$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E832/3B47108C500411EAA6D93054C4F9AE02/ID0eLahSvltkOpm-9WTXdL3cx_Q.mft File: ID0eLahSvltkOpm-9WTXdL3cx_Q.mft (raw, json) Hash identifier: tMxolvolkFo8ONsr/fH/9ZOziqk+qwKj50CmtPMb+6U= Subject key identifier: 2D:C6:C9:9C:E0:E2:5E:4D:9D:2E:CF:B0:36:E4:34:D0:A9:E3:92:47 Authority key identifier: 20:3D:1E:2D:A8:52:BE:5B:64:3A:99:BE:F5:64:D7:74:BD:DC:C7:F4 Certificate issuer: /CN=A917E832/serialNumber=203D1E2DA852BE5B643A99BEF564D774BDDCC7F4 Certificate serial: 0BD0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ID0eLahSvltkOpm-9WTXdL3cx_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E832/3B47108C500411EAA6D93054C4F9AE02/ID0eLahSvltkOpm-9WTXdL3cx_Q.mft Manifest number: 0BC2 Signing time: Sun 04 Oct 2026 19:04:53 +0000 Manifest this update: Sun 04 Oct 2026 19:04:52 +0000 Manifest next update: Sun 11 Oct 2026 19:04:52 +0000 Files and hashes: 1: ID0eLahSvltkOpm-9WTXdL3cx_Q.crl (hash: jFfyCOyOhmfXaWdxEnk9R0s4i0yMNDYOdQ0t0Mx+pYY=) 2: E869880C500511EA98307A59C4F9AE02.roa (hash: eDmxH/4SMnVpNQqwIMaBf1pbV6bCEaBXN55W5wLAprg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E832/3B47108C500411EAA6D93054C4F9AE02/ID0eLahSvltkOpm-9WTXdL3cx_Q.crl rsync://rpki.apnic.net/member_repository/A917E832/3B47108C500411EAA6D93054C4F9AE02/ID0eLahSvltkOpm-9WTXdL3cx_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ID0eLahSvltkOpm-9WTXdL3cx_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 19:04:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3024 (0xbd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E832, serialNumber=203D1E2DA852BE5B643A99BEF564D774BDDCC7F4 Validity Not Before: Oct 4 19:04:52 2026 GMT Not After : Oct 11 19:04:52 2026 GMT Subject: CN=6ac2a355-be58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a7:df:ca:97:3d:d0:e5:fe:15:ad:46:6c:8c: 55:a0:40:a1:92:e8:f1:38:62:87:0b:2d:86:bd:b5: e9:77:f5:61:65:1c:8b:8a:31:c2:73:f0:f3:e4:43: de:f7:d2:a3:12:a3:8c:0f:b2:27:45:6a:4c:a9:d7: 97:5c:46:cd:fb:66:1a:f3:8d:ef:18:f9:cf:14:09: 92:39:99:96:61:b5:37:06:66:12:a4:d2:87:fb:b6: 18:b1:8e:4a:d0:98:2c:65:b8:bc:6e:be:6b:60:53: ec:27:87:4e:7e:6b:6c:b7:af:97:a1:8f:d6:26:af: fe:2b:45:25:dd:2f:bb:a1:75:94:3a:52:e6:7c:e2: 3b:93:5b:e1:80:b7:74:23:9c:61:e9:b0:0e:15:ef: c2:c5:02:91:55:c9:81:bf:a2:88:7e:b8:74:84:3c: cc:14:6e:3c:4e:01:18:35:04:a9:d5:1b:1a:5e:8d: 86:8e:c5:9e:b7:bc:e5:6e:09:bb:43:bc:37:d0:ac: 9d:1d:4b:5b:99:21:47:14:a1:17:9c:37:85:e6:c4: 18:e4:a6:3c:e9:d6:c0:94:4a:af:c6:de:b4:df:bd: c2:78:01:a8:ff:92:54:ae:e4:4d:77:7f:04:76:67: d9:2a:44:79:93:40:27:7a:d2:d6:b8:28:60:6d:c3: d9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C6:C9:9C:E0:E2:5E:4D:9D:2E:CF:B0:36:E4:34:D0:A9:E3:92:47 X509v3 Authority Key Identifier: keyid:20:3D:1E:2D:A8:52:BE:5B:64:3A:99:BE:F5:64:D7:74:BD:DC:C7:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E832/3B47108C500411EAA6D93054C4F9AE02/ID0eLahSvltkOpm-9WTXdL3cx_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ID0eLahSvltkOpm-9WTXdL3cx_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E832/3B47108C500411EAA6D93054C4F9AE02/ID0eLahSvltkOpm-9WTXdL3cx_Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:4b:45:1b:34:39:9a:41:d6:70:29:4f:c8:93:12:53:04:b2: db:c7:e5:39:e9:e6:72:04:fe:03:d3:00:1d:b9:7f:be:fc:25: 06:0c:20:60:a6:97:a9:4d:7d:09:27:4a:6a:59:0c:ba:b9:e2: 77:36:5b:21:a1:82:f4:93:07:78:af:f1:ea:db:3b:aa:55:33: f6:c9:7b:c9:2d:75:d6:c7:7a:f0:04:15:35:6e:92:b6:f2:4e: aa:40:60:aa:1f:11:c3:98:47:ac:47:4a:62:ff:ac:9e:a3:55: 86:14:b8:85:9e:72:a2:13:ed:a4:fb:63:7c:ad:96:fd:37:45: 31:f7:6d:7f:19:c9:e9:91:77:4b:f8:7e:2f:9e:24:94:33:1f: f0:cb:47:ca:78:71:d0:d4:17:c0:34:fd:b9:a2:84:6b:b8:7a: fb:02:cc:5d:ca:e7:a9:75:11:74:2e:81:4a:d2:61:45:4f:6a: 3e:4e:c8:ca:38:43:ad:29:ee:6f:6b:36:54:cf:3f:45:2b:08: a5:41:08:32:96:e1:c5:09:fd:41:fc:9d:13:aa:0b:2d:85:7c: 1a:f4:ab:bc:32:f3:6d:ba:2d:60:ac:86:87:10:88:1d:d9:21: 0e:f9:9d:8a:1f:e6:59:73:58:ae:df:44:11:59:39:6c:65:fc: cc:06:48:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC9AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U4MzIxMTAvBgNVBAUTKDIwM0QxRTJEQTg1MkJFNUI2NDNBOTlCRUY1NjRENzc0 QkREQ0M3RjQwHhcNMjYxMDA0MTkwNDUyWhcNMjYxMDExMTkwNDUyWjAYMRYwFAYD VQQDEw02YWMyYTM1NS1iZTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuaffypc90OX+Fa1GbIxVoEChkujxOGKHCy2GvbXpd/VhZRyLijHCc/Dz5EPe 99KjEqOMD7InRWpMqdeXXEbN+2Ya843vGPnPFAmSOZmWYbU3BmYSpNKH+7YYsY5K 0JgsZbi8br5rYFPsJ4dOfmtst6+XoY/WJq/+K0Ul3S+7oXWUOlLmfOI7k1vhgLd0 I5xh6bAOFe/CxQKRVcmBv6KIfrh0hDzMFG48TgEYNQSp1RsaXo2GjsWet7zlbgm7 Q7w30KydHUtbmSFHFKEXnDeF5sQY5KY86dbAlEqvxt60373CeAGo/5JUruRNd38E dmfZKkR5k0AnetLWuChgbcPZXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC3GyZzg 4l5NnS7PsDbkNNCp45JHMB8GA1UdIwQYMBaAFCA9Hi2oUr5bZDqZvvVk13S93Mf0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTgzMi8zQjQ3MTA4QzUw MDQxMUVBQTZEOTMwNTRDNEY5QUUwMi9JRDBlTGFoU3ZsdGtPcG0tOVdUWGRMM2N4 X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lEMGVMYWhTdmx0a09wbS05V1RYZEwzY3hfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTgzMi8zQjQ3MTA4QzUwMDQxMUVBQTZEOTMwNTRDNEY5QUUwMi9JRDBlTGFoU3Zs dGtPcG0tOVdUWGRMM2N4X1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADUtFGzQ5mkHWcClPyJMSUwSy28flOenmcgT+A9MAHbl/vvwlBgwgYKaXqU19 CSdKalkMurnidzZbIaGC9JMHeK/x6ts7qlUz9sl7yS111sd68AQVNW6StvJOqkBg qh8Rw5hHrEdKYv+snqNVhhS4hZ5yohPtpPtjfK2W/TdFMfdtfxnJ6ZF3S/h+L54k lDMf8MtHynhx0NQXwDT9uaKEa7h6+wLMXcrnqXURdC6BStJhRU9qPk7IyjhDrSnu b2s2VM8/RSsIpUEIMpbhxQn9QfydE6oLLYV8GvSrvDLzbbotYKyGhxCIHdkhDvmd ih/mWXNYrt9EEVk5bGX8zAZIUA== -----END CERTIFICATE-----Generated at Mon Oct 5 12:10:12 2026 by rpki-client