$ rpki-client -vvvf rpki.apnic.net/member_repository/A918966F/7E229016072311F1B4B3AAFB2A3D8C67/xh7aKdRphAjI5WdDhpTVNnJaEn0.mft File: xh7aKdRphAjI5WdDhpTVNnJaEn0.mft (raw, json) Hash identifier: fHferky0pIda1L1bQyZMhVHcbYi9pnAJhU5u6Oa/qxQ= Subject key identifier: 7A:CA:1E:02:47:F7:3E:79:93:DA:6D:91:E9:C0:56:72:BF:85:AF:89 Authority key identifier: C6:1E:DA:29:D4:69:84:08:C8:E5:67:43:86:94:D5:36:72:5A:12:7D Certificate issuer: /CN=A918966F/serialNumber=C61EDA29D4698408C8E567438694D536725A127D Certificate serial: 82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xh7aKdRphAjI5WdDhpTVNnJaEn0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918966F/7E229016072311F1B4B3AAFB2A3D8C67/xh7aKdRphAjI5WdDhpTVNnJaEn0.mft Manifest number: 7F Signing time: Fri 09 Oct 2026 08:29:29 +0000 Manifest this update: Fri 09 Oct 2026 08:29:29 +0000 Manifest next update: Fri 16 Oct 2026 08:29:29 +0000 Files and hashes: 1: xh7aKdRphAjI5WdDhpTVNnJaEn0.crl (hash: iuC93FRoJynk8HuAaysmbMWAIu8Rsx3CC3iKoeQleFA=) 2: 7FA6A66E072511F18DD83FDE2B3D8C67.roa (hash: eQqlL71/p1sNSKb5Ex9TeNmIs+RfO86ZYPmbwnWNKa4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918966F/7E229016072311F1B4B3AAFB2A3D8C67/xh7aKdRphAjI5WdDhpTVNnJaEn0.crl rsync://rpki.apnic.net/member_repository/A918966F/7E229016072311F1B4B3AAFB2A3D8C67/xh7aKdRphAjI5WdDhpTVNnJaEn0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xh7aKdRphAjI5WdDhpTVNnJaEn0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 08:29:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 130 (0x82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918966F, serialNumber=C61EDA29D4698408C8E567438694D536725A127D Validity Not Before: Oct 9 08:29:29 2026 GMT Not After : Oct 16 08:29:29 2026 GMT Subject: CN=6ac8a5e9-8347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:eb:0c:e5:92:91:fc:49:07:de:2a:d8:12:3f: c7:a7:62:2b:5b:e0:7b:99:6a:51:82:85:ab:6d:e9: 76:22:d6:f0:af:74:40:26:d4:6e:6e:2e:84:99:e1: 15:23:8d:c1:7e:25:5e:e1:e4:21:b2:8c:3d:49:17: d5:77:c4:f4:11:40:28:55:84:6d:d6:d1:be:8b:42: 56:91:53:aa:d3:c5:4c:ab:62:5c:b5:f9:ca:7c:ee: 15:d2:c1:2f:06:00:a5:0d:4b:c5:d1:6c:12:04:41: 07:82:2d:d0:89:3c:bc:61:a0:fd:f6:c7:c0:5c:0c: e3:70:04:e3:c1:0a:9c:d0:bb:ff:f0:1d:8d:fd:35: 0b:40:1d:1e:6c:1a:65:4e:a1:8f:66:0b:50:18:ae: 5a:9b:af:f2:9c:3b:eb:df:9b:6a:8b:63:8d:34:5a: 70:4e:ca:0e:6c:3a:2d:ee:20:38:c4:6e:9b:04:d8: c8:ed:a7:a1:c6:98:a9:ed:89:4e:58:8e:42:0a:24: 1a:f7:9b:80:77:19:7d:06:38:7f:8b:33:31:e9:7f: b0:5e:51:a1:e0:1a:a7:cb:3c:56:28:4d:ab:6c:0c: 10:c4:55:b7:d6:90:5c:65:16:77:dd:ca:1c:cd:2a: 6a:01:08:99:cf:c8:f7:bb:9e:2d:d2:04:33:21:01: a1:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:CA:1E:02:47:F7:3E:79:93:DA:6D:91:E9:C0:56:72:BF:85:AF:89 X509v3 Authority Key Identifier: keyid:C6:1E:DA:29:D4:69:84:08:C8:E5:67:43:86:94:D5:36:72:5A:12:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918966F/7E229016072311F1B4B3AAFB2A3D8C67/xh7aKdRphAjI5WdDhpTVNnJaEn0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xh7aKdRphAjI5WdDhpTVNnJaEn0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918966F/7E229016072311F1B4B3AAFB2A3D8C67/xh7aKdRphAjI5WdDhpTVNnJaEn0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:33:6c:c9:f9:36:55:9a:10:22:51:81:16:f5:b6:b9:c5:12: c5:61:58:7d:37:49:45:a8:5c:4e:8f:45:28:c5:60:18:4c:30: 34:e5:91:26:2c:1c:2a:d5:3c:35:c0:d7:24:4f:cf:b1:ef:5e: 41:6c:01:a5:b7:e0:a1:df:31:f3:6a:ce:ff:10:50:b4:38:99: 1b:cd:37:b1:43:47:f3:8c:08:2e:2a:e7:dc:85:55:14:46:ea: 36:00:a8:ca:1b:0c:3f:0f:ce:f7:55:d1:a9:ee:41:28:3e:1b: f0:91:f3:cc:bf:f3:74:af:65:b2:7c:9f:3a:e2:2a:79:32:ad: f0:60:8e:a9:08:1a:e7:61:59:bf:07:b3:c8:3b:8e:b4:87:66: df:a7:92:5a:b6:d5:36:05:a4:3a:62:e8:60:74:32:4a:94:26: 41:a2:7c:c1:59:c6:4a:7a:26:75:d5:05:c0:4f:6b:a8:b5:34: 36:8d:73:3a:75:91:65:ff:e6:e6:e4:09:9a:bd:c5:5c:7b:46: 1e:40:eb:a7:9b:dc:1a:1b:48:11:2c:69:9e:ae:a1:b0:45:e4: 05:1b:82:82:9d:3c:6e:1b:6b:3c:85:a2:22:24:a0:bc:99:3a: 38:83:17:a5:0d:a3:53:97:27:6c:15:76:86:bb:16:05:35:fb: 1e:7a:44:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk2NkYxMTAvBgNVBAUTKEM2MUVEQTI5RDQ2OTg0MDhDOEU1Njc0Mzg2OTRENTM2 NzI1QTEyN0QwHhcNMjYxMDA5MDgyOTI5WhcNMjYxMDE2MDgyOTI5WjAYMRYwFAYD VQQDEw02YWM4YTVlOS04MzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwesM5ZKR/EkH3irYEj/Hp2IrW+B7mWpRgoWrbel2Itbwr3RAJtRubi6EmeEV I43BfiVe4eQhsow9SRfVd8T0EUAoVYRt1tG+i0JWkVOq08VMq2JctfnKfO4V0sEv BgClDUvF0WwSBEEHgi3QiTy8YaD99sfAXAzjcATjwQqc0Lv/8B2N/TULQB0ebBpl TqGPZgtQGK5am6/ynDvr35tqi2ONNFpwTsoObDot7iA4xG6bBNjI7aehxpip7YlO WI5CCiQa95uAdxl9Bjh/izMx6X+wXlGh4BqnyzxWKE2rbAwQxFW31pBcZRZ33coc zSpqAQiZz8j3u54t0gQzIQGhbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHrKHgJH 9z55k9ptkenAVnK/ha+JMB8GA1UdIwQYMBaAFMYe2inUaYQIyOVnQ4aU1TZyWhJ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTY2Ri83RTIyOTAxNjA3 MjMxMUYxQjRCM0FBRkIyQTNEOEM2Ny94aDdhS2RScGhBakk1V2REaHBUVk5uSmFF bjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hoN2FLZFJwaEFqSTVXZERocFRWTm5KYUVuMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTY2Ri83RTIyOTAxNjA3MjMxMUYxQjRCM0FBRkIyQTNEOEM2Ny94aDdhS2RScGhB akk1V2REaHBUVk5uSmFFbjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEjNsyfk2VZoQIlGBFvW2ucUSxWFYfTdJRahcTo9FKMVgGEwwNOWRJiwcKtU8 NcDXJE/Pse9eQWwBpbfgod8x82rO/xBQtDiZG803sUNH84wILirn3IVVFEbqNgCo yhsMPw/O91XRqe5BKD4b8JHzzL/zdK9lsnyfOuIqeTKt8GCOqQga52FZvwezyDuO tIdm36eSWrbVNgWkOmLoYHQySpQmQaJ8wVnGSnomddUFwE9rqLU0No1zOnWRZf/m 5uQJmr3FXHtGHkDrp5vcGhtIESxpnq6hsEXkBRuCgp08bhtrPIWiIiSgvJk6OIMX pQ2jU5cnbBV2hrsWBTX7HnpEaQ== -----END CERTIFICATE-----Generated at Sat Oct 10 00:17:02 2026 by rpki-client