$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft File: a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft (raw, json) Hash identifier: R7C8Qb73UGRXqKI5pARCk+m6hqDtXOKGeGd5D+5chrg= Subject key identifier: DB:84:31:70:97:E3:13:32:39:7D:DB:75:44:44:C4:68:D0:A5:18:7E Authority key identifier: 6B:57:09:32:90:D1:1F:65:CF:B9:1F:12:12:C2:8C:F7:33:F9:C2:B5 Certificate issuer: /CN=A9120AAA/serialNumber=6B57093290D11F65CFB91F1212C28CF733F9C2B5 Certificate serial: 0235 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1cJMpDRH2XPuR8SEsKM9zP5wrU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft Manifest number: 0230 Signing time: Wed 23 Sep 2026 02:29:50 +0000 Manifest this update: Wed 23 Sep 2026 02:29:50 +0000 Manifest next update: Wed 30 Sep 2026 02:29:50 +0000 Files and hashes: 1: a1cJMpDRH2XPuR8SEsKM9zP5wrU.crl (hash: ObJDgonRK9kYqkJOU3sSqTs1nX1Utqja5xIJSniTqis=) 2: 8A389AC25C4811EEBE1CF06BC4F9AE02.roa (hash: qK+khHCIuI//dPRwyz9oPvFPdzHoY4nUbkit8bRPNhA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.crl rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1cJMpDRH2XPuR8SEsKM9zP5wrU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 02:29:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 565 (0x235) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120AAA, serialNumber=6B57093290D11F65CFB91F1212C28CF733F9C2B5 Validity Not Before: Sep 23 02:29:50 2026 GMT Not After : Sep 30 02:29:50 2026 GMT Subject: CN=6ab3399e-423d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:cc:94:80:dd:45:e6:94:4c:2d:2c:5a:30:67: dc:55:2e:0d:a4:90:48:a7:f5:2a:6c:e1:55:fd:8e: 64:a6:92:8d:b7:53:06:5c:26:52:96:b4:34:46:70: ea:b4:1a:53:7b:2f:a9:03:42:c1:63:8e:86:a5:26: e7:a7:90:9a:db:1d:ac:61:03:6d:cf:e7:0b:72:be: 41:ab:e0:94:bf:4c:4a:08:9b:f5:34:97:5d:d7:93: 55:89:7f:57:8a:0c:a1:d5:c0:86:e0:23:d3:2f:1a: d1:52:66:39:0a:80:03:ef:04:c8:f1:05:be:ee:bf: fd:96:db:cd:70:6c:f0:77:e4:f0:12:a9:c3:51:c9: df:07:50:2c:8b:ae:85:87:83:06:6e:ac:b9:b5:ec: 4b:15:93:42:f9:cf:49:d1:8e:43:f0:3c:90:88:a5: 62:70:91:54:a0:e2:35:53:f4:ee:7b:f6:c2:ee:69: 1c:4c:f6:0e:06:80:aa:60:8a:3c:34:d1:d0:85:17: 48:a4:e1:36:a8:28:7e:9e:1c:ca:49:f7:e1:ee:43: 50:33:17:6c:c4:0d:4b:a3:2e:f5:d4:af:59:73:ff: 30:7c:9f:3d:dd:9a:a6:5c:7b:8d:98:2f:9c:2c:51: 8b:70:97:4a:5f:37:91:e4:46:4a:1c:8f:89:1e:99: e5:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:84:31:70:97:E3:13:32:39:7D:DB:75:44:44:C4:68:D0:A5:18:7E X509v3 Authority Key Identifier: