$ rpki-client -vvvf rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft File: 09Fa7ppPiuXCgRCKfS062B1Oec0.mft (raw, json) Hash identifier: 5lBhLesOk7ttPU1VcoRum26UkB59LPF+0pPreqpHtSI= Subject key identifier: 77:08:75:33:FD:41:0E:BE:92:7D:37:92:9B:B4:CB:8D:C8:02:AC:E2 Authority key identifier: D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD Certificate issuer: /CN=A91397C2/serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD Certificate serial: 0910 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft Manifest number: 08D7 Signing time: Sun 20 Sep 2026 20:28:17 +0000 Manifest this update: Sun 20 Sep 2026 20:28:17 +0000 Manifest next update: Sun 27 Sep 2026 20:28:17 +0000 Files and hashes: 1: 09Fa7ppPiuXCgRCKfS062B1Oec0.crl (hash: EGME2uLLhAil4KPml4rNfy/0HVFJjtIXKwxzgjH5eTM=) 2: 931A1664264611F1BB7525369F833773.roa (hash: O+dFRmqz0HLQWE2NlORO6GptWeFGJW4FEbE2GeFkulo=) 3: E4FA38362D2311F1A198B1F8B7833773.roa (hash: AxJKOqSnxksdZpHOPb0q92RjtR735qgr4EIIyE6SdIo=) 4: BE79CDCE16AF11F08B8C4061C4F9AE02.roa (hash: PXtviaHqQJLCMEu9tn+Fq2a2NfU37e2CJGxdPkOxh1g=) 5: 7F9EB0A28CF111F09EC8727CC4F9AE02.roa (hash: gzcB5bzyDXKQ7TWulNDMH2WNKACJo+cBlc1OpEzaIqo=) 6: 29BC840E002711EB8FA6A142C4F9AE02.roa (hash: 1hK6aCJ+7Fb1oUPOZ4u6IyJKzDYRKvTsmB4Y2o3Noe8=) 7: C3738F60A78511F0B1D3342CC4F9AE02.roa (hash: tB/DnIqV82CpIIhO+TP7hcH1C9TgViQTWGZ17z9LsKo=) 8: B7AD6F08264611F1A7E2573D9F833773.roa (hash: cAi1E/gIPdIvRZ5EylPtBXr5xfvPwzP6uzvwERgkasg=) 9: 3AA556009A8411EFB791ED77C4F9AE02.roa (hash: 6t+wjHRQ/GqT5IcSFRj+6zc7NKRi89qTochP2LMsRS8=) 10: 0C64C6B2821011F0B329B866C4F9AE02.roa (hash: UuZBWjQy/vvCDj1GH11Ut9+9Pjsx/5KL/8Qu7tKsi7U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 20:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2320 (0x910) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91397C2, serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD Validity Not Before: Sep 20 20:28:17 2026 GMT Not After : Sep 27 20:28:17 2026 GMT Subject: CN=6ab041e1-36b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:38:5e:11:54:a6:e6:19:8a:bb:af:be:5c:f1: 37:62:45:73:f8:b3:c7:5e:34:ed:21:83:17:67:60: b3:99:3a:49:e5:65:a0:1e:95:f1:8f:ab:bf:ab:02: e7:6f:55:4f:ce:26:16:60:ed:92:ce:9e:ea:a0:61: e2:d9:e0:0a:96:08:ea:6c:50:de:51:97:b5:9f:9b: d5:28:b1:c3:5c:49:17:7d:9b:35:f0:06:6a:a7:87: f3:17:a7:ae:14:d1:74:ab:de:fc:bf:9a:3f:54:13: 5b:e8:9c:2e:da:53:c7:45:33:19:ac:05:09:6d:f2: 19:e5:c2:63:1a:f7:45:40:80:64:5b:1c:8f:fc:d6: 32:6b:21:31:55:bf:57:16:09:94:00:1f:34:e8:ca: 3c:8e:75:76:89:33:5d:25:31:c6:27:fd:85:46:44: e6:89:8d:25:a7:e7:dd:7d:76:ab:3f:5e:47:6a:d0: e9:e6:0e:c4:9e:cb:94:d0:42:08:9a:03:3a:b2:cd: b4:7e:b9:57:8f:30:22:10:11:30:5d:8f:6a:a1:cf: 21:32:65:e1:6b:9d:81:79:91:60:bb:9a:a3:36:6d: 