$ rpki-client -vvvf rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/capYzfG2vXwm5hp1GKTQrSyfGhQ.mft File: capYzfG2vXwm5hp1GKTQrSyfGhQ.mft (raw, json) Hash identifier: /R+3fwT102NrZp19tjqMFEmCX65Kqv5t91OEP6qnhjE= Subject key identifier: B9:E0:A4:88:89:EF:C8:62:F9:A3:69:E6:1C:BB:32:C1:15:8F:C6:31 Authority key identifier: 71:AA:58:CD:F1:B6:BD:7C:26:E6:1A:75:18:A4:D0:AD:2C:9F:1A:14 Certificate issuer: /CN=A9165A0B/serialNumber=71AA58CDF1B6BD7C26E61A7518A4D0AD2C9F1A14 Certificate serial: 09C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/capYzfG2vXwm5hp1GKTQrSyfGhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/capYzfG2vXwm5hp1GKTQrSyfGhQ.mft Manifest number: 0989 Signing time: Wed 30 Sep 2026 20:22:09 +0000 Manifest this update: Wed 30 Sep 2026 20:22:09 +0000 Manifest next update: Wed 07 Oct 2026 20:22:09 +0000 Files and hashes: 1: capYzfG2vXwm5hp1GKTQrSyfGhQ.crl (hash: KtRqtdBuWm6m+tUUh1P2vSXQYUqgLK+AtHcsuHU6kUE=) 2: 90606AD670AA11ED8DAE4C5AC4F9AE02.roa (hash: slq0Wyqnx6iAofRexHMploP6lzx1Y7iMjxAKRH4brB0=) 3: 8C51AEF8C4FB11EAAEAE7C1DC4F9AE02.roa (hash: 6o/3aMhetoKMDOL7BqFDS/m2oeiBh14W7yUGYyyEW/Y=) 4: 8BA9C1CAC4FB11EAAEAE7C1DC4F9AE02.roa (hash: uNfQL2S5Z0WpDK8+2M2KzzJHEMJvt92wNIgJdtYb0rE=) 5: 819DAAB27EB711F1809AE3176BA30FBC.roa (hash: qAJUEjSIS3LCG7kbcMYMWLIRc8WO6/s9r3ShA4KRFbQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/capYzfG2vXwm5hp1GKTQrSyfGhQ.crl rsync://rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/capYzfG2vXwm5hp1GKTQrSyfGhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/capYzfG2vXwm5hp1GKTQrSyfGhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Oct 2026 20:22:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2497 (0x9c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165A0B, serialNumber=71AA58CDF1B6BD7C26E61A7518A4D0AD2C9F1A14 Validity Not Before: Sep 30 20:22:09 2026 GMT Not After : Oct 7 20:22:09 2026 GMT Subject: CN=6abd6f71-ffd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f7:6d:f4:25:c9:fa:74:f6:64:70:39:b5:85: bf:92:75:1b:43:78:fc:ec:97:c2:4d:b9:40:24:19: 94:fb:9d:69:d4:c0:f8:11:69:33:36:cc:eb:01:92: 38:88:e1:06:4e:f1:03:88:bf:d4:bc:98:e0:b2:32: 63:44:65:40:66:8a:02:a3:e9:5f:98:a3:77:9f:a9: f5:a4:d0:24:4d:73:ea:8f:48:a7:e6:42:d7:1e:c5: 94:16:99:99:45:52:ae:c1:c1:4c:7d:f6:5d:e0:9b: eb:b2:78:25:07:56:6b:d4:3e:b1:5c:0f:98:51:4a: ae:68:23:8d:65:dc:47:32:91:77:d3:fa:3a:15:92: ae:2e:85:e3:37:19:65:8b:0d:8b:a6:d7:18:09:6b: 93:32:5a:44:6f:31:4e:cb:50:ff:1c:54:5a:36:36: c0:e0:41:32:5e:35:cd:86:91:e9:8d:ff:88:a5:4c: 08:95:17:88:bb:07:65:58:4b:cb:53:92:b8:70:ac: 6a:95:3b:6f:ba:10:fe:09:df:95:64:cc:ab:45:0d: 0b:ac:65:c7:a0:71:6d:af:68:a2:d3:05:4f:7a:d2: 3f:43:10:ca:3b:c2:8c:fc:3e:c0:de:8b:43:38:dc: d5:fd:8d:39:b4:24:ab:01:42:02:1d:a0:6b:8f:10: 