$ rpki-client -vvvf rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.mft File: cL0aXZUSv23gumklPbvwEQPlOkM.mft (raw, json) Hash identifier: 9GkuMcdoeYLHoCD2QE1oWryZ8OQxKjQIEvQI0Tc+YoU= Subject key identifier: 78:95:89:9A:7A:27:47:7F:F5:99:B3:9B:92:BD:E6:5E:D9:B0:4F:2C Authority key identifier: 70:BD:1A:5D:95:12:BF:6D:E0:BA:69:25:3D:BB:F0:11:03:E5:3A:43 Certificate issuer: /CN=A9129797/serialNumber=70BD1A5D9512BF6DE0BA69253DBBF01103E53A43 Certificate serial: 1217 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.mft Manifest number: 11F2 Signing time: Sun 20 Sep 2026 17:07:51 +0000 Manifest this update: Sun 20 Sep 2026 17:07:51 +0000 Manifest next update: Sun 27 Sep 2026 17:07:51 +0000 Files and hashes: 1: cL0aXZUSv23gumklPbvwEQPlOkM.crl (hash: 7/r3kLXatjQRNe4QqQn99H9vpS/qm9XZI2v2jZapVQU=) 2: 6B5A80B80B8211EAAD5B6B4AC4F9AE02.roa (hash: dGkv/rtzo56BVtckHVatWs5obEe9EAieuRY8f0MtX/U=) 3: 8818EDF88F2C11EDA558DE4DC4F9AE02.roa (hash: PA2mkLdDXnNHB1sn/98JmRqRd0SL8RFnOSlQl5U7aqk=) 4: 595310E440C911EE9F1D5F41C4F9AE02.roa (hash: OaAKfIcON2XRzyks5YJKaHnYYgiadPipJMC0EisFwRU=) 5: E0A2D2B040C811EE90859140C4F9AE02.roa (hash: G1btmWmKU5YH5gEQg9B+VEbXtSEo140Wb5xK6RtnMeY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.crl rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 17:07:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4631 (0x1217) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129797, serialNumber=70BD1A5D9512BF6DE0BA69253DBBF01103E53A43 Validity Not Before: Sep 20 17:07:51 2026 GMT Not After : Sep 27 17:07:51 2026 GMT Subject: CN=6ab012e7-4d6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:34:c3:d7:bb:bb:49:bc:ce:3c:e7:7d:2c:ad: b6:39:75:92:a5:bf:96:b8:d7:e2:c8:c2:14:5e:b9: 1d:05:e2:74:dc:31:57:71:b5:6e:bf:3f:3f:cf:1e: 25:f1:68:bb:04:96:89:d6:bb:06:b5:3a:6f:1f:d8: fd:b0:97:55:cf:2d:45:7f:1f:8e:d8:4d:f5:11:ec: 8d:d4:59:32:ac:aa:53:ef:df:7f:03:0f:d2:21:a3: 1d:29:b4:04:39:2d:00:49:8d:05:c9:a9:17:2d:b9: 36:9b:c6:48:64:be:da:49:8e:2c:56:52:24:a2:f6: 6c:5c:96:04:ce:b1:b3:21:8b:45:f2:83:05:f6:96: e2:6a:a2:c7:23:ab:92:f8:a9:06:13:ae:2c:cf:20: 3b:5e:f3:08:b6:37:1c:b8:f3:13:14:f1:a7:27:58: b7:49:29:7a:d2:54:b1:75:61:70:91:91:50:b2:71: e2:70:6f:53:09:6f:f5:34:49:eb:af:44:e7:ce:d6: 72:28:a8:57:14:28:fb:0c:7f:3c:fc:8f:f9:e4:0c: 70:b7:ea:8c:74:ce:f2:8d:62:9c:88:cc:c5:8b:0c: cb:17:53:60:4a:78:7d:0c:ce:37:34:0b:b6:8f:91: cc:e6:ea:25:fa:3c:d1:4c:14:5f:ce:7a:17:42:98: 0a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:95:89:9A:7A:27:47:7F:F5:99:B3:9B:92:BD:E6:5E:D9:B0:4F:2C