$ rpki-client -vvvf rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.mft File: emYQUZRc4uj7SubeY7KEeLDO014.mft (raw, json) Hash identifier: qDo0RnKozaEP/sKb2IiPLbn06wZjbHG0bt/zPTo/6ps= Subject key identifier: EF:6A:B3:30:E4:AD:F3:36:AF:B7:E7:F5:55:12:79:67:62:D2:BF:6C Authority key identifier: 7A:66:10:51:94:5C:E2:E8:FB:4A:E6:DE:63:B2:84:78:B0:CE:D3:5E Certificate issuer: /CN=A9165FF3/serialNumber=7A661051945CE2E8FB4AE6DE63B28478B0CED35E Certificate serial: 358C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emYQUZRc4uj7SubeY7KEeLDO014.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.mft Manifest number: 3583 Signing time: Sun 20 Sep 2026 14:57:57 +0000 Manifest this update: Sun 20 Sep 2026 14:57:57 +0000 Manifest next update: Sun 27 Sep 2026 14:57:57 +0000 Files and hashes: 1: emYQUZRc4uj7SubeY7KEeLDO014.crl (hash: JO5KfcD3CGRyYJeB/mCsN4T1BRztQUqXaJUujjz/0ng=) 2: 5FBB084EAE6A11ECAA9D756AC4F9AE02.roa (hash: FqlE9fSFXdXS5GIVYg88FabUhHOpGkCxLxf9baIvlL4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.crl rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emYQUZRc4uj7SubeY7KEeLDO014.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 14:57:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13708 (0x358c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165FF3, serialNumber=7A661051945CE2E8FB4AE6DE63B28478B0CED35E Validity Not Before: Sep 20 14:57:57 2026 GMT Not After : Sep 27 14:57:57 2026 GMT Subject: CN=6aaff475-24cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3c:c2:5d:ad:36:ba:10:06:64:c4:01:7f:72: 27:ec:39:a5:fa:1d:5c:c2:98:34:70:9e:55:ff:1a: 16:74:5c:52:2e:2d:7c:29:b8:09:7c:b0:e4:83:c0: fd:b7:b2:db:f3:08:85:57:46:ad:72:ae:89:10:c5: 79:d1:55:15:f9:f0:e0:6b:d5:07:6c:ae:d2:80:ec: 7e:31:f4:bd:13:c5:d4:b8:ce:31:cb:03:1d:c5:7b: 38:10:45:dd:18:f7:48:93:28:f1:63:72:81:b5:8e: 8c:67:59:39:88:6b:be:ca:f6:6b:60:c1:ce:c6:89: ce:4e:48:bb:6a:f2:2e:63:39:18:b9:78:d2:e1:58: 88:18:90:2b:38:b7:ce:ec:6b:9a:f0:3c:9b:9e:93: cf:a9:7b:b5:f9:fe:51:37:ae:75:16:c2:3d:0f:21: 57:ae:0d:0d:40:bd:4a:5c:ae:5d:7a:4d:46:ea:b1: de:c6:51:68:43:c4:f6:87:ce:29:52:97:06:61:d7: cb:c8:0d:08:ea:83:02:29:19:c0:1e:e0:2e:72:c4: 62:89:aa:51:65:3f:92:e7:c1:47:14:fe:b7:91:f1: 67:ec:2a:43:5b:41:13:44:56:69:a2:02:cc:58:38: d7:15:77:7d:22:a2:72:44:43:a5:33:b9:4e:9e:88: c9:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:6A:B3:30:E4:AD:F3:36:AF:B7:E7:F5:55:12:79:67:62:D2:BF:6C X509v3 Authority Key Identifier: keyid:7A:66:10:51:94:5C:E2:E8:FB:4A:E6:DE:63:B2:84:78:B0:CE:D3:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emYQUZRc4uj7SubeY7KEeLDO014.