2f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E0:A4:88:89:EF:C8:62:F9:A3:69:E6:1C:BB:32:C1:15:8F:C6:31 X509v3 Authority Key Identifier: keyid:71:AA:58:CD:F1:B6:BD:7C:26:E6:1A:75:18:A4:D0:AD:2C:9F:1A:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/capYzfG2vXwm5hp1GKTQrSyfGhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/capYzfG2vXwm5hp1GKTQrSyfGhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/capYzfG2vXwm5hp1GKTQrSyfGhQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:95:ca:63:c1:78:8a:1e:43:69:99:47:59:16:4d:53:9b:19: 6c:be:d5:b7:a2:1c:e1:fe:28:a2:69:3a:ac:cf:7d:36:d2:ba: 73:96:d7:f6:df:85:77:00:ef:5b:1b:5e:fd:75:c5:a6:78:7f: 9a:d4:37:ff:1d:eb:c9:77:6c:91:d5:eb:9d:f2:cc:8f:da:20: 4b:b6:e3:71:3b:2a:ee:8c:e2:3b:a4:c9:b7:f5:42:33:24:44: c8:c7:1c:50:de:38:18:b5:3d:ab:a9:81:b7:e4:d8:a1:b3:0d: 30:fd:92:e8:b3:b1:f6:24:9a:3b:b6:3f:81:f6:d3:bb:4b:16: b4:6f:55:bc:29:6b:f5:fa:0f:7f:94:4e:31:7c:8f:ac:f5:4e: 1a:e6:e6:fc:7a:23:d2:f4:bf:6d:6e:a7:ef:68:3e:df:f2:f0: 59:a1:8f:cf:4e:8e:31:04:8d:df:df:e3:69:ef:77:df:57:7a: 92:8c:d6:a8:7a:e8:79:aa:e4:e2:c8:81:14:02:b4:48:fe:9b: cc:84:e6:01:7f:45:a0:5a:ee:7c:ce:a9:03:32:9a:b4:30:c5: 96:22:a1:87:d9:a7:53:3c:7e:69:d7:bc:c7:d9:64:fa:8f:1a: b6:e5:7b:66:e1:62:a5:c2:61:dc:2a:b3:ca:a5:89:8a:57:e5: b9:c4:da:1d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVBMEIxMTAvBgNVBAUTKDcxQUE1OENERjFCNkJEN0MyNkU2MUE3NTE4QTREMEFE MkM5RjFBMTQwHhcNMjYwOTMwMjAyMjA5WhcNMjYxMDA3MjAyMjA5WjAYMRYwFAYD VQQDEw02YWJkNmY3MS1mZmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Pdt9CXJ+nT2ZHA5tYW/knUbQ3j87JfCTblAJBmU+51p1MD4EWkzNszrAZI4 iOEGTvEDiL/UvJjgsjJjRGVAZooCo+lfmKN3n6n1pNAkTXPqj0in5kLXHsWUFpmZ RVKuwcFMffZd4JvrsnglB1Zr1D6xXA+YUUquaCONZdxHMpF30/o6FZKuLoXjNxll iw2LptcYCWuTMlpEbzFOy1D/HFRaNjbA4EEyXjXNhpHpjf+IpUwIlReIuwdlWEvL U5K4cKxqlTtvuhD+Cd+VZMyrRQ0LrGXHoHFtr2ii0wVPetI/QxDKO8KM/D7A3otD ONzV/Y05tCSrAUICHaBrjxAvRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLngpIiJ 78hi+aNp5hy7MsEVj8YxMB8GA1UdIwQYMBaAFHGqWM3xtr18JuYadRik0K0snxoU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUEwQi8xNTU4NkY0MkM0 RjgxMUVBOEI5QjRDMTNDNEY5QUUwMi9jYXBZemZHMnZYd201aHAxR0tUUXJTeWZH aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NhcFl6Zkcydlh3bTVocDFHS1RRclN5ZkdoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUEwQi8xNTU4NkY0MkM0RjgxMUVBOEI5QjRDMTNDNEY5QUUwMi9jYXBZemZHMnZY d201aHAxR0tUUXJTeWZHaFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAc5XKY8F4ih5DaZlHWRZNU5sZbL7Vt6Ic4f4oomk6rM99NtK6c5bX9t+FdwDv Wxte/XXFpnh/mtQ3/x3ryXdskdXrnfLMj9ogS7bjcTsq7oziO6TJt/VCMyREyMcc UN44GLU9q6mBt+TYobMNMP2S6LOx9iSaO7Y/gfbTu0sWtG9VvClr9foPf5ROMXyP rPVOGubm/Hoj0vS/bW6n72g+3/LwWaGPz06OMQSN39/jae9331d6kozWqHroeark 4siBFAK0SP6bzITmAX9FoFrufM6pAzKatDDFliKhh9mnUzx+ade8x9lk+o8atuV7 ZuFipcJh3CqzyqWJilflucTaHQ== -----END CERTIFICATE-----Generated at Thu Oct 1 13:38:22 2026 by rpki-client