$ rpki-client -vvvf rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft File: 1eU68RWZfH-juGVS-V9RFK80Bek.mft (raw, json) Hash identifier: U6yTLj/wMkyHzZzO3GtWnqMee8ZBgdVIZUNKZiZZg8E= Subject key identifier: 01:BC:37:7E:51:4D:E4:2A:76:6D:EB:C4:D3:C8:7E:30:2F:C4:97:C5 Authority key identifier: D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9 Certificate issuer: /CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9 Certificate serial: 08EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft Manifest number: 0868 Signing time: Sun 20 Sep 2026 21:05:07 +0000 Manifest this update: Sun 20 Sep 2026 21:05:07 +0000 Manifest next update: Sun 27 Sep 2026 21:05:07 +0000 Files and hashes: 1: 1eU68RWZfH-juGVS-V9RFK80Bek.crl (hash: L6TM2fnwcMYBL3Q/S0GN80d5HkgDPnEf9mi2cV7ScwE=) 2: 26FD4E0C705311EE8723E92AC4F9AE02.roa (hash: 86TlHawEYIJrsKG9qDpQKaZUIOg/AkQSTyCR37y06KQ=) 3: BBAEFE90D3A111EEB1EBBB1EC4F9AE02.roa (hash: 2zP/u/XPb4lS5YQU45AQ3bnL/iCqP8TtJ7qEosRQcfQ=) 4: 1B09C20A9CD711EE8D4B0835C4F9AE02.roa (hash: XlJ4FUowQX/Y/4cD7WUgyXsW7hmXlclzkcofs1Q8ApU=) 5: 9342050A074C11EEBF09517FC4F9AE02.roa (hash: WKTJAf1xc2gCKAnmp9H0dtuF8DSxcxsaPieQCnG+VvQ=) 6: 77CB8C6CBD9911ED86363B7AC4F9AE02.roa (hash: tDdAfUG8eCP0TQX57qdH9o5o3LcfwqBq8wJ4yE3QIyI=) 7: F145A4846C3E11EEA0F26B63C4F9AE02.roa (hash: ixSD//VPVA20+49srKzUc+mMjY0KkEX52xrhudvtNos=) 8: 113EFAA01CD311F183095B1A353D8C67.roa (hash: hxloJgOcKOBqGBUZhYK1fL/Ei66jWkYPEeVHeMiMIeQ=) 9: 723DE3FCD66A11F0B3A3696C61D3641D.roa (hash: 8QmsBUY2s//20xxLVI3hPEMb0s2pQxbXtkVnYbraTKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 21:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2284 (0x8ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D0D2, serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9 Validity Not Before: Sep 20 21:05:07 2026 GMT Not After : Sep 27 21:05:07 2026 GMT Subject: CN=6ab04a83-cb9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:00:f4:7b:55:ab:56:28:89:50:4d:55:9f:6d: f6:07:90:fa:60:c6:87:3c:5c:e5:2f:0a:b2:45:c8: cc:1b:58:b2:b8:5e:a7:e0:75:c9:ef:d2:bd:a3:d5: f4:b2:b0:80:d8:3a:03:ef:56:e1:32:1d:ac:ec:a0: 5b:94:5a:e0:89:1e:2a:10:2e:18:bd:7d:35:5c:75: 8f:92:e5:e5:7f:bc:89:e0:2a:d1:1a:8a:c6:6f:53: 45:f5:e4:a6:d4:47:e3:4f:b9:dd:93:71:57:9b:d2: 5a:a2:43:da:39:13:4a:20:96:8e:c0:29:a4:68:3d: 07:38:47:63:ab:a3:4d:34:2f:4e:24:fe:b5:1a:e8: 57:ae:0b:a4:f6:10:ed:cb:c2:9d:4b:f8:f4:e4:b6: c3:f9:30:3d:9e:d4:58:55:de:39:79:3c:36:d1:32: f0:cc:31:0e:d2:da:0c:e2:d1:33:be:16:d6:df:ee: 3c:f9:4c:e6:a5:b3:1e:8b:69:17:02:62:53:cb:35: 18:3c:cf:48:b4:61:cd:8d:77:a6:ad:e1:8d:03:c2: 6f:79:9b:56:64:5a:91:e5:b6:f5:c9:75:c8:c5:c9: 