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:74:4c:f9:3c:f4:9e:e6:69:d8:e1:68:88:78:c7:5c:5e:f6: bf:cf:b7:a6:55:04:01:9f:aa:8d:52:f6:8d:66:b7:00:4b:96: 1f:a5:5d:e0:0e:f8:07:70:37:17:db:5b:66:eb:63:34:70:79: 2f:37:72:89:33:08:80:b4:d7:39:50:94:5b:8e:53:9d:8f:3b: d9:31:e9:8f:4f:0f:9e:55:e3:7d:88:69:ab:f0:05:74:19:02: 38:71:9f:14:1a:ba:42:e5:02:e8:d3:c4:59:39:fe:dc:ba:4b: 01:92:81:60:86:02:46:10:75:c9:52:82:45:f2:34:4b:89:f8: f7:bb:1c:10:14:54:1f:40:72:5b:f5:8a:15:d0:c3:8a:f9:f7: f3:4e:23:4d:f5:bd:e9:f0:16:d0:1a:08:14:18:cc:8a:59:a0: 93:50:90:6c:3b:f6:b1:ff:20:a7:57:da:3a:84:f9:00:03:27: ce:d0:8f:b4:0c:90:68:2b:1e:e2:cd:c3:5b:10:60:13:4a:0f: 5a:6b:fa:04:df:06:61:96:35:cb:e0:80:98:2c:b6:70:c0:aa: 33:43:8f:09:8c:9e:90:cd:44:a1:cd:20:f7:cd:38:03:20:8e: 4e:19:e6:8c:94:55:4f:22:3f:b8:5b:62:58:de:2c:92:d4:ad: 7d:7a:d3:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVGRjMxMTAvBgNVBAUTKDdBNjYxMDUxOTQ1Q0UyRThGQjRBRTZERTYzQjI4NDc4 QjBDRUQzNUUwHhcNMjYwOTIwMTQ1NzU3WhcNMjYwOTI3MTQ1NzU3WjAYMRYwFAYD VQQDEw02YWFmZjQ3NS0yNGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2jzCXa02uhAGZMQBf3In7Dml+h1cwpg0cJ5V/xoWdFxSLi18KbgJfLDkg8D9 t7Lb8wiFV0atcq6JEMV50VUV+fDga9UHbK7SgOx+MfS9E8XUuM4xywMdxXs4EEXd GPdIkyjxY3KBtY6MZ1k5iGu+yvZrYMHOxonOTki7avIuYzkYuXjS4ViIGJArOLfO 7Gua8DybnpPPqXu1+f5RN651FsI9DyFXrg0NQL1KXK5dek1G6rHexlFoQ8T2h84p UpcGYdfLyA0I6oMCKRnAHuAucsRiiapRZT+S58FHFP63kfFn7CpDW0ETRFZpogLM WDjXFXd9IqJyREOlM7lOnojJrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO9qszDk rfM2r7fn9VUSeWdi0r9sMB8GA1UdIwQYMBaAFHpmEFGUXOLo+0rm3mOyhHiwztNe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUZGMy9DRUFCQjRFNjFE OUQxMUUyOEVBRjREOEQwOEIwMkNEMi9lbVlRVVpSYzR1ajdTdWJlWTdLRWVMRE8w MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VtWVFVWlJjNHVqN1N1YmVZN0tFZUxETzAxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUZGMy9DRUFCQjRFNjFEOUQxMUUyOEVBRjREOEQwOEIwMkNEMi9lbVlRVVpSYzR1 ajdTdWJlWTdLRWVMRE8wMTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqnRM+Tz0nuZp2OFoiHjHXF72v8+3plUEAZ+qjVL2jWa3AEuWH6Vd4A74B3A3 F9tbZutjNHB5LzdyiTMIgLTXOVCUW45TnY872THpj08PnlXjfYhpq/AFdBkCOHGf FBq6QuUC6NPEWTn+3LpLAZKBYIYCRhB1yVKCRfI0S4n497scEBRUH0ByW/WKFdDD ivn3804jTfW96fAW0BoIFBjMilmgk1CQbDv2sf8gp1faOoT5AAMnztCPtAyQaCse 4s3DWxBgE0oPWmv6BN8GYZY1y+CAmCy2cMCqM0OPCYyekM1Eoc0g9804AyCOThnm jJRVTyI/uFtiWN4sktStfXrTjg== -----END CERTIFICATE-----Generated at Tue Sep 22 10:09:40 2026 by rpki-client