$ rpki-client -vvvf rpki.apnic.net/member_repository/A9168E98/68B95DF0897C11F1B45623477011F970/D7ep-f-5NrdU2MC2yClQpAHeosc.mft File: D7ep-f-5NrdU2MC2yClQpAHeosc.mft (raw, json) Hash identifier: 9ZTJPVEDsJwkchU3tdIH3pc6WkdEyght9dG9lEpimdc= Subject key identifier: 28:93:44:3D:C8:9B:5D:97:6E:34:B3:79:D4:1B:42:73:CF:AA:84:29 Authority key identifier: 0F:B7:A9:F9:FF:B9:36:B7:54:D8:C0:B6:C8:29:50:A4:01:DE:A2:C7 Certificate issuer: /CN=A9168E98/serialNumber=0FB7A9F9FFB936B754D8C0B6C82950A401DEA2C7 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D7ep-f-5NrdU2MC2yClQpAHeosc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168E98/68B95DF0897C11F1B45623477011F970/D7ep-f-5NrdU2MC2yClQpAHeosc.mft Manifest number: 26 Signing time: Thu 24 Sep 2026 20:20:27 +0000 Manifest this update: Thu 24 Sep 2026 20:20:26 +0000 Manifest next update: Thu 01 Oct 2026 20:20:26 +0000 Files and hashes: 1: D7ep-f-5NrdU2MC2yClQpAHeosc.crl (hash: iZDUROXcl2SfZOD9iyJtBiEJU2gQ9l2R20yx0EwOFJ8=) 2: AA50EC82898C11F1B30FA3E93511F970.roa (hash: dCAofxmjq+gN+1coMHJnW6APvE8MfHQ8av7LqWQp00Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168E98/68B95DF0897C11F1B45623477011F970/D7ep-f-5NrdU2MC2yClQpAHeosc.crl rsync://rpki.apnic.net/member_repository/A9168E98/68B95DF0897C11F1B45623477011F970/D7ep-f-5NrdU2MC2yClQpAHeosc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D7ep-f-5NrdU2MC2yClQpAHeosc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 20:20:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168E98, serialNumber=0FB7A9F9FFB936B754D8C0B6C82950A401DEA2C7 Validity Not Before: Sep 24 20:20:26 2026 GMT Not After : Oct 1 20:20:26 2026 GMT Subject: CN=6ab5860a-26f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:34:b1:38:8e:bf:8a:65:d6:95:e2:8a:ad:7e: 15:8d:d6:48:bf:0c:3b:c1:b6:65:10:8f:88:d8:30: 57:4c:b1:c7:d3:c6:b9:44:f0:cc:62:c3:fd:e9:7a: 72:06:38:37:fd:9c:33:ce:b3:43:97:b7:d1:89:f0: 17:1c:02:55:96:7f:c1:ff:f4:e2:10:d0:c3:9c:7e: 53:3f:b8:77:ef:91:3d:df:d2:6e:52:21:88:a2:b1: 47:13:5e:73:02:5d:60:88:92:0d:b2:94:54:84:8e: f3:52:02:8f:b0:4f:fb:0f:a0:f1:92:de:a4:76:ef: ab:9d:99:d8:36:f7:82:ef:4b:0a:67:68:dd:08:e0: 62:9d:db:1c:74:62:44:b5:b2:eb:fb:31:ad:03:cc: 6f:e7:c0:f2:d4:f5:66:cb:9c:62:e4:fe:8d:80:a3: 3e:36:c8:28:11:22:1d:e9:c3:16:57:a9:ff:ef:41: c7:70:d9:37:68:e4:85:4b:ca:43:19:60:28:b1:1d: 9b:3b:88:c7:d3:7a:6f:29:12:58:7c:bf:2e:df:d0: 4f:bd:f8:34:cb:5c:fe:60:9f:6b:6b:dc:fc:f3:f5: f9:63:fd:47:cd:3e:45:ca:54:26:48:9e:11:ad:6b: da:07:26:97:92:c1:93:a5:12:42:87:2d:ae:2f:12: 5d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:93:44:3D:C8:9B:5D:97:6E:34:B3:79:D4:1B:42:73:CF:AA:84:29 X509v3 Authority Key Identifier: