$ rpki-client -vvvf rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft File: ao09a_bbD13jJOQgxXOwqRhDx5Q.mft (raw, json) Hash identifier: Db6WJYzVvZYp5q2VduR3Ouwr4ClijiHxQHaBSqh01+I= Subject key identifier: 7F:D6:4D:63:7D:31:69:5A:35:74:9E:72:8C:2B:EF:E0:76:CC:D3:3E Authority key identifier: 6A:8D:3D:6B:F6:DB:0F:5D:E3:24:E4:20:C5:73:B0:A9:18:43:C7:94 Certificate issuer: /CN=A911A108/serialNumber=6A8D3D6BF6DB0F5DE324E420C573B0A91843C794 Certificate serial: 0232 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft Manifest number: 022C Signing time: Tue 29 Sep 2026 03:08:50 +0000 Manifest this update: Tue 29 Sep 2026 03:08:50 +0000 Manifest next update: Tue 06 Oct 2026 03:08:50 +0000 Files and hashes: 1: ao09a_bbD13jJOQgxXOwqRhDx5Q.crl (hash: zflPEgOmVu2BFOu7P2hgsZZ9UAXgL33afMgGmAizTxg=) 2: 2152B7B06C0411EEBC1AA814C4F9AE02.roa (hash: hDaWJ1MPMK/kTcYrElHYKR5D6BKNhIGyYI8+GpXOoQk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.crl rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Oct 2026 03:08:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 562 (0x232) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A108, serialNumber=6A8D3D6BF6DB0F5DE324E420C573B0A91843C794 Validity Not Before: Sep 29 03:08:50 2026 GMT Not After : Oct 6 03:08:50 2026 GMT Subject: CN=6abb2bc2-302b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e0:18:19:61:15:d5:bd:30:a4:46:ca:22:21: 21:7c:4f:59:b4:4e:75:7a:f2:38:1e:76:9b:30:d8: 19:99:0b:2e:be:21:71:d6:40:7d:81:da:8f:c4:a9: 7f:2f:63:60:51:1b:35:9e:4e:e9:c2:2a:ab:85:a6: 6e:fd:21:13:a2:3a:b9:39:e2:93:1e:4d:d0:b2:08: 33:8e:75:7e:4e:19:ab:c7:f8:57:76:4b:81:9c:06: cd:1c:12:48:31:46:1d:2c:21:8c:17:ad:87:6c:c5: 71:88:25:2f:36:e9:63:1c:a9:5f:0a:23:9d:f7:10: 2a:d2:b7:42:73:ee:c1:4b:9d:86:ee:f9:16:3b:bd: 4b:36:57:32:5d:94:c7:d5:38:24:b1:a4:9d:04:da: 3b:c0:d0:31:74:19:b3:3e:a2:49:78:2f:69:a5:ca: 6d:c9:0c:39:2a:75:ad:55:ba:11:43:c0:94:74:c5: 1b:6d:11:5a:8e:b5:7a:76:2c:10:12:9e:a9:52:eb: 90:1d:ae:63:27:b0:22:41:35:06:68:11:59:62:ca: 6f:cf:dd:6f:fc:8c:fc:94:82:8c:ec:1c:75:c4:17: e2:e9:81:53:cc:ad:27:28:8e:d5:84:73:2b:1b:11: 53:c7:1c:0f:82:8d:f0:4b:03:a5:a7:16:ea:88:31: 0c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:D6:4D:63:7D:31:69:5A:35:74:9E:72:8C:2B:EF:E0:76:CC:D3:3E X509v3 Authority Key Identifier: keyid:6A:8D:3D:6B:F6:DB:0F:5D:E3:24:E4:20:C5:73:B0:A9:18:43:C7:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:b2:9b:55:85:3d:94:18:1f:d6:39:ea:80:21:15:eb:06:9e: 