$ rpki-client -vvvf rpki.apnic.net/member_repository/A9125AAB/0C7AC5F2A7E911F1B6AD1A4BA6EE528E/SAzQQM6QucENq4TppH0Bd7fEO8w.mft File: SAzQQM6QucENq4TppH0Bd7fEO8w.mft (raw, json) Hash identifier: GlFap4tun0UqfJ08P8Rnz+NItBrRXG3I8/X/b7lfbo4= Subject key identifier: E6:79:0D:5A:48:1F:4D:9D:E4:88:B1:A0:BA:82:BB:BF:AB:DD:E5:2A Authority key identifier: 48:0C:D0:40:CE:90:B9:C1:0D:AB:84:E9:A4:7D:01:77:B7:C4:3B:CC Certificate issuer: /CN=A9125AAB/serialNumber=480CD040CE90B9C10DAB84E9A47D0177B7C43BCC Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SAzQQM6QucENq4TppH0Bd7fEO8w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125AAB/0C7AC5F2A7E911F1B6AD1A4BA6EE528E/SAzQQM6QucENq4TppH0Bd7fEO8w.mft Manifest number: 0D Signing time: Mon 21 Sep 2026 09:09:23 +0000 Manifest this update: Mon 21 Sep 2026 09:09:22 +0000 Manifest next update: Mon 28 Sep 2026 09:09:22 +0000 Files and hashes: 1: SAzQQM6QucENq4TppH0Bd7fEO8w.crl (hash: iuw2jRFY+9CWM2/A0Xm/sVMAzzzC9jWBV39cAlLMy6I=) 2: 3CD5799CA81411F1ACF783166C11F970.roa (hash: k73Ngvm1ezkdKpCRSRtbpY3GE9dGVk7FjtJUuQJyN5Y=) 3: 371683BAA81511F1A2613F346C11F970.roa (hash: ZvobOfSHvKfkS0iZ8xobG9gfo4X0d2AGnndJbzDUNME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125AAB/0C7AC5F2A7E911F1B6AD1A4BA6EE528E/SAzQQM6QucENq4TppH0Bd7fEO8w.crl rsync://rpki.apnic.net/member_repository/A9125AAB/0C7AC5F2A7E911F1B6AD1A4BA6EE528E/SAzQQM6QucENq4TppH0Bd7fEO8w.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SAzQQM6QucENq4TppH0Bd7fEO8w.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 09:09:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125AAB, serialNumber=480CD040CE90B9C10DAB84E9A47D0177B7C43BCC Validity Not Before: Sep 21 09:09:22 2026 GMT Not After : Sep 28 09:09:22 2026 GMT Subject: CN=6ab0f443-c9bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6d:15:5b:83:de:96:38:a9:ef:13:11:06:2a: 51:3e:97:a3:68:f9:75:89:5f:7e:98:92:95:27:e5: e8:b0:53:31:d9:da:5d:3b:ad:3d:5b:ce:1b:50:78: 77:9d:5a:90:e2:8e:71:53:e6:2a:26:9c:5b:30:79: 58:40:8b:2d:ec:6d:c2:52:25:5d:2e:77:2c:e8:e0: 91:cc:bb:c8:bc:b0:12:d4:47:59:9b:59:94:1f:38: 52:df:b4:6e:e5:bf:df:a2:44:e4:a1:4d:16:07:27: 75:73:d2:59:af:45:e8:c9:3d:91:51:a0:43:af:e4: 6d:f1:0e:12:a4:a6:ed:a2:39:7b:91:f9:3f:98:29: 94:f1:d7:e5:58:f7:4d:5c:fd:70:14:19:28:d6:48: 2b:0a:74:0a:0b:bc:03:42:d2:89:4b:87:ed:a3:78: 8a:11:94:4b:b5:02:33:05:71:cd:86:2b:db:92:d1: 58:bd:e8:0c:cd:89:42:9b:ea:1f:b3:c8:73:fa:1f: 27:bf:72:c6:4a:2b:71:e9:b3:2f:dc:9f:d5:cd:b6: a4:b3:7a:ed:01:aa:a8:4b:85:5d:e7:77:aa:a0:e7: fb:5b:c1:63:42:31:d2:66:bf:63:b5:87:28:ec:eb: 9c:37:a5:50:60:e9:8a:15:cd:44:02:fa:79:d2:1b: d3:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:79:0D:5A:48:1F:4D:9D:E4:88:B1:A0:BA:82:BB:BF:AB:DD:E5:2A X509v3 Authority Key Identifier: