$ rpki-client -vvvf rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft File: SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft (raw, json) Hash identifier: qc9IbY3tpAwF7iNd2q07BSkY6jGkmZtRN4PJTnpTYIg= Subject key identifier: 53:F9:8F:52:70:22:39:56:0D:C7:03:E5:F5:27:9D:83:91:D6:3C:06 Authority key identifier: 4B:31:08:BC:57:58:84:3D:63:DF:F6:FC:64:09:7F:2B:16:44:CB:8A Certificate issuer: /CN=A9144F34/serialNumber=4B3108BC5758843D63DFF6FC64097F2B1644CB8A Certificate serial: 015A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft Manifest number: 0151 Signing time: Mon 21 Sep 2026 05:20:13 +0000 Manifest this update: Mon 21 Sep 2026 05:20:12 +0000 Manifest next update: Mon 28 Sep 2026 05:20:12 +0000 Files and hashes: 1: SzEIvFdYhD1j3_b8ZAl_KxZEy4o.crl (hash: gtFLsLb3+TPdQRKshOrHsqCdYvp4S2y7a1Urfv+KwvU=) 2: CCD3E270633311F1B8FA0C5C8D47A888.roa (hash: WNyFu7dMv+Z7bLOkmH8GMK0F61nUEfi8GoAz10fbi3Y=) 3: AA14EED2BDE911EFB07EE682C4F9AE02.roa (hash: AIZFydURKw6XqDJmBOYWV09bdGH4Y4iDWEmfI3xyTSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.crl rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 05:20:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 346 (0x15a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144F34, serialNumber=4B3108BC5758843D63DFF6FC64097F2B1644CB8A Validity Not Before: Sep 21 05:20:12 2026 GMT Not After : Sep 28 05:20:12 2026 GMT Subject: CN=6ab0be8c-019b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:41:48:82:89:61:0a:d6:cc:d2:85:49:03:90: 78:2c:a9:df:d8:a4:0b:63:1b:71:8f:91:d1:d1:e4: 22:53:82:e0:4b:bc:67:88:ff:3d:ca:3e:e6:1e:41: d8:54:e4:23:95:15:f6:f3:a2:9d:ef:2c:05:7a:b7: d8:97:e7:ec:9e:56:ee:f4:78:8c:59:03:97:c2:6d: 01:fe:55:c7:7e:67:f2:63:45:59:91:21:f4:4e:32: e4:ba:66:5f:8c:bf:66:4e:1c:47:a2:c4:ad:f4:a9: 01:38:60:b1:f8:35:83:4a:32:67:ad:58:88:55:0e: c7:44:59:fd:a5:2f:b4:23:b5:59:19:cb:d1:aa:dc: a3:9e:0b:36:5b:a9:b8:17:4f:b4:a7:d2:fb:8c:20: 0b:ac:0c:43:c9:90:09:33:29:7b:4e:96:52:fb:8b: 6b:b7:ce:60:7f:06:c3:74:d9:46:c3:7f:d7:ed:43: a1:51:14:46:84:f5:7d:2e:9f:1b:ed:1b:28:98:ce: d3:f0:cd:ac:c6:7c:4e:a0:bb:23:46:b5:4a:bc:05: 1e:47:87:94:08:0e:37:c9:2c:be:ae:b5:a2:10:f2: 37:e6:a6:1b:85:51:38:43:0e:e8:cf:43:a3:e9:e8: 67:7f:36:72:3f:59:32:38:7a:41:87:06:b8:07:65: 1f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:F9:8F:52:70:22:39:56:0D:C7:03:E5:F5:27:9D:83:91:D6:3C:06 X509v3 Authority Key Identifier: keyid:4B:31:08:BC:57:58:84:3D:63:DF:F6:FC:64:09:7F:2B:16:44:CB:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:df:e6:fe:81:09:2c:1a:01:31:38:aa:ed:36:22:e2:4a:38: 68:67:26:0a:ca:cd:82:8d:97:4d:d2:e0:5a:8f:41:91:94:e3: 1b:24:d5:8e:f9:fe:9e:bb:c0:00:e7:ef:a6:04:36:41:8a:14: 61:55:be:eb:f6:c9:a1:4b:dd:2a:89:0f:a1:57:ac:50:d3:4b: 33:4f:0a:52:3e:28:f9:06:b9:83:63:fc:4f:80:2a:42:af:15: 99:b4:57:a8:fe:55:c1:9f:87:1c:80:ea:73:4e:d5:0e:22:a8: c2:bf:5b:6f:71:aa:c1:3d:5a:0b:4e:11:ec:09:28:c5:29:06: f4:81:62:fe:fd:48:dd:e5:39:0d:0b:1d:c1:81:83:fd:a8:9a: ec:43:28:56:11:b9:45:97:71:d6:e3:26:49:4a:54:6f:3d:8b: 76:cc:d4:dd:80:fb:42:e3:79:74:b8:43:44:c5:50:3d:a6:39: d4:f2:de:72:e2:3f:a0:7b:5a:34:46:66:40:91:17:0c:c2:50: 8a:84:c2:4e:af:8a:21:4a:85:32:fe:63:64:a2:ac:fc:1d:6f: d7:ae:69:9d:1f:35:ed:d5:7e:bc:7b:36:a0:e7:d0:2b:9f:58: 2d:6e:56:15:95:ba:c1:63:28:fc:69:86:f3:0c:3d:db:2e:94: aa:aa:36:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRGMzQxMTAvBgNVBAUTKDRCMzEwOEJDNTc1ODg0M0Q2M0RGRjZGQzY0MDk3RjJC MTY0NENCOEEwHhcNMjYwOTIxMDUyMDEyWhcNMjYwOTI4MDUyMDEyWjAYMRYwFAYD VQQDEw02YWIwYmU4Yy0wMTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnEFIgolhCtbM0oVJA5B4LKnf2KQLYxtxj5HR0eQiU4LgS7xniP89yj7mHkHY VOQjlRX286Kd7ywFerfYl+fsnlbu9HiMWQOXwm0B/lXHfmfyY0VZkSH0TjLkumZf jL9mThxHosSt9KkBOGCx+DWDSjJnrViIVQ7HRFn9pS+0I7VZGcvRqtyjngs2W6m4 F0+0p9L7jCALrAxDyZAJMyl7TpZS+4trt85gfwbDdNlGw3/X7UOhURRGhPV9Lp8b 7RsomM7T8M2sxnxOoLsjRrVKvAUeR4eUCA43ySy+rrWiEPI35qYbhVE4Qw7oz0Oj 6ehnfzZyP1kyOHpBhwa4B2UfswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFP5j1Jw IjlWDccD5fUnnYOR1jwGMB8GA1UdIwQYMBaAFEsxCLxXWIQ9Y9/2/GQJfysWRMuK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEYzNC80RDIyRUVFMEJE RTkxMUVGQkZENTM4ODJDNEY5QUUwMi9TekVJdkZkWWhEMWozX2I4WkFsX0t4WkV5 NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1N6RUl2RmRZaEQxajNfYjhaQWxfS3haRXk0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEYzNC80RDIyRUVFMEJERTkxMUVGQkZENTM4ODJDNEY5QUUwMi9TekVJdkZkWWhE MWozX2I4WkFsX0t4WkV5NG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg9/m/oEJLBoBMTiq7TYi4ko4aGcmCsrNgo2XTdLgWo9BkZTjGyTVjvn+nrvA AOfvpgQ2QYoUYVW+6/bJoUvdKokPoVesUNNLM08KUj4o+Qa5g2P8T4AqQq8VmbRX qP5VwZ+HHIDqc07VDiKowr9bb3GqwT1aC04R7AkoxSkG9IFi/v1I3eU5DQsdwYGD /aia7EMoVhG5RZdx1uMmSUpUbz2LdszU3YD7QuN5dLhDRMVQPaY51PLecuI/oHta NEZmQJEXDMJQioTCTq+KIUqFMv5jZKKs/B1v165pnR817dV+vHs2oOfQK59YLW5W FZW6wWMo/GmG8ww92y6Uqqo2Dg== -----END CERTIFICATE-----Generated at Tue Sep 22 03:17:54 2026 by rpki-client