$ rpki-client -vvvf rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft File: tO2w1sy18AyTBDdO6B9eJhrmcck.mft (raw, json) Hash identifier: uGdC4xU3MJymbQ858u11aDkLjqMCzghSfey5G7ra3tw= Subject key identifier: AC:90:37:38:AC:AB:C3:D2:E3:AA:CE:F1:FE:3A:8E:19:40:25:BF:44 Authority key identifier: B4:ED:B0:D6:CC:B5:F0:0C:93:04:37:4E:E8:1F:5E:26:1A:E6:71:C9 Certificate issuer: /CN=A9116AC6/serialNumber=B4EDB0D6CCB5F00C9304374EE81F5E261AE671C9 Certificate serial: 0229 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft Manifest number: 0222 Signing time: Mon 21 Sep 2026 02:53:18 +0000 Manifest this update: Mon 21 Sep 2026 02:53:18 +0000 Manifest next update: Mon 28 Sep 2026 02:53:18 +0000 Files and hashes: 1: tO2w1sy18AyTBDdO6B9eJhrmcck.crl (hash: puA4R6dTly/pl2yAUVderN316GOObTclWmlIzCTvTYQ=) 2: 34DED1A2798711EEA7D73423C4F9AE02.roa (hash: SzmtgdmOFJZhk9jVTnV/yTe6X6D8nfk0jT/tOuImmRI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.crl rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:53:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 553 (0x229) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116AC6, serialNumber=B4EDB0D6CCB5F00C9304374EE81F5E261AE671C9 Validity Not Before: Sep 21 02:53:18 2026 GMT Not After : Sep 28 02:53:18 2026 GMT Subject: CN=6ab09c1e-e636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:81:2b:2c:29:52:6d:e5:e4:de:81:f4:e0:35: f5:1d:61:80:b8:a8:f8:5c:a6:f3:19:35:c1:c5:f7: f7:a9:06:22:b0:bd:b4:99:a8:81:7f:5f:87:b2:6c: 02:97:7b:26:ab:63:44:10:4c:89:ae:ab:1c:92:20: 33:f4:fb:de:d4:fb:2d:3b:e5:bd:29:0d:d8:f2:8d: 66:d9:5b:ef:13:6f:ca:a4:37:85:5f:e4:70:00:ec: 3b:de:94:f8:a8:96:f2:e6:ee:b2:96:ee:5a:02:51: 98:29:24:39:41:8e:73:fa:87:0b:f9:ba:13:9c:26: 41:f7:54:16:2b:79:ef:8a:b4:c5:00:5a:f5:19:6c: 0c:ff:d3:33:7a:fc:d4:33:a1:d6:dd:0d:0b:e4:45: 73:e4:5e:ef:2c:3e:c3:99:f8:23:23:98:46:84:51: 98:ba:96:52:fb:78:42:61:c3:3d:aa:60:8b:ea:6c: 2f:83:bd:6b:a5:01:38:bb:0c:0b:7b:2d:81:28:4b: 1c:33:ba:dd:e0:46:b6:5b:b7:1c:49:d3:ae:a4:05: a9:11:ba:e9:a6:e2:da:b9:f5:43:e4:95:96:02:7c: 60:d1:47:30:78:6c:c6:83:c8:4d:b0:59:b9:1e:18: cd:a2:3f:b0:0d:72:5a:38:2b:c1:18:f4:3d:65:c3: 2e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:90:37:38:AC:AB:C3:D2:E3:AA:CE:F1:FE:3A:8E:19:40:25:BF:44 X509v3 Authority Key Identifier: keyid:B4:ED:B0:D6:CC:B5:F0:0C:93:04:37:4E:E8:1F:5E:26:1A:E6:71:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:6b:99:fa:21:69:a7:78:6a:4e:8d:38:ce:be:fb:e3:54:51: 