$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft File: PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft (raw, json) Hash identifier: Vu3lg1DGr6rCqRH/+z/x24T17LqohI0LPPJmAmDkgBw= Subject key identifier: 2C:AA:5F:FB:12:F5:6A:9C:4A:1D:3C:A5:8D:9C:33:D2:1A:05:35:B8 Authority key identifier: 3C:AA:EA:F1:B0:D4:BF:63:17:AE:4F:1E:54:63:79:BF:F3:46:CF:D3 Certificate issuer: /CN=A918D663/serialNumber=3CAAEAF1B0D4BF6317AE4F1E546379BFF346CFD3 Certificate serial: 011B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft Manifest number: 0111 Signing time: Mon 21 Sep 2026 06:01:12 +0000 Manifest this update: Mon 21 Sep 2026 06:01:12 +0000 Manifest next update: Mon 28 Sep 2026 06:01:12 +0000 Files and hashes: 1: PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl (hash: O3HepiDateGXcnfNA1N6ka6aUmsCgf0ZKKyrabMyQPI=) 2: 8BACF000172811F0B074151EC4F9AE02.roa (hash: Fl3h9ZkMvSkwu9/oPEGDkM57SG4asbpHPkhkIhKcKIA=) 3: 8C215ED6172811F0B074151EC4F9AE02.roa (hash: 47LsXWcwIKUuRyL+mT9zvEQa6j2H0OGo9Q7GJ+csjfY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 283 (0x11b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D663, serialNumber=3CAAEAF1B0D4BF6317AE4F1E546379BFF346CFD3 Validity Not Before: Sep 21 06:01:12 2026 GMT Not After : Sep 28 06:01:12 2026 GMT Subject: CN=6ab0c828-fa22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:04:5a:b8:72:d5:84:79:93:78:7e:e5:26:22: cf:9d:30:88:74:d2:b7:f1:38:ed:aa:00:be:5b:3a: 97:ca:21:6e:c6:99:02:e0:27:4b:08:b0:fc:ca:9b: 31:2e:ff:7f:ee:a5:b4:f5:6a:f0:ab:0f:17:83:ba: aa:6b:32:e3:5d:0f:ce:6b:52:db:e1:a6:39:0f:ac: 8c:eb:dd:1c:f2:9b:69:fa:de:e8:9d:e6:3e:05:1f: 01:2e:14:cc:f8:02:29:b5:7f:92:97:77:2c:a3:b2: 85:4a:f4:da:19:60:ed:2e:a0:11:00:f8:a6:44:b6: 47:7a:b9:47:e2:64:0b:74:e5:bf:4a:af:75:31:3f: 4d:7f:0a:32:11:93:73:fb:a3:26:fa:46:56:46:a9: 87:a6:fe:cd:8d:fc:92:01:ec:61:8c:a2:18:0e:66: e5:bd:a7:e2:64:e4:cf:6d:d8:ef:c9:59:93:69:5f: 4b:2e:22:64:5b:7f:e9:6c:29:08:6a:5e:e2:bc:90: a8:55:5b:99:3d:12:2c:a7:af:37:ac:71:bb:67:e4: 48:0e:a0:93:e2:8f:ec:69:71:66:12:b7:80:84:17: 4b:a6:6d:7b:fb:e0:56:58:91:e4:bf:64:ec:a2:e2: d5:57:c4:21:c2:59:7e:d2:10:6a:c0:57:ab:f2:e8: ae:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:AA:5F:FB:12:F5:6A:9C:4A:1D:3C:A5:8D:9C:33:D2:1A:05:35:B8 X509v3 Authority Key Identifier: keyid:3C:AA:EA:F1:B0:D4:BF:63:17:AE:4F:1E:54:63:79:BF:F3:46:CF:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:d6:ce:79:89:9d:b0:bf:8f:43:e9:e6:03:21:84:f1:03:f6: 