$ rpki-client -vvvf rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.mft File: D9l6GEHJl08fSQQu2j5yhCGq5f4.mft (raw, json) Hash identifier: iEOf/inCQJ7jaXb17nDPNapYUYCeB47O6pY1cQoVKnQ= Subject key identifier: B9:F3:2A:0E:CD:B6:92:3B:D5:6D:CE:C0:C4:A4:58:28:11:97:66:CB Authority key identifier: 0F:D9:7A:18:41:C9:97:4F:1F:49:04:2E:DA:3E:72:84:21:AA:E5:FE Certificate issuer: /CN=A914ED2B/serialNumber=0FD97A1841C9974F1F49042EDA3E728421AAE5FE Certificate serial: 08E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9l6GEHJl08fSQQu2j5yhCGq5f4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.mft Manifest number: 08CD Signing time: Thu 24 Sep 2026 20:41:08 +0000 Manifest this update: Thu 24 Sep 2026 20:41:07 +0000 Manifest next update: Thu 01 Oct 2026 20:41:07 +0000 Files and hashes: 1: D9l6GEHJl08fSQQu2j5yhCGq5f4.crl (hash: TAqAvp2ISqI1MgQmQ4qniU//1ps1H4ZNLJcOvHbgDrY=) 2: D25A6970F40911EA8A5C9E70C4F9AE02.roa (hash: VzNHPDyNPjJrfEn9y9Z7yeh8SM3dlt1jCHWbJvG6eYc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.crl rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9l6GEHJl08fSQQu2j5yhCGq5f4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 20:41:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2277 (0x8e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914ED2B, serialNumber=0FD97A1841C9974F1F49042EDA3E728421AAE5FE Validity Not Before: Sep 24 20:41:07 2026 GMT Not After : Oct 1 20:41:07 2026 GMT Subject: CN=6ab58ae4-cafa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:03:61:5e:89:0d:f5:43:e8:1a:47:d0:93:65: 96:45:6a:d9:09:25:7b:3a:c9:2d:b8:b8:39:65:87: db:e2:94:de:52:4c:1b:b8:e4:54:b2:c6:38:c6:e8: 8c:39:40:1d:06:8d:62:0e:d4:3a:d6:b2:3a:71:87: 2a:85:61:37:10:a7:ca:e2:f3:8f:83:28:b6:40:f3: 80:26:16:a1:99:2f:f4:7b:90:ef:0d:0a:c4:17:c7: d7:17:da:e0:fb:7c:50:99:8a:9e:1e:24:df:b1:21: 42:67:df:a6:dc:aa:99:6c:4f:e3:8e:77:90:f0:8f: 49:f6:8e:7a:a4:19:2f:ee:6e:6d:72:f6:ac:d4:00: 95:ea:75:16:19:66:c2:0b:52:f8:b9:43:3b:db:6d: ae:b9:d0:66:04:22:90:1f:f3:62:dc:ac:35:40:21: 19:7b:d0:43:eb:3a:1f:81:34:d4:f5:8e:f5:be:19: f2:63:42:9b:fa:08:8c:aa:b1:93:a5:fc:f4:7c:b2: 83:31:0d:db:77:7a:97:86:ec:4c:5d:83:4c:67:7a: bb:7f:52:dd:fb:65:3d:36:6f:2e:6f:1c:cf:84:78: 13:75:b2:3a:83:ac:f3:bb:83:c1:27:ec:05:11:4f: 9f:88:e0:43:71:0e:48:09:3a:d5:e4:19:4f:05:13: e1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F3:2A:0E:CD:B6:92:3B:D5:6D:CE:C0:C4:A4:58:28:11:97:66:CB X509v3 Authority Key Identifier: keyid:0F:D9:7A:18:41:C9:97:4F:1F:49:04:2E:DA:3E:72:84:21:AA:E5:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9l6GEHJl08fSQQu2j5yhCGq5f4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:31:d7:76:55:d3:a5:cf:38:46:72:f6:f0:42:f5:b1:64:7b: f3:c2:6a:cb:07:66:ad:b5:dd:f5:a7:df:e9:bb:d6:ae:f0:07: 8a:40:bd:c2:93:2d:91:1e:77:ee:63:6f:44:5c:d5:f2:14:11: 09:66:e8:ba:59:fd:d4:de:d2:9e:1b:16:39:9a:96:fd:19:b8: f5:70:c5:16:44:81:7a:13:f4:dc:4f:f9:0b:41:cb:15:34:23: d3:2b:18:f1:3a:98:b8:4c:8f:57:00:35:79:48:09:4e:03:30: 01:ab:15:19:2a:ba:5f:e6:4c:9e:89:dd:c2:82:58:af:14:d2: 30:d5:46:bd:fa:12:81:40:f3:7f:47:51:3e:43:71:3e:63:80: af:35:48:60:36:2b:15:89:33:b0:29:fa:63:d8:25:b4:1a:a5: 45:2d:2e:5e:23:bf:9e:ff:43:8f:80:4e:f7:59:59:09:7c:57: a5:2c:af:ff:c6:66:aa:df:b2:5b:80:20:fc:ce:21:c4:b9:13: c0:2b:e5:ba:d4:b8:47:00:ef:88:b9:cf:7f:12:a4:68:66:a3: 5d:55:e3:0e:d8:3f:a4:0f:f6:24:52:74:06:61:3e:4b:e5:58: a0:89:54:2f:9e:5d:be:0e:fc:93:95:75:ec:c2:92:0f:cc:28: 4f:ca:23:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVEMkIxMTAvBgNVBAUTKDBGRDk3QTE4NDFDOTk3NEYxRjQ5MDQyRURBM0U3Mjg0 MjFBQUU1RkUwHhcNMjYwOTI0MjA0MTA3WhcNMjYxMDAxMjA0MTA3WjAYMRYwFAYD VQQDEw02YWI1OGFlNC1jYWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzwNhXokN9UPoGkfQk2WWRWrZCSV7OsktuLg5ZYfb4pTeUkwbuORUssY4xuiM OUAdBo1iDtQ61rI6cYcqhWE3EKfK4vOPgyi2QPOAJhahmS/0e5DvDQrEF8fXF9rg +3xQmYqeHiTfsSFCZ9+m3KqZbE/jjneQ8I9J9o56pBkv7m5tcvas1ACV6nUWGWbC C1L4uUM7222uudBmBCKQH/Ni3Kw1QCEZe9BD6zofgTTU9Y71vhnyY0Kb+giMqrGT pfz0fLKDMQ3bd3qXhuxMXYNMZ3q7f1Ld+2U9Nm8ubxzPhHgTdbI6g6zzu4PBJ+wF EU+fiOBDcQ5ICTrV5BlPBRPhrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLnzKg7N tpI71W3OwMSkWCgRl2bLMB8GA1UdIwQYMBaAFA/ZehhByZdPH0kELto+coQhquX+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUQyQi84QjY3MDBBNkY0 MDgxMUVBOTBBQzU2NkZDNEY5QUUwMi9EOWw2R0VISmwwOGZTUVF1Mmo1eWhDR3E1 ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q5bDZHRUhKbDA4ZlNRUXUyajV5aENHcTVmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUQyQi84QjY3MDBBNkY0MDgxMUVBOTBBQzU2NkZDNEY5QUUwMi9EOWw2R0VISmww OGZTUVF1Mmo1eWhDR3E1ZjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkjHXdlXTpc84RnL28EL1sWR788JqywdmrbXd9aff6bvWrvAHikC9wpMtkR53 7mNvRFzV8hQRCWbouln91N7SnhsWOZqW/Rm49XDFFkSBehP03E/5C0HLFTQj0ysY 8TqYuEyPVwA1eUgJTgMwAasVGSq6X+ZMnondwoJYrxTSMNVGvfoSgUDzf0dRPkNx PmOArzVIYDYrFYkzsCn6Y9gltBqlRS0uXiO/nv9Dj4BO91lZCXxXpSyv/8Zmqt+y W4Ag/M4hxLkTwCvlutS4RwDviLnPfxKkaGajXVXjDtg/pA/2JFJ0BmE+S+VYoIlU L55dvg78k5V17MKSD8woT8ojeg== -----END CERTIFICATE-----Generated at Sat Sep 26 14:41:22 2026 by rpki-client