$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A689/98A43D127A9711F1BA4F8F545DA30FBC/7j0otD5SRj9TYQhNO0zRX7Eh3Hg.mft File: 7j0otD5SRj9TYQhNO0zRX7Eh3Hg.mft (raw, json) Hash identifier: dUFSu5SetA3aR9vyidXe+I1zgGPFS5s2Szy+Kz9dqXs= Subject key identifier: E2:32:82:D8:55:B7:05:1E:99:57:87:EB:0E:18:2F:41:4D:76:46:0A Authority key identifier: EE:3D:28:B4:3E:52:46:3F:53:61:08:4D:3B:4C:D1:5F:B1:21:DC:78 Certificate issuer: /CN=A917A689/serialNumber=EE3D28B43E52463F5361084D3B4CD15FB121DC78 Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7j0otD5SRj9TYQhNO0zRX7Eh3Hg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A689/98A43D127A9711F1BA4F8F545DA30FBC/7j0otD5SRj9TYQhNO0zRX7Eh3Hg.mft Manifest number: 2C Signing time: Wed 23 Sep 2026 08:30:47 +0000 Manifest this update: Wed 23 Sep 2026 08:30:46 +0000 Manifest next update: Wed 30 Sep 2026 08:30:46 +0000 Files and hashes: 1: 7j0otD5SRj9TYQhNO0zRX7Eh3Hg.crl (hash: dNPph06XzzUNpM0Wfh9gzL3bPDfL70+X4x84P91o4Xo=) 2: 6BB66614922E11F1A0FBFE5C6C11F970.roa (hash: mCT+YqSEAXN3Qz20/1loqK5VGh0Yd2JbQFmwVbOtvZk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A689/98A43D127A9711F1BA4F8F545DA30FBC/7j0otD5SRj9TYQhNO0zRX7Eh3Hg.crl rsync://rpki.apnic.net/member_repository/A917A689/98A43D127A9711F1BA4F8F545DA30FBC/7j0otD5SRj9TYQhNO0zRX7Eh3Hg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7j0otD5SRj9TYQhNO0zRX7Eh3Hg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:30:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A689, serialNumber=EE3D28B43E52463F5361084D3B4CD15FB121DC78 Validity Not Before: Sep 23 08:30:46 2026 GMT Not After : Sep 30 08:30:46 2026 GMT Subject: CN=6ab38e36-5074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2f:45:3e:6b:9d:60:47:40:10:28:82:e3:9d: af:4a:35:44:1d:71:42:1c:a9:c1:34:56:7f:b4:2f: 3f:71:80:5c:14:d9:14:02:19:b2:90:2a:83:b6:a6: 43:e8:9a:34:49:12:ff:a8:93:a3:46:43:fb:e2:67: 3c:d9:b3:1f:7a:f3:36:35:fd:c0:99:eb:75:14:ee: e7:38:24:c6:d7:64:4e:69:b8:01:58:24:3d:d7:25: d1:f7:f0:fb:1c:4c:0d:a7:b7:7d:90:bb:a9:bf:7a: d1:e8:1d:4f:ad:d2:e1:5d:e5:0f:d5:71:0f:93:c8: b6:1d:5f:60:49:9b:26:fe:8b:1c:2b:96:15:29:61: 0f:c0:33:20:81:7a:c8:d5:2c:38:fb:20:4a:fa:4f: b4:0e:fa:8f:17:3d:d8:5d:6d:53:6e:3a:4e:df:69: 5f:04:98:06:d2:7b:a7:7f:ab:0e:00:d7:82:e9:e9: 2c:76:f5:5d:be:93:11:b7:9f:05:ec:17:9d:a2:3e: 01:0f:ed:4a:b0:c3:36:22:6d:c5:aa:0a:de:8d:06: 47:c7:cb:06:6a:8b:03:d1:dc:2f:00:2b:16:f6:61: 16:fd:a9:b6:98:a9:00:c5:4c:f8:3a:43:9e:86:84: 3f:3d:84:6e:4d:fd:79:ee:f4:0e:de:9b:f0:fa:66: 8f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:32:82:D8:55:B7:05:1E:99:57:87:EB:0E:18:2F:41:4D:76:46:0A X509v3 Authority Key Identifier: keyid:EE:3D:28:B4:3E:52:46:3F:53:61:08:4D:3B:4C:D1:5F:B1:21:DC:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A689/98A43D127A9711F1BA4F8F545DA30FBC/7j0otD5SRj9TYQhNO0zRX7Eh3Hg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7j0otD5SRj9TYQhNO0zRX7Eh3Hg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A689/98A43D127A9711F1BA4F8F545DA30FBC/7j0otD5SRj9TYQhNO0zRX7Eh3Hg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:25:8b:6e:21:d6:36:63:df:9b:8d:d6:16:13:60:e3:b3:0d: 08:3c:a5:b7:c9:d6:54:05:aa:56:f9:ac:70:bc:15:42:87:5b: dd:82:29:a7:10:13:14:60:6c:83:2b:a5:6f:0d:17:8c:5b:58: a8:31:b1:47:cf:b1:7e:86:f6:f9:e7:18:88:46:0d:ea:e6:a9: 6d:f2:82:13:8f:ac:fc:bf:d0:a7:40:85:ac:12:be:95:25:7e: 82:88:5a:58:75:4d:91:4d:58:d4:8a:81:00:e1:a3:76:05:7e: a1:34:69:20:36:c0:bc:7c:c3:e8:20:0b:18:cb:71:0a:da:7e: e3:cd:10:74:d9:93:a3:47:35:f6:4c:6b:e3:05:13:a2:5a:99: 24:4d:05:94:cd:e6:ae:bf:5c:09:e3:4e:f3:b8:fb:5c:61:86: df:0b:b6:8a:28:41:2d:84:42:b7:ce:57:56:51:ea:d6:ba:d1: c7:2a:6e:d1:fd:03:91:8e:ba:15:e6:68:9a:b2:2d:b9:a9:3f: 3c:32:3a:3e:ba:a7:bd:3c:af:42:49:17:71:b1:a5:27:bd:b2: 7e:c3:69:21:05:b9:a6:00:82:a8:94:10:57:56:a4:63:d5:0e: 9c:0d:eb:44:49:a9:6d:e5:18:7c:5e:61:16:3f:3d:13:4a:cf: db:b4:3a:e4 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QTY4OTExMC8GA1UEBRMoRUUzRDI4QjQzRTUyNDYzRjUzNjEwODREM0I0Q0QxNUZC MTIxREM3ODAeFw0yNjA5MjMwODMwNDZaFw0yNjA5MzAwODMwNDZaMBgxFjAUBgNV BAMTDTZhYjM4ZTM2LTUwNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtL0U+a51gR0AQKILjna9KNUQdcUIcqcE0Vn+0Lz9xgFwU2RQCGbKQKoO2pkPo mjRJEv+ok6NGQ/viZzzZsx968zY1/cCZ63UU7uc4JMbXZE5puAFYJD3XJdH38Psc TA2nt32Qu6m/etHoHU+t0uFd5Q/VcQ+TyLYdX2BJmyb+ixwrlhUpYQ/AMyCBesjV LDj7IEr6T7QO+o8XPdhdbVNuOk7faV8EmAbSe6d/qw4A14Lp6Sx29V2+kxG3nwXs F52iPgEP7UqwwzYibcWqCt6NBkfHywZqiwPR3C8AKxb2YRb9qbaYqQDFTPg6Q56G hD89hG5N/Xnu9A7em/D6Zo+xAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU4jKC2FW3 BR6ZV4frDhgvQU12RgowHwYDVR0jBBgwFoAU7j0otD5SRj9TYQhNO0zRX7Eh3Hgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBNjg5Lzk4QTQzRDEyN0E5 NzExRjFCQTRGOEY1NDVEQTMwRkJDLzdqMG90RDVTUmo5VFlRaE5PMHpSWDdFaDNI Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN2owb3RENVNSajlUWVFoTk8welJYN0VoM0hnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdB Njg5Lzk4QTQzRDEyN0E5NzExRjFCQTRGOEY1NDVEQTMwRkJDLzdqMG90RDVTUmo5 VFlRaE5PMHpSWDdFaDNIZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCJJYtuIdY2Y9+bjdYWE2Djsw0IPKW3ydZUBapW+axwvBVCh1vdgimnEBMUYGyD K6VvDReMW1ioMbFHz7F+hvb55xiIRg3q5qlt8oITj6z8v9CnQIWsEr6VJX6CiFpY dU2RTVjUioEA4aN2BX6hNGkgNsC8fMPoIAsYy3EK2n7jzRB02ZOjRzX2TGvjBROi WpkkTQWUzeauv1wJ407zuPtcYYbfC7aKKEEthEK3zldWUerWutHHKm7R/QORjroV 5miasi25qT88Mjo+uqe9PK9CSRdxsaUnvbJ+w2khBbmmAIKolBBXVqRj1Q6cDetE Salt5Rh8XmEWPz0TSs/btDrk -----END CERTIFICATE-----Generated at Thu Sep 24 09:28:14 2026 by rpki-client