$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft File: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft (raw, json) Hash identifier: GY2gtWJ9+XGn/df3+OAOM9OVUotrQ7dJgeO9NAHvuEk= Subject key identifier: F8:2C:53:63:7C:DA:81:B1:39:BA:C8:6D:26:48:92:8A:1C:76:27:D3 Authority key identifier: BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F Certificate issuer: /CN=A9149F3E/serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F Certificate serial: 364D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft Manifest number: 35ED Signing time: Sun 20 Sep 2026 14:21:46 +0000 Manifest this update: Sun 20 Sep 2026 14:21:45 +0000 Manifest next update: Sun 27 Sep 2026 14:21:45 +0000 Files and hashes: 1: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl (hash: slTRPEAJwikX+wZZkKFRU84pAPu3C38MPd/G9DAG20g=) 2: 666EE7025B7211EF8C1A8E4EC4F9AE02.roa (hash: 44+Ej6Drcby9zo63RA/x3RlFQ8dLgOq2yjB6zWmXKWk=) 3: 6D188172BF5C11F098B79354C4F9AE02.roa (hash: bnNYNW5woRijMAziiX+GdjxArSN9zPt7BYM1OrTOpgU=) 4: 8064BD9A531811F19CFFFF86C0833773.roa (hash: zSJ6qgvJW4YfFqxprlmttvge2oBgvp5fBh5eAOZUFpw=) 5: 66EFC4305B7211EF8C1A8E4EC4F9AE02.roa (hash: Pb/eLHkERr63KOIiKN491GilAbuAMZ4Dkw6lIR/9gwg=) 6: 6193036675CA11F1B93BCE9E67A30FBC.roa (hash: v1F73588I5TIbxHibltwszQp+2stCp9gQQEXZntRoSg=) 7: 783697D2107A11F1854A0E192E3D8C67.roa (hash: +OAeGwPI3EPeO4SeSL4WG+KcFLm2kg/q6A7zTPgsK3U=) 8: AC0031765B6E11EF997EC429C4F9AE02.roa (hash: tb4d2WGXbPvyRotaqWLKmyeyfbjygOlLQLA75/yIS44=) 9: 34013D1A69E911F18D43391FA247A888.roa (hash: B5hqzXpedqgnZtGOdEIoJ/WqxIH1YMp8ISvKWijhIAE=) 10: 0C79C6F678D811F192CB568F96A30FBC.roa (hash: kU7keJ3x9xRJ8liHmf1Z7GOvHcN9zrhffJ5NaB0tInI=) 11: 583C86380BB211ED8F05E427C4F9AE02.roa (hash: zOvHuNJfy1g+VIIU05MR/IwrnELnixR7jdUcwFZKVV0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 14:21:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13901 (0x364d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F Validity Not Before: Sep 20 14:21:45 2026 GMT Not After : Sep 27 14:21:45 2026 GMT Subject: CN=6aafebfa-9b5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c7:0d:ed:db:b6:22:c4:94:a6:7a:f9:e1:96: fe:79:88:ba:ff:ec:f3:2c:e6:75:49:a5:ba:67:24: aa:cb:48:bd:e1:be:d5:f1:02:a3:58:04:9f:74:e4: d4:2f:87:13:90:9e:b4:09:15:41:28:e5:24:7c:c6: 0d:b7:d9:63:e1:c3:84:b6:bf:bb:77:56:5a:e2:4a: 0a:57:8d:bc:50:81:94:ec:e8:d7:ee:62:61:cb:8b: 89:e4:3c:d3:d3:78:be:37:f3:21:bd:f6:a7:e2:5f: d6:67:6b:f6:70:a8:fe:b7:07:06:20:b6:4d:a2:68: 45:cc:5e:26:41:2d:ab:7b:7b:3c:10:6c:29:01:66: fe:27:3c:a8:9a:7a:32:a6:89:d3:a9:c6:63:b9:64: 20:04:88:71:4e:ea:7e:88:5a:24:6b:07:8f:0b:a0: bb:15:57:76:8d:dd:5d:63:59:7f:31:70:d8:f0:c2: 31:b7:34:ce:f3:24:4b:c2:2d:58:90:f9:45:46:85: 62:f0:a9:9a:4c:fd:67:02:75:99:fa:de:16:46:28: 