$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft File: CrbdJlFcU-zFsEYrTEddWn5aVTc.mft (raw, json) Hash identifier: kp77O3g+ApYWohSyM18cY1kdC0n0XBZuKe8kjXO3fs0= Subject key identifier: 32:89:0E:F9:51:6B:1C:27:A3:87:0F:63:AA:00:B6:8F:C7:46:32:A2 Authority key identifier: 0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37 Certificate issuer: /CN=A918E4B7/serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537 Certificate serial: 062F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft Manifest number: 05F9 Signing time: Sun 20 Sep 2026 22:53:24 +0000 Manifest this update: Sun 20 Sep 2026 22:53:23 +0000 Manifest next update: Sun 27 Sep 2026 22:53:23 +0000 Files and hashes: 1: CrbdJlFcU-zFsEYrTEddWn5aVTc.crl (hash: H0HpQKs953i3oJuIuC27VIIIWTqTwlcVkj1sUwqfIXg=) 2: 1ED4125C50C111EFA64C2437C4F9AE02.roa (hash: Llq8/Xlvmvs7fWUQmUTFmoYLL9C5z/28iM22A4jGmVI=) 3: A8EB70C0C52D11F09789F47BC4F9AE02.roa (hash: f4TwCofnjb314b2dfugH+uOL5IvInT5NZv6LramWXV8=) 4: BAA1B454654411EFACBF7956C4F9AE02.roa (hash: AgfhIRT1yYkIco2yAsi5bYKv0pG9DAUzOwIf702NGHE=) 5: 16D4DB82A40E11EEAAB83671C4F9AE02.roa (hash: TmdQV6BLk1+cnWaAIkZhU3NcLcnZuchKRODSVZWLxDo=) 6: ED8B1602A0D711EFB982AD62C4F9AE02.roa (hash: 4XQqYwr9ZnxSQLoK6YzNihejRaWxbBfvhwjsYEHNOoQ=) 7: 17A651BCA40E11EEAAB83671C4F9AE02.roa (hash: bURAJ2nFs1Lh/czDcyYCaHuE8qREjWTSWX92LpP8+U0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 22:53:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1583 (0x62f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E4B7, serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537 Validity Not Before: Sep 20 22:53:23 2026 GMT Not After : Sep 27 22:53:23 2026 GMT Subject: CN=6ab063e3-b40a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:63:1b:42:bb:6d:db:25:0b:03:47:e2:1b:a6: ed:1e:c2:1b:aa:71:e4:7c:9b:b4:c0:a6:60:77:0c: f9:f4:31:00:6a:2a:be:9e:a3:6b:49:7c:18:ee:4a: 20:ef:58:2e:99:52:65:b1:b6:90:7d:af:e3:ef:e6: e1:62:72:ac:bd:da:ef:4c:32:b7:2d:d7:a3:bd:c9: f2:bf:ae:af:af:75:98:2d:36:a4:4c:05:51:2e:d3: c8:c6:bd:cf:98:29:68:80:c9:33:cb:92:5c:d6:db: 47:93:a5:34:0d:45:74:a0:3c:c2:f9:94:06:38:a6: 20:a5:a7:f2:49:c4:39:58:26:29:84:46:5d:c6:02: dc:4a:4a:f4:e7:d7:ca:0d:46:da:da:78:93:b2:d2: 2c:81:e2:73:4c:b8:f3:31:22:17:e7:c3:e4:c6:b3: b0:96:3f:65:cd:9f:74:05:cb:de:c3:fc:df:95:fe: a0:96:12:27:3c:49:0a:12:99:b8:75:ad:23:3e:ad: 0c:e5:76:54:5e:8e:f8:ea:b2:cc:9c:3c:4c:b8:2c: f4:7a:cd:9e:b5:8a:3b:21:bc:b6:dd:81:63:87:ae: 8e:7f:ce:eb:e1:c1:61:29:e4:6e:24:f7:be:37:42: df:d5:e1:30:90:6d:58:0e:15:8e:be:af:c8:1b:6f: 