$ rpki-client -vvvf rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft File: Os9EXPzs-7KROzR9Z6go4EChWh0.mft (raw, json) Hash identifier: gOEyhCZiA63WxgdNrur15oDLjPL/RKsNZw5MQz/8hBg= Subject key identifier: A2:2B:87:81:78:BB:5C:70:01:2C:91:3E:4F:8A:F6:F9:E7:EB:F3:8B Authority key identifier: 3A:CF:44:5C:FC:EC:FB:B2:91:3B:34:7D:67:A8:28:E0:40:A1:5A:1D Certificate issuer: /CN=A9117CD5/serialNumber=3ACF445CFCECFBB2913B347D67A828E040A15A1D Certificate serial: E4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft Manifest number: E1 Signing time: Mon 21 Sep 2026 06:31:49 +0000 Manifest this update: Mon 21 Sep 2026 06:31:48 +0000 Manifest next update: Mon 28 Sep 2026 06:31:48 +0000 Files and hashes: 1: Os9EXPzs-7KROzR9Z6go4EChWh0.crl (hash: eP0A3MSrMjSrBg/Zv9UYiQmqSatJbREvQxRwVB4frrA=) 2: 0B51CEDE5FA911F0BE187C31C4F9AE02.roa (hash: WRz1Amhg1eLxzvJe34a5Oo/mdHZDgY00iZZMnOor6VE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.crl rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:31:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117CD5, serialNumber=3ACF445CFCECFBB2913B347D67A828E040A15A1D Validity Not Before: Sep 21 06:31:48 2026 GMT Not After : Sep 28 06:31:48 2026 GMT Subject: CN=6ab0cf55-82bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e8:c0:e6:80:9f:a7:54:88:5a:57:5d:38:1d: 14:b3:ed:14:c9:45:ae:80:b7:40:be:93:ce:6a:0b: cc:da:1a:e0:0b:4d:b6:48:92:18:1d:e4:3d:1c:cb: 36:5f:1f:ee:c9:f2:f4:b5:20:93:74:13:e7:05:44: 82:79:14:04:35:1b:b3:38:72:ed:cc:f2:2a:80:ec: c4:41:0f:0a:10:99:fe:02:4b:da:35:df:26:c0:f2: 3c:85:fb:a9:ce:00:7a:e3:4a:56:d9:b4:8f:2e:71: 1d:e6:72:48:7f:82:c5:2e:4e:c3:c7:39:3b:51:1c: 0f:d8:4f:14:7b:2d:38:dd:6f:6f:4f:ff:c3:c6:b1: a7:90:d2:4a:21:b9:4a:67:c3:ad:10:66:89:a3:88: 34:32:98:36:3f:b0:d4:be:37:a1:bb:78:4f:d0:41: 7a:e6:39:93:9b:8a:9f:cf:a9:0a:7f:54:06:3c:10: de:d5:ea:21:90:9e:10:74:f2:78:04:19:f2:5a:cf: be:0a:e9:b0:7a:92:be:d7:ca:33:2e:4b:2d:3d:c1: 28:03:d4:a2:8e:cb:81:99:1c:80:78:f0:98:43:82: 4c:77:d0:22:13:0f:9f:17:05:e6:67:b0:42:4a:84: 88:47:75:f6:41:e6:66:9a:8d:0d:75:c0:9f:d6:00: 86:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:2B:87:81:78:BB:5C:70:01:2C:91:3E:4F:8A:F6:F9:E7:EB:F3:8B X509v3 Authority Key Identifier: keyid:3A:CF:44:5C:FC:EC:FB:B2:91:3B:34:7D:67:A8:28:E0:40:A1:5A:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:2a:45:8f:b3:56:50:02:ef:e0:48:5f:90:fc:18:8c:25:d3: 