7e:15:3a:bf:11:e6:8f:b4:5d:3a:e6:72:4f:bd:8f:86:b0:aa: 85:00:b0:6f:b0:65:90:ad:0b:06:9a:10:08:be:d9:99:df:2e: 33:8c:d4:49:57:b5:55:80:c3:a6:50:bb:79:38:51:55:db:9e: 8c:64:c8:91:92:f4:31:d8:32:58:1a:36:00:88:00:f0:5d:04: fe:ea:46:e9:0c:f9:b0:6d:64:26:99:fc:23:06:2e:5e:2d:64: 7b:c0:87:03:e7:97:ce:94:32:14:c6:0d:f1:5d:5d:88:e8:3e: 2c:87:64:c6:98:37:5f:fa:39:3e:b8:1f:eb:ac:c3:82:a8:6b: f6:50:55:97:42:0c:52:69:f7:18:63:5d:9d:b4:f4:e4:ba:4b: 4d:13:f7:ac:13:52:74:c6:3d:f1:8f:3d:5e:b1:de:bb:1d:0c: d7:1a:41:4c:a3:8d:3f:57:35:a4:c0:72:0c:f4:6a:58:a3:db: 2f:7c:f3:3c:9a:5b:f0:12:e6:5c:a0:49:1c:3b:40:59:25:d8: c6:77:9e:d2:c5:27:83:b2:22:f4:1d:5c:88:2c:dd:ab:a3:7b: 82:fa:fc:0e:b9:d3:44:b2:73:31:62:8d:59:23:71:e9:52:79: a7:fb:1d:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUExMDgxMTAvBgNVBAUTKDZBOEQzRDZCRjZEQjBGNURFMzI0RTQyMEM1NzNCMEE5 MTg0M0M3OTQwHhcNMjYwOTI5MDMwODUwWhcNMjYxMDA2MDMwODUwWjAYMRYwFAYD VQQDEw02YWJiMmJjMi0zMDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsuAYGWEV1b0wpEbKIiEhfE9ZtE51evI4HnabMNgZmQsuviFx1kB9gdqPxKl/ L2NgURs1nk7pwiqrhaZu/SETojq5OeKTHk3QsggzjnV+Thmrx/hXdkuBnAbNHBJI MUYdLCGMF62HbMVxiCUvNuljHKlfCiOd9xAq0rdCc+7BS52G7vkWO71LNlcyXZTH 1TgksaSdBNo7wNAxdBmzPqJJeC9ppcptyQw5KnWtVboRQ8CUdMUbbRFajrV6diwQ Ep6pUuuQHa5jJ7AiQTUGaBFZYspvz91v/Iz8lIKM7Bx1xBfi6YFTzK0nKI7VhHMr GxFTxxwPgo3wSwOlpxbqiDEMswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH/WTWN9 MWlaNXSecowr7+B2zNM+MB8GA1UdIwQYMBaAFGqNPWv22w9d4yTkIMVzsKkYQ8eU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTEwOC9GOTU4RkM0QTZD MDAxMUVFQjk4QjQzMEVDNEY5QUUwMi9hbzA5YV9iYkQxM2pKT1FneFhPd3FSaER4 NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FvMDlhX2JiRDEzakpPUWd4WE93cVJoRHg1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTEwOC9GOTU4RkM0QTZDMDAxMUVFQjk4QjQzMEVDNEY5QUUwMi9hbzA5YV9iYkQx M2pKT1FneFhPd3FSaER4NVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATrKbVYU9lBgf1jnqgCEV6waefhU6vxHmj7RdOuZyT72PhrCqhQCwb7BlkK0L BpoQCL7Zmd8uM4zUSVe1VYDDplC7eThRVduejGTIkZL0MdgyWBo2AIgA8F0E/upG 6Qz5sG1kJpn8IwYuXi1ke8CHA+eXzpQyFMYN8V1diOg+LIdkxpg3X/o5Prgf66zD gqhr9lBVl0IMUmn3GGNdnbT05LpLTRP3rBNSdMY98Y89XrHeux0M1xpBTKONP1c1 pMByDPRqWKPbL3zzPJpb8BLmXKBJHDtAWSXYxnee0sUng7Ii9B1ciCzdq6N7gvr8 DrnTRLJzMWKNWSNx6VJ5p/sdRA== -----END CERTIFICATE-----Generated at Tue Sep 29 11:48:31 2026 by rpki-client