$ rpki-client -vvvf rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft File: SslcipdeTPMQhCyVVkBRdT3rAok.mft (raw, json) Hash identifier: M/4KCOMNt2FRZEDjcP4cD2xaIHIA5XIGqLUrrISstbA= Subject key identifier: 52:62:25:B6:19:B0:B3:E8:DC:2B:B6:29:60:42:37:F3:1C:47:28:3F Authority key identifier: 4A:C9:5C:8A:97:5E:4C:F3:10:84:2C:95:56:40:51:75:3D:EB:02:89 Certificate issuer: /CN=A9110D07/serialNumber=4AC95C8A975E4CF310842C95564051753DEB0289 Certificate serial: 0277 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft Manifest number: 0246 Signing time: Mon 21 Sep 2026 03:00:28 +0000 Manifest this update: Mon 21 Sep 2026 03:00:28 +0000 Manifest next update: Mon 28 Sep 2026 03:00:28 +0000 Files and hashes: 1: SslcipdeTPMQhCyVVkBRdT3rAok.crl (hash: F9PKqsEDq4R6RUeegQdeNS7DEB0oHCzsUuSB3yFcTNo=) 2: CDF495A4E47D11EFAFC6496FC4F9AE02.roa (hash: NLqzgNFavgTlNRmtQJjQn4BF1LQ5ql0PYZJVK2eWqBQ=) 3: A35C979AA7A111F19DFE33BF4A11F970.roa (hash: HnpdJRvMuQvDGjlrN1zUcFvsx5jXwLrzVWEJuP5dobM=) 4: 5B66C6FEB4DB11F0B3DC6D7BC4F9AE02.roa (hash: ByWsIE/4rVUD5qRgH7zOnv47Eu0MEqBdDSj3mKfG9BU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.crl rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 03:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 631 (0x277) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110D07, serialNumber=4AC95C8A975E4CF310842C95564051753DEB0289 Validity Not Before: Sep 21 03:00:28 2026 GMT Not After : Sep 28 03:00:28 2026 GMT Subject: CN=6ab09dcc-bc32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ea:c5:79:29:cf:63:3f:fd:b8:4d:34:35:25: ab:58:49:d2:cd:91:ea:d9:8b:98:57:29:78:ec:19: 22:d8:4f:ad:78:af:fb:9e:de:62:46:96:1e:c4:e7: e7:d6:17:3e:0d:3e:21:9e:6e:1a:c6:24:ed:23:91: a6:07:fd:08:6a:72:4b:51:7c:2f:df:dd:a0:c8:6c: c9:8f:f7:df:82:33:c3:b2:05:64:63:7c:f1:7b:46: 77:13:15:eb:da:69:3e:55:6f:3f:f6:b5:8d:5b:01: d8:46:6c:a4:cb:cb:09:dd:15:54:7e:15:ee:63:8f: 4e:e3:c3:54:af:88:f4:e5:e3:61:a3:66:33:bf:7b: 94:5c:47:26:66:0d:d3:4a:d5:e1:82:0e:19:53:5f: 3b:78:b1:99:9a:d1:38:7d:46:b9:ae:fb:db:e1:27: 28:e4:70:ba:f1:ad:bd:6a:74:75:dd:42:05:c8:a4: c2:9f:0a:67:1f:c2:36:3f:36:bc:cb:ac:e0:85:b4: a9:79:69:0f:1a:4a:aa:e1:ac:3f:3b:a6:2e:e9:9d: b7:a0:3a:4f:04:c1:20:be:b5:5a:c9:4b:05:2d:88: a9:9a:4d:2a:8d:4f:68:27:47:4e:b4:57:39:dc:c0: 56:17:a6:8a:a8:6d:65:bf:37:e3:a9:cf:b4:5b:db: e0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:62:25:B6:19:B0:B3:E8:DC:2B:B6:29:60:42:37:F3:1C:47:28:3F X509v3 Authority Key Identifier: keyid:4A:C9:5C:8A:97:5E:4C:F3:10:84:2C:95:56:40:51:75:3D:EB:02:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:6e:3d:89:44:f6:89:bc:92:8c:6c:22:f6:7c:9a:41:75:6f: ea:57:e2:e0:94:38:7a:06:0a:cf:94:7e:e0:50:a7:7d:0b:b4: 29:18:46:68:69:ce:63:e2:8f:e2:4f:dc:2e:4f:2a:96:f1:3c: fc:00:d7:ce:d9:49:57:6c:83:94:06:a9:61:f7:9f:45:66:53: 7b:7e:d3:74:a6:dd:0f:b5:73:a8:e9:9f:16:62:b1:07:a2:64: ea:5d:61:bf:f5:7a:aa:de:36:f4:8f:0e:13:0f:87:e1:c4:cb: 43:b7:b5:2e:eb:3e:da:b3:e1:8f:c0:9f:ba:64:49:1c:b8:cc: eb:a7:c1:15:e9:7b:65:67:f5:c5:13:19:e8:85:02:f0:66:2f: 6e:7d:9c:e9:6e:71:13:1e:47:b9:ad:b3:6d:c3:8d:86:e5:67: b8:56:ba:90:4d:41:23:8b:ef:b9:c8:ac:09:d5:24:a0:0a:66: b3:a7:d6:cf:c7:21:b2:a2:de:ac:33:50:93:b7:50:52:97:30: e8:9d:83:1c:2d:46:47:4c:74:91:c0:13:9e:96:80:e5:7d:6b: b9:8c:d0:3c:b7:9d:73:62:2d:c6:96:4a:51:e9:68:ac:b3:6f: 28:cd:b4:95:13:5a:7a:32:bb:7f:ed:74:d5:f3:e7:15:67:85: 4a:c0:ad:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBEMDcxMTAvBgNVBAUTKDRBQzk1QzhBOTc1RTRDRjMxMDg0MkM5NTU2NDA1MTc1 M0RFQjAyODkwHhcNMjYwOTIxMDMwMDI4WhcNMjYwOTI4MDMwMDI4WjAYMRYwFAYD VQQDEw02YWIwOWRjYy1iYzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwerFeSnPYz/9uE00NSWrWEnSzZHq2YuYVyl47Bki2E+teK/7nt5iRpYexOfn 1hc+DT4hnm4axiTtI5GmB/0IanJLUXwv392gyGzJj/ffgjPDsgVkY3zxe0Z3ExXr 2mk+VW8/9rWNWwHYRmyky8sJ3RVUfhXuY49O48NUr4j05eNho2Yzv3uUXEcmZg3T StXhgg4ZU187eLGZmtE4fUa5rvvb4Sco5HC68a29anR13UIFyKTCnwpnH8I2Pza8 y6zghbSpeWkPGkqq4aw/O6Yu6Z23oDpPBMEgvrVayUsFLYipmk0qjU9oJ0dOtFc5 3MBWF6aKqG1lvzfjqc+0W9vgdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFJiJbYZ sLPo3Cu2KWBCN/McRyg/MB8GA1UdIwQYMBaAFErJXIqXXkzzEIQslVZAUXU96wKJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEQwNy9EM0U4ODlENDhF N0YxMUVFOEU5N0I0ODRDNEY5QUUwMi9Tc2xjaXBkZVRQTVFoQ3lWVmtCUmRUM3JB b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NzbGNpcGRlVFBNUWhDeVZWa0JSZFQzckFvay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEQwNy9EM0U4ODlENDhFN0YxMUVFOEU5N0I0ODRDNEY5QUUwMi9Tc2xjaXBkZVRQ TVFoQ3lWVmtCUmRUM3JBb2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkW49iUT2ibySjGwi9nyaQXVv6lfi4JQ4egYKz5R+4FCnfQu0KRhGaGnOY+KP 4k/cLk8qlvE8/ADXztlJV2yDlAapYfefRWZTe37TdKbdD7VzqOmfFmKxB6Jk6l1h v/V6qt429I8OEw+H4cTLQ7e1Lus+2rPhj8CfumRJHLjM66fBFel7ZWf1xRMZ6IUC 8GYvbn2c6W5xEx5Hua2zbcONhuVnuFa6kE1BI4vvucisCdUkoApms6fWz8chsqLe rDNQk7dQUpcw6J2DHC1GR0x0kcATnpaA5X1ruYzQPLedc2ItxpZKUelorLNvKM20 lRNaejK7f+101fPnFWeFSsCtog== -----END CERTIFICATE-----Generated at Tue Sep 22 09:24:16 2026 by rpki-client