$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft File: b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft (raw, json) Hash identifier: Cv1I2AQrid38L6m7vMi2I021MWg2Oj55K60pL/Jdrso= Subject key identifier: 0F:A7:77:6C:F5:E7:E4:4A:11:A2:AC:E3:C3:A5:B8:BA:93:6E:E2:EE Authority key identifier: 6F:D5:B7:43:1E:71:50:ED:65:0F:7F:27:A3:DC:F8:C5:CE:AC:77:64 Certificate issuer: /CN=A9173CCA/serialNumber=6FD5B7431E7150ED650F7F27A3DCF8C5CEAC7764 Certificate serial: 0196 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9W3Qx5xUO1lD38no9z4xc6sd2Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft Manifest number: 0191 Signing time: Sun 11 Oct 2026 05:02:54 +0000 Manifest this update: Sun 11 Oct 2026 05:02:53 +0000 Manifest next update: Sun 18 Oct 2026 05:02:53 +0000 Files and hashes: 1: b9W3Qx5xUO1lD38no9z4xc6sd2Q.crl (hash: /uCAcSppcnbbpa2P6hj1IFZdcDO+2J9JlnhDAAy9oys=) 2: 3866993C6A6711EF929E6773C4F9AE02.roa (hash: GoBUmsaixA+94AMiq1K0M2Do/VJgCC/YQV6fr/kdH1w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.crl rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9W3Qx5xUO1lD38no9z4xc6sd2Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 05:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 406 (0x196) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173CCA, serialNumber=6FD5B7431E7150ED650F7F27A3DCF8C5CEAC7764 Validity Not Before: Oct 11 05:02:53 2026 GMT Not After : Oct 18 05:02:53 2026 GMT Subject: CN=6acb187e-f9b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f5:1c:ca:58:8d:cf:67:cc:0e:d4:26:45:97: 92:c2:ba:a8:94:14:d2:62:25:31:ca:7d:20:94:ce: c3:be:9a:05:9c:e9:8b:93:d9:8b:84:0d:ac:d8:74: 41:77:23:cb:3f:3b:be:5b:8b:19:31:9d:a8:b4:67: d6:cf:54:a6:b2:bd:76:f4:c8:fa:dd:6c:29:f2:7b: c0:b3:d2:32:de:a8:9a:91:4c:ff:d8:2c:b1:13:26: d4:cb:fc:64:db:c0:b4:28:fb:67:0d:3f:84:65:c6: c3:ba:e8:35:6c:cd:07:d3:1d:eb:7b:1c:b4:d5:92: ea:45:39:2f:77:9d:42:74:9f:0f:96:73:37:90:5b: 0d:04:cc:83:23:75:c1:f4:15:d1:ef:4d:82:ec:dc: b7:f9:5e:5e:b2:4b:26:b4:98:af:b0:5c:80:46:2d: a9:e4:5f:91:da:10:b7:67:f5:44:3e:1f:63:f7:b0: c5:77:24:9b:ff:cb:a0:c7:a7:45:25:81:ce:1a:bd: 56:98:a9:86:80:13:5f:ab:1d:62:7e:be:e2:94:10: 5e:d8:8c:4d:39:e7:84:80:87:fe:76:d4:fe:af:f1: 30:31:14:a2:fd:cb:53:1b:a6:21:30:7c:c3:63:ea: f8:36:74:07:1f:a8:6d:d3:04:1c:8b:2b:53:83:2f: e7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:A7:77:6C:F5:E7:E4:4A:11:A2:AC:E3:C3:A5:B8:BA:93:6E:E2:EE X509v3 Authority Key Identifier: keyid:6F:D5:B7:43:1E:71:50:ED:65:0F:7F:27:A3:DC:F8:C5:CE:AC:77:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9W3Qx5xUO1lD38no9z4xc6sd2Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:ea:ad:85:45:47:d1:d2:a7:81:67:fb:a7:90:14:36:00:94: 03:fd:f6:6e:a7:07:8a:ee:66:58:3a:53:13:a5:d2:e6:fc:60: ba:a6:16:a0:d5:5c:9c:59:af:db:00:b8:66:61:aa:67:ac:32: aa:e2:cf:81:61:99:32:1e:e8:9a:5c:eb:7b:3b:1a:bd:ca:46: f1:72:77:23:b7:2e:4d:56:da:45:3c:9d:0b:00:eb:12:55:4e: cc:db:47:64:b0:30:75:f3:93:e0:0d:9a:f8:79:c2:69:af:c5: 7e:41:2c:8e:a2:74:f1:f0:82:f3:67:e4:fb:dc:ce:e1:22:f0: 99:22:d7:f5:73:25:e8:50:8b:b6:00:c0:63:f8:13:d9:a1:7a: 26:a8:c7:8b:ec:28:27:39:c2:55:cf:0b:63:fd:b9:5b:23:2d: 6c:5a:e5:cf:89:ef:89:4c:39:31:a0:bc:66:6d:6a:60:c7:65: 58:38:3f:5b:00:af:14:33:f4:e5:48:85:dd:4d:a9:00:30:08: b5:57:48:01:d5:2a:6b:19:ac:6b:08:10:98:23:dc:0d:a3:ce: 01:e8:31:5b:bd:c5:1c:13:db:29:73:60:6e:35:97:3b:34:eb: 13:b3:6a:97:25:17:84:5e:2b:13:af:82:d4:aa:52:30:97:73: 07:a1:46:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNDQ0ExMTAvBgNVBAUTKDZGRDVCNzQzMUU3MTUwRUQ2NTBGN0YyN0EzRENGOEM1 Q0VBQzc3NjQwHhcNMjYxMDExMDUwMjUzWhcNMjYxMDE4MDUwMjUzWjAYMRYwFAYD VQQDEw02YWNiMTg3ZS1mOWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtPUcyliNz2fMDtQmRZeSwrqolBTSYiUxyn0glM7DvpoFnOmLk9mLhA2s2HRB dyPLPzu+W4sZMZ2otGfWz1Smsr129Mj63Wwp8nvAs9Iy3qiakUz/2CyxEybUy/xk 28C0KPtnDT+EZcbDuug1bM0H0x3rexy01ZLqRTkvd51CdJ8PlnM3kFsNBMyDI3XB 9BXR702C7Ny3+V5esksmtJivsFyARi2p5F+R2hC3Z/VEPh9j97DFdySb/8ugx6dF JYHOGr1WmKmGgBNfqx1ifr7ilBBe2IxNOeeEgIf+dtT+r/EwMRSi/ctTG6YhMHzD Y+r4NnQHH6ht0wQciytTgy/nGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA+nd2z1 5+RKEaKs48OluLqTbuLuMB8GA1UdIwQYMBaAFG/Vt0MecVDtZQ9/J6Pc+MXOrHdk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0NDQS8xQ0E5QjgyNDY1 NEQxMUVGQjQ0QjdCNThDNEY5QUUwMi9iOVczUXg1eFVPMWxEMzhubzl6NHhjNnNk MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5VzNReDV4VU8xbEQzOG5vOXo0eGM2c2QyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0NDQS8xQ0E5QjgyNDY1NEQxMUVGQjQ0QjdCNThDNEY5QUUwMi9iOVczUXg1eFVP MWxEMzhubzl6NHhjNnNkMlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAduqthUVH0dKngWf7p5AUNgCUA/32bqcHiu5mWDpTE6XS5vxguqYWoNVcnFmv 2wC4ZmGqZ6wyquLPgWGZMh7omlzrezsavcpG8XJ3I7cuTVbaRTydCwDrElVOzNtH ZLAwdfOT4A2a+HnCaa/FfkEsjqJ08fCC82fk+9zO4SLwmSLX9XMl6FCLtgDAY/gT 2aF6JqjHi+woJznCVc8LY/25WyMtbFrlz4nviUw5MaC8Zm1qYMdlWDg/WwCvFDP0 5UiF3U2pADAItVdIAdUqaxmsawgQmCPcDaPOAegxW73FHBPbKXNgbjWXOzTrE7Nq lyUXhF4rE6+C1KpSMJdzB6FGdg== -----END CERTIFICATE-----Generated at Sun Oct 11 22:09:35 2026 by rpki-client