$ rpki-client -vvvf rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft File: B9hag3mLsXa8AxU9UQprljJs9WQ.mft (raw, json) Hash identifier: 2tIRpZV8iUZS05QkpvlU/4dWoZ1qiSy8D41YHQsV0K4= Subject key identifier: 94:6B:18:5D:7B:EB:7D:39:1E:A0:9E:13:C0:41:BC:1C:97:6F:92:DE Authority key identifier: 07:D8:5A:83:79:8B:B1:76:BC:03:15:3D:51:0A:6B:96:32:6C:F5:64 Certificate issuer: /CN=A9123600/serialNumber=07D85A83798BB176BC03153D510A6B96326CF564 Certificate serial: 025B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B9hag3mLsXa8AxU9UQprljJs9WQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft Manifest number: 0254 Signing time: Mon 21 Sep 2026 02:20:15 +0000 Manifest this update: Mon 21 Sep 2026 02:20:14 +0000 Manifest next update: Mon 28 Sep 2026 02:20:14 +0000 Files and hashes: 1: B9hag3mLsXa8AxU9UQprljJs9WQ.crl (hash: LufmyuHaJHX1LLDrLLWL/GZ6UZUnVEDpFSbe6dSBUSo=) 2: 51BD88882B6011EEB0127E84C4F9AE02.roa (hash: bopl7UbV+kveTfFUss6QZfXwjAk3OnM3ua/GuA1yHJQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.crl rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B9hag3mLsXa8AxU9UQprljJs9WQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:20:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 603 (0x25b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123600, serialNumber=07D85A83798BB176BC03153D510A6B96326CF564 Validity Not Before: Sep 21 02:20:14 2026 GMT Not After : Sep 28 02:20:14 2026 GMT Subject: CN=6ab0945e-7166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:16:71:98:7c:f5:13:0c:a1:17:82:e3:0b:ef: 94:bd:d7:ba:b7:0e:1d:ec:5f:b5:62:7c:1f:a1:52: 5f:4c:3f:8a:7f:e7:44:2f:21:a9:7e:5a:02:bc:96: 9a:1b:e5:44:cb:ea:2a:d0:2a:ce:81:7d:7b:13:bc: 0c:80:bd:05:73:c2:ae:9b:d0:e6:56:42:90:18:30: 2f:51:4a:a0:dd:b3:3e:70:d8:5a:7c:92:46:fd:f6: f7:f6:82:d7:93:38:18:cf:c0:43:fc:6c:73:9d:93: ca:e5:42:bd:af:63:09:96:89:14:02:49:f5:2e:6d: 83:5c:b2:98:dd:7c:7d:ed:87:8d:b4:56:0a:82:0c: 5c:8d:ee:e9:29:f8:10:bb:c1:d6:a7:ce:25:f3:a5: 17:7b:99:3d:97:e9:e1:02:4a:0d:3d:e7:45:44:fe: 45:87:c3:d0:d5:07:e7:c3:0f:af:50:3c:51:92:13: 67:02:74:a6:cb:5b:be:10:ff:c7:08:5e:02:13:2e: b2:e7:b0:51:22:fd:4a:35:b8:3d:fd:f7:3d:a7:04: 40:12:66:3c:df:19:1d:aa:e3:0f:02:93:e0:4f:2c: 61:65:5e:c9:cf:b0:41:49:c8:a6:86:61:5c:61:d0: e6:fb:2d:a6:3a:78:c0:c6:55:58:d3:87:2b:3c:eb: 6e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:6B:18:5D:7B:EB:7D:39:1E:A0:9E:13:C0:41:BC:1C:97:6F:92:DE X509v3 Authority Key Identifier: keyid:07:D8:5A:83:79:8B:B1:76:BC:03:15:3D:51:0A:6B:96:32:6C:F5:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B9hag3mLsXa8AxU9UQprljJs9WQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:c2:0a:6a:cb:71:6e:6a:dc:45:09:07:f1:80:f3:9c:d0:31: 4c:e1:a5:be:71:43:7f:fe:93:1c:60:34:ee:51:9c:df:5f:39: 91:d8:3e:85:2c:33:21:9c:2f:3e:75:12:73:45:c5:f3:34:87: be:f4:18:ec:09:0f:95:fa:ac:a1:27:1a:54:59:eb:28:cc:a3: 5f:04:da:5e:50:9e:5f:ff:52:2f:c8:8b:f3:07:91:b0:f4:ce: 1b:c4:df:42:2b:81:7a:69:56:eb:fa:25:7e:73:e8:50:32:e1: 13:ba:e1:48:57:ac:fe:87:bc:2f:fc:1f:5f:61:6b:9e:23:18: 18:38:46:0c:a6:2b:bb:02:c4:84:45:a4:7c:56:c9:8d:64:49: 72:35:85:eb:e2:92:54:12:69:fc:3f:18:1b:61:9c:74:d6:13: f2:3c:f4:46:02:33:3c:5a:38:a4:3d:83:3d:77:be:b7:4f:f8: 08:91:d2:42:ce:ea:b7:35:fe:22:9a:ce:54:13:07:a6:1f:ee: 93:1d:0c:b8:8e:24:75:ce:56:d0:77:54:7d:63:79:e6:f1:db: 5c:8f:20:34:82:6e:68:af:3b:98:f5:b2:0c:67:03:71:af:7d: b6:ef:18:cf:35:48:32:22:4c:0a:c8:35:e1:fe:7b:2c:61:11: 71:db:a6:e4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM2MDAxMTAvBgNVBAUTKDA3RDg1QTgzNzk4QkIxNzZCQzAzMTUzRDUxMEE2Qjk2 MzI2Q0Y1NjQwHhcNMjYwOTIxMDIyMDE0WhcNMjYwOTI4MDIyMDE0WjAYMRYwFAYD VQQDEw02YWIwOTQ1ZS03MTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsBZxmHz1EwyhF4LjC++Uvde6tw4d7F+1YnwfoVJfTD+Kf+dELyGpfloCvJaa G+VEy+oq0CrOgX17E7wMgL0Fc8Kum9DmVkKQGDAvUUqg3bM+cNhafJJG/fb39oLX kzgYz8BD/GxznZPK5UK9r2MJlokUAkn1Lm2DXLKY3Xx97YeNtFYKggxcje7pKfgQ u8HWp84l86UXe5k9l+nhAkoNPedFRP5Fh8PQ1Qfnww+vUDxRkhNnAnSmy1u+EP/H CF4CEy6y57BRIv1KNbg9/fc9pwRAEmY83xkdquMPApPgTyxhZV7Jz7BBScimhmFc YdDm+y2mOnjAxlVY04crPOtuXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJRrGF17 6305HqCeE8BBvByXb5LeMB8GA1UdIwQYMBaAFAfYWoN5i7F2vAMVPVEKa5YybPVk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzYwMC9BQzk2NEY1ODJC MkMxMUVFOEE1M0QzMTRDNEY5QUUwMi9COWhhZzNtTHNYYThBeFU5VVFwcmxqSnM5 V1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I5aGFnM21Mc1hhOEF4VTlVUXBybGpKczlXUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzYwMC9BQzk2NEY1ODJCMkMxMUVFOEE1M0QzMTRDNEY5QUUwMi9COWhhZzNtTHNY YThBeFU5VVFwcmxqSnM5V1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEMIKastxbmrcRQkH8YDznNAxTOGlvnFDf/6THGA07lGc3185kdg+hSwzIZwv PnUSc0XF8zSHvvQY7AkPlfqsoScaVFnrKMyjXwTaXlCeX/9SL8iL8weRsPTOG8Tf QiuBemlW6/olfnPoUDLhE7rhSFes/oe8L/wfX2FrniMYGDhGDKYruwLEhEWkfFbJ jWRJcjWF6+KSVBJp/D8YG2GcdNYT8jz0RgIzPFo4pD2DPXe+t0/4CJHSQs7qtzX+ IprOVBMHph/ukx0MuI4kdc5W0HdUfWN55vHbXI8gNIJuaK87mPWyDGcDca99tu8Y zzVIMiJMCsg14f57LGERcdum5A== -----END CERTIFICATE-----Generated at Mon Sep 21 17:35:19 2026 by rpki-client