3c:90:3a:b2:fd:f3:8a:fe:8a:ad:9a:d2:63:d4:39: 21:53:ec:2f:54:4c:f4:65:7d:44:e9:cf:f2:a4:6e: 9d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:BC:37:7E:51:4D:E4:2A:76:6D:EB:C4:D3:C8:7E:30:2F:C4:97:C5 X509v3 Authority Key Identifier: keyid:D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:f5:68:c5:44:5e:af:7d:9e:c5:9f:74:98:63:a8:10:4f:13: 0d:6a:1f:66:f1:0a:eb:17:f5:3d:18:9b:af:88:ca:ce:8b:15: c7:30:2b:7e:71:af:64:49:cd:eb:6c:ee:2a:9b:3c:ee:bc:02: 5d:5e:3c:b6:e7:51:ba:5e:8a:61:c8:c6:ef:9e:32:a1:1a:2f: dc:0f:fe:36:b3:6d:77:ab:bf:c5:27:95:4b:e9:5c:9e:59:a9: e0:7c:e5:2a:5c:39:d5:34:7c:07:c2:b9:40:7f:24:8b:88:60: 79:2a:07:eb:59:e1:98:0c:dd:12:c3:0d:de:3a:cc:f3:66:b6: 51:09:09:3c:ed:f4:38:5a:65:41:5a:d1:8a:49:dd:eb:6e:3c: 8d:a6:a8:3d:22:1f:b2:26:ec:be:07:cd:b2:a8:53:ac:13:f7: 4a:ab:20:d1:f9:8f:9e:f0:39:09:00:05:b9:a0:8f:b3:9d:50: f4:0c:74:14:d7:03:36:ea:c8:64:9f:41:c5:6c:a3:aa:d3:72: c8:c1:08:b8:9d:33:95:3f:2f:df:57:8d:81:5c:ed:2d:12:39: 28:99:28:a2:a0:75:84:35:0c:39:66:05:76:b8:7a:f3:7c:25: 3a:42:af:c0:5a:f0:dc:76:91:4a:95:4b:7c:0e:b9:47:a6:1a: 8a:64:4b:11 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQwRDIxMTAvBgNVBAUTKEQ1RTUzQUYxMTU5OTdDN0ZBM0I4NjU1MkY5NUY1MTE0 QUYzNDA1RTkwHhcNMjYwOTIwMjEwNTA3WhcNMjYwOTI3MjEwNTA3WjAYMRYwFAYD VQQDEw02YWIwNGE4My1jYjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAywD0e1WrViiJUE1Vn232B5D6YMaHPFzlLwqyRcjMG1iyuF6n4HXJ79K9o9X0 srCA2DoD71bhMh2s7KBblFrgiR4qEC4YvX01XHWPkuXlf7yJ4CrRGorGb1NF9eSm 1EfjT7ndk3FXm9JaokPaORNKIJaOwCmkaD0HOEdjq6NNNC9OJP61GuhXrguk9hDt y8KdS/j05LbD+TA9ntRYVd45eTw20TLwzDEO0toM4tEzvhbW3+48+UzmpbMei2kX AmJTyzUYPM9ItGHNjXemreGNA8JveZtWZFqR5bb1yXXIxck8kDqy/fOK/oqtmtJj 1DkhU+wvVEz0ZX1E6c/ypG6diwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAG8N35R TeQqdm3rxNPIfjAvxJfFMB8GA1UdIwQYMBaAFNXlOvEVmXx/o7hlUvlfURSvNAXp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDBEMi81OTM3RDQzRTM1 QUQxMUVCODFFRUFEMTJDNEY5QUUwMi8xZVU2OFJXWmZILWp1R1ZTLVY5UkZLODBC ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFlVTY4UldaZkgtanVHVlMtVjlSRks4MEJlay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDBEMi81OTM3RDQzRTM1QUQxMUVCODFFRUFEMTJDNEY5QUUwMi8xZVU2OFJXWmZI LWp1R1ZTLVY5UkZLODBCZWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIvVoxURer32exZ90mGOoEE8TDWofZvEK6xf1PRibr4jKzosVxzArfnGvZEnN 62zuKps87rwCXV48tudRul6KYcjG754yoRov3A/+NrNtd6u/xSeVS+lcnlmp4Hzl Klw51TR8B8K5QH8ki4hgeSoH61nhmAzdEsMN3jrM82a2UQkJPO30OFplQVrRiknd 6248jaaoPSIfsibsvgfNsqhTrBP3Sqsg0fmPnvA5CQAFuaCPs51Q9Ax0FNcDNurI ZJ9BxWyjqtNyyMEIuJ0zlT8v31eNgVztLRI5KJkooqB1hDUMOWYFdrh683wlOkKv wFrw3HaRSpVLfA65R6YaimRLEQ== -----END CERTIFICATE-----Generated at Tue Sep 22 18:18:49 2026 by rpki-client