6f:31:97:c3:08:ab:55:ac:d3:21:4a:a2:7c:68:1d:ce:37:89: e4:65:9a:c9:f8:69:98:61:0a:eb:56:37:cd:72:c1:78:5b:63: f9:e9:e1:29:de:be:f5:86:bd:4e:cc:e3:ec:4a:02:ce:b1:a4: 3a:eb:a9:17:8d:ba:29:d4:ee:4b:90:6f:d8:98:8a:7f:40:63: 81:2f:b9:bf:c2:78:b0:af:95:39:52:d3:82:37:b0:4c:41:0e: fa:ef:39:d1:87:8c:99:fa:c5:f2:e3:78:1b:f5:a2:aa:d1:3d: 69:f6:95:cd:72:c5:fc:dc:4f:ae:11:84:65:c3:71:53:89:e5: 1d:d3:20:72:8d:0b:23:6c:80:8b:54:24:d0:ac:a8:93:16:cd: b6:76:87:6b:0b:00:27:4a:f7:6d:ef:1d:d2:15:42:a9:03:80: 6e:8a:00:ef:f3:01:54:01:40:63:ff:f4:48:02:55:b9:e5:d2: 47:d2:f9:d7:b0:6d:f7:54:69:68:c1:a9:c4:6b:16:a2:ba:2a: 0d:00:db:0b:cc:43:b7:94:42:d5:60:f9:2b:ea:9e:68:64:ff: 3d:30:76:7c:12:bd:f6:81:da:f6:3f:17:1d:4a:da:e6:94:85: ba:9e:f0:2a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZBQzYxMTAvBgNVBAUTKEI0RURCMEQ2Q0NCNUYwMEM5MzA0Mzc0RUU4MUY1RTI2 MUFFNjcxQzkwHhcNMjYwOTIxMDI1MzE4WhcNMjYwOTI4MDI1MzE4WjAYMRYwFAYD VQQDEw02YWIwOWMxZS1lNjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3YErLClSbeXk3oH04DX1HWGAuKj4XKbzGTXBxff3qQYisL20maiBf1+HsmwC l3smq2NEEEyJrqsckiAz9Pve1PstO+W9KQ3Y8o1m2VvvE2/KpDeFX+RwAOw73pT4 qJby5u6ylu5aAlGYKSQ5QY5z+ocL+boTnCZB91QWK3nvirTFAFr1GWwM/9MzevzU M6HW3Q0L5EVz5F7vLD7DmfgjI5hGhFGYupZS+3hCYcM9qmCL6mwvg71rpQE4uwwL ey2BKEscM7rd4Ea2W7ccSdOupAWpEbrppuLaufVD5JWWAnxg0UcweGzGg8hNsFm5 HhjNoj+wDXJaOCvBGPQ9ZcMuHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKyQNzis q8PS46rO8f46jhlAJb9EMB8GA1UdIwQYMBaAFLTtsNbMtfAMkwQ3TugfXiYa5nHJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkFDNi9BMUI2Q0JFQTc5 N0QxMUVFOTk0OUIwNzNDNEY5QUUwMi90TzJ3MXN5MThBeVRCRGRPNkI5ZUpocm1j Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RPMncxc3kxOEF5VEJEZE82QjllSmhybWNjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkFDNi9BMUI2Q0JFQTc5N0QxMUVFOTk0OUIwNzNDNEY5QUUwMi90TzJ3MXN5MThB eVRCRGRPNkI5ZUpocm1jY2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmGuZ+iFpp3hqTo04zr7741RRbzGXwwirVazTIUqifGgdzjeJ5GWayfhpmGEK 61Y3zXLBeFtj+enhKd6+9Ya9Tszj7EoCzrGkOuupF426KdTuS5Bv2JiKf0BjgS+5 v8J4sK+VOVLTgjewTEEO+u850YeMmfrF8uN4G/WiqtE9afaVzXLF/NxPrhGEZcNx U4nlHdMgco0LI2yAi1Qk0KyokxbNtnaHawsAJ0r3be8d0hVCqQOAbooA7/MBVAFA Y//0SAJVueXSR9L517Bt91RpaMGpxGsWoroqDQDbC8xDt5RC1WD5K+qeaGT/PTB2 fBK99oHa9j8XHUra5pSFup7wKg== -----END CERTIFICATE-----Generated at Mon Sep 21 17:35:18 2026 by rpki-client