X509v3 Authority Key Identifier: keyid:70:BD:1A:5D:95:12:BF:6D:E0:BA:69:25:3D:BB:F0:11:03:E5:3A:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:ec:0c:99:31:44:6d:59:02:7e:0d:db:d6:07:94:b0:eb:fe: f7:3f:db:5f:08:4c:43:70:ed:fc:18:93:08:6f:de:bf:65:20: 11:6d:29:38:00:50:6a:ee:9d:51:2c:a5:55:38:66:1f:df:7f: ba:21:39:15:83:5d:86:6d:3d:9c:04:79:5c:c4:03:5e:6c:f7: f4:f0:c7:e3:5d:8b:71:9f:5b:51:39:9b:14:3f:c4:87:b3:e5: 5e:d8:f0:98:87:74:02:9c:31:97:f3:63:f6:e1:ac:47:42:21: 6c:4f:bb:f5:78:90:6c:18:8e:75:80:cb:56:e2:88:fc:03:35: dc:41:6a:72:9d:87:7e:93:12:61:dd:0c:10:85:4e:fc:26:d9: 8c:da:54:92:4f:00:9c:51:83:b6:8c:a9:26:f3:47:6e:9b:85: 4d:7e:ab:40:a3:9e:e2:69:e3:c8:24:e8:7b:11:9a:7a:55:73: e4:18:93:58:4b:55:1c:22:ca:74:9d:09:b3:09:8a:78:43:cd: 38:37:e0:47:17:46:20:0f:72:da:4a:ab:83:d1:9e:3a:0f:2f: ef:5d:e7:48:6d:ef:d0:d4:31:99:3f:98:67:27:64:c1:33:00: 7d:e0:2c:5b:fa:e7:36:d7:57:79:19:c7:22:28:6b:e6:16:cf: 55:cb:eb:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk3OTcxMTAvBgNVBAUTKDcwQkQxQTVEOTUxMkJGNkRFMEJBNjkyNTNEQkJGMDEx MDNFNTNBNDMwHhcNMjYwOTIwMTcwNzUxWhcNMjYwOTI3MTcwNzUxWjAYMRYwFAYD VQQDEw02YWIwMTJlNy00ZDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtTTD17u7SbzOPOd9LK22OXWSpb+WuNfiyMIUXrkdBeJ03DFXcbVuvz8/zx4l 8Wi7BJaJ1rsGtTpvH9j9sJdVzy1Ffx+O2E31EeyN1FkyrKpT799/Aw/SIaMdKbQE OS0ASY0FyakXLbk2m8ZIZL7aSY4sVlIkovZsXJYEzrGzIYtF8oMF9pbiaqLHI6uS +KkGE64szyA7XvMItjccuPMTFPGnJ1i3SSl60lSxdWFwkZFQsnHicG9TCW/1NEnr r0TnztZyKKhXFCj7DH88/I/55Axwt+qMdM7yjWKciMzFiwzLF1NgSnh9DM43NAu2 j5HM5uol+jzRTBRfznoXQpgKBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHiViZp6 J0d/9Zmzm5K95l7ZsE8sMB8GA1UdIwQYMBaAFHC9Gl2VEr9t4LppJT278BED5TpD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTc5Ny8wOUYyRDk5NDFB MjIxMUU5QkMwNkQzMEFDNEY5QUUwMi9jTDBhWFpVU3YyM2d1bWtsUGJ2d0VRUGxP a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NMMGFYWlVTdjIzZ3Vta2xQYnZ3RVFQbE9rTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTc5Ny8wOUYyRDk5NDFBMjIxMUU5QkMwNkQzMEFDNEY5QUUwMi9jTDBhWFpVU3Yy M2d1bWtsUGJ2d0VRUGxPa00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcewMmTFEbVkCfg3b1geUsOv+9z/bXwhMQ3Dt/BiTCG/ev2UgEW0pOABQau6d USylVThmH99/uiE5FYNdhm09nAR5XMQDXmz39PDH412LcZ9bUTmbFD/Eh7PlXtjw mId0Apwxl/Nj9uGsR0IhbE+79XiQbBiOdYDLVuKI/AM13EFqcp2HfpMSYd0MEIVO /CbZjNpUkk8AnFGDtoypJvNHbpuFTX6rQKOe4mnjyCToexGaelVz5BiTWEtVHCLK dJ0JswmKeEPNODfgRxdGIA9y2kqrg9GeOg8v713nSG3v0NQxmT+YZydkwTMAfeAs W/rnNtdXeRnHIihr5hbPVcvrhQ== -----END CERTIFICATE-----Generated at Tue Sep 22 05:07:07 2026 by rpki-client