keyid:6B:57:09:32:90:D1:1F:65:CF:B9:1F:12:12:C2:8C:F7:33:F9:C2:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1cJMpDRH2XPuR8SEsKM9zP5wrU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:5b:48:f9:3b:33:34:da:25:5d:29:c7:59:2c:af:b3:0b:bb: a2:41:02:63:5d:c3:6e:d1:f6:66:d8:02:7c:5c:02:c0:d8:e0: ed:c0:4d:b7:51:5a:f4:fd:bd:a2:d9:ad:a9:51:0a:7f:20:b3: fa:2c:72:52:44:48:e9:09:07:31:a3:93:cc:ab:92:2b:51:d2: 3b:62:5a:78:40:38:87:76:1d:c6:99:b8:7c:58:cc:ba:37:79: 13:c4:4e:93:c1:9c:9f:d5:8f:3e:7d:c4:9b:97:71:87:5c:4c: 64:d8:4d:13:62:8d:69:5d:1f:f9:df:f7:34:d9:15:b3:90:cf: 6c:da:67:3f:ff:52:7b:d1:01:be:50:cc:4e:ca:cf:9f:a0:c3: d6:86:bb:cf:8d:ee:96:db:8d:19:87:e1:86:70:c6:d3:d8:13: 81:31:63:36:8f:60:2c:7a:39:26:2c:5f:23:57:b8:84:11:a1: 38:0e:53:16:2b:ce:fe:9b:85:8c:ea:09:11:2a:1a:8c:b8:b0: 69:89:40:3e:f6:2f:92:c2:1e:5d:2e:ae:43:1a:74:99:45:d1: 93:13:09:13:7a:ba:e6:be:dc:a4:ef:00:d3:45:b6:f4:1e:8f: e5:6f:27:f3:d0:a2:15:f4:b5:fe:a4:58:fa:e3:68:b8:73:7f: bf:9a:d5:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBBQUExMTAvBgNVBAUTKDZCNTcwOTMyOTBEMTFGNjVDRkI5MUYxMjEyQzI4Q0Y3 MzNGOUMyQjUwHhcNMjYwOTIzMDIyOTUwWhcNMjYwOTMwMDIyOTUwWjAYMRYwFAYD VQQDEw02YWIzMzk5ZS00MjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqMyUgN1F5pRMLSxaMGfcVS4NpJBIp/UqbOFV/Y5kppKNt1MGXCZSlrQ0RnDq tBpTey+pA0LBY46GpSbnp5Ca2x2sYQNtz+cLcr5Bq+CUv0xKCJv1NJdd15NViX9X igyh1cCG4CPTLxrRUmY5CoAD7wTI8QW+7r/9ltvNcGzwd+TwEqnDUcnfB1Asi66F h4MGbqy5texLFZNC+c9J0Y5D8DyQiKVicJFUoOI1U/Tue/bC7mkcTPYOBoCqYIo8 NNHQhRdIpOE2qCh+nhzKSffh7kNQMxdsxA1Loy711K9Zc/8wfJ893ZqmXHuNmC+c LFGLcJdKXzeR5EZKHI+JHpnlPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNuEMXCX 4xMyOX3bdURExGjQpRh+MB8GA1UdIwQYMBaAFGtXCTKQ0R9lz7kfEhLCjPcz+cK1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEFBQS8wQ0E3N0M4MjVD NDcxMUVFQUE5RkU5NjZDNEY5QUUwMi9hMWNKTXBEUkgyWFB1UjhTRXNLTTl6UDV3 clUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ExY0pNcERSSDJYUHVSOFNFc0tNOXpQNXdyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEFBQS8wQ0E3N0M4MjVDNDcxMUVFQUE5RkU5NjZDNEY5QUUwMi9hMWNKTXBEUkgy WFB1UjhTRXNLTTl6UDV3clUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXFtI+TszNNolXSnHWSyvswu7okECY13DbtH2ZtgCfFwCwNjg7cBNt1Fa9P29 otmtqVEKfyCz+ixyUkRI6QkHMaOTzKuSK1HSO2JaeEA4h3Ydxpm4fFjMujd5E8RO k8Gcn9WPPn3Em5dxh1xMZNhNE2KNaV0f+d/3NNkVs5DPbNpnP/9Se9EBvlDMTsrP n6DD1oa7z43ultuNGYfhhnDG09gTgTFjNo9gLHo5JixfI1e4hBGhOA5TFivO/puF jOoJESoajLiwaYlAPvYvksIeXS6uQxp0mUXRkxMJE3q65r7cpO8A00W29B6P5W8n 89CiFfS1/qRY+uNouHN/v5rVRQ== -----END CERTIFICATE-----Generated at Thu Sep 24 13:09:17 2026 by rpki-client