$ rpki-client -vvvf rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft File: 15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft (raw, json) Hash identifier: P32SuDbmVlnNtwWxuf/UTsE0D8anHiAET/LSoXuh738= Subject key identifier: 6B:46:39:89:F2:F1:CD:20:F0:6D:D7:E3:9D:DD:C9:EA:BF:BD:BA:A6 Authority key identifier: D7:90:C2:C4:69:32:BE:9D:25:82:2D:99:12:8E:BB:CF:03:3D:45:C4 Certificate issuer: /CN=A9143F26/serialNumber=D790C2C46932BE9D25822D99128EBBCF033D45C4 Certificate serial: 0266 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft Manifest number: 025B Signing time: Mon 21 Sep 2026 02:21:57 +0000 Manifest this update: Mon 21 Sep 2026 02:21:56 +0000 Manifest next update: Mon 28 Sep 2026 02:21:56 +0000 Files and hashes: 1: 15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl (hash: 3iZVb9BBrqqEmL7ow2N9HISroZ2AgaUqtfj6/ydlvP4=) 2: 9728C64EF10811EE8F128341C4F9AE02.roa (hash: sJz5VeahHTkIZibpFE1f8H8FrejnbU9Z50GoAA1HcF0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:21:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 614 (0x266) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143F26, serialNumber=D790C2C46932BE9D25822D99128EBBCF033D45C4 Validity Not Before: Sep 21 02:21:56 2026 GMT Not After : Sep 28 02:21:56 2026 GMT Subject: CN=6ab094c4-9f97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7f:75:4d:af:27:08:8f:26:4d:e5:9e:d5:5c: 69:81:9a:f8:aa:fe:3d:8f:81:29:07:d3:b0:02:b6: 74:09:e5:97:3a:5e:3e:52:7a:aa:06:a6:69:d1:ae: 07:7c:e1:e3:57:b4:e1:96:b2:20:ca:bc:53:ff:9e: 65:3f:5e:6c:7c:4f:ec:fd:57:4f:cd:f3:03:d4:d3: 25:a6:94:25:6b:83:4f:15:f2:60:0d:72:ad:b3:30: 8a:b7:78:99:c7:47:a7:75:d6:39:d8:20:3c:02:61: e3:71:ac:85:fe:ac:8d:fe:41:ce:01:d9:56:58:e3: d2:8d:57:64:7d:cc:4f:e6:e2:49:b4:ef:eb:77:6f: 35:08:9a:3f:91:e0:01:e4:0e:88:13:41:a9:1a:8d: 1f:d5:f5:20:2a:81:0d:4f:ed:f6:08:91:10:49:39: fe:02:a8:9b:82:17:20:23:22:55:12:6e:61:7a:d4: e5:7f:48:31:60:2b:30:3f:e6:fc:dc:ae:7e:12:75: 89:b0:ac:e2:fb:e4:68:d7:e0:98:67:e6:0a:14:c5: b7:b5:98:af:44:89:c3:01:fa:18:12:77:8a:63:58: aa:5e:ee:f8:d9:e5:41:98:50:b7:50:d9:d4:30:7d: a3:59:8c:8e:38:ef:ad:c8:0d:1a:08:96:9d:af:de: f5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:46:39:89:F2:F1:CD:20:F0:6D:D7:E3:9D:DD:C9:EA:BF:BD:BA:A6 X509v3 Authority Key Identifier: keyid:D7:90:C2:C4:69:32:BE:9D:25:82:2D:99:12:8E:BB:CF:03:3D:45:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:a8:c4:3a:21:f8:e6:d1:47:ba:0d:1b:41:91:66:31:ab:01: 