$ rpki-client -vvvf rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft File: dCWq4W3bRko-K0ecekDJkCODa6A.mft (raw, json) Hash identifier: 9QN1GiH9DpGriH9bbYRRScBx2u6esN2hxBLoIZrCnvs= Subject key identifier: F8:25:2D:13:A9:30:EA:69:18:68:6A:F8:CB:6B:97:49:B6:A4:B2:BC Authority key identifier: 74:25:AA:E1:6D:DB:46:4A:3E:2B:47:9C:7A:40:C9:90:23:83:6B:A0 Certificate issuer: /CN=A9163998/serialNumber=7425AAE16DDB464A3E2B479C7A40C99023836BA0 Certificate serial: 03CB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft Manifest number: 03A5 Signing time: Mon 21 Sep 2026 00:35:55 +0000 Manifest this update: Mon 21 Sep 2026 00:35:55 +0000 Manifest next update: Mon 28 Sep 2026 00:35:55 +0000 Files and hashes: 1: dCWq4W3bRko-K0ecekDJkCODa6A.crl (hash: nON8943ColWGcCmY2S+kn0pKyZv2H1sXtBR+LebB9EM=) 2: 1EA5984A0BE111ED9E3AA135C4F9AE02.roa (hash: PAqkmFF7NdZLc+WBtc68ZNEhsmCDHgoBRZN4pVqjKP8=) 3: A3C1A64E020811EF900CC60CC4F9AE02.roa (hash: HpPZhZVSwGrzf4zGYjjyQ7ueOCim2ZvtK0gkwPhEOmI=) 4: 7F78A06E6BBD11F18D81D59C7947A888.roa (hash: eg0ecmCsbK5JnVphz+icPr5TGD+NYgXexf2SF0w1KKU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.crl rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:35:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 971 (0x3cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163998, serialNumber=7425AAE16DDB464A3E2B479C7A40C99023836BA0 Validity Not Before: Sep 21 00:35:55 2026 GMT Not After : Sep 28 00:35:55 2026 GMT Subject: CN=6ab07beb-fc28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:15:9f:d5:f5:2f:0f:cd:e5:3f:6e:ba:b5:ca: 73:81:37:18:dc:bc:b8:37:22:45:fd:d3:bc:11:a5: b0:8a:24:07:06:77:5c:96:eb:84:29:fd:3e:e9:b2: a3:bd:d7:b0:0e:e8:3c:db:6c:1b:79:18:d9:c1:87: a2:29:f7:5d:11:d0:04:88:3b:95:74:f1:8c:7e:34: 6d:0a:52:6d:e1:7d:38:51:98:e1:0a:d7:76:60:4f: 7c:a3:1e:3a:fc:fc:2f:ca:2b:d1:85:60:e7:84:f3: e1:22:b3:0e:be:08:f1:d1:10:52:56:67:43:ed:fa: c7:3b:7d:b2:0f:18:15:9d:ea:0d:7e:23:f6:52:bb: bf:c4:3c:12:ec:71:f3:d6:d5:9b:a9:42:9f:9d:47: 46:5a:5f:fd:d4:cb:3c:47:1a:46:c9:2c:d7:08:e7: e5:65:64:b8:17:29:aa:ab:bf:a2:87:54:66:a2:ed: c0:49:ec:aa:9c:19:20:cc:32:68:c9:27:f4:27:68: 28:e8:4b:02:38:2b:59:72:24:76:2d:7d:bf:93:18: 29:3e:eb:67:80:1c:8d:27:04:36:79:31:e0:15:a1: 15:f3:91:5d:de:5c:f9:08:bc:56:8e:b6:fd:98:77: 2a:12:d5:ee:09:18:30:05:13:3a:57:9c:87:22:a3: fe:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:25:2D:13:A9:30:EA:69:18:68:6A:F8:CB:6B:97:49:B6:A4:B2:BC X509v3 Authority Key Identifier: