$ rpki-client -vvvf rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft File: aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft (raw, json) Hash identifier: LmULq1Ljnli4/gBggoSs2z27LLYmVXDcRo4Tg5II8ME= Subject key identifier: 42:B4:9A:1B:92:54:D9:30:8A:8E:66:A2:1D:05:CD:74:3A:62:19:32 Authority key identifier: 69:9E:67:42:56:7B:E7:32:9C:C3:A7:86:DE:B7:85:7E:2C:24:20:F9 Certificate issuer: /CN=A9119333/serialNumber=699E6742567BE7329CC3A786DEB7857E2C2420F9 Certificate serial: 23C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft Manifest number: 2375 Signing time: Sun 20 Sep 2026 15:47:21 +0000 Manifest this update: Sun 20 Sep 2026 15:47:20 +0000 Manifest next update: Sun 27 Sep 2026 15:47:20 +0000 Files and hashes: 1: aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl (hash: ge+iSYz2wXrA2JEKVAoqTm8NzCluxhAMxR4h8d20CU0=) 2: 1AC9199AD3CB11EF84052053C4F9AE02.roa (hash: plwWFq4k0Hgx6vP8bTzqJt9GJIcOt71z9VOfufJhc6Q=) 3: DD73806ED3C811EF9D76942FC4F9AE02.roa (hash: EwnErXsu5NYk/vKrNa7Bl73VtntPwcy5vYXbhPAWFt0=) 4: 443C3AF2D3F611EFB03C5C14C4F9AE02.roa (hash: kvJG9W7BesVloRiSNTznQQ2Vu/TG695dXNyQ/qNO4G8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 15:47:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9152 (0x23c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119333, serialNumber=699E6742567BE7329CC3A786DEB7857E2C2420F9 Validity Not Before: Sep 20 15:47:20 2026 GMT Not After : Sep 27 15:47:20 2026 GMT Subject: CN=6ab00008-14ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e8:9c:be:24:1c:9c:6b:60:56:b0:9b:33:83: 4a:e2:f5:a3:70:95:aa:e2:38:8f:3d:0f:eb:83:ab: 98:90:45:4c:fe:35:e4:01:76:2f:50:94:d3:32:a2: 4b:a4:55:97:4c:da:22:d9:24:53:71:27:7a:90:13: ee:4e:09:d2:ec:6a:4b:b4:8c:f1:8e:d1:83:5c:e6: 56:10:ce:a3:ec:39:cf:6e:ec:0c:22:f3:20:b8:0c: 6b:ed:4e:1b:87:cb:fd:24:90:4f:6a:47:52:33:3d: 62:70:d1:91:98:f1:59:22:b7:b4:98:7d:79:c3:8f: a1:2d:4d:8e:65:7f:7f:fe:72:14:22:f4:f0:d6:4f: f5:ef:23:01:1b:39:dc:2f:26:c0:b4:07:32:90:47: ed:e2:31:2d:f3:b8:be:5d:6e:85:80:b9:04:0e:f3: a9:87:0d:c2:19:95:60:be:ab:fd:20:33:a6:44:df: 28:71:3e:8a:8d:9a:f9:25:30:26:21:4a:63:df:86: f2:ac:06:d5:af:6b:b7:b3:6a:2f:d6:45:46:49:02: b8:7f:66:ac:74:ad:2a:e1:2c:88:45:b6:08:8a:c6: 7b:7a:4a:4e:8c:1d:2a:49:32:34:c5:61:94:67:bd: 32:4a:94:90:23:f6:1d:67:f0:6d:63:38:88:e6:cb: fe:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:B4:9A:1B:92:54:D9:30:8A:8E:66:A2:1D:05:CD:74:3A:62:19:32 X509v3 Authority Key Identifier: keyid:69:9E:67:42:56:7B:E7:32:9C:C3:A7:86:DE:B7:85:7E:2C:24:20:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d8:98:01:73:15:95:3a:db:b7:ec:5e:89:9c:a2:1e:92:ff:90: 8b:a8:3d:3d:25:66:44:f4:72:18:bd:a1:77:cc:ef:79:8c:04: 99:08:a3:60:66:d8:b8:b1:cb:cb:b1:20:a3:d6:ef:77:b7:d7: d9:bd:74:a6:55:5d:9e:9c:2c:b4:53:9a:aa:bd:8f:41:65:80: ed:f9:02:6e:36:d6:f6:47:14:81:98:ef:98:e1:c8:36:4e:26: 34:aa:90:ab:15:c9:c9:d4:62:c3:05:cb:dc:b8:77:50:03:31: ac:3a:24:59:8f:68:ca:2b:b2:7d:02:d8:8c:6e:82:7c:71:40: b4:4f:a3:c7:1e:97:11:bf:36:b8:9b:f6:f0:1b:14:6e:1a:6e: 16:5d:c9:f2:9b:31:bc:b2:cd:87:7a:d4:b5:64:99:09:73:cd: b0:07:ea:32:b6:f5:38:5b:a8:60:c4:4c:4c:e7:08:0c:6d:c1: c3:97:b4:18:89:d2:2f:f0:2b:76:6f:ff:98:e3:6a:39:6e:dd: b5:03:27:9c:4a:5e:ad:14:f6:f2:87:bc:37:22:73:03:f5:02: dd:dc:96:84:dd:f7:41:b5:bb:1f:3c:e0:5c:e9:77:80:a4:cb: 9c:d6:93:11:0a:a8:0b:8f:bf:fc:fc:78:53:b5:40:dc:70:d0: 2e:02:e9:dd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICI8AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkzMzMxMTAvBgNVBAUTKDY5OUU2NzQyNTY3QkU3MzI5Q0MzQTc4NkRFQjc4NTdF MkMyNDIwRjkwHhcNMjYwOTIwMTU0NzIwWhcNMjYwOTI3MTU0NzIwWjAYMRYwFAYD VQQDEw02YWIwMDAwOC0xNGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk+icviQcnGtgVrCbM4NK4vWjcJWq4jiPPQ/rg6uYkEVM/jXkAXYvUJTTMqJL pFWXTNoi2SRTcSd6kBPuTgnS7GpLtIzxjtGDXOZWEM6j7DnPbuwMIvMguAxr7U4b h8v9JJBPakdSMz1icNGRmPFZIre0mH15w4+hLU2OZX9//nIUIvTw1k/17yMBGznc LybAtAcykEft4jEt87i+XW6FgLkEDvOphw3CGZVgvqv9IDOmRN8ocT6KjZr5JTAm IUpj34byrAbVr2u3s2ov1kVGSQK4f2asdK0q4SyIRbYIisZ7ekpOjB0qSTI0xWGU Z70ySpSQI/YdZ/BtYziI5sv+vQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEK0mhuS VNkwio5moh0FzXQ6YhkyMB8GA1UdIwQYMBaAFGmeZ0JWe+cynMOnht63hX4sJCD5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTMzMy8wNjVEQTNCQUI4 NDQxMUU1QjUzNTdCMkZDNEY5QUUwMi9hWjVuUWxaNzV6S2N3NmVHM3JlRmZpd2tJ UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FaNW5RbFo3NXpLY3c2ZUczcmVGZml3a0lQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTMzMy8wNjVEQTNCQUI4NDQxMUU1QjUzNTdCMkZDNEY5QUUwMi9hWjVuUWxaNzV6 S2N3NmVHM3JlRmZpd2tJUGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA2JgBcxWVOtu37F6JnKIekv+Qi6g9PSVmRPRyGL2hd8zveYwEmQijYGbYuLHL y7Ego9bvd7fX2b10plVdnpwstFOaqr2PQWWA7fkCbjbW9kcUgZjvmOHINk4mNKqQ qxXJydRiwwXL3Lh3UAMxrDokWY9oyiuyfQLYjG6CfHFAtE+jxx6XEb82uJv28BsU bhpuFl3J8psxvLLNh3rUtWSZCXPNsAfqMrb1OFuoYMRMTOcIDG3Bw5e0GInSL/Ar dm//mONqOW7dtQMnnEperRT28oe8NyJzA/UC3dyWhN33QbW7HzzgXOl3gKTLnNaT EQqoC4+//Px4U7VA3HDQLgLp3Q== -----END CERTIFICATE-----Generated at Tue Sep 22 07:07:27 2026 by rpki-client