$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D9E8/DAA477E4174C11F1A119F4D8163D8C67/BmIVgepjVqm4tbC9s26io0KBciU.mft File: BmIVgepjVqm4tbC9s26io0KBciU.mft (raw, json) Hash identifier: s7oU6LmmKZ3ci7QQzYzH6O7pb+bU3QzSfmQiZQ4clOo= Subject key identifier: 2A:EC:84:3B:A9:B8:85:4D:A6:F3:E3:B5:C0:F1:A0:24:EB:0E:E4:C7 Authority key identifier: 06:62:15:81:EA:63:56:A9:B8:B5:B0:BD:B3:6E:A2:A3:42:81:72:25 Certificate issuer: /CN=A918D9E8/serialNumber=06621581EA6356A9B8B5B0BDB36EA2A342817225 Certificate serial: 76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BmIVgepjVqm4tbC9s26io0KBciU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D9E8/DAA477E4174C11F1A119F4D8163D8C67/BmIVgepjVqm4tbC9s26io0KBciU.mft Manifest number: 74 Signing time: Tue 13 Oct 2026 08:34:25 +0000 Manifest this update: Tue 13 Oct 2026 08:34:24 +0000 Manifest next update: Tue 20 Oct 2026 08:34:24 +0000 Files and hashes: 1: BmIVgepjVqm4tbC9s26io0KBciU.crl (hash: 5TuxZ38Uwot9dDl/lXpEOKEdqfCEzqGWJXi4QeNgJhQ=) 2: 0EEDB772174D11F193D7AA7E173D8C67.roa (hash: y6pgs+n3x+EaANPspWEoZC1ehkpn8O/za+IreRLvylU=) 3: 3829F376174D11F19A004491173D8C67.roa (hash: 0k0rXsYRdBQmrsruCwfnV2JmIIADeibhHxkfkqZPiGk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D9E8/DAA477E4174C11F1A119F4D8163D8C67/BmIVgepjVqm4tbC9s26io0KBciU.crl rsync://rpki.apnic.net/member_repository/A918D9E8/DAA477E4174C11F1A119F4D8163D8C67/BmIVgepjVqm4tbC9s26io0KBciU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BmIVgepjVqm4tbC9s26io0KBciU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 08:34:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D9E8, serialNumber=06621581EA6356A9B8B5B0BDB36EA2A342817225 Validity Not Before: Oct 13 08:34:24 2026 GMT Not After : Oct 20 08:34:24 2026 GMT Subject: CN=6acded10-9093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:26:af:c9:24:62:49:a4:2f:7a:10:0f:2c:23: d3:49:72:10:80:6b:d0:b4:40:2a:88:dd:fb:ef:ef: ae:10:fd:f6:ff:e8:c8:ab:31:1a:ea:36:8d:d7:65: e4:5d:2e:8d:62:6c:aa:70:b9:89:1f:9a:21:1d:60: 59:30:ef:70:a7:33:d9:c2:92:d2:2c:f7:d2:ab:b8: d9:88:2a:c1:a5:ad:3f:c6:7a:26:33:53:36:2a:9e: eb:76:1f:7e:5f:df:a2:b1:90:64:d0:b2:b6:af:06: 88:fa:73:43:ea:66:5b:6f:f2:5f:82:10:04:47:19: 59:b5:18:69:24:86:ef:f2:3e:9e:88:d8:46:e1:c1: af:96:67:2b:52:c4:e0:7a:53:04:09:98:2d:bd:d0: 47:60:25:d5:37:52:e1:24:89:27:d9:6a:df:73:40: bd:ab:cc:b2:f2:c9:b5:5c:dc:c7:ef:81:99:56:9a: 1a:7d:9a:c9:56:f5:48:ec:3b:2e:2d:71:18:ae:f3: 81:6d:1c:14:89:a5:10:d0:e1:97:21:21:f0:b5:68: fd:0a:67:6f:72:20:fd:f1:d7:5f:3b:0c:28:d2:7a: 6f:7d:c6:0b:07:ef:c3:3b:11:b7:f5:e1:26:de:98: 52:e9:4f:8a:42:e9:ad:ee:18:bc:9c:c0:da:83:35: 89:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:EC:84:3B:A9:B8:85:4D:A6:F3:E3:B5:C0:F1:A0:24:EB:0E:E4:C7 X509v3 Authority Key Identifier: keyid:06:62:15:81:EA:63:56:A9:B8:B5:B0:BD:B3:6E:A2:A3:42:81:72:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D9E8/DAA477E4174C11F1A119F4D8163D8C67/BmIVgepjVqm4tbC9s26io0KBciU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BmIVgepjVqm4tbC9s26io0KBciU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D9E8/DAA477E4174C11F1A119F4D8163D8C67/BmIVgepjVqm4tbC9s26io0KBciU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:62:9c:f5:55:3a:f0:46:f9:b0:3c:90:8b:01:68:a6:36:3b: 04:48:3f:24:87:e5:cb:cf:71:e0:db:b4:7a:4b:5c:90:bc:2a: f7:09:18:7e:f0:27:3b:3a:15:99:f9:68:b4:de:79:ff:80:b9: 4b:ba:25:f7:f6:65:60:3d:7a:a3:bb:cc:bd:f2:1a:6f:73:69: 5c:86:40:42:fa:7b:96:1c:0a:a7:48:2f:84:4f:c7:b1:f8:07: 16:8c:40:7b:d7:d8:8c:75:22:2f:68:31:c1:76:07:93:cc:72: e8:f5:47:57:69:6d:18:06:fc:4e:fd:bc:17:9b:da:eb:b4:82: 0a:d9:2a:41:ca:25:59:9c:b3:13:a9:11:7d:91:ac:e8:50:3d: 8c:bb:99:95:ce:b6:aa:12:38:f8:d3:ac:b8:dd:76:aa:37:b0: fb:5b:2f:69:8e:25:37:9b:eb:f4:c4:55:3b:51:ed:8a:13:a6: 32:16:0e:c1:2c:7e:45:eb:44:b3:07:57:15:df:39:f1:ed:c1: ec:73:5c:78:45:69:2a:56:e0:93:bf:42:fc:7f:31:fd:41:41: fa:0e:ef:ab:0c:1c:ce:c2:43:a9:59:19:a7:2f:b4:d3:20:c6: 7a:13:a1:4d:80:19:39:dc:87:2f:84:37:05:b8:a5:72:bf:0c: 25:1e:bc:94 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RDlFODExMC8GA1UEBRMoMDY2MjE1ODFFQTYzNTZBOUI4QjVCMEJEQjM2RUEyQTM0 MjgxNzIyNTAeFw0yNjEwMTMwODM0MjRaFw0yNjEwMjAwODM0MjRaMBgxFjAUBgNV BAMTDTZhY2RlZDEwLTkwOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkJq/JJGJJpC96EA8sI9NJchCAa9C0QCqI3fvv764Q/fb/6MirMRrqNo3XZeRd Lo1ibKpwuYkfmiEdYFkw73CnM9nCktIs99KruNmIKsGlrT/GeiYzUzYqnut2H35f 36KxkGTQsravBoj6c0PqZltv8l+CEARHGVm1GGkkhu/yPp6I2Ebhwa+WZytSxOB6 UwQJmC290EdgJdU3UuEkiSfZat9zQL2rzLLyybVc3MfvgZlWmhp9mslW9UjsOy4t cRiu84FtHBSJpRDQ4ZchIfC1aP0KZ29yIP3x1187DCjSem99xgsH78M7Ebf14Sbe mFLpT4pC6a3uGLycwNqDNYlTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUKuyEO6m4 hU2m8+O1wPGgJOsO5McwHwYDVR0jBBgwFoAUBmIVgepjVqm4tbC9s26io0KBciUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThEOUU4L0RBQTQ3N0U0MTc0 QzExRjFBMTE5RjREODE2M0Q4QzY3L0JtSVZnZXBqVnFtNHRiQzlzMjZpbzBLQmNp VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQm1JVmdlcGpWcW00dGJDOXMyNmlvMEtCY2lVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThE OUU4L0RBQTQ3N0U0MTc0QzExRjFBMTE5RjREODE2M0Q4QzY3L0JtSVZnZXBqVnFt NHRiQzlzMjZpbzBLQmNpVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAMYpz1VTrwRvmwPJCLAWimNjsESD8kh+XLz3Hg27R6S1yQvCr3CRh+8Cc7OhWZ +Wi03nn/gLlLuiX39mVgPXqju8y98hpvc2lchkBC+nuWHAqnSC+ET8ex+AcWjEB7 19iMdSIvaDHBdgeTzHLo9UdXaW0YBvxO/bwXm9rrtIIK2SpByiVZnLMTqRF9kazo UD2Mu5mVzraqEjj406y43XaqN7D7Wy9pjiU3m+v0xFU7Ue2KE6YyFg7BLH5F60Sz B1cV3znx7cHsc1x4RWkqVuCTv0L8fzH9QUH6Du+rDBzOwkOpWRmnL7TTIMZ6E6FN gBk53IcvhDcFuKVyvwwlHryU -----END CERTIFICATE-----Generated at Tue Oct 13 17:06:35 2026 by rpki-client