6e:e9:6d:9e:14:b6:55:f3:c6:16:ac:3b:b2:dc:7c: df:47:5e:f8:4c:f6:0d:b2:88:64:d7:e5:78:31:c0: 75:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:08:75:33:FD:41:0E:BE:92:7D:37:92:9B:B4:CB:8D:C8:02:AC:E2 X509v3 Authority Key Identifier: keyid:D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:4c:31:f8:b8:af:41:1c:ea:ab:b7:33:33:da:52:22:e1:53: 41:98:b4:e5:f7:e2:04:61:52:00:9e:ab:0c:f8:74:8f:8c:6b: 69:65:73:6b:38:53:e6:c8:8c:a2:bd:96:17:29:89:14:e4:0e: 1e:af:d3:75:e7:9c:b1:04:60:f6:f8:c0:0b:e9:f9:3a:b6:82: cb:e9:07:df:01:1d:15:27:b3:5a:69:6e:e8:7e:4d:ef:b4:11: 3c:3a:e3:c9:02:46:1a:44:a6:cc:05:66:5d:a8:c5:cf:e4:77: 35:74:94:d8:29:18:6f:83:76:c7:07:1b:f5:a1:5c:4b:fc:1f: 17:2a:9f:a7:8f:ff:de:04:b0:97:7b:4f:b3:45:42:af:01:8f: 54:3b:cc:48:ef:fe:7b:09:96:4e:44:1b:08:81:1b:e2:eb:9c: b4:05:54:b8:ef:ab:d4:0b:6d:45:5f:85:e5:1d:3d:d4:d1:53: cf:da:26:29:e8:6a:95:8e:b3:5d:d5:d4:e4:93:a9:d2:0d:97: b7:7e:35:fd:c2:8f:cb:17:7d:0d:ba:34:00:c1:33:76:02:a6: 91:0b:38:86:c8:cf:bf:7a:cd:b6:ea:04:2b:a1:d6:9b:d7:81: 8a:c2:fa:ab:9e:ae:67:cc:12:7b:bf:93:ea:84:fe:6d:8f:4f: 33:63:94:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCRAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk3QzIxMTAvBgNVBAUTKEQzRDE1QUVFOUE0RjhBRTVDMjgxMTA4QTdEMkQzQUQ4 MUQ0RTc5Q0QwHhcNMjYwOTIwMjAyODE3WhcNMjYwOTI3MjAyODE3WjAYMRYwFAYD VQQDEw02YWIwNDFlMS0zNmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzjheEVSm5hmKu6++XPE3YkVz+LPHXjTtIYMXZ2CzmTpJ5WWgHpXxj6u/qwLn b1VPziYWYO2Szp7qoGHi2eAKlgjqbFDeUZe1n5vVKLHDXEkXfZs18AZqp4fzF6eu FNF0q978v5o/VBNb6Jwu2lPHRTMZrAUJbfIZ5cJjGvdFQIBkWxyP/NYyayExVb9X FgmUAB806Mo8jnV2iTNdJTHGJ/2FRkTmiY0lp+fdfXarP15HatDp5g7EnsuU0EII mgM6ss20frlXjzAiEBEwXY9qoc8hMmXha52BeZFgu5qjNm1u6W2eFLZV88YWrDuy 3HzfR174TPYNsohk1+V4McB1MwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHcIdTP9 QQ6+kn03kpu0y43IAqziMB8GA1UdIwQYMBaAFNPRWu6aT4rlwoEQin0tOtgdTnnN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTdDMi80RTQyNkRFOEZC RUExMUVBOTQwQTFEMTlDNEY5QUUwMi8wOUZhN3BwUGl1WENnUkNLZlMwNjJCMU9l YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5RmE3cHBQaXVYQ2dSQ0tmUzA2MkIxT2VjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTdDMi80RTQyNkRFOEZCRUExMUVBOTQwQTFEMTlDNEY5QUUwMi8wOUZhN3BwUGl1 WENnUkNLZlMwNjJCMU9lYzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIEwx+LivQRzqq7czM9pSIuFTQZi05ffiBGFSAJ6rDPh0j4xraWVzazhT5siM or2WFymJFOQOHq/TdeecsQRg9vjAC+n5OraCy+kH3wEdFSezWmlu6H5N77QRPDrj yQJGGkSmzAVmXajFz+R3NXSU2CkYb4N2xwcb9aFcS/wfFyqfp4//3gSwl3tPs0VC rwGPVDvMSO/+ewmWTkQbCIEb4uuctAVUuO+r1AttRV+F5R091NFTz9omKehqlY6z XdXU5JOp0g2Xt341/cKPyxd9Dbo0AMEzdgKmkQs4hsjPv3rNtuoEK6HWm9eBisL6 q56uZ8wSe7+T6oT+bY9PM2OUwg== -----END CERTIFICATE-----Generated at Tue Sep 22 22:27:10 2026 by rpki-client