keyid:74:25:AA:E1:6D:DB:46:4A:3E:2B:47:9C:7A:40:C9:90:23:83:6B:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:e9:19:0a:15:61:bd:9a:56:03:a6:e8:f6:7a:27:7b:0d:ad: 7c:79:ff:a2:0e:01:42:65:fa:79:d0:0b:b8:e6:11:9c:1c:42: b1:71:68:d9:88:28:7d:ee:5f:4c:02:11:06:f3:a2:6e:9d:73: bf:f3:ad:e7:c0:41:16:5f:51:e3:88:64:de:fa:a6:95:e1:79: 60:b2:e9:a4:84:a3:14:2a:44:9e:ad:25:c6:e0:62:e3:28:7b: 60:08:f2:41:f9:9d:95:76:0d:fc:2e:68:18:7d:fb:a0:9b:0f: 68:d7:a2:49:a7:42:46:59:10:57:5a:14:7d:1c:32:4a:85:eb: f2:6b:04:d3:45:bc:92:be:65:52:ec:68:cb:33:59:4a:b5:f4: 96:11:22:36:70:1e:a2:b8:e1:f8:dd:c4:55:df:d2:85:c7:c6: 48:a8:3b:29:9f:bd:eb:77:b8:a9:71:5c:c3:2c:c1:01:1d:a1: 39:73:75:ea:86:2e:b7:fd:fc:70:6a:7b:e8:fd:04:63:3f:cc: 30:81:e9:67:58:dd:73:2e:5f:72:a8:0c:bd:f9:fe:22:31:b0: cd:5c:8b:ed:e6:8a:1e:4b:6d:40:74:7e:e4:e0:09:bc:79:39: cb:65:14:3b:80:9e:8e:58:35:c6:5e:c0:92:d4:b3:65:a4:80: b7:8b:4a:7f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM5OTgxMTAvBgNVBAUTKDc0MjVBQUUxNkREQjQ2NEEzRTJCNDc5QzdBNDBDOTkw MjM4MzZCQTAwHhcNMjYwOTIxMDAzNTU1WhcNMjYwOTI4MDAzNTU1WjAYMRYwFAYD VQQDEw02YWIwN2JlYi1mYzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRWf1fUvD83lP266tcpzgTcY3Ly4NyJF/dO8EaWwiiQHBndcluuEKf0+6bKj vdewDug822wbeRjZwYeiKfddEdAEiDuVdPGMfjRtClJt4X04UZjhCtd2YE98ox46 /PwvyivRhWDnhPPhIrMOvgjx0RBSVmdD7frHO32yDxgVneoNfiP2Uru/xDwS7HHz 1tWbqUKfnUdGWl/91Ms8RxpGySzXCOflZWS4Fymqq7+ih1Rmou3ASeyqnBkgzDJo ySf0J2go6EsCOCtZciR2LX2/kxgpPutngByNJwQ2eTHgFaEV85Fd3lz5CLxWjrb9 mHcqEtXuCRgwBRM6V5yHIqP+YQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPglLROp MOppGGhq+Mtrl0m2pLK8MB8GA1UdIwQYMBaAFHQlquFt20ZKPitHnHpAyZAjg2ug MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mzk5OC8zMENDMDg0QTA4 REMxMUVEQkVERTYxMkJDNEY5QUUwMi9kQ1dxNFczYlJrby1LMGVjZWtESmtDT0Rh NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RDV3E0VzNiUmtvLUswZWNla0RKa0NPRGE2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Mzk5OC8zMENDMDg0QTA4REMxMUVEQkVERTYxMkJDNEY5QUUwMi9kQ1dxNFczYlJr by1LMGVjZWtESmtDT0RhNkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADekZChVhvZpWA6bo9nonew2tfHn/og4BQmX6edALuOYRnBxCsXFo2Ygofe5f TAIRBvOibp1zv/Ot58BBFl9R44hk3vqmleF5YLLppISjFCpEnq0lxuBi4yh7YAjy QfmdlXYN/C5oGH37oJsPaNeiSadCRlkQV1oUfRwySoXr8msE00W8kr5lUuxoyzNZ SrX0lhEiNnAeorjh+N3EVd/ShcfGSKg7KZ+963e4qXFcwyzBAR2hOXN16oYut/38 cGp76P0EYz/MMIHpZ1jdcy5fcqgMvfn+IjGwzVyL7eaKHkttQHR+5OAJvHk5y2UU O4Cejlg1xl7AktSzZaSAt4tKfw== -----END CERTIFICATE-----Generated at Mon Sep 21 09:12:11 2026 by rpki-client