$ rpki-client -vvvf rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.mft File: NOt2jjwYUO8RSYszIMrNGyYdWSk.mft (raw, json) Hash identifier: FR6h7FvXhO2JfYjbQIagSluiTgt1pGAFxKKllPvsaDQ= Subject key identifier: 09:3D:C8:5F:64:BF:19:BC:D8:F0:0B:74:0D:EF:A1:97:76:F4:CC:3B Authority key identifier: 34:EB:76:8E:3C:18:50:EF:11:49:8B:33:20:CA:CD:1B:26:1D:59:29 Certificate issuer: /CN=A9163EEB/serialNumber=34EB768E3C1850EF11498B3320CACD1B261D5929 Certificate serial: 3586 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOt2jjwYUO8RSYszIMrNGyYdWSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.mft Manifest number: 3584 Signing time: Sat 10 Oct 2026 15:07:08 +0000 Manifest this update: Sat 10 Oct 2026 15:07:07 +0000 Manifest next update: Sat 17 Oct 2026 15:07:07 +0000 Files and hashes: 1: NOt2jjwYUO8RSYszIMrNGyYdWSk.crl (hash: iOG+jGXlqC3LYFK/AvQthTDTCU7NPa2fBw+9fWl/XVY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.crl rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOt2jjwYUO8RSYszIMrNGyYdWSk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 15:07:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13702 (0x3586) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163EEB, serialNumber=34EB768E3C1850EF11498B3320CACD1B261D5929 Validity Not Before: Oct 10 15:07:07 2026 GMT Not After : Oct 17 15:07:07 2026 GMT Subject: CN=6aca549b-d335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:dd:58:d5:d0:0c:43:e4:31:e9:78:8d:35:5e: 0e:76:90:02:37:fd:10:be:06:ba:9c:55:61:71:7d: 6f:28:e0:1c:e4:89:69:e3:f5:fb:20:51:12:bc:ac: e1:21:81:88:85:4f:48:50:f6:57:fb:2c:b2:23:d6: 00:47:44:3e:90:32:cd:f7:50:02:81:96:7c:bd:90: e3:3d:93:b2:ae:5e:ac:81:1a:76:98:61:c9:d3:5e: 2b:ab:03:db:0b:06:44:c0:7e:9d:79:62:0d:6c:70: 07:26:bd:f5:77:5e:31:04:cb:a6:cd:7c:ac:c0:86: 24:4f:68:43:65:30:16:02:fe:26:cf:91:19:c9:25: 82:aa:fc:cd:86:d0:70:23:3b:6b:c2:01:59:12:8a: 24:ac:07:63:1e:5c:0f:9f:a9:d6:9d:e1:bc:c5:5d: c4:9d:57:92:d3:2d:c5:17:d7:60:d5:a8:fc:d4:af: e9:a2:fd:85:49:18:6c:5b:ad:e1:40:6c:24:0b:ab: e6:5c:6a:be:4f:f0:c4:f6:23:b7:d5:ef:33:f2:2e: 31:a5:7f:92:86:37:19:c4:8b:47:15:20:87:5c:86: 7f:e8:12:d1:98:44:e8:bb:62:d5:a4:32:14:9d:74: 4f:68:8f:ef:b7:25:be:06:d8:8f:32:1d:56:a3:7b: 59:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:3D:C8:5F:64:BF:19:BC:D8:F0:0B:74:0D:EF:A1:97:76:F4:CC:3B X509v3 Authority Key Identifier: keyid:34:EB:76:8E:3C:18:50:EF:11:49:8B:33:20:CA:CD:1B:26:1D:59:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOt2jjwYUO8RSYszIMrNGyYdWSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:fd:ff:d8:26:67:49:ee:f0:cc:e5:5d:3a:8b:15:37:14:aa: 5e:0e:bd:e3:27:a2:00:9a:07:7e:3d:74:56:1a:d8:5c:07:00: 3b:a4:69:83:47:cf:c8:0d:42:50:70:d4:6e:1b:18:1e:90:85: 85:47:05:7c:af:a0:09:50:0e:4d:60:d6:1c:20:38:c9:e7:44: 21:c4:c1:9e:28:6c:f5:b2:f9:30:3d:3d:b3:6b:1d:d3:e3:37: d4:ae:c6:35:19:5f:c0:8c:ed:8b:f5:5d:2a:70:1f:eb:83:a1: f0:0c:e5:65:49:46:9f:1b:99:16:7e:8f:35:67:99:c3:28:5c: ee:18:d6:fc:cf:22:dd:47:33:0b:81:b9:03:94:74:b4:6c:0e: aa:c7:c6:1a:8a:83:63:77:01:28:ac:3c:70:36:77:27:ee:a2: 71:c7:45:0d:48:ce:e3:75:b2:eb:45:c5:99:4b:82:5b:78:ad: 35:3e:54:0a:43:8a:d7:60:6d:22:02:ae:a4:90:4f:5f:c4:ca: 8b:c9:18:42:91:68:db:c3:d3:e3:93:1e:a5:c6:e1:82:02:74: 65:6f:b0:7c:69:90:01:37:2b:e5:f3:c6:bf:db:ec:6e:e0:a2: 88:7f:36:14:f2:36:87:bf:4b:78:b8:19:65:2e:75:db:fc:25: f8:f4:05:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjNFRUIxMTAvBgNVBAUTKDM0RUI3NjhFM0MxODUwRUYxMTQ5OEIzMzIwQ0FDRDFC MjYxRDU5MjkwHhcNMjYxMDEwMTUwNzA3WhcNMjYxMDE3MTUwNzA3WjAYMRYwFAYD VQQDEw02YWNhNTQ5Yi1kMzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2d1Y1dAMQ+Qx6XiNNV4OdpACN/0Qvga6nFVhcX1vKOAc5Ilp4/X7IFESvKzh IYGIhU9IUPZX+yyyI9YAR0Q+kDLN91ACgZZ8vZDjPZOyrl6sgRp2mGHJ014rqwPb CwZEwH6deWINbHAHJr31d14xBMumzXyswIYkT2hDZTAWAv4mz5EZySWCqvzNhtBw IztrwgFZEookrAdjHlwPn6nWneG8xV3EnVeS0y3FF9dg1aj81K/pov2FSRhsW63h QGwkC6vmXGq+T/DE9iO31e8z8i4xpX+ShjcZxItHFSCHXIZ/6BLRmETou2LVpDIU nXRPaI/vtyW+BtiPMh1Wo3tZjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAk9yF9k vxm82PALdA3voZd29Mw7MB8GA1UdIwQYMBaAFDTrdo48GFDvEUmLMyDKzRsmHVkp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0VFQi82REU0Mjc2ODFE QTQxMUUyODA4MTcxOUEwOEIwMkNEMi9OT3Qyamp3WVVPOFJTWXN6SU1yTkd5WWRX U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05PdDJqandZVU84UlNZc3pJTXJOR3lZZFdTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 M0VFQi82REU0Mjc2ODFEQTQxMUUyODA4MTcxOUEwOEIwMkNEMi9OT3Qyamp3WVVP OFJTWXN6SU1yTkd5WWRXU2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAq/3/2CZnSe7wzOVdOosVNxSqXg694yeiAJoHfj10VhrYXAcAO6Rpg0fPyA1C UHDUbhsYHpCFhUcFfK+gCVAOTWDWHCA4yedEIcTBnihs9bL5MD09s2sd0+M31K7G NRlfwIzti/VdKnAf64Oh8AzlZUlGnxuZFn6PNWeZwyhc7hjW/M8i3UczC4G5A5R0 tGwOqsfGGoqDY3cBKKw8cDZ3J+6iccdFDUjO43Wy60XFmUuCW3itNT5UCkOK12Bt IgKupJBPX8TKi8kYQpFo28PT45MepcbhggJ0ZW+wfGmQATcr5fPGv9vsbuCiiH82 FPI2h79LeLgZZS512/wl+PQF5g== -----END CERTIFICATE-----Generated at Sun Oct 11 16:29:00 2026 by rpki-client