$ rpki-client -vvvf rpki.apnic.net/member_repository/A915E38A/9BCEEC3CBFC911F097EE5619C4F9AE02/7Ubg2mfUm_C8p7L9IOxIu86EepE.mft File: 7Ubg2mfUm_C8p7L9IOxIu86EepE.mft (raw, json) Hash identifier: pe5rsOY/8zRgGf32yKLKlSxmw4bRCDWH11w5DmWP/S0= Subject key identifier: 1E:C1:D0:97:CE:FC:D1:D2:FB:F1:99:9D:9C:67:D3:A3:98:91:34:0B Authority key identifier: ED:46:E0:DA:67:D4:9B:F0:BC:A7:B2:FD:20:EC:48:BB:CE:84:7A:91 Certificate issuer: /CN=A915E38A/serialNumber=ED46E0DA67D49BF0BCA7B2FD20EC48BBCE847A91 Certificate serial: A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ubg2mfUm_C8p7L9IOxIu86EepE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E38A/9BCEEC3CBFC911F097EE5619C4F9AE02/7Ubg2mfUm_C8p7L9IOxIu86EepE.mft Manifest number: A5 Signing time: Sat 19 Sep 2026 07:17:38 +0000 Manifest this update: Sat 19 Sep 2026 07:17:38 +0000 Manifest next update: Sat 26 Sep 2026 07:17:38 +0000 Files and hashes: 1: 7Ubg2mfUm_C8p7L9IOxIu86EepE.crl (hash: vSQGjwYZuM/oqMFsvvyHWoy1S8y0dlf9i/XXVL5lUnw=) 2: E2D6A7984F5F11F190C0BD46C4833773.roa (hash: DhEdJPW687P63CLaNT2Mz9aPqiwDP3BG1Z3glFSiYO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E38A/9BCEEC3CBFC911F097EE5619C4F9AE02/7Ubg2mfUm_C8p7L9IOxIu86EepE.crl rsync://rpki.apnic.net/member_repository/A915E38A/9BCEEC3CBFC911F097EE5619C4F9AE02/7Ubg2mfUm_C8p7L9IOxIu86EepE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ubg2mfUm_C8p7L9IOxIu86EepE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 166 (0xa6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E38A, serialNumber=ED46E0DA67D49BF0BCA7B2FD20EC48BBCE847A91 Validity Not Before: Sep 19 07:17:38 2026 GMT Not After : Sep 26 07:17:38 2026 GMT Subject: CN=6aae3712-d2cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a7:e9:71:3a:d1:db:09:9b:9d:a2:fe:66:11: a2:56:6d:ac:4a:c4:6f:7e:6f:0c:8d:c7:8d:ee:3d: 37:e8:08:8b:4a:82:89:ec:ae:87:e3:15:d9:59:f1: 1a:ff:85:01:dd:00:9c:81:92:41:3f:83:4d:f4:14: f6:e5:04:83:da:9c:68:ba:8e:3f:4a:0f:10:d7:74: a4:9e:f6:23:34:e6:90:2e:b3:4a:2e:ad:f7:5c:87: 18:91:56:3d:7c:93:e2:8b:a9:41:d5:5c:f0:c7:1a: e9:91:43:e6:ab:8b:96:27:15:19:58:8b:2c:64:db: 6d:2e:10:6d:13:eb:3a:4d:bc:03:f9:85:be:60:35: a2:e3:a2:e9:5a:60:06:07:2f:0c:10:71:e7:47:fb: ab:14:e8:82:56:65:4a:88:49:57:33:20:00:06:8e: 4f:fd:18:84:3d:3a:78:81:97:45:d3:16:bc:96:5c: bc:c5:63:45:70:91:79:90:45:17:d4:ba:7f:01:d3: aa:ac:44:e6:33:74:d9:c9:a4:99:ae:2c:20:52:ca: b3:27:a1:22:56:9a:d2:0d:47:26:43:fe:15:8d:7a: 6d:e9:9b:36:79:e4:b1:d6:ff:10:5c:bf:2b:fb:af: 73:bd:ed:78:5e:f4:a5:bb:7c:86:d6:15:7c:57:c9: 16:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:C1:D0:97:CE:FC:D1:D2:FB:F1:99:9D:9C:67:D3:A3:98:91:34:0B X509v3 Authority Key Identifier: keyid:ED:46:E0:DA:67:D4:9B:F0:BC:A7:B2:FD:20:EC:48:BB:CE:84:7A:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E38A/9BCEEC3CBFC911F097EE5619C4F9AE02/7Ubg2mfUm_C8p7L9IOxIu86EepE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ubg2mfUm_C8p7L9IOxIu86EepE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E38A/9BCEEC3CBFC911F097EE5619C4F9AE02/7Ubg2mfUm_C8p7L9IOxIu86EepE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:e5:b1:6d:28:f4:68:f7:0f:28:fa:73:10:4b:eb:8b:e8:4d: dc:2b:18:11:fb:b4:f9:24:30:66:0d:e4:2a:ff:97:7c:84:6c: a0:cf:f9:dc:ba:99:a5:e8:da:03:8c:13:ae:5f:a6:bc:dc:e5: 7c:be:4b:12:7d:21:bf:49:cc:6d:d5:59:5e:3f:b7:74:36:58: 62:ee:24:83:fc:22:7e:95:db:de:eb:e1:39:c1:d9:b9:a8:52: 2c:4b:35:57:3a:79:14:3c:fc:3a:0d:7d:5a:46:bf:77:12:b0: 9c:3d:a1:67:8d:7e:1f:43:fe:fe:2a:91:25:e2:15:fa:fc:f1: 64:bb:22:f9:ed:3b:3a:08:ed:c0:00:e6:98:3b:14:ce:8d:b3: 7f:c0:6e:51:33:61:85:83:36:25:5d:d9:a3:99:0b:80:96:11: 05:1b:a7:ac:13:aa:2d:a3:c6:83:52:3b:96:bf:53:b3:e8:fa: 44:4e:66:9d:cc:5e:52:9c:8a:c1:29:b9:a8:1f:bc:93:47:53: f1:66:91:a9:9b:cd:17:97:6d:f5:a0:ee:69:65:08:24:c3:4a: 02:cf:6f:c6:81:6a:71:61:da:b1:5f:f6:cf:ae:5b:00:28:c9: 5b:9c:ae:1e:94:e7:86:2d:46:21:99:92:bf:14:ee:2d:85:11: ae:9c:77:72 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUUzOEExMTAvBgNVBAUTKEVENDZFMERBNjdENDlCRjBCQ0E3QjJGRDIwRUM0OEJC Q0U4NDdBOTEwHhcNMjYwOTE5MDcxNzM4WhcNMjYwOTI2MDcxNzM4WjAYMRYwFAYD VQQDEw02YWFlMzcxMi1kMmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtafpcTrR2wmbnaL+ZhGiVm2sSsRvfm8MjceN7j036AiLSoKJ7K6H4xXZWfEa /4UB3QCcgZJBP4NN9BT25QSD2pxouo4/Sg8Q13SknvYjNOaQLrNKLq33XIcYkVY9 fJPii6lB1VzwxxrpkUPmq4uWJxUZWIssZNttLhBtE+s6TbwD+YW+YDWi46LpWmAG By8MEHHnR/urFOiCVmVKiElXMyAABo5P/RiEPTp4gZdF0xa8lly8xWNFcJF5kEUX 1Lp/AdOqrETmM3TZyaSZriwgUsqzJ6EiVprSDUcmQ/4VjXpt6Zs2eeSx1v8QXL8r +69zve14XvSlu3yG1hV8V8kWtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB7B0JfO /NHS+/GZnZxn06OYkTQLMB8GA1UdIwQYMBaAFO1G4Npn1JvwvKey/SDsSLvOhHqR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTM4QS85QkNFRUMzQ0JG QzkxMUYwOTdFRTU2MTlDNEY5QUUwMi83VWJnMm1mVW1fQzhwN0w5SU94SXU4NkVl cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdVYmcybWZVbV9DOHA3TDlJT3hJdTg2RWVwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTM4QS85QkNFRUMzQ0JGQzkxMUYwOTdFRTU2MTlDNEY5QUUwMi83VWJnMm1mVW1f QzhwN0w5SU94SXU4NkVlcEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADOWxbSj0aPcPKPpzEEvri+hN3CsYEfu0+SQwZg3kKv+XfIRsoM/53LqZpeja A4wTrl+mvNzlfL5LEn0hv0nMbdVZXj+3dDZYYu4kg/wifpXb3uvhOcHZuahSLEs1 Vzp5FDz8Og19Wka/dxKwnD2hZ41+H0P+/iqRJeIV+vzxZLsi+e07OgjtwADmmDsU zo2zf8BuUTNhhYM2JV3Zo5kLgJYRBRunrBOqLaPGg1I7lr9Ts+j6RE5mncxeUpyK wSm5qB+8k0dT8WaRqZvNF5dt9aDuaWUIJMNKAs9vxoFqcWHasV/2z65bACjJW5yu HpTnhi1GIZmSvxTuLYURrpx3cg== -----END CERTIFICATE-----Generated at Sun Sep 20 19:29:46 2026 by rpki-client