$ rpki-client -vvvf rpki.apnic.net/member_repository/A9181292/51E505228B4611F192E7A6494611F970/0kjlt4WXOEFyGcc5Mgva-4O1BQE.mft File: 0kjlt4WXOEFyGcc5Mgva-4O1BQE.mft (raw, json) Hash identifier: IhTgTIa/UAw8htGAENABNXckWAPoIhsde0gZHsg84LU= Subject key identifier: 64:52:47:CC:4C:A8:AC:B6:C3:B0:9E:28:B1:DF:79:AD:54:34:32:BD Authority key identifier: D2:48:E5:B7:85:97:38:41:72:19:C7:39:32:0B:DA:FB:83:B5:05:01 Certificate issuer: /CN=A9181292/serialNumber=D248E5B7859738417219C739320BDAFB83B50501 Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0kjlt4WXOEFyGcc5Mgva-4O1BQE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181292/51E505228B4611F192E7A6494611F970/0kjlt4WXOEFyGcc5Mgva-4O1BQE.mft Manifest number: 28 Signing time: Fri 09 Oct 2026 09:35:46 +0000 Manifest this update: Fri 09 Oct 2026 09:35:46 +0000 Manifest next update: Fri 16 Oct 2026 09:35:46 +0000 Files and hashes: 1: 0kjlt4WXOEFyGcc5Mgva-4O1BQE.crl (hash: KCT2y9n4wgyZDWDyLq0XlYDKQhSJtdjj77yYiCpDL0k=) 2: C735270A8B4911F197B84AD94811F970.roa (hash: +LKnrorxjBkm1K+JOzimfHxI4AeC1+1bODCZ0IR/L8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181292/51E505228B4611F192E7A6494611F970/0kjlt4WXOEFyGcc5Mgva-4O1BQE.crl rsync://rpki.apnic.net/member_repository/A9181292/51E505228B4611F192E7A6494611F970/0kjlt4WXOEFyGcc5Mgva-4O1BQE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0kjlt4WXOEFyGcc5Mgva-4O1BQE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 09:35:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181292, serialNumber=D248E5B7859738417219C739320BDAFB83B50501 Validity Not Before: Oct 9 09:35:46 2026 GMT Not After : Oct 16 09:35:46 2026 GMT Subject: CN=6ac8b572-d2e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4f:d0:96:a8:05:7a:2b:16:8e:8a:ed:ad:2f: 0c:15:df:d3:0e:87:50:27:57:9b:a7:aa:d2:de:de: 6b:de:e3:7b:30:ec:e0:88:9b:6c:fb:b1:f4:d0:8e: ed:80:b9:e7:d9:77:af:9b:9f:1f:7b:c9:8c:e2:35: cd:94:a5:51:2e:0b:fe:c3:ef:15:f8:d8:9e:6e:7a: 22:4e:02:92:e2:65:b6:02:f8:4e:69:2d:b0:c1:6e: a3:7e:fc:cb:e5:c0:3a:55:ab:c6:fc:e2:4c:34:0a: f3:a0:00:bb:06:52:b9:63:41:ee:38:1b:84:eb:3f: 24:13:cb:1f:54:b9:2f:d2:31:58:09:fe:7e:32:45: d1:e5:8c:25:a7:0f:74:52:04:68:2e:d1:fa:45:8f: be:e5:06:d3:19:1f:26:24:b5:a4:ca:12:07:a5:17: ca:a1:d7:46:87:01:0c:0e:32:b1:c8:20:0e:c8:00: 16:45:a7:68:9d:03:95:61:c7:0e:23:04:7a:d2:47: e6:e2:f4:15:5d:27:6e:af:2a:38:bd:6d:29:b2:2d: 76:fb:ac:d9:aa:2f:21:9a:a4:61:56:df:24:3e:2f: dd:38:d0:e3:9b:72:67:5f:4f:29:01:a5:44:73:e5: c4:b0:f1:18:8a:27:aa:05:2f:e9:2c:6b:f8:ce:11: e7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:52:47:CC:4C:A8:AC:B6:C3:B0:9E:28:B1:DF:79:AD:54:34:32:BD X509v3 Authority Key Identifier: keyid:D2:48:E5:B7:85:97:38:41:72:19:C7:39:32:0B:DA:FB:83:B5:05:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181292/51E505228B4611F192E7A6494611F970/0kjlt4WXOEFyGcc5Mgva-4O1BQE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0kjlt4WXOEFyGcc5Mgva-4O1BQE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181292/51E505228B4611F192E7A6494611F970/0kjlt4WXOEFyGcc5Mgva-4O1BQE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:f2:56:e6:bb:c3:77:0b:58:4a:02:bd:42:7b:57:c6:40:6d: 52:69:30:d2:3f:c9:ed:57:6c:4a:f7:f3:1b:3a:9c:e3:75:91: a0:af:bb:6a:ea:04:f8:bd:c9:65:1c:61:13:e0:10:93:07:4c: bd:15:a1:5e:d9:28:f3:a8:1a:1d:86:4d:f1:2d:a7:39:4c:69: 2b:a6:ac:10:66:4c:9a:a5:4a:2a:4b:a0:00:20:8e:71:88:ee: f5:de:bc:4b:8f:18:b7:f5:f5:a1:87:60:85:31:0e:f9:5a:37: ba:81:3d:1f:3e:af:d1:95:a0:5d:d7:5b:a7:79:c3:21:40:85: 72:96:65:c7:b6:0d:d3:cf:33:1f:36:b5:73:59:2e:c9:f7:55: a2:ce:e7:5a:b1:83:17:dd:77:7c:e2:41:e8:de:66:e9:ae:04: c9:95:89:bd:25:9a:b0:ff:13:0c:64:ae:b6:87:3f:32:ad:db: a8:5f:3d:8a:af:03:02:c4:4a:bc:b3:d2:3b:04:ff:f7:b7:67: 0a:09:ba:89:19:69:97:da:23:76:2a:d5:72:6a:b5:71:7b:e7: 50:79:9a:78:9d:04:bf:f7:8e:5f:2b:d2:47:ea:ab:3c:d1:84: 9a:87:73:e3:bb:66:5b:39:db:38:3e:62:aa:bc:b1:3b:68:dc: ab:60:b8:cd -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MTI5MjExMC8GA1UEBRMoRDI0OEU1Qjc4NTk3Mzg0MTcyMTlDNzM5MzIwQkRBRkI4 M0I1MDUwMTAeFw0yNjEwMDkwOTM1NDZaFw0yNjEwMTYwOTM1NDZaMBgxFjAUBgNV BAMTDTZhYzhiNTcyLWQyZTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVT9CWqAV6KxaOiu2tLwwV39MOh1AnV5unqtLe3mve43sw7OCIm2z7sfTQju2A uefZd6+bnx97yYziNc2UpVEuC/7D7xX42J5ueiJOApLiZbYC+E5pLbDBbqN+/Mvl wDpVq8b84kw0CvOgALsGUrljQe44G4TrPyQTyx9UuS/SMVgJ/n4yRdHljCWnD3RS BGgu0fpFj77lBtMZHyYktaTKEgelF8qh10aHAQwOMrHIIA7IABZFp2idA5Vhxw4j BHrSR+bi9BVdJ26vKji9bSmyLXb7rNmqLyGapGFW3yQ+L9040OObcmdfTykBpURz 5cSw8RiKJ6oFL+ksa/jOEefdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUZFJHzEyo rLbDsJ4osd95rVQ0Mr0wHwYDVR0jBBgwFoAU0kjlt4WXOEFyGcc5Mgva+4O1BQEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgxMjkyLzUxRTUwNTIyOEI0 NjExRjE5MkU3QTY0OTQ2MTFGOTcwLzBramx0NFdYT0VGeUdjYzVNZ3ZhLTRPMUJR RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMGtqbHQ0V1hPRUZ5R2NjNU1ndmEtNE8xQlFFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgx MjkyLzUxRTUwNTIyOEI0NjExRjE5MkU3QTY0OTQ2MTFGOTcwLzBramx0NFdYT0VG eUdjYzVNZ3ZhLTRPMUJRRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBc8lbmu8N3C1hKAr1Ce1fGQG1SaTDSP8ntV2xK9/MbOpzjdZGgr7tq6gT4vcll HGET4BCTB0y9FaFe2SjzqBodhk3xLac5TGkrpqwQZkyapUoqS6AAII5xiO713rxL jxi39fWhh2CFMQ75Wje6gT0fPq/RlaBd11unecMhQIVylmXHtg3TzzMfNrVzWS7J 91WizudasYMX3Xd84kHo3mbprgTJlYm9JZqw/xMMZK62hz8yrduoXz2KrwMCxEq8 s9I7BP/3t2cKCbqJGWmX2iN2KtVyarVxe+dQeZp4nQS/945fK9JH6qs80YSah3Pj u2ZbOds4PmKqvLE7aNyrYLjN -----END CERTIFICATE-----Generated at Sun Oct 11 10:32:44 2026 by rpki-client