$ rpki-client -vvvf rpki.apnic.net/member_repository/A917D31E/537845A0B4BB11F0A1353722C4F9AE02/_Er4bnAJnaC6rC7dx30b70x1qJU.mft File: _Er4bnAJnaC6rC7dx30b70x1qJU.mft (raw, json) Hash identifier: 4DJlY9GuzWvE3+kv20fPgQELgB+JAX4yGCaIBb/OfbA= Subject key identifier: 65:43:76:40:2F:21:E4:E3:D2:B8:8B:BC:E3:B5:48:FA:0E:E0:B1:95 Authority key identifier: FC:4A:F8:6E:70:09:9D:A0:BA:AC:2E:DD:C7:7D:1B:EF:4C:75:A8:95 Certificate issuer: /CN=A917D31E/serialNumber=FC4AF86E70099DA0BAAC2EDDC77D1BEF4C75A895 Certificate serial: B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Er4bnAJnaC6rC7dx30b70x1qJU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D31E/537845A0B4BB11F0A1353722C4F9AE02/_Er4bnAJnaC6rC7dx30b70x1qJU.mft Manifest number: B5 Signing time: Sun 11 Oct 2026 07:37:59 +0000 Manifest this update: Sun 11 Oct 2026 07:37:58 +0000 Manifest next update: Sun 18 Oct 2026 07:37:58 +0000 Files and hashes: 1: _Er4bnAJnaC6rC7dx30b70x1qJU.crl (hash: xr7b3YSieAE1mQGQO86iBe3TfG3sWh2SITtcncZm8IA=) 2: 3505DC88B6E411F090AAA224C4F9AE02.roa (hash: 0eYQs4+CcW1n3DAWa3b99gSSE/qKrGxFztudMbxy8B8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D31E/537845A0B4BB11F0A1353722C4F9AE02/_Er4bnAJnaC6rC7dx30b70x1qJU.crl rsync://rpki.apnic.net/member_repository/A917D31E/537845A0B4BB11F0A1353722C4F9AE02/_Er4bnAJnaC6rC7dx30b70x1qJU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Er4bnAJnaC6rC7dx30b70x1qJU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 07:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D31E, serialNumber=FC4AF86E70099DA0BAAC2EDDC77D1BEF4C75A895 Validity Not Before: Oct 11 07:37:58 2026 GMT Not After : Oct 18 07:37:58 2026 GMT Subject: CN=6acb3cd7-9a0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:66:fc:5c:1a:24:2f:ee:b4:94:30:70:83:dc: 55:7a:52:5c:82:f3:79:e5:90:b6:45:b9:98:39:f8: 7a:eb:f8:98:c1:29:30:80:c8:d9:8a:0a:ad:d3:83: de:af:05:ba:5d:48:78:aa:bb:a8:50:e6:94:16:f1: 76:cb:7c:08:11:51:80:81:b4:8d:dc:b3:1b:0c:eb: e7:d6:4a:ac:41:ba:1b:a3:75:dd:f3:c7:03:96:b5: e3:3b:e8:eb:f6:a6:cd:79:7a:41:b0:24:dd:f5:01: 41:d5:d3:9d:31:dd:96:73:49:61:58:a4:a9:2c:69: 13:0a:09:55:a4:bb:7e:1b:b7:6b:a9:3f:9b:45:3f: 5c:18:d8:f9:3f:e2:28:c2:fb:9e:a9:f4:41:ac:8c: 21:d9:74:74:69:cd:e8:ed:3c:75:12:0f:0a:73:15: eb:11:bc:52:7d:3b:15:5b:99:e7:8d:70:60:00:8d: 7e:f6:1c:3d:88:4b:7a:2a:00:3a:f9:ee:c6:27:dc: 86:68:24:3b:02:2a:e3:ae:40:9c:e6:a5:77:78:31: b9:29:ac:89:d7:0e:55:53:11:f3:a6:65:3d:75:dc: 48:39:84:8f:0c:ce:55:c3:56:54:ec:5a:67:e7:18: b3:31:e5:43:cd:ed:2c:15:de:c0:92:8a:b9:f6:62: 02:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:43:76:40:2F:21:E4:E3:D2:B8:8B:BC:E3:B5:48:FA:0E:E0:B1:95 X509v3 Authority Key Identifier: keyid:FC:4A:F8:6E:70:09:9D:A0:BA:AC:2E:DD:C7:7D:1B:EF:4C:75:A8:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D31E/537845A0B4BB11F0A1353722C4F9AE02/_Er4bnAJnaC6rC7dx30b70x1qJU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Er4bnAJnaC6rC7dx30b70x1qJU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D31E/537845A0B4BB11F0A1353722C4F9AE02/_Er4bnAJnaC6rC7dx30b70x1qJU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:b2:0c:99:dd:78:ce:01:f4:d4:16:17:9b:5d:af:29:c2:6d: 72:67:46:eb:92:8e:af:e4:fa:f0:ad:bc:47:b7:a0:1f:93:dc: 1e:35:32:45:3d:3d:00:ce:1a:b8:0d:01:6d:2f:92:70:72:91: 03:d2:39:20:c5:d8:a0:c1:47:e6:6f:d3:5c:10:ac:1e:a5:8e: 51:7d:d4:a1:8b:7e:64:20:ff:78:ed:9c:6a:18:84:a3:3c:c2: f9:ef:75:6b:1a:ce:ee:fc:05:b8:71:c8:93:65:89:db:69:ba: 56:1b:a8:10:b4:19:59:2c:72:d8:70:f3:2d:82:ee:21:17:b4: eb:db:3c:c6:73:c8:d6:39:1a:20:fd:54:79:20:c6:93:32:17: 58:0c:4b:51:df:7e:2a:eb:c9:6b:fa:5d:9d:cd:55:aa:37:7c: eb:68:dc:6d:90:87:1e:dd:fc:4f:d3:30:88:1b:c9:ed:28:e5: 21:79:5c:fe:ec:b7:4e:7d:dc:15:54:3d:70:42:21:3a:d7:a4: 83:99:1d:6d:a4:8e:df:e8:7d:b0:16:b5:1e:4d:6e:61:63:87: ec:41:41:72:6f:6b:51:8e:f7:21:48:a5:72:47:3b:9b:44:39: 4d:47:00:8f:5b:53:a5:a7:78:3b:40:e8:83:9f:9f:89:cc:7f: ba:9d:c8:56 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0QzMUUxMTAvBgNVBAUTKEZDNEFGODZFNzAwOTlEQTBCQUFDMkVEREM3N0QxQkVG NEM3NUE4OTUwHhcNMjYxMDExMDczNzU4WhcNMjYxMDE4MDczNzU4WjAYMRYwFAYD VQQDEw02YWNiM2NkNy05YTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArWb8XBokL+60lDBwg9xVelJcgvN55ZC2RbmYOfh66/iYwSkwgMjZigqt04Pe rwW6XUh4qruoUOaUFvF2y3wIEVGAgbSN3LMbDOvn1kqsQbobo3Xd88cDlrXjO+jr 9qbNeXpBsCTd9QFB1dOdMd2Wc0lhWKSpLGkTCglVpLt+G7drqT+bRT9cGNj5P+Io wvueqfRBrIwh2XR0ac3o7Tx1Eg8KcxXrEbxSfTsVW5nnjXBgAI1+9hw9iEt6KgA6 +e7GJ9yGaCQ7AirjrkCc5qV3eDG5KayJ1w5VUxHzpmU9ddxIOYSPDM5Vw1ZU7Fpn 5xizMeVDze0sFd7Akoq59mICcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGVDdkAv IeTj0riLvOO1SPoO4LGVMB8GA1UdIwQYMBaAFPxK+G5wCZ2guqwu3cd9G+9MdaiV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDMxRS81Mzc4NDVBMEI0 QkIxMUYwQTEzNTM3MjJDNEY5QUUwMi9fRXI0Ym5BSm5hQzZyQzdkeDMwYjcweDFx SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19FcjRibkFKbmFDNnJDN2R4MzBiNzB4MXFKVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDMxRS81Mzc4NDVBMEI0QkIxMUYwQTEzNTM3MjJDNEY5QUUwMi9fRXI0Ym5BSm5h QzZyQzdkeDMwYjcweDFxSlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB7IMmd14zgH01BYXm12vKcJtcmdG65KOr+T68K28R7egH5PcHjUyRT09AM4a uA0BbS+ScHKRA9I5IMXYoMFH5m/TXBCsHqWOUX3UoYt+ZCD/eO2cahiEozzC+e91 axrO7vwFuHHIk2WJ22m6VhuoELQZWSxy2HDzLYLuIRe069s8xnPI1jkaIP1UeSDG kzIXWAxLUd9+KuvJa/pdnc1Vqjd862jcbZCHHt38T9MwiBvJ7SjlIXlc/uy3Tn3c FVQ9cEIhOtekg5kdbaSO3+h9sBa1Hk1uYWOH7EFBcm9rUY73IUilckc7m0Q5TUcA j1tTpad4O0Dog5+ficx/up3IVg== -----END CERTIFICATE-----Generated at Sun Oct 11 15:06:15 2026 by rpki-client