2f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:89:0E:F9:51:6B:1C:27:A3:87:0F:63:AA:00:B6:8F:C7:46:32:A2 X509v3 Authority Key Identifier: keyid:0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:cf:08:f8:c1:29:28:8d:b8:ad:7c:a0:4f:83:e0:17:a9:64: 0a:6d:c4:1a:2a:93:0a:86:b2:f6:80:ab:f0:1a:86:f5:5d:30: 48:9c:40:6c:95:be:61:8c:64:20:bf:3a:e1:ec:7d:6b:78:ae: 2e:de:69:60:f9:cc:bc:36:65:e3:4c:15:90:32:ca:f9:4d:4a: 67:78:82:a9:30:07:3d:db:ba:01:c5:b2:a8:19:23:2c:49:43: bb:b7:02:a5:cd:03:ed:46:21:79:b4:d4:21:32:13:2d:a6:4b: 7c:ca:d2:92:42:d8:02:72:8e:a6:5f:c3:3a:23:e5:95:49:71: 0d:ab:2e:8e:69:1f:28:fb:40:a8:46:8e:e9:8a:39:75:f9:e9: 0e:38:b7:db:f8:85:dd:aa:f9:fc:be:0a:7a:a0:0d:eb:b1:96: bf:de:c1:6d:85:54:5d:a2:0f:c8:f7:74:94:37:c6:1a:de:cc: d0:2f:b3:bb:ce:60:b1:0f:33:8c:18:40:7c:5e:62:6d:e2:df: 7c:97:6b:7f:5b:92:ec:c3:f9:83:94:4c:90:8c:4d:e6:ff:21: e5:d5:07:a0:df:ab:8c:c2:1a:d5:6e:f1:e9:28:c1:fe:ee:35: 41:9a:67:38:91:67:eb:f4:c2:e0:6a:44:55:f5:e0:2c:3d:d5: ad:fb:a8:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0QjcxMTAvBgNVBAUTKDBBQjZERDI2NTE1QzUzRUNDNUIwNDYyQjRDNDc1RDVB N0U1QTU1MzcwHhcNMjYwOTIwMjI1MzIzWhcNMjYwOTI3MjI1MzIzWjAYMRYwFAYD VQQDEw02YWIwNjNlMy1iNDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs2MbQrtt2yULA0fiG6btHsIbqnHkfJu0wKZgdwz59DEAaiq+nqNrSXwY7kog 71gumVJlsbaQfa/j7+bhYnKsvdrvTDK3Ldejvcnyv66vr3WYLTakTAVRLtPIxr3P mClogMkzy5Jc1ttHk6U0DUV0oDzC+ZQGOKYgpafyScQ5WCYphEZdxgLcSkr059fK DUba2niTstIsgeJzTLjzMSIX58PkxrOwlj9lzZ90Bcvew/zflf6glhInPEkKEpm4 da0jPq0M5XZUXo746rLMnDxMuCz0es2etYo7Iby23YFjh66Of87r4cFhKeRuJPe+ N0Lf1eEwkG1YDhWOvq/IG28vswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDKJDvlR axwno4cPY6oAto/HRjKiMB8GA1UdIwQYMBaAFAq23SZRXFPsxbBGK0xHXVp+WlU3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTRCNy9FQjMxMkYwMjFF QUExMUVDQjc1NkJGMzBDNEY5QUUwMi9DcmJkSmxGY1UtekZzRVlyVEVkZFduNWFW VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyYmRKbEZjVS16RnNFWXJURWRkV241YVZUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTRCNy9FQjMxMkYwMjFFQUExMUVDQjc1NkJGMzBDNEY5QUUwMi9DcmJkSmxGY1Ut ekZzRVlyVEVkZFduNWFWVGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAc8I+MEpKI24rXygT4PgF6lkCm3EGiqTCoay9oCr8BqG9V0wSJxAbJW+YYxk IL864ex9a3iuLt5pYPnMvDZl40wVkDLK+U1KZ3iCqTAHPdu6AcWyqBkjLElDu7cC pc0D7UYhebTUITITLaZLfMrSkkLYAnKOpl/DOiPllUlxDasujmkfKPtAqEaO6Yo5 dfnpDji32/iF3ar5/L4KeqAN67GWv97BbYVUXaIPyPd0lDfGGt7M0C+zu85gsQ8z jBhAfF5ibeLffJdrf1uS7MP5g5RMkIxN5v8h5dUHoN+rjMIa1W7x6SjB/u41QZpn OJFn6/TC4GpEVfXgLD3Vrfuo8g== -----END CERTIFICATE-----Generated at Mon Sep 21 10:27:36 2026 by rpki-client