$ rpki-client -vvvf rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft File: -S21ujUS5Gp82_tLNRS9b_hcjz0.mft (raw, json) Hash identifier: d5oFShYpH9+LsMrKDdZgzID0rMgeD+AwHos3QVbv+D4= Subject key identifier: C7:C7:74:24:5E:99:9B:C2:48:1B:C0:8F:C1:8F:B2:D2:32:BA:A9:B9 Authority key identifier: F9:2D:B5:BA:35:12:E4:6A:7C:DB:FB:4B:35:14:BD:6F:F8:5C:8F:3D Certificate issuer: /CN=A9131A30/serialNumber=F92DB5BA3512E46A7CDBFB4B3514BD6FF85C8F3D Certificate serial: 01F3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-S21ujUS5Gp82_tLNRS9b_hcjz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft Manifest number: 01EB Signing time: Mon 21 Sep 2026 03:27:17 +0000 Manifest this update: Mon 21 Sep 2026 03:27:16 +0000 Manifest next update: Mon 28 Sep 2026 03:27:16 +0000 Files and hashes: 1: -S21ujUS5Gp82_tLNRS9b_hcjz0.crl (hash: 6mj4hLuQrQrUP/Ia8KL3vDmRpjyi6mLtxa4q2CsvpaI=) 2: C3CCADD2CAF211EEBA58E81EC4F9AE02.roa (hash: hyP5hyWhFWPlreh+e6A6bCDJj0Abi1rdTGbknl1HOPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.crl rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-S21ujUS5Gp82_tLNRS9b_hcjz0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 03:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 499 (0x1f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131A30, serialNumber=F92DB5BA3512E46A7CDBFB4B3514BD6FF85C8F3D Validity Not Before: Sep 21 03:27:16 2026 GMT Not After : Sep 28 03:27:16 2026 GMT Subject: CN=6ab0a415-d310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e1:82:bf:84:13:22:c2:d3:56:b6:42:83:d5: b0:f5:69:7e:e3:df:92:a6:41:62:00:48:1e:7c:da: d1:d3:e2:b2:f5:92:09:75:0b:dd:2d:0d:50:6d:90: a1:6c:2b:6a:b0:ef:b2:8d:83:f3:ba:a8:62:11:af: fc:f5:c3:35:3d:10:5f:03:50:6d:29:3d:bf:7a:fe: 60:69:83:eb:2b:a6:5c:4a:15:31:88:6a:f2:cb:42: b0:e6:45:e9:6b:bc:b4:15:bc:95:5e:80:da:4b:07: a3:d8:78:eb:0b:7f:3c:25:42:07:7b:f5:35:7e:7a: 15:bc:4e:0b:f8:f9:e2:84:00:aa:60:53:3d:98:1b: 81:5d:2e:be:12:13:2f:82:b2:05:27:d6:b8:a3:5e: ca:95:67:7f:59:31:98:60:cc:8b:d8:c3:fd:68:69: 58:4d:4c:28:a0:48:ae:5e:f7:a8:18:76:e0:14:a2: 22:73:49:45:b7:f2:76:e8:24:7e:76:52:5e:d7:df: 26:71:bc:4a:e6:dd:2b:32:a5:96:40:43:8d:b0:f3: 92:f1:0e:b9:b6:24:4d:57:1f:02:22:f9:6d:42:b9: cb:41:d0:91:a0:ef:9d:34:e8:2b:5d:45:09:48:41: 2c:77:10:29:50:ec:27:b7:81:35:62:3c:58:85:9a: 0a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:C7:74:24:5E:99:9B:C2:48:1B:C0:8F:C1:8F:B2:D2:32:BA:A9:B9 X509v3 Authority Key Identifier: keyid:F9:2D:B5:BA:35:12:E4:6A:7C:DB:FB:4B:35:14:BD:6F:F8:5C:8F:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-S21ujUS5Gp82_tLNRS9b_hcjz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:77:c5:10:38:d4:80:ac:3c:3c:4b:bc:25:1f:2d:64:27:06: d0:21:c9:55:e1:a8:f8:9e:a3:19:a3:ff:12:5a:25:8e:17:2e: 7c:7b:ae:0c:cd:00:26:1b:c6:e9:84:7a:b3:3b:e5:6e:af:86: bd:08:f5:db:c1:89:ab:69:87:fe:cf:4c:99:dc:2a:57:4b:9c: ac:37:8e:f4:07:9b:f6:82:b3:63:29:b2:f1:b4:eb:71:ac:a1: 9c:d4:f2:d4:c9:14:98:17:4d:06:53:ef:47:99:c4:90:60:58: 0a:cb:80:3f:16:a8:98:f8:59:11:13:ec:0b:c9:04:3d:85:b4: 21:1c:1c:92:a8:dc:a6:85:62:4c:d1:81:27:ed:39:1b:ea:6a: 93:da:38:a6:55:1f:b4:2d:c9:19:45:74:ed:91:98:9d:08:3a: 81:69:62:e8:0a:5e:ac:16:24:36:2d:af:a8:74:22:dd:ea:e4: b2:6b:69:ff:42:68:34:3a:91:22:54:89:b2:70:3a:07:5e:14: 44:0d:03:a3:18:8d:f3:4f:5c:de:da:33:05:80:64:e4:fd:57: 9a:24:cd:56:ec:da:e4:75:2e:8c:97:d2:78:c6:07:bb:dc:34: cf:d3:67:47:08:3b:75:f8:e3:4e:fd:24:96:e3:1c:3f:6d:0c: f3:d7:4f:e5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFBMzAxMTAvBgNVBAUTKEY5MkRCNUJBMzUxMkU0NkE3Q0RCRkI0QjM1MTRCRDZG Rjg1QzhGM0QwHhcNMjYwOTIxMDMyNzE2WhcNMjYwOTI4MDMyNzE2WjAYMRYwFAYD VQQDEw02YWIwYTQxNS1kMzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAueGCv4QTIsLTVrZCg9Ww9Wl+49+SpkFiAEgefNrR0+Ky9ZIJdQvdLQ1QbZCh bCtqsO+yjYPzuqhiEa/89cM1PRBfA1BtKT2/ev5gaYPrK6ZcShUxiGryy0Kw5kXp a7y0FbyVXoDaSwej2HjrC388JUIHe/U1fnoVvE4L+PnihACqYFM9mBuBXS6+EhMv grIFJ9a4o17KlWd/WTGYYMyL2MP9aGlYTUwooEiuXveoGHbgFKIic0lFt/J26CR+ dlJe198mcbxK5t0rMqWWQEONsPOS8Q65tiRNVx8CIvltQrnLQdCRoO+dNOgrXUUJ SEEsdxApUOwnt4E1YjxYhZoKXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMfHdCRe mZvCSBvAj8GPstIyuqm5MB8GA1UdIwQYMBaAFPkttbo1EuRqfNv7SzUUvW/4XI89 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUEzMC80QjdBMTg2QUNB RjIxMUVFQUNEQjJFMUVDNEY5QUUwMi8tUzIxdWpVUzVHcDgyX3RMTlJTOWJfaGNq ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1TMjF1alVTNUdwODJfdExOUlM5Yl9oY2p6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUEzMC80QjdBMTg2QUNBRjIxMUVFQUNEQjJFMUVDNEY5QUUwMi8tUzIxdWpVUzVH cDgyX3RMTlJTOWJfaGNqejAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL3fFEDjUgKw8PEu8JR8tZCcG0CHJVeGo+J6jGaP/EloljhcufHuuDM0AJhvG 6YR6szvlbq+GvQj128GJq2mH/s9MmdwqV0ucrDeO9Aeb9oKzYymy8bTrcayhnNTy 1MkUmBdNBlPvR5nEkGBYCsuAPxaomPhZERPsC8kEPYW0IRwckqjcpoViTNGBJ+05 G+pqk9o4plUftC3JGUV07ZGYnQg6gWli6AperBYkNi2vqHQi3erksmtp/0JoNDqR IlSJsnA6B14URA0DoxiN809c3tozBYBk5P1XmiTNVuza5HUujJfSeMYHu9w0z9Nn Rwg7dfjjTv0kluMcP20M89dP5Q== -----END CERTIFICATE-----Generated at Tue Sep 22 08:34:11 2026 by rpki-client