$ rpki-client -vvvf rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.mft File: J7kXbXUBrEb9oBkmur5-vwlfko4.mft (raw, json) Hash identifier: 7UHwDRqaNtPDN3jbdLjYBdsd0NwXxUIXYiJTDYq8dwE= Subject key identifier: C7:09:F6:31:E2:C7:D1:B3:5F:7F:F2:56:B7:59:A9:D6:AF:37:CA:F8 Authority key identifier: 27:B9:17:6D:75:01:AC:46:FD:A0:19:26:BA:BE:7E:BF:09:5F:92:8E Certificate issuer: /CN=A9171D35/serialNumber=27B9176D7501AC46FDA01926BABE7EBF095F928E Certificate serial: 0FD1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7kXbXUBrEb9oBkmur5-vwlfko4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.mft Manifest number: 0FB7 Signing time: Thu 08 Oct 2026 17:34:49 +0000 Manifest this update: Thu 08 Oct 2026 17:34:48 +0000 Manifest next update: Thu 15 Oct 2026 17:34:48 +0000 Files and hashes: 1: J7kXbXUBrEb9oBkmur5-vwlfko4.crl (hash: XVXhqADmDnv6cWm315jlrcIPspUFOvOE9irvGXPcZrQ=) 2: C74924EE159F11EEBCFC135CC4F9AE02.roa (hash: RliNwJOrh8ohq0egdtLbM01dmRkfXxaSAwBvI0aDXvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.crl rsync://rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7kXbXUBrEb9oBkmur5-vwlfko4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 17:34:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4049 (0xfd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171D35, serialNumber=27B9176D7501AC46FDA01926BABE7EBF095F928E Validity Not Before: Oct 8 17:34:48 2026 GMT Not After : Oct 15 17:34:48 2026 GMT Subject: CN=6ac7d439-58b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:65:59:dd:a2:d0:e5:c4:5d:e9:0b:e0:ce:65: 0f:31:a6:61:12:98:a5:a4:87:59:59:25:a7:24:0b: 1c:6c:a7:01:e7:a4:a6:08:a2:c3:b0:09:a5:b2:ee: 53:96:ed:0b:e3:3a:02:82:c0:b6:d7:db:c1:2c:90: 71:4f:1f:e3:d0:40:de:3d:77:b1:c6:fd:ea:4a:83: bb:e2:83:6f:fa:de:1a:68:18:97:05:1b:72:8d:7f: a8:7d:2b:a1:93:12:9e:dd:ec:fa:17:d5:f6:cb:15: bd:a3:78:63:ea:ca:31:b8:17:2b:10:d7:78:c8:ab: 6f:d3:1d:01:95:cb:bf:d9:d5:d9:2c:ee:0b:fc:e7: 8d:0b:e0:0f:4b:27:24:77:c0:88:c7:f5:12:71:af: 52:e2:41:73:00:3d:94:08:ca:00:bd:d7:58:a7:04: 89:96:14:82:5c:0a:bb:61:ac:16:a3:54:bf:0c:e6: ab:d0:b0:c7:1f:9c:c5:7d:c8:9b:b8:d3:98:ff:f8: 38:27:3b:a6:59:63:5c:d7:05:ba:e8:da:99:ee:45: 76:23:49:86:33:2a:c8:2f:5c:d0:18:9d:e8:97:66: 3b:03:a0:50:47:9e:b2:73:f8:36:c1:41:c8:ab:40: 5e:dd:69:a5:94:8b:87:7c:65:3a:5e:a9:19:98:a0: a1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:09:F6:31:E2:C7:D1:B3:5F:7F:F2:56:B7:59:A9:D6:AF:37:CA:F8 X509v3 Authority Key Identifier: