$ rpki-client -vvf rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft File: ao09a_bbD13jJOQgxXOwqRhDx5Q.mft (raw, json) Hash identifier: zJnGRCfKZUeEjh96O3XLsHPsVvr79RMwX4HpViTr8uI= Subject key identifier: 72:1E:5B:F1:A9:9F:EF:B4:3E:64:8A:52:72:DC:AC:22:F8:D1:A0:32 Authority key identifier: 6A:8D:3D:6B:F6:DB:0F:5D:E3:24:E4:20:C5:73:B0:A9:18:43:C7:94 Certificate issuer: /CN=A911A108/serialNumber=6A8D3D6BF6DB0F5DE324E420C573B0A91843C794 Certificate serial: 0211 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft Manifest number: 020B Signing time: Mon 27 Jul 2026 04:36:44 +0000 Manifest this update: Mon 27 Jul 2026 04:36:44 +0000 Manifest next update: Mon 03 Aug 2026 04:36:44 +0000 Files and hashes: 1: ao09a_bbD13jJOQgxXOwqRhDx5Q.crl (hash: cKNzv9SNA8Ez8ZNW9yRSM8eF8ENlh91M2jPuao1JGrA=) 2: 2152B7B06C0411EEBC1AA814C4F9AE02.roa (hash: hDaWJ1MPMK/kTcYrElHYKR5D6BKNhIGyYI8+GpXOoQk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.crl rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 04:36:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 529 (0x211) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A108, serialNumber=6A8D3D6BF6DB0F5DE324E420C573B0A91843C794 Validity Not Before: Jul 27 04:36:44 2026 GMT Not After : Aug 3 04:36:44 2026 GMT Subject: CN=6a66e05c-322e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c9:01:c0:38:fb:79:4e:9f:d5:0f:32:2b:6d: 22:e7:39:0e:e9:6e:8c:db:d9:c6:25:25:58:e7:cc: a3:ca:b3:d3:e9:09:dd:92:e5:5c:98:de:16:d2:ac: 36:f2:90:d2:0e:b0:53:ef:f7:36:51:eb:26:fb:1f: 11:8c:49:c5:d1:86:4a:62:53:82:eb:67:3d:e0:de: 90:4e:8e:c4:2a:4f:bb:2e:df:43:8a:cd:48:70:a0: c1:ee:81:60:29:1a:6e:c2:e0:db:e4:35:56:70:75: 5e:95:81:0f:a3:cd:b8:69:92:39:3e:5b:2a:85:2e: c0:fc:db:d6:1f:dd:a6:5f:80:c9:8b:d8:f5:8f:0c: 0c:37:49:06:c4:13:f0:b4:64:db:d2:d5:35:b4:ba: f7:f7:c1:75:a4:94:5f:6e:0e:33:75:7a:fb:a0:90: 68:04:12:14:91:f2:42:66:27:d6:1f:c2:54:3a:02: c6:09:7f:db:e3:d6:3c:e5:dd:27:c7:30:15:73:57: c5:66:48:13:da:45:d3:d6:4c:28:12:49:af:cf:c5: 76:5f:51:22:99:19:d8:25:d8:30:30:bf:d3:cd:cb: d5:a3:91:32:a3:c4:74:1b:ae:c5:73:eb:f9:4e:80: 7b:7a:69:7f:f3:8a:3f:d5:0b:b0:e5:e2:c1:71:aa: 6f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:1E:5B:F1:A9:9F:EF:B4:3E:64:8A:52:72:DC:AC:22:F8:D1:A0:32 X509v3 Authority Key Identifier: keyid:6A:8D:3D:6B:F6:DB:0F:5D:E3:24:E4:20:C5:73:B0:A9:18:43:C7:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:7b:0e:a4:fa:db:15:16:47:0c:d7:a9:e2:c2:3d:0f:0a:2f: f5:2c:73:0d:cf:ba:ff:73:ed:e0:f1:a8:ab:61:1e:12:b6:f3: c7:a2:e8:a7:87:9c:9e:4c:ba:4e:52:87:e1:e7:37:5e:14:96: 23:f7:fe:06:e0:17:e4:5d:00:db:f8:a2:e0:f1:21:31:23:c5: 70:93:ee:86:60:9e:18:db:f4:70:e6:e5:60:91:97:65:95:46: 31:62:d0:e9:8d:36:4a:48:32:5f:2f:4c:4b:71:70:19:39:1d: 6e:c5:5f:13:bd:a8:c0:11:5d:9b:e4:6b:2e:1b:e7:4a:5e:29: ea:d9:77:8e:d6:37:be:41:55:14:c3:ba:bd:98:ab:89:82:bb: 55:1c:8a:3b:44:09:c6:1b:2a:eb:ee:1e:b8:81:4c:0f:30:fd: 25:ef:cb:a6:32:6f:cf:74:85:58:49:08:4f:7f:8f:f8:ec:8e: f7:ff:8e:00:b6:e9:74:bb:2e:3e:c3:54:d2:7e:dc:74:ff:ee: e3:c5:4d:cb:7c:21:f2:0b:4a:56:cc:8f:28:13:60:d4:52:5a: d8:30:ec:12:75:2f:3b:31:0e:6f:5a:d0:43:94:4d:b8:3d:dc: 8e:02:3f:7b:67:f9:ba:18:9d:bd:25:fd:81:c2:74:28:04:b2: ae:4e:c1:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUExMDgxMTAvBgNVBAUTKDZBOEQzRDZCRjZEQjBGNURFMzI0RTQyMEM1NzNCMEE5 MTg0M0M3OTQwHhcNMjYwNzI3MDQzNjQ0WhcNMjYwODAzMDQzNjQ0WjAYMRYwFAYD VQQDEw02YTY2ZTA1Yy0zMjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2MkBwDj7eU6f1Q8yK20i5zkO6W6M29nGJSVY58yjyrPT6QndkuVcmN4W0qw2 8pDSDrBT7/c2Uesm+x8RjEnF0YZKYlOC62c94N6QTo7EKk+7Lt9Dis1IcKDB7oFg KRpuwuDb5DVWcHVelYEPo824aZI5PlsqhS7A/NvWH92mX4DJi9j1jwwMN0kGxBPw tGTb0tU1tLr398F1pJRfbg4zdXr7oJBoBBIUkfJCZifWH8JUOgLGCX/b49Y85d0n xzAVc1fFZkgT2kXT1kwoEkmvz8V2X1EimRnYJdgwML/TzcvVo5Eyo8R0G67Fc+v5 ToB7eml/84o/1Quw5eLBcapvLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHIeW/Gp n++0PmSKUnLcrCL40aAyMB8GA1UdIwQYMBaAFGqNPWv22w9d4yTkIMVzsKkYQ8eU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTEwOC9GOTU4RkM0QTZD MDAxMUVFQjk4QjQzMEVDNEY5QUUwMi9hbzA5YV9iYkQxM2pKT1FneFhPd3FSaER4 NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FvMDlhX2JiRDEzakpPUWd4WE93cVJoRHg1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTEwOC9GOTU4RkM0QTZDMDAxMUVFQjk4QjQzMEVDNEY5QUUwMi9hbzA5YV9iYkQx M2pKT1FneFhPd3FSaER4NVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHHsOpPrbFRZHDNep4sI9Dwov9SxzDc+6/3Pt4PGoq2EeErbzx6Lop4ecnky6 TlKH4ec3XhSWI/f+BuAX5F0A2/ii4PEhMSPFcJPuhmCeGNv0cOblYJGXZZVGMWLQ 6Y02SkgyXy9MS3FwGTkdbsVfE72owBFdm+RrLhvnSl4p6tl3jtY3vkFVFMO6vZir iYK7VRyKO0QJxhsq6+4euIFMDzD9Je/LpjJvz3SFWEkIT3+P+OyO9/+OALbpdLsu PsNU0n7cdP/u48VNy3wh8gtKVsyPKBNg1FJa2DDsEnUvOzEOb1rQQ5RNuD3cjgI/ e2f5uhidvSX9gcJ0KASyrk7B2w== -----END CERTIFICATE-----Generated at Tue Jul 28 22:24:40 2026 by rpki-client