1a:1c:c2:3d:8b:6e:69:e4:3d:b5:53:9a:11:82:f0: d5:ab:7f:d6:12:0e:9f:35:04:84:25:e2:a1:54:ed: 94:2a:ee:f5:d0:f8:20:4c:e1:d3:f9:90:0e:bf:dc: 89:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:2C:53:63:7C:DA:81:B1:39:BA:C8:6D:26:48:92:8A:1C:76:27:D3 X509v3 Authority Key Identifier: keyid:BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:3d:96:9e:79:19:31:b2:0c:14:11:95:82:69:16:61:10:17: 3a:be:82:53:2b:da:a4:85:08:49:04:4f:2d:e6:27:ce:ea:d6: 5b:42:2b:f5:aa:15:9c:ca:c3:7c:a2:6f:55:ef:57:71:71:a0: a2:01:d3:50:62:d5:56:db:00:62:17:23:63:75:bd:cb:53:91: 19:70:d6:21:f2:19:3d:d0:5d:5a:07:79:b9:a9:82:8a:49:72: e0:61:5c:3d:12:f0:09:3d:01:b6:85:8c:02:8d:79:f0:3a:a5: 62:5f:92:12:1d:c2:b0:01:3a:43:e9:67:a4:2d:e0:22:37:87: 47:01:6c:24:7c:22:a7:8c:12:75:3c:3c:33:11:1b:1d:42:c2: 2c:2b:4b:23:60:7d:39:58:5e:2e:fa:9c:d9:52:82:97:57:e2: 48:56:e9:2c:71:d3:5a:4a:76:c1:6c:1a:e2:29:28:e1:e4:db: 86:9e:38:85:43:41:f1:b9:b4:27:b6:41:9c:cf:ee:58:dd:6b: 70:c4:7d:77:a6:6b:54:24:44:28:f8:27:12:75:c1:24:c7:08: 38:84:76:e9:7e:47:9b:25:da:a3:36:5e:fa:60:cf:a9:ff:fb: 5d:64:a5:82:70:90:ca:c0:01:a8:25:fe:3e:71:88:8d:3e:16: ad:d1:93:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEJGMEU2RjRFRTBFMTdEREU4QzRBMjRCRjg5N0QxOUI4 N0FBNTc1OUYwHhcNMjYwOTIwMTQyMTQ1WhcNMjYwOTI3MTQyMTQ1WjAYMRYwFAYD VQQDEw02YWFmZWJmYS05YjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqccN7du2IsSUpnr54Zb+eYi6/+zzLOZ1SaW6ZySqy0i94b7V8QKjWASfdOTU L4cTkJ60CRVBKOUkfMYNt9lj4cOEtr+7d1Za4koKV428UIGU7OjX7mJhy4uJ5DzT 03i+N/Mhvfan4l/WZ2v2cKj+twcGILZNomhFzF4mQS2re3s8EGwpAWb+Jzyomnoy ponTqcZjuWQgBIhxTup+iFokawePC6C7FVd2jd1dY1l/MXDY8MIxtzTO8yRLwi1Y kPlFRoVi8KmaTP1nAnWZ+t4WRigaHMI9i25p5D21U5oRgvDVq3/WEg6fNQSEJeKh VO2UKu710PggTOHT+ZAOv9yJfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPgsU2N8 2oGxObrIbSZIkoocdifTMB8GA1UdIwQYMBaAFL8Ob07g4X3ejEokv4l9Gbh6pXWf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS85QTg1QkI1MDFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi92dzV2VHVEaGZkNk1TaVNfaVgwWnVIcWxk WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3Z3NXZUdURoZmQ2TVNpU19pWDBadUhxbGRaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUYzRS85QTg1QkI1MDFEODIxMUUyQkM2NDE3RDcwOEIwMkNEMi92dzV2VHVEaGZk Nk1TaVNfaVgwWnVIcWxkWjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAND2WnnkZMbIMFBGVgmkWYRAXOr6CUyvapIUISQRPLeYnzurWW0Ir9aoVnMrD fKJvVe9XcXGgogHTUGLVVtsAYhcjY3W9y1ORGXDWIfIZPdBdWgd5uamCikly4GFc PRLwCT0BtoWMAo158DqlYl+SEh3CsAE6Q+lnpC3gIjeHRwFsJHwip4wSdTw8MxEb HULCLCtLI2B9OVheLvqc2VKCl1fiSFbpLHHTWkp2wWwa4iko4eTbhp44hUNB8bm0 J7ZBnM/uWN1rcMR9d6ZrVCREKPgnEnXBJMcIOIR26X5HmyXaozZe+mDPqf/7XWSl gnCQysABqCX+PnGIjT4WrdGTrg== -----END CERTIFICATE-----Generated at Tue Sep 22 01:52:40 2026 by rpki-client