$ rpki-client -vvvf rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft File: lML0ajLRB3XhZJuiUPaX_0esBj0.mft (raw, json) Hash identifier: cIr4NY4c4+BhfF4yuJxcO4wWyjYTgJWCeNiDpVFBc6o= Subject key identifier: AE:20:6A:0B:7D:C5:9C:3E:92:2E:A3:C4:EA:1C:35:25:4A:3C:A5:66 Authority key identifier: 94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D Certificate issuer: /CN=A9121071/serialNumber=94C2F46A32D10775E1649BA250F697FF47AC063D Certificate serial: 02F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft Manifest number: 02D7 Signing time: Sat 19 Sep 2026 01:27:54 +0000 Manifest this update: Sat 19 Sep 2026 01:27:54 +0000 Manifest next update: Sat 26 Sep 2026 01:27:54 +0000 Files and hashes: 1: lML0ajLRB3XhZJuiUPaX_0esBj0.crl (hash: uf8eLnF614/C6cRZgXOkffO7pXX767Hhy/4RgFCMF3I=) 2: M8jBNirzp-FPjI2dNrVehbsa11Q.asa (hash: ZDZzGQIxLYumQFcobn7nkzlTWAEhcjsopzajkoxdG2w=) 3: 42C28C36A80711F0A622350DC4F9AE02.roa (hash: BpCSL66Kcxa7BlGBFMkmM3b3I1bmGIXPHueAxzsNq50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.crl rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 753 (0x2f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121071, serialNumber=94C2F46A32D10775E1649BA250F697FF47AC063D Validity Not Before: Sep 19 01:27:54 2026 GMT Not After : Sep 26 01:27:54 2026 GMT Subject: CN=6aade51a-d087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:14:36:a3:55:49:84:08:b5:1f:3b:8b:16:0e: 2f:99:50:3e:92:40:03:84:91:cb:95:f0:99:a3:ef: cc:92:5e:58:4a:12:33:7f:49:fa:a2:1f:16:cd:0f: 77:2e:7f:96:95:0e:13:c2:2b:93:0d:4e:ab:3f:13: 52:70:3c:43:67:4e:a6:c5:49:60:6f:74:28:e3:50: bc:98:49:53:c8:84:2f:34:3a:3e:9f:61:8f:5f:a8: dc:1a:e6:54:6b:6f:1e:81:2c:93:07:e9:ee:2c:1c: e1:34:72:36:0a:52:ed:27:61:fe:ba:f6:fe:99:3a: 51:54:84:cd:bf:70:37:c4:62:9b:6f:d3:18:2e:16: 7b:cf:7c:6a:19:6a:34:df:c6:22:f9:da:42:3d:64: f0:39:3e:93:46:26:1b:d6:12:55:42:e7:69:e1:b9: ad:57:17:cd:db:d7:ee:37:9b:eb:39:5f:e5:44:1a: 19:12:6f:42:71:f9:81:0f:00:6c:f7:1f:d1:e5:76: 08:55:1a:80:14:8c:3f:27:5d:e1:77:42:4c:d0:9d: 7c:9c:b7:a8:cb:05:b0:3c:6e:c9:30:9c:a9:5a:c7: 2d:4f:3e:75:2c:26:b7:8b:c9:2a:a0:e1:9f:a5:18: 17:fe:0c:1a:68:a5:00:28:81:fc:24:ec:99:9c:98: c1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:20:6A:0B:7D:C5:9C:3E:92:2E:A3:C4:EA:1C:35:25:4A:3C:A5:66 X509v3 Authority Key Identifier: keyid:94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:47:74:14:ce:af:ed:10:d5:e6:ce:c9:8f:a9:fc:aa:15:1a: ca:c5:22:a9:4e:5a:df:76:39:39:b8:d9:f4:9e:bc:9d:6e:ca: a7:8d:fb:f3:91:a9:66:0d:7c:19:5b:4a:12:3a:05:21:37:57: 2d:53:ec:0c:81:64:0c:87:18:b8:78:7a:0f:4d:6c:92:cb:39: c1:24:b9:54:54:34:60:c1:c0:46:93:99:7e:b9:0e:d7:df:54: 8b:b6:d6:9b:99:16:3c:3f:36:75:a4:fe:04:72:98:d5:67:49: f0:1d:9f:ce:87:3d:65:a1:21:d4:23:ef:73:ed:c4:9e:cb:0b: f1:c0:38:fc:96:b2:84:9e:c2:19:4a:63:f0:37:47:3b:e5:b8: 78:76:64:fa:a6:ae:75:95:8c:0e:3e:7f:8d:36:69:20:e1:7a: 7a:a5:a0:fa:07:2d:a9:ec:2f:ea:13:1f:33:b0:ac:c2:9f:69: a1:0f:96:c6:ad:af:d5:5c:7f:d3:8a:24:3e:4a:29:f5:a8:bd: b8:ce:c8:87:e1:54:75:0c:6f:db:30:5c:d0:04:00:b6:1f:ca: 35:ed:eb:fd:83:2c:69:6d:5b:46:4e:70:f3:f6:60:e3:01:77: 84:e7:21:ae:d5:da:84:8f:6f:e9:f2:b6:b0:a0:2d:d6:3c:ce: 00:b0:0a:dc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAvEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjEwNzExMTAvBgNVBAUTKDk0QzJGNDZBMzJEMTA3NzVFMTY0OUJBMjUwRjY5N0ZG NDdBQzA2M0QwHhcNMjYwOTE5MDEyNzU0WhcNMjYwOTI2MDEyNzU0WjAYMRYwFAYD VQQDEw02YWFkZTUxYS1kMDg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwBQ2o1VJhAi1HzuLFg4vmVA+kkADhJHLlfCZo+/Mkl5YShIzf0n6oh8WzQ93 Ln+WlQ4TwiuTDU6rPxNScDxDZ06mxUlgb3Qo41C8mElTyIQvNDo+n2GPX6jcGuZU a28egSyTB+nuLBzhNHI2ClLtJ2H+uvb+mTpRVITNv3A3xGKbb9MYLhZ7z3xqGWo0 38Yi+dpCPWTwOT6TRiYb1hJVQudp4bmtVxfN29fuN5vrOV/lRBoZEm9CcfmBDwBs 9x/R5XYIVRqAFIw/J13hd0JM0J18nLeoywWwPG7JMJypWsctTz51LCa3i8kqoOGf pRgX/gwaaKUAKIH8JOyZnJjB3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK4gagt9 xZw+ki6jxOocNSVKPKVmMB8GA1UdIwQYMBaAFJTC9Goy0Qd14WSbolD2l/9HrAY9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTA3MS8yRjBGN0E0ODg2 QjYxMUVEQUEzQjJCMzNDNEY5QUUwMi9sTUwwYWpMUkIzWGhaSnVpVVBhWF8wZXNC ajAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xNTDBhakxSQjNYaFpKdWlVUGFYXzBlc0JqMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTA3MS8yRjBGN0E0ODg2QjYxMUVEQUEzQjJCMzNDNEY5QUUwMi9sTUwwYWpMUkIz WGhaSnVpVVBhWF8wZXNCajAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG0d0FM6v7RDV5s7Jj6n8qhUaysUiqU5a33Y5ObjZ9J68nW7Kp43785GpZg18 GVtKEjoFITdXLVPsDIFkDIcYuHh6D01skss5wSS5VFQ0YMHARpOZfrkO199Ui7bW m5kWPD82daT+BHKY1WdJ8B2fzoc9ZaEh1CPvc+3EnssL8cA4/JayhJ7CGUpj8DdH O+W4eHZk+qaudZWMDj5/jTZpIOF6eqWg+gctqewv6hMfM7Cswp9poQ+Wxq2v1Vx/ 04okPkop9ai9uM7Ih+FUdQxv2zBc0AQAth/KNe3r/YMsaW1bRk5w8/Zg4wF3hOch rtXahI9v6fK2sKAt1jzOALAK3A== -----END CERTIFICATE-----Generated at Sun Sep 20 19:24:24 2026 by rpki-client