$ rpki-client -vvvf rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.mft File: W_AAFHNK0bVlsQhtEv_KtZDMuLs.mft (raw, json) Hash identifier: s+zAmARproLGo3N/+M65noC8iA7D9PoD94OfFon/Mc4= Subject key identifier: 29:81:59:C4:B2:06:A4:B5:DC:91:25:91:22:14:07:85:31:14:C2:1F Authority key identifier: 5B:F0:00:14:73:4A:D1:B5:65:B1:08:6D:12:FF:CA:B5:90:CC:B8:BB Certificate issuer: /CN=A9131C4B/serialNumber=5BF00014734AD1B565B1086D12FFCAB590CCB8BB Certificate serial: C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_AAFHNK0bVlsQhtEv_KtZDMuLs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.mft Manifest number: BF Signing time: Mon 21 Sep 2026 06:51:38 +0000 Manifest this update: Mon 21 Sep 2026 06:51:38 +0000 Manifest next update: Mon 28 Sep 2026 06:51:38 +0000 Files and hashes: 1: W_AAFHNK0bVlsQhtEv_KtZDMuLs.crl (hash: Sks8xDzmRBGslUNoWHbwsbD+GjXDm64e0R5TfqfJbL8=) 2: D65EFE0A91F711F087341C45C4F9AE02.roa (hash: /DGfu5IZwgqK2fcVU/zNOMsbLyKflPYKY+TO1byR3vA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.crl rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_AAFHNK0bVlsQhtEv_KtZDMuLs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:51:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 194 (0xc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131C4B, serialNumber=5BF00014734AD1B565B1086D12FFCAB590CCB8BB Validity Not Before: Sep 21 06:51:38 2026 GMT Not After : Sep 28 06:51:38 2026 GMT Subject: CN=6ab0d3fa-8f8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4d:9e:8a:95:2f:5a:a9:ab:e8:24:ee:b4:72: 3f:ff:33:bd:97:de:93:b6:ee:1d:56:59:dc:65:77: 86:9e:39:b3:09:93:20:85:59:99:d8:b9:2b:94:99: 12:82:69:33:93:61:75:b4:fe:50:ea:81:7c:bd:20: 13:ef:b6:ca:d0:d4:f4:3a:88:8e:64:f4:00:d1:40: 5e:53:d3:b1:2f:99:25:87:21:ff:20:9a:03:a2:a8: 8a:65:bf:89:99:ea:a5:66:6e:e2:32:34:a2:0d:fc: 91:dc:64:e8:6a:a9:36:e4:83:36:88:66:ef:17:2f: 27:05:b4:ec:4b:1e:b1:56:2b:71:10:cf:e7:80:ed: 73:c4:11:89:68:b1:fa:75:1e:08:29:a7:32:a5:f3: 77:fb:c5:51:22:8e:62:a5:4d:8f:36:35:70:05:67: 4e:a1:74:ea:f8:e0:ec:82:f5:4b:06:56:a3:b1:30: 7c:81:9a:91:94:c1:33:d5:9e:0d:a8:b3:a1:33:1c: 22:cc:27:bf:9c:9e:bd:6b:d8:43:19:d7:aa:34:7f: a1:e5:30:80:eb:4d:f1:7b:68:0b:53:3c:a1:dd:e4: e9:b7:51:00:85:ee:80:8d:0e:c5:7d:d5:7f:16:58: b3:04:02:83:72:26:59:ea:e4:1d:8d:6a:14:ca:e2: 9c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:81:59:C4:B2:06:A4:B5:DC:91:25:91:22:14:07:85:31:14:C2:1F X509v3 Authority Key Identifier: keyid:5B:F0:00:14:73:4A:D1:B5:65:B1:08:6D:12:FF:CA:B5:90:CC:B8:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_AAFHNK0bVlsQhtEv_KtZDMuLs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:fc:60:da:be:ee:29:ac:a0:87:de:31:af:02:4a:02:31:d6: 0e:25:cb:0f:ea:41:ef:da:d7:94:e5:da:7e:cd:50:a5:89:1c: 5a:1e:18:ad:f4:c8:6d:a1:1c:a5:da:70:e5:1c:1e:f8:de:cf: a9:04:01:33:7e:9e:9e:76:8e:9f:fe:44:f9:53:73:a6:fd:b5: 35:e9:4e:f1:ca:aa:b2:84:e0:a4:d8:77:dd:20:0b:16:8e:35: 16:db:50:9a:43:2d:0f:58:37:27:91:ed:c7:49:d3:db:49:14: ba:38:b1:f6:9f:9a:21:c7:50:3b:a5:5b:97:48:0a:14:42:ee: a5:99:5a:67:6f:75:97:f8:bb:75:9a:f9:15:b9:b1:a1:85:34: 1b:7f:e1:a9:90:43:9f:73:82:e1:7b:5e:b0:1a:f2:35:43:99: 4c:0f:b2:a8:40:da:b9:59:71:52:06:20:f6:65:ee:49:5b:22: 41:80:b0:d6:94:ab:ab:ff:df:32:7b:60:2d:8d:35:de:10:51: d9:bd:a3:7f:8b:79:d6:7a:01:27:a8:7f:08:c3:f4:f6:c6:56: ff:37:2a:b2:1c:1a:b7:13:bf:61:2f:88:4b:28:6b:7d:0c:ce: 07:8f:ac:9f:e8:fd:d7:a2:e8:a0:d3:5b:eb:da:ff:6e:0b:e4: 73:ac:11:09 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFDNEIxMTAvBgNVBAUTKDVCRjAwMDE0NzM0QUQxQjU2NUIxMDg2RDEyRkZDQUI1 OTBDQ0I4QkIwHhcNMjYwOTIxMDY1MTM4WhcNMjYwOTI4MDY1MTM4WjAYMRYwFAYD VQQDEw02YWIwZDNmYS04ZjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsU2eipUvWqmr6CTutHI//zO9l96Ttu4dVlncZXeGnjmzCZMghVmZ2LkrlJkS gmkzk2F1tP5Q6oF8vSAT77bK0NT0OoiOZPQA0UBeU9OxL5klhyH/IJoDoqiKZb+J meqlZm7iMjSiDfyR3GToaqk25IM2iGbvFy8nBbTsSx6xVitxEM/ngO1zxBGJaLH6 dR4IKacypfN3+8VRIo5ipU2PNjVwBWdOoXTq+ODsgvVLBlajsTB8gZqRlMEz1Z4N qLOhMxwizCe/nJ69a9hDGdeqNH+h5TCA603xe2gLUzyh3eTpt1EAhe6AjQ7FfdV/ FlizBAKDciZZ6uQdjWoUyuKcFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCmBWcSy BqS13JElkSIUB4UxFMIfMB8GA1UdIwQYMBaAFFvwABRzStG1ZbEIbRL/yrWQzLi7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUM0Qi8xNDAwNjYyQTkx RjUxMUYwODgzNEVCMUFDNEY5QUUwMi9XX0FBRkhOSzBiVmxzUWh0RXZfS3RaRE11 THMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dfQUFGSE5LMGJWbHNRaHRFdl9LdFpETXVMcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUM0Qi8xNDAwNjYyQTkxRjUxMUYwODgzNEVCMUFDNEY5QUUwMi9XX0FBRkhOSzBi VmxzUWh0RXZfS3RaRE11THMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAi/xg2r7uKaygh94xrwJKAjHWDiXLD+pB79rXlOXafs1QpYkcWh4YrfTIbaEc pdpw5Rwe+N7PqQQBM36ennaOn/5E+VNzpv21NelO8cqqsoTgpNh33SALFo41FttQ mkMtD1g3J5Htx0nT20kUujix9p+aIcdQO6Vbl0gKFELupZlaZ291l/i7dZr5Fbmx oYU0G3/hqZBDn3OC4XtesBryNUOZTA+yqEDauVlxUgYg9mXuSVsiQYCw1pSrq//f MntgLY013hBR2b2jf4t51noBJ6h/CMP09sZW/zcqshwatxO/YS+ISyhrfQzOB4+s n+j916LooNNb69r/bgvkc6wRCQ== -----END CERTIFICATE-----Generated at Wed Sep 23 02:59:11 2026 by rpki-client