8d:27:01:e3:5d:d3:5b:c5:d6:fb:ae:b7:b8:ae:a0:a9:77:0c: 7d:fd:ef:f7:9a:ab:46:40:c6:9d:16:4d:c2:73:7f:97:97:62: 61:be:ce:37:8c:30:46:11:bb:22:26:51:df:ec:99:a6:3c:3f: 68:6c:0f:a8:c4:8f:58:cf:fe:63:27:7b:14:45:e5:f4:71:45: 4b:09:34:4e:0c:d5:94:dc:b3:f6:d8:20:aa:8c:62:59:87:11: 26:dc:ad:21:7a:19:c6:7f:73:78:e0:cb:83:fc:a2:ce:eb:2f: 0b:64:c2:f1:4e:18:d8:cd:c9:aa:57:8e:a9:8e:bc:c4:c8:ac: ea:6b:33:e4:95:da:c8:a0:cd:43:09:45:77:f9:70:a3:3f:31: db:91:fa:6d:02:87:32:58:5b:a2:a0:21:c1:c9:5e:59:44:55: 38:06:03:24:aa:f8:d7:98:31:c5:d8:aa:c7:b1:fe:3a:91:86: 33:d8:d3:0c:e3:c9:60:22:69:96:de:ec:2c:fc:fa:7a:a7:f5: da:d5:f0:e5:4f:4c:11:c9:9a:46:d4:f6:93:3a:d8:b1:d9:1e: 37:4b:37:4c:77:53:7f:55:96:51:5e:14:e0:3a:9c:2d:b4:ca: 59:7c:f2:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNGMjYxMTAvBgNVBAUTKEQ3OTBDMkM0NjkzMkJFOUQyNTgyMkQ5OTEyOEVCQkNG MDMzRDQ1QzQwHhcNMjYwOTIxMDIyMTU2WhcNMjYwOTI4MDIyMTU2WjAYMRYwFAYD VQQDEw02YWIwOTRjNC05Zjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx391Ta8nCI8mTeWe1VxpgZr4qv49j4EpB9OwArZ0CeWXOl4+UnqqBqZp0a4H fOHjV7ThlrIgyrxT/55lP15sfE/s/VdPzfMD1NMlppQla4NPFfJgDXKtszCKt3iZ x0enddY52CA8AmHjcayF/qyN/kHOAdlWWOPSjVdkfcxP5uJJtO/rd281CJo/keAB 5A6IE0GpGo0f1fUgKoENT+32CJEQSTn+AqibghcgIyJVEm5hetTlf0gxYCswP+b8 3K5+EnWJsKzi++Ro1+CYZ+YKFMW3tZivRInDAfoYEneKY1iqXu742eVBmFC3UNnU MH2jWYyOOO+tyA0aCJadr971SQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGtGOYny 8c0g8G3X453dyeq/vbqmMB8GA1UdIwQYMBaAFNeQwsRpMr6dJYItmRKOu88DPUXE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0YyNi83MDNBMDI1NDJE NTUxMUVFODlBQTIwMDlDNEY5QUUwMi8xNURDeEdreXZwMGxnaTJaRW82N3p3TTlS Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE1REN4R2t5dnAwbGdpMlpFbzY3endNOVJjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0YyNi83MDNBMDI1NDJENTUxMUVFODlBQTIwMDlDNEY5QUUwMi8xNURDeEdreXZw MGxnaTJaRW82N3p3TTlSY1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJKjEOiH45tFHug0bQZFmMasBjScB413TW8XW+663uK6gqXcMff3v95qrRkDG nRZNwnN/l5diYb7ON4wwRhG7IiZR3+yZpjw/aGwPqMSPWM/+Yyd7FEXl9HFFSwk0 TgzVlNyz9tggqoxiWYcRJtytIXoZxn9zeODLg/yizusvC2TC8U4Y2M3JqleOqY68 xMis6msz5JXayKDNQwlFd/lwoz8x25H6bQKHMlhboqAhwcleWURVOAYDJKr415gx xdiqx7H+OpGGM9jTDOPJYCJplt7sLPz6eqf12tXw5U9MEcmaRtT2kzrYsdkeN0s3 THdTf1WWUV4U4DqcLbTKWXzy1A== -----END CERTIFICATE-----Generated at Tue Sep 22 17:05:35 2026 by rpki-client