$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.mft File: Uy5wVMRxv_LtemoYjtNzY2XkYIo.mft (raw, json) Hash identifier: dKHbUzJxl1pIn6lGoihGJ5aZyUTQzB8oQagJEq0xYDU= Subject key identifier: 8F:B4:72:62:53:86:4C:BE:CE:75:3F:08:3B:F7:CE:A7:82:AB:C1:10 Authority key identifier: 53:2E:70:54:C4:71:BF:F2:ED:7A:6A:18:8E:D3:73:63:65:E4:60:8A Certificate issuer: /CN=A9149ACD/serialNumber=532E7054C471BFF2ED7A6A188ED3736365E4608A Certificate serial: CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uy5wVMRxv_LtemoYjtNzY2XkYIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.mft Manifest number: CA Signing time: Mon 21 Sep 2026 06:46:21 +0000 Manifest this update: Mon 21 Sep 2026 06:46:21 +0000 Manifest next update: Mon 28 Sep 2026 06:46:21 +0000 Files and hashes: 1: Uy5wVMRxv_LtemoYjtNzY2XkYIo.crl (hash: KIU91gL97UU4/rdUeXcja9Ek/JutFZuqBkw7HOryRhk=) 2: 286C872684B011F08D2ED42CC4F9AE02.roa (hash: WVobOagpEAd84RigRT5lqEkEZLi28lRSUvzP7/VjaVk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.crl rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uy5wVMRxv_LtemoYjtNzY2XkYIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:46:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 206 (0xce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149ACD, serialNumber=532E7054C471BFF2ED7A6A188ED3736365E4608A Validity Not Before: Sep 21 06:46:21 2026 GMT Not After : Sep 28 06:46:21 2026 GMT Subject: CN=6ab0d2bd-c1b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4b:ed:09:5f:0d:cb:52:90:de:f8:fb:02:ff: 8e:cb:7b:00:b6:55:c8:7b:03:a0:2e:ce:6d:92:f8: f8:aa:30:3e:e6:ac:1a:0f:51:d9:59:ff:ec:74:f5: 29:17:32:87:df:50:6c:9d:c3:fa:10:0b:30:41:f4: 1f:82:5c:eb:e7:7c:79:aa:07:ad:d0:5d:03:8f:ad: b4:1d:01:2b:29:51:0e:0a:85:b1:6e:fc:1f:88:01: 1c:eb:5e:4d:e9:d8:3a:51:24:06:70:c5:3f:24:6d: 15:d2:c8:23:63:e6:96:9b:de:bd:0f:91:d7:66:4a: a7:b0:90:f6:79:1d:c1:a2:c7:ff:75:a8:82:b3:c0: 16:c1:24:ca:71:96:c7:27:e8:5b:8b:e4:31:ed:5d: 1a:2a:8f:32:d5:d2:9c:18:4e:b1:7d:2e:e8:98:b0: a0:ea:04:b6:f7:ae:15:34:7a:02:f6:61:bb:79:57: 5a:04:38:5a:dd:30:5d:78:16:89:be:9d:f8:f5:a0: b4:25:39:63:80:38:88:8c:7e:1f:6b:49:f9:9c:21: 9a:36:4a:b8:d4:32:9e:5b:cb:d9:5b:33:23:cf:29: c2:62:12:57:bc:98:67:0f:a2:c3:25:55:ce:31:b5: 92:b0:82:44:f6:04:0e:0f:5b:d4:70:f3:b0:8f:9d: 71:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:B4:72:62:53:86:4C:BE:CE:75:3F:08:3B:F7:CE:A7:82:AB:C1:10 X509v3 Authority Key Identifier: