$ rpki-client -vvvf rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft File: 9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft (raw, json) Hash identifier: BHyFAr+LHUyni1W6N1xJIMQSNz0pjXDLub6kW1qb2hg= Subject key identifier: B0:1A:8A:EB:D6:D8:BA:76:30:88:DC:67:DE:06:11:AB:CD:2C:26:74 Authority key identifier: F4:57:EF:8C:19:AA:09:76:CE:04:59:A5:FF:70:9C:5D:CA:4F:C7:D6 Certificate issuer: /CN=A911911C/serialNumber=F457EF8C19AA0976CE0459A5FF709C5DCA4FC7D6 Certificate serial: 36CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft Manifest number: 363B Signing time: Sun 20 Sep 2026 14:23:03 +0000 Manifest this update: Sun 20 Sep 2026 14:23:02 +0000 Manifest next update: Sun 27 Sep 2026 14:23:02 +0000 Files and hashes: 1: 9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl (hash: adALrzpvfjwxpmXK8GCPAAP9Sq5fzK0LvYxb98aRC5k=) 2: 8EEE648AE63811EB91D48033C4F9AE02.roa (hash: TmhPKiWm/UW/+IU6pO/3fWv32TwJDDiTp7ZwTLIEVr8=) 3: 3217A18E809711EFB1A3805FC4F9AE02.roa (hash: auSN852h6GKZGfnGT0WksuI9Fj9DYVbRwz9rqojMuu4=) 4: CDCBCFA486EB11F1BEC86003A7EE528E.roa (hash: NkyInlPBtrA6iFLb7Ke8nyQadI6kj+9f9IQaXEp4N28=) 5: 24D0960C4AFA11EFB1EEA481C4F9AE02.roa (hash: dELYOmUkyXR2lffYdfhWu0IaeYl2ykn5uFM1NfTC4i8=) 6: 6E340B9C4EA811EFA593A24CC4F9AE02.roa (hash: AHP5y6NUQXUIuJTsf7FmuzfZjDZN51hNfIjWN43DXmk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14029 (0x36cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911911C, serialNumber=F457EF8C19AA0976CE0459A5FF709C5DCA4FC7D6 Validity Not Before: Sep 20 14:23:02 2026 GMT Not After : Sep 27 14:23:02 2026 GMT Subject: CN=6aafec47-5d51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ed:37:19:9e:2a:a4:c7:a5:c0:ed:b5:8f:22: 6c:b8:99:50:86:fb:75:bb:ed:ff:e1:48:e6:e1:e8: 10:88:3a:0d:c7:4f:c4:a9:f0:c8:ee:e3:21:85:83: 94:6f:4c:84:1d:24:18:cc:f1:44:57:3a:3a:df:c3: e8:8a:29:09:c5:a6:94:da:00:aa:6f:61:bb:13:83: 4d:99:d4:cb:ee:97:70:26:94:64:28:30:bb:66:01: 1a:94:68:e7:e2:0f:af:fd:d2:d3:36:bd:d4:b0:3c: c3:dd:9c:76:59:a9:a0:be:c6:17:f1:86:92:8b:bd: bd:05:c5:ed:92:0c:bc:88:dd:b6:7b:cf:2c:a6:46: 7a:1e:db:1f:14:ad:79:92:d9:a3:59:5e:06:ee:ff: 72:ec:d7:b4:5f:3e:22:aa:74:ff:ec:73:86:ee:09: 3d:57:9c:9d:dd:35:40:86:d4:e5:b8:95:ab:c4:f0: be:71:c0:d5:ed:d2:09:05:79:64:87:17:fd:39:16: c9:06:87:9a:f2:47:5f:27:d7:3f:8f:5a:eb:85:d7: d5:3e:56:48:2c:ab:0d:87:bc:b9:5f:95:34:ee:90: 9b:75:df:b1:14:f0:01:3d:cb:27:8c:cf:e4:5e:54: 45:94:b1:12:dd:93:71:5a:5a:23:c2:7c:aa:23:c4: 21:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:1A:8A:EB:D6:D8:BA:76:30:88:DC:67:DE:06:11:AB:CD:2C:26:74 X509v3 