$ rpki-client -vvvf rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft File: ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft (raw, json) Hash identifier: KTgeRzrdZIG1oALl6yJaaD0xTdOKKoHQ6j3h5kyPsHk= Subject key identifier: 81:44:B9:AA:98:8B:A0:D6:03:B4:60:A7:FB:CC:B6:DB:A9:E0:62:12 Authority key identifier: 72:41:E8:F0:38:B9:F2:52:FB:61:CA:41:B6:A4:FC:16:7B:77:55:26 Certificate issuer: /CN=A9161477/serialNumber=7241E8F038B9F252FB61CA41B6A4FC167B775526 Certificate serial: 012D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ckHo8Di58lL7YcpBtqT8Fnt3VSY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft Manifest number: 0129 Signing time: Wed 23 Sep 2026 05:31:22 +0000 Manifest this update: Wed 23 Sep 2026 05:31:21 +0000 Manifest next update: Wed 30 Sep 2026 05:31:21 +0000 Files and hashes: 1: ckHo8Di58lL7YcpBtqT8Fnt3VSY.crl (hash: JZ3uGODnMp4ZFQUL6pnh3OSRdDM6tYRBKjfpkzV7EdY=) 2: CAB73E3AF3FC11EF83B4DD30C4F9AE02.roa (hash: LdoES6KZxqxOMlXy5GpD4F8aTeCZCb2DpDN7emPVRUM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.crl rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ckHo8Di58lL7YcpBtqT8Fnt3VSY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 05:31:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 301 (0x12d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161477, serialNumber=7241E8F038B9F252FB61CA41B6A4FC167B775526 Validity Not Before: Sep 23 05:31:21 2026 GMT Not After : Sep 30 05:31:21 2026 GMT Subject: CN=6ab36429-f165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9d:aa:06:75:ad:4d:b9:b2:ea:b8:52:d6:6b: 94:e1:c7:7c:b5:73:74:39:9f:87:88:1a:f8:2d:5a: 31:5a:c2:dd:83:78:8d:88:b0:2f:b6:e5:35:2e:b8: f0:f9:2e:a7:9d:9e:6c:dc:b7:c1:a8:3a:78:1c:e0: 98:56:74:6f:da:a4:ff:81:a8:05:0e:6d:32:50:3b: a8:bd:47:78:cb:a8:ab:1e:c0:d7:c7:f3:86:88:85: 02:62:e9:21:06:5d:f0:7c:f4:84:e1:d0:d5:ac:66: dc:f8:ba:cb:ff:92:a1:db:f9:34:e8:bb:6c:fb:2e: fe:21:bf:75:1c:a3:4d:ce:bb:4b:e3:8f:6e:64:6d: c4:34:93:d5:5e:0c:62:d7:3d:9a:dc:8c:b5:bb:da: 5b:dd:a3:e0:e0:63:6b:01:70:56:6b:51:6b:30:f8: 56:44:00:17:d1:3b:db:6d:40:1a:d9:3b:2e:56:bb: 23:11:a5:f5:98:a9:55:e9:cf:0a:01:e1:ed:71:f8: 13:58:c6:3b:7a:3f:88:4b:de:99:85:b5:34:18:0e: ba:af:4f:5f:6c:80:30:a2:ec:85:c5:88:bf:b9:26: 5c:d5:13:8e:1f:36:f9:c5:60:3d:6d:a7:bc:e4:8d: c7:e6:8b:bb:1f:69:88:c7:c1:6f:94:c8:45:ab:17: 2d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:44:B9:AA:98:8B:A0:D6:03:B4:60:A7:FB:CC:B6:DB:A9:E0:62:12 X509v3 Authority Key Identifier: keyid:72:41:E8:F0:38:B9:F2:52:FB:61:CA:41:B6:A4:FC:16:7B:77:55:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ckHo8Di58lL7YcpBtqT8Fnt3VSY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:97:da:0d:ce:dd:af:d2:98:5f:d1:75:b7:03:42:c6:f3:d2: 2b:01:02:31:27:a5:76:0b:ab:63:17:03:b2:c9:ab:81:09:eb: 3b:b4:9f:a3:76:3a:8b:2e:8d:69:f7:d1:4e:db:3f:96:73:36: 0e:46:7e:62:75:44:46:20:df:17:d1:4d:da:7d:4f:46:b3:37: 33:3a:e8:3c:ed:79:f0:26:2b:25:9e:e9:81:37:53:21:ef:e5: 44:b2:bc:34:05:c4:e0:7d:ad:49:6e:c9:74:88:bf:f3:2e:f0: 40:80:fd:5a:65:81:29:50:c6:28:3c:c3:d5:87:03:5b:41:1b: c6:9b:1a:cf:e4:c2:bb:e5:cf:42:e0:d5:b3:04:60:be:f3:f7: 3c:ec:3b:32:59:de:1c:89:9b:d2:86:d5:9e:45:74:36:1a:df: fd:2c:0b:28:18:59:00:fb:f9:33:ea:14:85:b5:e0:d9:62:13: 41:71:dd:e4:4c:7b:10:43:02:93:c0:da:81:00:bd:00:9a:b6: e9:6f:ce:b8:67:79:d9:d0:c8:22:e2:4c:7b:ce:c1:3a:e8:de: 96:7c:03:0f:2b:0e:a7:58:4b:d7:02:27:c4:c0:ad:50:86:25: 5e:92:82:3c:d0:21:b0:4b:ed:1b:bf:bc:60:b3:05:01:e9:0d: e9:05:fa:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE0NzcxMTAvBgNVBAUTKDcyNDFFOEYwMzhCOUYyNTJGQjYxQ0E0MUI2QTRGQzE2 N0I3NzU1MjYwHhcNMjYwOTIzMDUzMTIxWhcNMjYwOTMwMDUzMTIxWjAYMRYwFAYD VQQDEw02YWIzNjQyOS1mMTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqJ2qBnWtTbmy6rhS1muU4cd8tXN0OZ+HiBr4LVoxWsLdg3iNiLAvtuU1Lrjw +S6nnZ5s3LfBqDp4HOCYVnRv2qT/gagFDm0yUDuovUd4y6irHsDXx/OGiIUCYukh Bl3wfPSE4dDVrGbc+LrL/5Kh2/k06Lts+y7+Ib91HKNNzrtL449uZG3ENJPVXgxi 1z2a3Iy1u9pb3aPg4GNrAXBWa1FrMPhWRAAX0TvbbUAa2TsuVrsjEaX1mKlV6c8K AeHtcfgTWMY7ej+IS96ZhbU0GA66r09fbIAwouyFxYi/uSZc1ROOHzb5xWA9bae8 5I3H5ou7H2mIx8FvlMhFqxctfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIFEuaqY i6DWA7Rgp/vMttup4GISMB8GA1UdIwQYMBaAFHJB6PA4ufJS+2HKQbak/BZ7d1Um MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTQ3Ny82QjcwMzVGOEYz RkMxMUVGOTlENTM3MzBDNEY5QUUwMi9ja0hvOERpNThsTDdZY3BCdHFUOEZudDNW U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NrSG84RGk1OGxMN1ljcEJ0cVQ4Rm50M1ZTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTQ3Ny82QjcwMzVGOEYzRkMxMUVGOTlENTM3MzBDNEY5QUUwMi9ja0hvOERpNThs TDdZY3BCdHFUOEZudDNWU1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdpfaDc7dr9KYX9F1twNCxvPSKwECMSeldgurYxcDssmrgQnrO7Sfo3Y6iy6N affRTts/lnM2DkZ+YnVERiDfF9FN2n1PRrM3MzroPO158CYrJZ7pgTdTIe/lRLK8 NAXE4H2tSW7JdIi/8y7wQID9WmWBKVDGKDzD1YcDW0Ebxpsaz+TCu+XPQuDVswRg vvP3POw7MlneHImb0obVnkV0Nhrf/SwLKBhZAPv5M+oUhbXg2WITQXHd5Ex7EEMC k8DagQC9AJq26W/OuGd52dDIIuJMe87BOujelnwDDysOp1hL1wInxMCtUIYlXpKC PNAhsEvtG7+8YLMFAekN6QX6Fw== -----END CERTIFICATE-----Generated at Wed Sep 23 10:24:47 2026 by rpki-client