keyid:27:B9:17:6D:75:01:AC:46:FD:A0:19:26:BA:BE:7E:BF:09:5F:92:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7kXbXUBrEb9oBkmur5-vwlfko4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:bb:25:5d:39:8d:70:84:db:5b:cf:a0:97:c2:7d:54:db:71: ca:38:2a:60:c6:3f:5b:c0:33:44:57:f2:1e:db:3b:aa:3f:25: 60:64:5d:cf:f1:a3:fe:27:0a:0c:88:66:f9:f4:b9:9a:fa:54: 32:6b:37:4b:aa:ef:98:60:ad:ce:50:ad:52:47:ed:e5:ab:18: ac:93:f2:c8:b4:02:2f:d0:60:c5:6c:7a:c5:05:e4:f5:bd:d4: 4b:7c:fa:da:37:ad:78:e6:d0:df:05:c6:a6:72:b7:4b:b3:cc: b6:6b:bf:5c:ca:f0:91:55:27:00:f6:1b:47:8c:90:bb:5e:cf: a3:31:e4:0e:68:82:20:fe:c5:eb:70:81:d7:3e:00:fa:f3:b0: 6a:a4:0f:e2:46:5e:81:19:7b:c1:60:c3:e5:7d:cb:8c:bb:0a: 72:0c:84:27:c3:0b:15:0e:60:75:a2:a3:e9:50:28:b6:dc:9b: 55:7e:cc:af:c1:54:23:7e:cf:cc:a1:f0:87:c4:dd:68:f9:d2: 24:8c:70:13:ab:2e:fe:ff:cf:89:98:d4:d4:2f:63:20:49:55: 88:14:29:1b:8b:a0:16:db:70:d4:42:46:5e:61:54:cb:a8:1f: a3:9f:92:9b:26:e2:24:48:d6:bd:45:6f:fc:37:27:ce:2f:6d: 49:0d:57:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD9EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFEMzUxMTAvBgNVBAUTKDI3QjkxNzZENzUwMUFDNDZGREEwMTkyNkJBQkU3RUJG MDk1RjkyOEUwHhcNMjYxMDA4MTczNDQ4WhcNMjYxMDE1MTczNDQ4WjAYMRYwFAYD VQQDEw02YWM3ZDQzOS01OGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1mVZ3aLQ5cRd6QvgzmUPMaZhEpilpIdZWSWnJAscbKcB56SmCKLDsAmlsu5T lu0L4zoCgsC219vBLJBxTx/j0EDePXexxv3qSoO74oNv+t4aaBiXBRtyjX+ofSuh kxKe3ez6F9X2yxW9o3hj6soxuBcrENd4yKtv0x0Blcu/2dXZLO4L/OeNC+APSyck d8CIx/USca9S4kFzAD2UCMoAvddYpwSJlhSCXAq7YawWo1S/DOar0LDHH5zFfcib uNOY//g4JzumWWNc1wW66NqZ7kV2I0mGMyrIL1zQGJ3ol2Y7A6BQR56yc/g2wUHI q0Be3WmllIuHfGU6XqkZmKCh2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMcJ9jHi x9GzX3/yVrdZqdavN8r4MB8GA1UdIwQYMBaAFCe5F211AaxG/aAZJrq+fr8JX5KO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUQzNS9FQTREQ0ExQzhF REExMUU5OEQyMDYxNDFDNEY5QUUwMi9KN2tYYlhVQnJFYjlvQmttdXI1LXZ3bGZr bzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o3a1hiWFVCckViOW9Ca211cjUtdndsZmtvNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUQzNS9FQTREQ0ExQzhFREExMUU5OEQyMDYxNDFDNEY5QUUwMi9KN2tYYlhVQnJF YjlvQmttdXI1LXZ3bGZrbzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbLslXTmNcITbW8+gl8J9VNtxyjgqYMY/W8AzRFfyHts7qj8lYGRdz/Gj/icK DIhm+fS5mvpUMms3S6rvmGCtzlCtUkft5asYrJPyyLQCL9BgxWx6xQXk9b3US3z6 2jeteObQ3wXGpnK3S7PMtmu/XMrwkVUnAPYbR4yQu17PozHkDmiCIP7F63CB1z4A +vOwaqQP4kZegRl7wWDD5X3LjLsKcgyEJ8MLFQ5gdaKj6VAottybVX7Mr8FUI37P zKHwh8TdaPnSJIxwE6su/v/PiZjU1C9jIElViBQpG4ugFttw1EJGXmFUy6gfo5+S mybiJEjWvUVv/Dcnzi9tSQ1XAw== -----END CERTIFICATE-----Generated at Sat Oct 10 16:52:31 2026 by rpki-client