:2d:7e:16:7e:d8:2e:ca:45:33:d7:59:1c: 76:0d:76:f9:40:7f:1d:36:e6:8c:26:f1:40:4d:0b: 44:fa:17:b8:07:b4:1b:a6:16:96:c2:0e:e1:57:88: 46:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:DC:F8:15:97:51:E4:D3:F7:B1:0C:A6:35:E0:BA:23:3D:A7:4F:2D X509v3 Authority Key Identifier: keyid:0E:CE:33:F3:C2:81:66:6D:01:E2:8B:92:78:95:C2:DD:F6:AC:D8:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D584/36687F8EB00F11F1AC3501026C11F970/Ds4z88KBZm0B4ouSeJXC3fas2EQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ds4z88KBZm0B4ouSeJXC3fas2EQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D584/36687F8EB00F11F1AC3501026C11F970/Ds4z88KBZm0B4ouSeJXC3fas2EQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:3b:80:3d:0d:af:7b:c8:8e:4d:e1:47:1e:ab:8c:a0:55:20: bf:5f:03:bf:14:89:0a:a1:37:0b:c5:f9:04:e1:c5:8a:35:40: 94:1b:fb:c7:67:48:0b:8e:3d:14:7e:f5:94:5d:bc:40:fa:8c: 0e:a2:2c:82:fe:a4:b7:ce:5c:9d:af:a8:f5:c0:36:28:ed:82: fa:0c:8f:20:ac:3b:bb:c3:5d:e7:66:8f:15:87:ad:a9:a2:72: fa:67:76:6b:f9:e5:07:3f:34:ec:a8:6d:af:03:fa:98:90:92: 03:aa:12:b9:01:61:d1:00:69:5a:bc:f7:a0:d8:31:57:57:eb: 0d:ee:9e:ad:d2:e7:59:dd:f3:12:22:a1:f5:92:7a:27:02:a9: e4:75:7a:c5:aa:ac:eb:75:67:56:f4:d7:eb:79:df:54:ab:e9: d0:b5:b8:44:54:32:fd:bb:e8:8e:08:28:79:7f:2b:3e:65:3e: fc:2d:fe:8f:dc:3d:d6:2d:ed:65:59:b1:9a:75:32:98:59:af: 5d:2c:4c:77:1e:36:95:47:97:f7:1e:b0:9a:01:76:0d:dd:f0: cf:84:16:a7:0e:97:60:3d:dd:d9:9e:b1:6e:57:03:73:23:7f: bf:51:4d:58:14:a6:9e:6c:1a:82:8a:55:4c:d2:4d:1d:a8:17: 8c:23:f3:25 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RDU4NDExMC8GA1UEBRMoMEVDRTMzRjNDMjgxNjY2RDAxRTI4QjkyNzg5NUMyRERG NkFDRDg0NDAeFw0yNjA5MjEwOTEzMzFaFw0yNjA5MjgwOTEzMzFaMBgxFjAUBgNV BAMTDTZhYjBmNTNiLTRhOGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuAfLkvyEFgq86q0+BpusN5+EMplhoaVRRgOzAKyXaJ23aL8bXf4v5bTwWH8w/ mJkJMSGz0GPqg4QRF5IRGNF4zjFeKsSubUIvIpgFww1dn0RwZKQ983UYReP/PJQ5 lbbOPCkt7aT3m25ojriZBf7MjQbZoZBchID4Y1OEOZ5pe+SzxI26h9EBmXnSvGCk Dk587/pflzx+i2vyl0qQ3RgmrV3Wd9nyoAG6ye4rhewVHfj/2RD1zfxDxrpXEd1c POgMzWQ8LC+iwy7j0hSPXN8TbEjjcS1+Fn7YLspFM9dZHHYNdvlAfx025owm8UBN C0T6F7gHtBumFpbCDuFXiEb1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUMdz4FZdR 5NP3sQymNeC6Iz2nTy0wHwYDVR0jBBgwFoAUDs4z88KBZm0B4ouSeJXC3fas2EQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVENTg0LzM2Njg3RjhFQjAw RjExRjFBQzM1MDEwMjZDMTFGOTcwL0RzNHo4OEtCWm0wQjRvdVNlSlhDM2ZhczJF US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRHM0ejg4S0JabTBCNG91U2VKWEMzZmFzMkVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVE NTg0LzM2Njg3RjhFQjAwRjExRjFBQzM1MDEwMjZDMTFGOTcwL0RzNHo4OEtCWm0w QjRvdVNlSlhDM2ZhczJFUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCIO4A9Da97yI5N4Uceq4ygVSC/XwO/FIkKoTcLxfkE4cWKNUCUG/vHZ0gLjj0U fvWUXbxA+owOoiyC/qS3zlydr6j1wDYo7YL6DI8grDu7w13nZo8Vh62ponL6Z3Zr +eUHPzTsqG2vA/qYkJIDqhK5AWHRAGlavPeg2DFXV+sN7p6t0udZ3fMSIqH1knon AqnkdXrFqqzrdWdW9Nfred9Uq+nQtbhEVDL9u+iOCCh5fys+ZT78Lf6P3D3WLe1l WbGadTKYWa9dLEx3HjaVR5f3HrCaAXYN3fDPhBanDpdgPd3ZnrFuVwNzI3+/UU1Y FKaebBqCilVM0k0dqBeMI/Ml -----END CERTIFICATE-----Generated at Tue Sep 22 05:55:46 2026 by rpki-client