keyid:53:2E:70:54:C4:71:BF:F2:ED:7A:6A:18:8E:D3:73:63:65:E4:60:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uy5wVMRxv_LtemoYjtNzY2XkYIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:63:78:55:d1:51:cd:21:5b:b2:60:5d:1a:b2:14:7e:51:04: 9e:22:1b:c9:da:53:87:c1:df:be:18:bb:e5:da:67:12:e9:46: a0:17:53:64:74:73:6c:6f:2a:bf:94:d1:7b:ce:0b:67:0a:6d: 9e:51:7d:20:25:0d:2c:bf:c8:e4:51:39:86:63:09:82:01:5e: 4b:41:46:a9:ed:91:19:10:19:5f:2d:64:48:40:0e:5d:1b:22: 11:8b:79:45:24:57:ab:6b:6a:31:75:bb:a2:32:7d:b0:f3:b6: f7:b3:4e:05:40:d1:5f:fa:6c:7f:7a:5d:66:69:7d:81:e9:c5: d1:4b:d5:0a:e0:12:ec:bb:59:a7:82:5a:12:f4:03:ad:30:7f: 3b:da:ca:54:7a:3b:95:7d:97:a3:ea:79:f3:de:5b:05:6d:76: 9c:d5:b1:a1:2b:69:f8:23:63:83:26:1c:c2:9e:84:52:30:c1: 95:27:9b:79:4b:ee:18:50:2b:79:f0:6d:4a:b5:a3:e3:12:01: 13:80:3b:cc:95:2e:96:48:6e:ed:cd:e2:5e:b3:08:ef:0a:ad: 72:ae:94:22:68:73:a7:e3:9a:37:db:b0:c2:eb:ac:4e:3a:17: c0:f8:0d:70:aa:4e:68:e4:64:89:f2:9a:df:60:be:5d:d0:45: 8c:71:4d:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlBQ0QxMTAvBgNVBAUTKDUzMkU3MDU0QzQ3MUJGRjJFRDdBNkExODhFRDM3MzYz NjVFNDYwOEEwHhcNMjYwOTIxMDY0NjIxWhcNMjYwOTI4MDY0NjIxWjAYMRYwFAYD VQQDEw02YWIwZDJiZC1jMWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA00vtCV8Ny1KQ3vj7Av+Oy3sAtlXIewOgLs5tkvj4qjA+5qwaD1HZWf/sdPUp FzKH31BsncP6EAswQfQfglzr53x5qget0F0Dj620HQErKVEOCoWxbvwfiAEc615N 6dg6USQGcMU/JG0V0sgjY+aWm969D5HXZkqnsJD2eR3Bosf/daiCs8AWwSTKcZbH J+hbi+Qx7V0aKo8y1dKcGE6xfS7omLCg6gS2964VNHoC9mG7eVdaBDha3TBdeBaJ vp349aC0JTljgDiIjH4fa0n5nCGaNkq41DKeW8vZWzMjzynCYhJXvJhnD6LDJVXO MbWSsIJE9gQOD1vUcPOwj51xDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI+0cmJT hky+znU/CDv3zqeCq8EQMB8GA1UdIwQYMBaAFFMucFTEcb/y7XpqGI7Tc2Nl5GCK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUFDRC9EODM1QTkwRTg0 QUYxMUYwQUQ3Q0RFMkJDNEY5QUUwMi9VeTV3Vk1SeHZfTHRlbW9ZanROelkyWGtZ SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V5NXdWTVJ4dl9MdGVtb1lqdE56WTJYa1lJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUFDRC9EODM1QTkwRTg0QUYxMUYwQUQ3Q0RFMkJDNEY5QUUwMi9VeTV3Vk1SeHZf THRlbW9ZanROelkyWGtZSW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHWN4VdFRzSFbsmBdGrIUflEEniIbydpTh8Hfvhi75dpnEulGoBdTZHRzbG8q v5TRe84LZwptnlF9ICUNLL/I5FE5hmMJggFeS0FGqe2RGRAZXy1kSEAOXRsiEYt5 RSRXq2tqMXW7ojJ9sPO297NOBUDRX/psf3pdZml9genF0UvVCuAS7LtZp4JaEvQD rTB/O9rKVHo7lX2Xo+p5895bBW12nNWxoStp+CNjgyYcwp6EUjDBlSebeUvuGFAr efBtSrWj4xIBE4A7zJUulkhu7c3iXrMI7wqtcq6UImhzp+OaN9uwwuusTjoXwPgN cKpOaORkifKa32C+XdBFjHFNGQ== -----END CERTIFICATE-----Generated at Tue Sep 22 11:10:25 2026 by rpki-client