$ rpki-client -vvvf rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.mft File: 0aHv0iQTWusJg56ovbjNxZnOZX8.mft (raw, json) Hash identifier: +jBzAB3/PIO/1OeOCZCMijsRsaHZYcBfoLu+ESolcXc= Subject key identifier: CE:87:00:2C:4B:62:AA:25:DF:B9:B2:05:FE:29:39:01:BE:A3:67:0C Authority key identifier: D1:A1:EF:D2:24:13:5A:EB:09:83:9E:A8:BD:B8:CD:C5:99:CE:65:7F Certificate issuer: /CN=A917D9FC/serialNumber=D1A1EFD224135AEB09839EA8BDB8CDC599CE657F Certificate serial: 0592 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0aHv0iQTWusJg56ovbjNxZnOZX8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.mft Manifest number: 058A Signing time: Fri 02 Oct 2026 16:34:55 +0000 Manifest this update: Fri 02 Oct 2026 16:34:55 +0000 Manifest next update: Fri 09 Oct 2026 16:34:55 +0000 Files and hashes: 1: 0aHv0iQTWusJg56ovbjNxZnOZX8.crl (hash: gTePRW+oH1VjGrSyl7PF1CffUydHmKGIiDxgU1zBviM=) 2: AD94C92242BA11ECB1E8FF11C4F9AE02.roa (hash: pPVg90RNjRjphrQIpFi1Dtq7Yfiqt2CKG2uE/Sw0pBw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.crl rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0aHv0iQTWusJg56ovbjNxZnOZX8.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 16:34:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1426 (0x592) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D9FC, serialNumber=D1A1EFD224135AEB09839EA8BDB8CDC599CE657F Validity Not Before: Oct 2 16:34:55 2026 GMT Not After : Oct 9 16:34:55 2026 GMT Subject: CN=6abfdd2f-a534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ec:f5:c4:ac:f6:46:4e:96:17:83:49:59:93: e0:91:62:0b:bd:7d:43:ac:85:e1:fc:f6:56:96:54: 2a:f1:c5:ef:dc:23:90:06:46:34:29:16:94:10:ba: 97:ea:d1:01:ce:f6:cf:5f:08:02:1e:fe:77:0a:5a: 16:96:da:42:e2:1f:95:bf:37:86:53:52:71:8d:35: b1:86:64:ff:27:f0:47:78:51:d0:bd:74:bc:e9:d0: dd:41:04:99:e9:c9:2d:af:c1:c3:6d:2f:db:e8:7c: b5:28:40:0c:cc:2b:71:94:a3:49:b5:5a:66:c4:63: ca:fc:42:82:1d:ec:e2:26:99:51:0f:e9:8f:f9:03: a0:5e:0a:b2:31:d1:9d:d8:89:78:19:fd:2b:9d:5d: 0d:19:d7:a9:09:24:e6:44:57:9f:d7:26:3c:6f:1c: 83:90:b8:8a:c3:aa:c9:b0:03:93:81:61:0b:37:1d: 1b:0f:d9:1e:93:31:5b:2e:f4:9b:b4:9e:82:79:9e: be:e2:d7:2e:63:a4:91:4b:d3:60:e0:80:b6:f7:94: c3:73:42:dc:e6:73:08:2c:c5:0b:66:69:10:31:0e: 6a:f3:8c:4c:70:31:7b:1b:7f:30:5e:1b:4d:08:97: 0d:fa:d5:a4:5a:34:1a:4b:de:28:42:3f:31:19:70: f2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:87:00:2C:4B:62:AA:25:DF:B9:B2:05:FE:29:39:01:BE:A3:67:0C X509v3 Authority Key Identifier: keyid:D1:A1:EF:D2:24:13:5A:EB:09:83:9E:A8:BD:B8:CD:C5:99:CE:65:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0aHv0iQTWusJg56ovbjNxZnOZX8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:47:ad:78:55:c6:12:38:9f:82:6d:ab:35:5b:87:43:2a:8a: 06:78:6a:fb:e0:32:7f:56:ac:fe:23:25:9e:bb:d1:32:f6:0b: df:40:e1:35:d8:55:52:e1:f1:32:16:59:93:80:b2:ea:f5:81: 9c:7c:e2:c6:6b:e1:8a:e5:ea:51:16:84:21:94:bc:a1:e3:b2: a6:d1:c6:e8:89:c4:fa:17:f5:26:e9:1d:10:c8:63:db:7a:0a: e7:22:1b:2c:22:44:7d:3a:9d:e0:3b:8b:58:6c:32:e3:56:18: 76:91:19:33:e9:9f:0e:09:2e:d8:53:66:71:12:67:f2:a8:5a: c4:85:87:17:c1:91:04:63:21:04:3c:3e:b4:85:67:24:79:a0: e7:4e:0c:04:2d:89:db:cc:09:b0:d1:a0:25:25:4f:8e:8e:34: 59:d8:1c:1e:22:1d:30:c7:9a:a5:b9:c4:ea:c0:03:1a:38:36: bf:99:11:9c:6d:56:c6:0b:0c:01:71:a0:eb:65:e3:5b:ba:30: c5:32:45:b7:16:18:f1:eb:09:c0:c7:4c:a5:c5:b8:7f:be:2a: af:36:fc:23:1d:23:da:69:06:ef:65:8e:7c:d4:6d:e0:e8:9e: 12:d0:be:a6:e4:e6:2d:3e:b9:7c:5e:50:67:3b:7b:51:be:41: 76:b4:8d:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q5RkMxMTAvBgNVBAUTKEQxQTFFRkQyMjQxMzVBRUIwOTgzOUVBOEJEQjhDREM1 OTlDRTY1N0YwHhcNMjYxMDAyMTYzNDU1WhcNMjYxMDA5MTYzNDU1WjAYMRYwFAYD VQQDEw02YWJmZGQyZi1hNTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwuz1xKz2Rk6WF4NJWZPgkWILvX1DrIXh/PZWllQq8cXv3COQBkY0KRaUELqX 6tEBzvbPXwgCHv53CloWltpC4h+VvzeGU1JxjTWxhmT/J/BHeFHQvXS86dDdQQSZ 6cktr8HDbS/b6Hy1KEAMzCtxlKNJtVpmxGPK/EKCHeziJplRD+mP+QOgXgqyMdGd 2Il4Gf0rnV0NGdepCSTmRFef1yY8bxyDkLiKw6rJsAOTgWELNx0bD9kekzFbLvSb tJ6CeZ6+4tcuY6SRS9Ng4IC295TDc0Lc5nMILMULZmkQMQ5q84xMcDF7G38wXhtN CJcN+tWkWjQaS94oQj8xGXDypwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM6HACxL Yqol37myBf4pOQG+o2cMMB8GA1UdIwQYMBaAFNGh79IkE1rrCYOeqL24zcWZzmV/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDlGQy83QTMwMkQwMDQy QjExMUVDOUYyNEEwNkVDNEY5QUUwMi8wYUh2MGlRVFd1c0pnNTZvdmJqTnhabk9a WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzBhSHYwaVFUV3VzSmc1Nm92YmpOeFpuT1pYOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDlGQy83QTMwMkQwMDQyQjExMUVDOUYyNEEwNkVDNEY5QUUwMi8wYUh2MGlRVFd1 c0pnNTZvdmJqTnhabk9aWDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAw0eteFXGEjifgm2rNVuHQyqKBnhq++Ayf1as/iMlnrvRMvYL30DhNdhVUuHx MhZZk4Cy6vWBnHzixmvhiuXqURaEIZS8oeOyptHG6InE+hf1JukdEMhj23oK5yIb LCJEfTqd4DuLWGwy41YYdpEZM+mfDgku2FNmcRJn8qhaxIWHF8GRBGMhBDw+tIVn JHmg504MBC2J28wJsNGgJSVPjo40WdgcHiIdMMeapbnE6sADGjg2v5kRnG1WxgsM AXGg62XjW7owxTJFtxYY8esJwMdMpcW4f74qrzb8Ix0j2mkG72WOfNRt4OieEtC+ puTmLT65fF5QZzt7Ub5BdrSNsA== -----END CERTIFICATE-----Generated at Sun Oct 4 08:12:50 2026 by rpki-client