2a:80:2b:6c:4b:45:ea:bc:b2:cf:f7:fb:f7:53:82:5b:16:61: 25:fb:3a:64:69:cd:87:04:a3:78:09:41:4c:07:78:f0:90:37: 24:0b:aa:78:9c:b8:39:4a:75:2a:42:3d:96:48:b1:ce:8a:90: da:31:55:c6:7f:02:12:01:24:21:03:4c:83:7d:a1:5f:91:53: 61:6e:a2:2e:92:9e:fa:cd:2e:ed:8c:60:cf:d0:0c:2a:49:9a: b4:de:ed:5b:6d:9c:63:cb:81:76:01:c3:fe:fa:2c:dd:0e:7f: 07:28:a8:49:83:9b:a8:1a:4e:82:30:15:64:23:6c:fd:b7:ca: af:c6:92:68:0c:fd:17:31:50:bb:db:4f:76:fb:9e:f8:8b:79: e8:ed:ed:a0:f5:75:a8:55:0d:64:2d:1b:cb:9d:f7:ef:39:c7: 93:5c:0b:89:0d:96:82:07:2a:e8:88:2d:8f:c4:42:29:b4:d4: 29:9e:76:a9:2a:94:5b:fe:4b:15:0e:de:a4:b1:39:97:ac:0e: c5:18:64:ab:6c:d5:06:eb:7e:3d:70:18:08:b6:03:f2:f5:17: 89:32:57:13:40:3d:9f:04:5d:e4:ac:8b:d0:72:0d:be:01:ec: e2:52:6c:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTdDRDUxMTAvBgNVBAUTKDNBQ0Y0NDVDRkNFQ0ZCQjI5MTNCMzQ3RDY3QTgyOEUw NDBBMTVBMUQwHhcNMjYwOTIxMDYzMTQ4WhcNMjYwOTI4MDYzMTQ4WjAYMRYwFAYD VQQDEw02YWIwY2Y1NS04MmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkOjA5oCfp1SIWlddOB0Us+0UyUWugLdAvpPOagvM2hrgC022SJIYHeQ9HMs2 Xx/uyfL0tSCTdBPnBUSCeRQENRuzOHLtzPIqgOzEQQ8KEJn+AkvaNd8mwPI8hfup zgB640pW2bSPLnEd5nJIf4LFLk7Dxzk7URwP2E8Uey043W9vT//DxrGnkNJKIblK Z8OtEGaJo4g0Mpg2P7DUvjehu3hP0EF65jmTm4qfz6kKf1QGPBDe1eohkJ4QdPJ4 BBnyWs++CumwepK+18ozLkstPcEoA9SijsuBmRyAePCYQ4JMd9AiEw+fFwXmZ7BC SoSIR3X2QeZmmo0NdcCf1gCGDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKIrh4F4 u1xwASyRPk+K9vnn6/OLMB8GA1UdIwQYMBaAFDrPRFz87PuykTs0fWeoKOBAoVod MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0NENS81REI3NEIwQTVG QTgxMUYwQjU5NzhDMkNDNEY5QUUwMi9PczlFWFB6cy03S1JPelI5WjZnbzRFQ2hX aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09zOUVYUHpzLTdLUk96UjlaNmdvNEVDaFdoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx N0NENS81REI3NEIwQTVGQTgxMUYwQjU5NzhDMkNDNEY5QUUwMi9PczlFWFB6cy03 S1JPelI5WjZnbzRFQ2hXaDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACypFj7NWUALv4EhfkPwYjCXTKoArbEtF6ryyz/f791OCWxZhJfs6ZGnNhwSj eAlBTAd48JA3JAuqeJy4OUp1KkI9lkixzoqQ2jFVxn8CEgEkIQNMg32hX5FTYW6i LpKe+s0u7Yxgz9AMKkmatN7tW22cY8uBdgHD/vos3Q5/ByioSYObqBpOgjAVZCNs /bfKr8aSaAz9FzFQu9tPdvue+It56O3toPV1qFUNZC0by5337znHk1wLiQ2Wggcq 6Igtj8RCKbTUKZ52qSqUW/5LFQ7epLE5l6wOxRhkq2zVBut+PXAYCLYD8vUXiTJX E0A9nwRd5KyL0HINvgHs4lJsqQ== -----END CERTIFICATE-----Generated at Mon Sep 21 23:29:19 2026 by rpki-client