keyid:0F:B7:A9:F9:FF:B9:36:B7:54:D8:C0:B6:C8:29:50:A4:01:DE:A2:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168E98/68B95DF0897C11F1B45623477011F970/D7ep-f-5NrdU2MC2yClQpAHeosc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D7ep-f-5NrdU2MC2yClQpAHeosc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168E98/68B95DF0897C11F1B45623477011F970/D7ep-f-5NrdU2MC2yClQpAHeosc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:7b:e7:c2:7c:af:a3:44:b5:b6:44:02:8c:2b:7d:66:d6:b7: 08:29:fe:ec:6a:f7:31:0c:89:bc:d1:b9:02:a3:e3:76:bd:e8: aa:e4:26:bd:cd:5a:ea:15:24:b4:d7:0b:fc:fa:a8:3e:c7:2c: c0:4e:0f:9c:cc:87:3f:ee:96:07:52:d6:ef:29:22:83:08:20: 68:b7:ca:f6:d6:92:5f:36:b8:d6:89:99:3c:76:6c:a4:f0:6f: e7:e1:a6:90:f5:70:f9:60:73:a1:72:9f:1b:45:66:d1:91:0a: b7:53:30:c7:36:05:87:71:ba:c2:9e:c4:98:da:b4:4f:93:0c: 64:d1:78:7f:41:33:fb:be:e4:e3:bc:a1:c0:25:fc:be:49:6f: 94:0e:80:84:0e:87:5c:54:eb:5c:bf:15:a0:ea:4f:55:6f:65: fa:46:4d:aa:1e:53:1a:a0:a5:79:48:28:0a:ad:3c:ec:c4:bd: 01:26:be:7d:4f:9e:fe:54:61:41:4d:1c:1b:82:f4:f8:6f:72: 17:31:0e:cb:2c:f8:e0:b0:c6:cb:19:70:56:05:32:95:a0:74: bf:77:63:93:75:cf:87:9e:b6:73:4c:e6:39:78:21:f8:e9:f7: 27:1a:1f:cc:b2:7f:0c:b9:e5:02:b8:f5:ae:18:d5:fe:ba:36: 84:ff:c4:e3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 OEU5ODExMC8GA1UEBRMoMEZCN0E5RjlGRkI5MzZCNzU0RDhDMEI2QzgyOTUwQTQw MURFQTJDNzAeFw0yNjA5MjQyMDIwMjZaFw0yNjEwMDEyMDIwMjZaMBgxFjAUBgNV BAMTDTZhYjU4NjBhLTI2ZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnNLE4jr+KZdaV4oqtfhWN1ki/DDvBtmUQj4jYMFdMscfTxrlE8Mxiw/3penIG ODf9nDPOs0OXt9GJ8BccAlWWf8H/9OIQ0MOcflM/uHfvkT3f0m5SIYiisUcTXnMC XWCIkg2ylFSEjvNSAo+wT/sPoPGS3qR276udmdg294LvSwpnaN0I4GKd2xx0YkS1 suv7Ma0DzG/nwPLU9WbLnGLk/o2Aoz42yCgRIh3pwxZXqf/vQcdw2Tdo5IVLykMZ YCixHZs7iMfTem8pElh8vy7f0E+9+DTLXP5gn2tr3Pzz9flj/UfNPkXKVCZInhGt a9oHJpeSwZOlEkKHLa4vEl3zAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUKJNEPcib XZduNLN51BtCc8+qhCkwHwYDVR0jBBgwFoAUD7ep+f+5NrdU2MC2yClQpAHeoscw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4RTk4LzY4Qjk1REYwODk3 QzExRjFCNDU2MjM0NzcwMTFGOTcwL0Q3ZXAtZi01TnJkVTJNQzJ5Q2xRcEFIZW9z Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRDdlcC1mLTVOcmRVMk1DMnlDbFFwQUhlb3NjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4 RTk4LzY4Qjk1REYwODk3QzExRjFCNDU2MjM0NzcwMTFGOTcwL0Q3ZXAtZi01TnJk VTJNQzJ5Q2xRcEFIZW9zYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAwe+fCfK+jRLW2RAKMK31m1rcIKf7savcxDIm80bkCo+N2veiq5Ca9zVrqFSS0 1wv8+qg+xyzATg+czIc/7pYHUtbvKSKDCCBot8r21pJfNrjWiZk8dmyk8G/n4aaQ 9XD5YHOhcp8bRWbRkQq3UzDHNgWHcbrCnsSY2rRPkwxk0Xh/QTP7vuTjvKHAJfy+ SW+UDoCEDodcVOtcvxWg6k9Vb2X6Rk2qHlMaoKV5SCgKrTzsxL0BJr59T57+VGFB TRwbgvT4b3IXMQ7LLPjgsMbLGXBWBTKVoHS/d2OTdc+HnrZzTOY5eCH46fcnGh/M sn8MueUCuPWuGNX+ujaE/8Tj -----END CERTIFICATE-----Generated at Sat Sep 26 02:51:49 2026 by rpki-client