$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/aRiqcfNrBGNTplzAiXixjv-59cY.mft File: aRiqcfNrBGNTplzAiXixjv-59cY.mft (raw, json) Hash identifier: 8r3Q+GtU1dlJ/fuXl0kNekY7t7I3ZURBcp2MiAM2YlQ= Subject key identifier: 64:DB:AE:0D:69:B9:90:1D:E8:C1:46:EA:54:DF:4C:9E:0B:6F:D8:60 Authority key identifier: 69:18:AA:71:F3:6B:04:63:53:A6:5C:C0:89:78:B1:8E:FF:B9:F5:C6 Certificate issuer: /CN=A9170EED/serialNumber=6918AA71F36B046353A65CC08978B18EFFB9F5C6 Certificate serial: 018A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aRiqcfNrBGNTplzAiXixjv-59cY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/aRiqcfNrBGNTplzAiXixjv-59cY.mft Manifest number: 017D Signing time: Sat 03 Oct 2026 05:25:21 +0000 Manifest this update: Sat 03 Oct 2026 05:25:20 +0000 Manifest next update: Sat 10 Oct 2026 05:25:20 +0000 Files and hashes: 1: aRiqcfNrBGNTplzAiXixjv-59cY.crl (hash: DJukoyCM5wIw0FJDcEjia6BtOHu/XGoxL6ccyMokNHo=) 2: A54CA35E853B11EFB513D149C4F9AE02.roa (hash: /vNUIQMQmo/+bpr7T8qr5NTsbD+Gg65QmwR+l9u79do=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/aRiqcfNrBGNTplzAiXixjv-59cY.crl rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/aRiqcfNrBGNTplzAiXixjv-59cY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aRiqcfNrBGNTplzAiXixjv-59cY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 05:18:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 394 (0x18a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170EED, serialNumber=6918AA71F36B046353A65CC08978B18EFFB9F5C6 Validity Not Before: Oct 3 05:25:20 2026 GMT Not After : Oct 10 05:25:20 2026 GMT Subject: CN=6ac091c1-f91b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:29:55:06:cb:bc:62:f1:a6:13:0b:3a:bf:c4: 25:4c:4e:05:e1:f3:b2:43:28:20:1e:b1:05:b4:7b: 70:5b:5e:6c:8d:4d:f7:75:45:b9:a0:73:37:2b:a9: cc:f9:77:a3:1c:62:1f:1b:0e:65:14:e8:31:49:6d: 09:7d:a2:f2:53:0d:a3:9b:11:76:cb:1e:bc:9b:71: 14:ce:e9:2f:51:ac:99:47:66:46:a1:ce:9c:64:9e: b1:1f:2b:21:a8:8f:ab:3f:ab:58:8d:ef:1b:08:84: 88:2b:14:94:0e:9a:c0:c5:38:a4:f2:41:18:ba:89: 12:31:5f:8c:33:fe:5a:4c:08:d3:2a:a5:79:75:60: 8a:b7:dc:4a:62:3d:7e:79:71:6d:80:81:0f:16:83: cd:9d:f4:bc:94:3c:bf:87:9b:86:6f:05:26:dc:3a: e7:42:c8:0e:7a:09:af:be:20:86:a5:ea:11:11:97: f8:78:65:b9:ff:90:21:c4:7a:d5:c8:73:e2:fa:6d: 6c:95:77:6f:2d:03:78:67:5b:96:5c:95:4a:40:b8: b3:cb:52:f7:cb:52:c0:9a:47:fe:f9:e3:20:11:e1: 8b:f4:ad:49:be:15:bc:00:75:b1:a0:91:29:fe:51: 82:71:63:1b:85:24:46:83:51:0a:d9:76:da:04:a6: 3d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:DB:AE:0D:69:B9:90:1D:E8:C1:46:EA:54:DF:4C:9E:0B:6F:D8:60 X509v3 Authority Key Identifier: keyid:69:18:AA:71:F3:6B:04:63:53:A6:5C:C0:89:78:B1:8E:FF:B9:F5:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/aRiqcfNrBGNTplzAiXixjv-59cY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aRiqcfNrBGNTplzAiXixjv-59cY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/aRiqcfNrBGNTplzAiXixjv-59cY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:86:66:99:7d:2c:cf:45:fe:c8:b9:40:2f:94:3b:38:06:3a: cd:40:36:b4:fd:e8:69:c5:4e:83:16:e2:6a:e8:2b:d6:e7:cc: a6:1b:c2:f5:89:3a:6b:01:34:ba:f3:42:47:6b:a8:a0:05:21: c0:23:5f:32:24:3f:26:a8:a7:cb:14:bb:7c:73:48:71:85:0a: cc:42:7c:a7:92:11:1d:ed:d1:99:90:10:90:98:13:65:3f:4a: 02:1d:78:5e:01:c3:58:7f:ae:bc:85:c8:e4:66:25:2a:4c:ce: 4a:79:2f:07:6f:60:87:c4:c9:60:89:85:eb:9e:f2:16:89:1a: 3c:3a:59:ad:31:b4:30:72:8c:e9:22:fc:8c:87:e2:de:15:63: 1e:41:19:d2:f2:f0:86:51:4a:03:40:91:a3:37:8e:55:54:1c: f2:d0:b8:f1:df:27:57:c7:08:27:e6:48:85:ff:42:83:88:b1: 4d:c3:8a:45:13:0e:7d:92:5a:f2:a3:a0:d9:ca:0b:ee:4e:bd: 5f:0c:8f:45:d2:53:19:0b:ba:b1:19:99:24:f2:75:b6:9b:b9: b3:5a:ea:28:19:c0:a9:c5:60:9d:70:04:03:db:bd:0d:16:e8: 2e:87:c6:c4:65:aa:99:49:bc:da:35:80:5a:6c:1c:d5:0c:8b: 36:1f:1f:78 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBFRUQxMTAvBgNVBAUTKDY5MThBQTcxRjM2QjA0NjM1M0E2NUNDMDg5NzhCMThF RkZCOUY1QzYwHhcNMjYxMDAzMDUyNTIwWhcNMjYxMDEwMDUyNTIwWjAYMRYwFAYD VQQDEw02YWMwOTFjMS1mOTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtClVBsu8YvGmEws6v8QlTE4F4fOyQyggHrEFtHtwW15sjU33dUW5oHM3K6nM +XejHGIfGw5lFOgxSW0JfaLyUw2jmxF2yx68m3EUzukvUayZR2ZGoc6cZJ6xHysh qI+rP6tYje8bCISIKxSUDprAxTik8kEYuokSMV+MM/5aTAjTKqV5dWCKt9xKYj1+ eXFtgIEPFoPNnfS8lDy/h5uGbwUm3DrnQsgOegmvviCGpeoREZf4eGW5/5AhxHrV yHPi+m1slXdvLQN4Z1uWXJVKQLizy1L3y1LAmkf++eMgEeGL9K1JvhW8AHWxoJEp /lGCcWMbhSRGg1EK2XbaBKY9IQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGTbrg1p uZAd6MFG6lTfTJ4Lb9hgMB8GA1UdIwQYMBaAFGkYqnHzawRjU6ZcwIl4sY7/ufXG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEVFRC8zNzQwMkFERTg1 M0IxMUVGQTMwNzIzNDlDNEY5QUUwMi9hUmlxY2ZOckJHTlRwbHpBaVhpeGp2LTU5 Y1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2FSaXFjZk5yQkdOVHBsekFpWGl4anYtNTljWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEVFRC8zNzQwMkFERTg1M0IxMUVGQTMwNzIzNDlDNEY5QUUwMi9hUmlxY2ZOckJH TlRwbHpBaVhpeGp2LTU5Y1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwoZmmX0sz0X+yLlAL5Q7OAY6zUA2tP3oacVOgxbiaugr1ufMphvC9Yk6awE0 uvNCR2uooAUhwCNfMiQ/JqinyxS7fHNIcYUKzEJ8p5IRHe3RmZAQkJgTZT9KAh14 XgHDWH+uvIXI5GYlKkzOSnkvB29gh8TJYImF657yFokaPDpZrTG0MHKM6SL8jIfi 3hVjHkEZ0vLwhlFKA0CRozeOVVQc8tC48d8nV8cIJ+ZIhf9Cg4ixTcOKRRMOfZJa 8qOg2coL7k69XwyPRdJTGQu6sRmZJPJ1tpu5s1rqKBnAqcVgnXAEA9u9DRboLofG xGWqmUm82jWAWmwc1QyLNh8feA== -----END CERTIFICATE-----Generated at Sat Oct 3 08:43:30 2026 by rpki-client