$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft File: c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft (raw, json) Hash identifier: Wvu51F7pMuVHHA2QlmPGMMjoOqcQ+G3tFvmxKbsWHIg= Subject key identifier: 9E:EE:09:CE:69:A1:BD:2E:28:A1:CC:D7:1C:43:CC:7D:62:DE:FF:0B Authority key identifier: 73:FB:B5:8F:55:71:F3:F4:C6:2A:63:FD:F5:AF:EF:9C:B7:0E:74:03 Certificate issuer: /CN=A911C3BB/serialNumber=73FBB58F5571F3F4C62A63FDF5AFEF9CB70E7403 Certificate serial: 02AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_u1j1Vx8_TGKmP99a_vnLcOdAM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft Manifest number: 02A7 Signing time: Wed 23 Sep 2026 01:23:58 +0000 Manifest this update: Wed 23 Sep 2026 01:23:58 +0000 Manifest next update: Wed 30 Sep 2026 01:23:58 +0000 Files and hashes: 1: c_u1j1Vx8_TGKmP99a_vnLcOdAM.crl (hash: +Uylh91DbtWs6396dDf3Bvg2sXaCky8C7gaDteZlhuA=) 2: CB2788CAAB4C11EDB3DC7336C4F9AE02.roa (hash: GbmFJbbelNZSeQtz3x+IHWFg+LPNIaQa4LtKPhQUg28=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.crl rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_u1j1Vx8_TGKmP99a_vnLcOdAM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 01:23:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 686 (0x2ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C3BB, serialNumber=73FBB58F5571F3F4C62A63FDF5AFEF9CB70E7403 Validity Not Before: Sep 23 01:23:58 2026 GMT Not After : Sep 30 01:23:58 2026 GMT Subject: CN=6ab32a2e-79fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ab:f0:bf:cb:8c:87:b7:0a:e2:98:fa:02:b8: 65:d9:ab:09:1c:70:76:88:1f:87:86:9b:92:18:dc: ed:4b:e7:a6:fa:18:5d:61:c7:49:55:9b:53:56:ff: 9c:a8:50:b6:33:83:3c:48:c3:f0:b6:aa:19:a7:dc: 33:a3:9c:83:bc:72:25:9b:d5:f8:ff:08:2f:96:0b: ee:ea:ee:64:dd:87:33:e6:3c:0c:01:d9:55:78:e3: 6f:eb:a8:81:70:64:02:99:ed:06:42:c2:da:e3:ba: bf:93:4e:12:cd:8d:f3:fa:53:f0:0e:5b:78:81:da: ce:c0:6d:f0:27:ad:5d:ed:d6:5e:fb:d0:66:b3:f0: f2:9d:e6:ec:56:e2:7e:d2:ab:6f:63:9d:fd:36:a5: 52:6e:f4:78:0d:a5:c6:c9:de:14:8f:95:92:e8:f3: 34:94:c1:9d:ee:15:a3:1a:01:7d:ac:cc:8c:a1:5a: 84:5c:ab:5b:2e:9e:8d:4b:47:ae:80:ff:31:93:35: e3:d0:88:57:39:2a:43:8d:a6:f1:d0:1b:90:ea:b5: d9:96:03:7a:a2:15:97:05:3f:e7:aa:64:10:e6:5e: b9:3e:bd:d6:01:40:9a:a2:f8:12:ae:74:70:6b:9d: 63:8c:2b:c6:28:86:04:52:00:61:59:21:d3:04:81: 9e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:EE:09:CE:69:A1:BD:2E:28:A1:CC:D7:1C:43:CC:7D:62:DE:FF:0B X509v3 Authority Key Identifier: keyid:73:FB:B5:8F:55:71:F3:F4:C6:2A:63:FD:F5:AF:EF:9C:B7:0E:74:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_u1j1Vx8_TGKmP99a_vnLcOdAM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:f0:d0:27:f4:05:c8:2e:3d:43:96:d2:7a:15:a4:aa:c1:6f: b2:94:11:df:6f:84:36:f4:e7:1e:67:40:6d:79:cc:39:f5:d6: e4:3b:f5:bf:17:ad:9f:68:77:43:51:18:c6:a6:6f:24:04:90: f9:99:ef:cc:62:38:a3:19:29:d6:4c:8b:1c:65:e1:c7:7b:37: 75:72:3f:12:39:b9:8b:bd:62:fe:99:1a:66:cb:7d:da:70:bf: e9:23:a8:5d:95:e2:72:fa:7a:7b:1c:cb:2c:ec:09:97:c0:19: 3a:ae:56:87:8c:2c:94:f6:04:f7:d3:89:13:6a:ba:81:ff:61: f3:0a:63:fd:a0:d8:f2:61:9f:70:42:5e:3b:a9:79:83:99:e3: e3:dc:3f:60:12:78:1e:44:73:5c:83:df:4b:fa:b3:7f:f0:6d: c0:df:32:72:48:18:0f:38:2a:71:86:92:5a:5d:3a:93:22:90: 28:93:67:7c:b0:8e:36:41:3f:23:4d:80:3f:84:a2:cf:e0:b2: 80:2c:5c:d1:5a:3e:80:fe:e1:0b:da:ba:7d:88:00:17:d2:c5: 23:6f:d4:4a:5f:45:c8:d5:71:76:e3:01:a2:80:59:61:91:54: 18:12:a7:82:26:97:17:9d:75:c9:46:5d:09:d4:c6:d7:7f:9a: 6d:80:82:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMzQkIxMTAvBgNVBAUTKDczRkJCNThGNTU3MUYzRjRDNjJBNjNGREY1QUZFRjlD QjcwRTc0MDMwHhcNMjYwOTIzMDEyMzU4WhcNMjYwOTMwMDEyMzU4WjAYMRYwFAYD VQQDEw02YWIzMmEyZS03OWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqavwv8uMh7cK4pj6Arhl2asJHHB2iB+HhpuSGNztS+em+hhdYcdJVZtTVv+c qFC2M4M8SMPwtqoZp9wzo5yDvHIlm9X4/wgvlgvu6u5k3Ycz5jwMAdlVeONv66iB cGQCme0GQsLa47q/k04SzY3z+lPwDlt4gdrOwG3wJ61d7dZe+9Bms/DynebsVuJ+ 0qtvY539NqVSbvR4DaXGyd4Uj5WS6PM0lMGd7hWjGgF9rMyMoVqEXKtbLp6NS0eu gP8xkzXj0IhXOSpDjabx0BuQ6rXZlgN6ohWXBT/nqmQQ5l65Pr3WAUCaovgSrnRw a51jjCvGKIYEUgBhWSHTBIGeQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ7uCc5p ob0uKKHM1xxDzH1i3v8LMB8GA1UdIwQYMBaAFHP7tY9VcfP0xipj/fWv75y3DnQD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzNCQi9DOTA4ODc5QUFC NDkxMUVEOUZCNDBCMzVDNEY5QUUwMi9jX3UxajFWeDhfVEdLbVA5OWFfdm5MY09k QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NfdTFqMVZ4OF9UR0ttUDk5YV92bkxjT2RBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzNCQi9DOTA4ODc5QUFCNDkxMUVEOUZCNDBCMzVDNEY5QUUwMi9jX3UxajFWeDhf VEdLbVA5OWFfdm5MY09kQU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAj/DQJ/QFyC49Q5bSehWkqsFvspQR32+ENvTnHmdAbXnMOfXW5Dv1vxetn2h3 Q1EYxqZvJASQ+ZnvzGI4oxkp1kyLHGXhx3s3dXI/Ejm5i71i/pkaZst92nC/6SOo XZXicvp6exzLLOwJl8AZOq5Wh4wslPYE99OJE2q6gf9h8wpj/aDY8mGfcEJeO6l5 g5nj49w/YBJ4HkRzXIPfS/qzf/BtwN8yckgYDzgqcYaSWl06kyKQKJNnfLCONkE/ I02AP4Siz+CygCxc0Vo+gP7hC9q6fYgAF9LFI2/USl9FyNVxduMBooBZYZFUGBKn giaXF511yUZdCdTG13+abYCCZg== -----END CERTIFICATE-----Generated at Thu Sep 24 11:09:16 2026 by rpki-client