keyid:48:0C:D0:40:CE:90:B9:C1:0D:AB:84:E9:A4:7D:01:77:B7:C4:3B:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125AAB/0C7AC5F2A7E911F1B6AD1A4BA6EE528E/SAzQQM6QucENq4TppH0Bd7fEO8w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SAzQQM6QucENq4TppH0Bd7fEO8w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125AAB/0C7AC5F2A7E911F1B6AD1A4BA6EE528E/SAzQQM6QucENq4TppH0Bd7fEO8w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:cd:35:e7:b8:14:46:86:f9:15:6d:3d:37:78:f9:e5:04:91: 23:88:ce:38:4d:56:be:57:6b:cf:a6:0f:0e:79:c5:ab:2b:6d: 84:d5:24:1e:56:a3:6b:0c:d0:94:dd:8e:df:b4:81:f3:03:ad: 4a:89:60:2f:0d:ee:b8:f3:93:17:16:bb:9c:e3:f4:a6:88:61: ae:e7:f3:19:7d:dd:7d:62:ee:e2:65:23:85:77:88:4d:10:7a: c3:d4:69:f9:23:05:b9:d1:2b:7d:8c:c7:d1:49:46:97:6c:97: 3b:a5:d6:eb:68:7f:b0:1a:2c:ea:15:5f:5a:3b:be:94:25:50: dd:4d:5e:b5:f4:4f:3b:1b:ec:fd:e8:cc:87:ad:22:b9:4b:a2: 7e:25:f8:38:93:fe:be:8b:b3:99:a7:d2:e8:cb:81:dc:fc:13: 03:08:c7:6e:8c:4a:b3:83:79:32:76:0b:00:bd:d6:42:df:4e: c9:34:83:f5:af:50:b4:80:e4:bf:88:38:4a:48:4c:31:0c:d7: 4e:8b:9e:d6:65:42:b4:f6:7c:1f:16:39:d7:7d:a1:a1:8c:81: 7e:47:d0:03:bf:16:d4:c2:99:98:ed:19:c5:ee:c6:56:88:f8: cf:12:c3:86:01:b6:b5:86:a3:82:e6:09:11:b4:cd:51:57:a9: ea:ae:53:85 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NUFBQjExMC8GA1UEBRMoNDgwQ0QwNDBDRTkwQjlDMTBEQUI4NEU5QTQ3RDAxNzdC N0M0M0JDQzAeFw0yNjA5MjEwOTA5MjJaFw0yNjA5MjgwOTA5MjJaMBgxFjAUBgNV BAMTDTZhYjBmNDQzLWM5YmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8bRVbg96WOKnvExEGKlE+l6No+XWJX36YkpUn5eiwUzHZ2l07rT1bzhtQeHed WpDijnFT5iomnFsweVhAiy3sbcJSJV0udyzo4JHMu8i8sBLUR1mbWZQfOFLftG7l v9+iROShTRYHJ3Vz0lmvRejJPZFRoEOv5G3xDhKkpu2iOXuR+T+YKZTx1+VY901c /XAUGSjWSCsKdAoLvANC0olLh+2jeIoRlEu1AjMFcc2GK9uS0Vi96AzNiUKb6h+z yHP6Hye/csZKK3Hpsy/cn9XNtqSzeu0BqqhLhV3nd6qg5/tbwWNCMdJmv2O1hyjs 65w3pVBg6YoVzUQC+nnSG9OxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU5nkNWkgf TZ3kiLGguoK7v6vd5SowHwYDVR0jBBgwFoAUSAzQQM6QucENq4TppH0Bd7fEO8ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1QUFCLzBDN0FDNUYyQTdF OTExRjFCNkFEMUE0QkE2RUU1MjhFL1NBelFRTTZRdWNFTnE0VHBwSDBCZDdmRU84 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvU0F6UVFNNlF1Y0VOcTRUcHBIMEJkN2ZFTzh3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1 QUFCLzBDN0FDNUYyQTdFOTExRjFCNkFEMUE0QkE2RUU1MjhFL1NBelFRTTZRdWNF TnE0VHBwSDBCZDdmRU84dy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBAzTXnuBRGhvkVbT03ePnlBJEjiM44TVa+V2vPpg8OecWrK22E1SQeVqNrDNCU 3Y7ftIHzA61KiWAvDe6485MXFruc4/SmiGGu5/MZfd19Yu7iZSOFd4hNEHrD1Gn5 IwW50St9jMfRSUaXbJc7pdbraH+wGizqFV9aO76UJVDdTV619E87G+z96MyHrSK5 S6J+Jfg4k/6+i7OZp9Loy4Hc/BMDCMdujEqzg3kydgsAvdZC307JNIP1r1C0gOS/ iDhKSEwxDNdOi57WZUK09nwfFjnXfaGhjIF+R9ADvxbUwpmY7RnF7sZWiPjPEsOG Aba1hqOC5gkRtM1RV6nqrlOF -----END CERTIFICATE-----Generated at Tue Sep 22 12:03:01 2026 by rpki-client