Authority Key Identifier: keyid:F4:57:EF:8C:19:AA:09:76:CE:04:59:A5:FF:70:9C:5D:CA:4F:C7:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:fb:20:38:97:f5:bb:f4:9c:76:83:ae:8b:1d:83:96:50:70: 94:98:9c:a1:ac:49:6f:d7:38:d0:9b:46:8e:0a:26:db:ab:ab: e1:40:8c:44:74:c1:0a:89:be:65:c1:01:dd:37:8b:4e:4d:fe: b1:7a:d9:87:ee:2f:59:5b:5d:23:c2:24:dd:1c:99:11:c4:eb: 32:73:80:66:d1:36:22:29:49:f3:04:b2:6d:55:e8:ed:f2:a2: 28:3a:b6:99:49:9f:f2:0f:9e:97:c7:b4:3e:e1:96:89:56:ff: d5:69:65:bd:6e:b7:59:ef:42:00:8c:70:50:6a:13:f0:5f:9c: 10:cd:92:36:30:34:f6:ba:e8:db:19:06:d6:29:58:20:4b:94: ec:bc:bf:e8:ac:a7:95:10:7b:63:97:23:3d:4b:fe:e0:55:75: d9:d3:d0:6e:d1:2a:f8:2b:c5:65:de:dc:b4:8a:dc:37:6c:c8: 69:5a:77:5e:7c:e0:c0:4f:cb:17:b8:c5:c5:0b:5f:36:4e:b1: d5:46:c0:4f:a9:63:f0:7f:ec:b2:09:64:fa:25:19:0b:b0:30: 69:88:9d:b0:28:c6:fe:63:d5:f8:71:13:5c:a0:59:01:f3:82: ad:8b:d0:fa:74:5e:a6:89:6d:f8:0d:fe:ad:76:ca:a3:45:51: b4:54:a7:1f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNs0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkxMUMxMTAvBgNVBAUTKEY0NTdFRjhDMTlBQTA5NzZDRTA0NTlBNUZGNzA5QzVE Q0E0RkM3RDYwHhcNMjYwOTIwMTQyMzAyWhcNMjYwOTI3MTQyMzAyWjAYMRYwFAYD VQQDEw02YWFmZWM0Ny01ZDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuu03GZ4qpMelwO21jyJsuJlQhvt1u+3/4Ujm4egQiDoNx0/EqfDI7uMhhYOU b0yEHSQYzPFEVzo638PoiikJxaaU2gCqb2G7E4NNmdTL7pdwJpRkKDC7ZgEalGjn 4g+v/dLTNr3UsDzD3Zx2WamgvsYX8YaSi729BcXtkgy8iN22e88spkZ6HtsfFK15 ktmjWV4G7v9y7Ne0Xz4iqnT/7HOG7gk9V5yd3TVAhtTluJWrxPC+ccDV7dIJBXlk hxf9ORbJBoea8kdfJ9c/j1rrhdfVPlZILKsNh7y5X5U07pCbdd+xFPABPcsnjM/k XlRFlLES3ZNxWlojwnyqI8QhFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLAaiuvW 2Lp2MIjcZ94GEavNLCZ0MB8GA1UdIwQYMBaAFPRX74wZqgl2zgRZpf9wnF3KT8fW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTExQy9CQkM1NEJBNDFE ODMxMUUyOEU3RTJERDkwOEIwMkNEMi85RmZ2akJtcUNYYk9CRm1sXzNDY1hjcFB4 OVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGZnZqQm1xQ1hiT0JGbWxfM0NjWGNwUHg5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTExQy9CQkM1NEJBNDFEODMxMUUyOEU3RTJERDkwOEIwMkNEMi85RmZ2akJtcUNY Yk9CRm1sXzNDY1hjcFB4OVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAk/sgOJf1u/ScdoOuix2DllBwlJicoaxJb9c40JtGjgom26ur4UCMRHTBCom+ ZcEB3TeLTk3+sXrZh+4vWVtdI8Ik3RyZEcTrMnOAZtE2IilJ8wSybVXo7fKiKDq2 mUmf8g+el8e0PuGWiVb/1WllvW63We9CAIxwUGoT8F+cEM2SNjA09rro2xkG1ilY IEuU7Ly/6KynlRB7Y5cjPUv+4FV12dPQbtEq+CvFZd7ctIrcN2zIaVp3XnzgwE/L F7jFxQtfNk6x1UbAT6lj8H/ssglk+iUZC7AwaYidsCjG/mPV+HETXKBZAfOCrYvQ +nRepolt+A3+rXbKo0VRtFSnHw== -----END CERTIFICATE-----Generated at Mon Sep 21 00:02:25 2026 by rpki-client