75:96:08:ce:ec:8c:3a:63:2d:69:39:40:b5:72:c8:2a:df:df: 27:03:cf:9e:83:6f:5b:39:ca:af:9c:ca:a2:ea:d7:6e:3e:af: 48:03:c0:7a:0f:43:6d:44:a0:3d:e3:ca:95:b6:40:64:ce:04: 37:e5:53:1d:f7:a7:bc:17:b1:80:86:2b:60:a4:f9:2d:4f:46: 2d:1d:ae:29:63:07:f0:22:5c:e7:77:5c:27:be:5b:4d:48:43: f7:62:94:07:22:26:2b:7a:dc:0c:92:eb:a2:db:d6:26:bf:b9: 11:b5:74:b2:d0:79:1b:3b:df:40:ac:bb:02:25:50:3b:6f:a6: 4e:8e:15:9b:22:f1:a4:8e:4f:13:17:b3:17:85:1c:39:e0:44: b9:fa:b5:aa:c9:15:d7:3b:c4:c7:8d:dc:a8:46:f4:48:3d:c7: 4c:cd:52:57:1c:4a:9d:12:9e:7d:b8:4a:1b:ca:57:8e:e8:73: 9c:7b:2e:89:22:ce:67:37:42:c0:db:fe:e6:d2:63:18:1b:86: b5:67:b0:05:42:ee:13:49:e4:6b:b9:ed:92:3e:26:ef:3c:c6: 86:d8:24:31:56:fd:da:75:42:13:d4:55:9e:5f:6d:bc:1c:f7: fc:04:32:59 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ2NjMxMTAvBgNVBAUTKDNDQUFFQUYxQjBENEJGNjMxN0FFNEYxRTU0NjM3OUJG RjM0NkNGRDMwHhcNMjYwOTIxMDYwMTEyWhcNMjYwOTI4MDYwMTEyWjAYMRYwFAYD VQQDEw02YWIwYzgyOC1mYTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoQRauHLVhHmTeH7lJiLPnTCIdNK38TjtqgC+WzqXyiFuxpkC4CdLCLD8ypsx Lv9/7qW09Wrwqw8Xg7qqazLjXQ/Oa1Lb4aY5D6yM690c8ptp+t7oneY+BR8BLhTM +AIptX+Sl3cso7KFSvTaGWDtLqARAPimRLZHerlH4mQLdOW/Sq91MT9NfwoyEZNz +6Mm+kZWRqmHpv7NjfySAexhjKIYDmblvafiZOTPbdjvyVmTaV9LLiJkW3/pbCkI al7ivJCoVVuZPRIsp683rHG7Z+RIDqCT4o/saXFmEreAhBdLpm17++BWWJHkv2Ts ouLVV8Qhwll+0hBqwFer8uiu7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCyqX/sS 9WqcSh08pY2cM9IaBTW4MB8GA1UdIwQYMBaAFDyq6vGw1L9jF65PHlRjeb/zRs/T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDY2My83QUM5Njc5RTE3 MjAxMUYwQjc0MjIzNEVDNEY5QUUwMi9QS3JxOGJEVXYyTVhyazhlVkdONXZfTkd6 OU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BLcnE4YkRVdjJNWHJrOGVWR041dl9OR3o5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDY2My83QUM5Njc5RTE3MjAxMUYwQjc0MjIzNEVDNEY5QUUwMi9QS3JxOGJEVXYy TVhyazhlVkdONXZfTkd6OU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgdbOeYmdsL+PQ+nmAyGE8QP2dZYIzuyMOmMtaTlAtXLIKt/fJwPPnoNvWznK r5zKourXbj6vSAPAeg9DbUSgPePKlbZAZM4EN+VTHfenvBexgIYrYKT5LU9GLR2u KWMH8CJc53dcJ75bTUhD92KUByImK3rcDJLrotvWJr+5EbV0stB5GzvfQKy7AiVQ O2+mTo4VmyLxpI5PExezF4UcOeBEufq1qskV1zvEx43cqEb0SD3HTM1SVxxKnRKe fbhKG8pXjuhznHsuiSLOZzdCwNv+5tJjGBuGtWewBULuE0nka7ntkj4m7zzGhtgk MVb92nVCE9RVnl9tvBz3/AQyWQ== -----END CERTIFICATE-----Generated at Tue Sep 22 10:33:19 2026 by rpki-client