$ rpki-client -vvvf rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft File: aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft (raw, json) Hash identifier: eJOGBTPMror5NNT/a8p4uZiqtWeQ+/r2LiOAmEcihV0= Subject key identifier: AF:F0:AF:DF:3F:87:05:66:FB:B1:2D:E5:4F:91:F4:CB:80:9B:37:2A Authority key identifier: 69:9F:51:A9:D9:E1:45:6D:16:01:BE:83:D8:B9:4A:D5:9A:43:82:33 Certificate issuer: /CN=A914FED3/serialNumber=699F51A9D9E1456D1601BE83D8B94AD59A438233 Certificate serial: 0F00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft Manifest number: 0EE2 Signing time: Sun 20 Sep 2026 17:38:22 +0000 Manifest this update: Sun 20 Sep 2026 17:38:22 +0000 Manifest next update: Sun 27 Sep 2026 17:38:22 +0000 Files and hashes: 1: aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.crl (hash: 8k/gejEWZad0Iw1lIee+WfocfB9HmFQBGdmX4wI4KhA=) 2: 6E8576BC0F1911F0A007DF16C4F9AE02.roa (hash: uIYeCaBuRDEfSa74mfNr2LSTxBd9PK1A2yHp2J/i9kM=) 3: F9BDC484F7B011EB84345029C4F9AE02.roa (hash: Gz9eqekiWDiK9v3eDHt3H2hLACZfxZzIPs/2qncX1gM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.crl rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 17:38:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3840 (0xf00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FED3, serialNumber=699F51A9D9E1456D1601BE83D8B94AD59A438233 Validity Not Before: Sep 20 17:38:22 2026 GMT Not After : Sep 27 17:38:22 2026 GMT Subject: CN=6ab01a0e-b9c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0b:a5:07:b8:7f:1d:15:db:ac:b7:57:72:c7: f7:9e:ff:f0:02:98:10:da:33:a5:60:11:96:a5:d1: 42:6a:8d:e9:c1:52:f2:01:d6:59:1a:9d:1e:e2:e1: 2d:31:79:4c:e0:fb:d5:6f:b7:1c:ff:b8:d1:25:af: 05:c9:f5:de:10:08:73:ca:b6:f5:d4:c4:a9:74:c6: 9e:36:c6:34:90:d3:bf:c3:cb:bd:53:87:ac:9a:01: ac:08:4f:f1:9a:fc:75:b9:4b:26:96:4e:4e:e7:b5: 35:45:ab:d2:64:32:a4:fb:a0:e8:0d:65:c9:ec:d9: 4b:a1:3c:c2:08:cc:96:f3:87:93:60:e7:6a:f0:a4: e8:54:c2:d4:2c:c2:69:99:bc:fd:d7:0c:63:54:bb: b6:4c:08:bf:7f:09:aa:a3:ed:de:c3:72:55:98:00: 32:ef:87:28:db:5d:83:84:0c:b6:65:86:f9:84:39: a0:0b:08:d5:8a:29:85:49:5f:3c:77:98:8b:c3:25: 45:05:75:3b:b4:68:a4:0e:af:32:3b:94:13:0d:81: 29:da:55:e3:e5:eb:e6:12:09:7a:f3:ab:4a:c1:80: 41:47:57:6e:ff:67:b7:0d:4d:c7:93:84:bd:89:09: 0a:0e:91:72:b9:27:5f:6e:c1:19:57:67:5c:b2:7f: ac:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:F0:AF:DF:3F:87:05:66:FB:B1:2D:E5:4F:91:F4:CB:80:9B:37:2A X509v3 Authority Key Identifier: keyid:69:9F:51:A9:D9:E1:45:6D:16:01:BE:83:D8:B9:4A:D5:9A:43:82:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:d3:cb:fe:b9:f8:89:88:f6:60:45:a4:9f:9e:96:6f:ff:bf: 77:90:f8:6f:cd:f3:db:90:67:e9:6d:32:27:93:00:8f:8b:bc: 4c:e8:65:b0:cc:ca:41:73:6e:90:f1:1b:db:c7:97:c4:b9:0b: 15:ed:12:a6:64:39:2d:28:68:c3:cd:db:94:e9:f3:56:ca:a4: f2:6c:da:19:7c:5a:88:59:cd:4c:08:7d:b2:e0:d6:83:f0:80: e6:9d:0f:ad:70:f5:e0:05:36:fa:d5:da:61:28:a6:74:fd:38: 2e:79:bc:56:48:ef:40:11:29:5a:32:42:ae:f4:bf:40:d6:4d: 29:97:dd:ec:d5:6d:91:0b:ff:d7:b7:7e:db:43:6d:15:34:c9: 10:bc:3a:66:fe:81:4b:82:53:8b:10:d9:ae:ac:2b:44:45:1f: be:91:b0:b4:2a:d1:6f:ee:33:18:c7:77:3e:08:39:13:86:47: 1c:c3:9b:f6:3e:53:a9:40:d6:3b:49:7b:ff:43:c5:4e:72:1d: c0:2d:8d:1a:21:be:08:10:7c:f0:56:9a:6e:02:bd:5d:4f:5e: 57:f8:c3:d7:5d:ad:f4:00:c0:ba:f8:de:02:1e:c8:31:56:dd: dd:8f:21:23:ff:73:79:4e:0e:7a:40:11:ef:b0:92:73:57:37: 1b:25:d2:01 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDwAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZFRDMxMTAvBgNVBAUTKDY5OUY1MUE5RDlFMTQ1NkQxNjAxQkU4M0Q4Qjk0QUQ1 OUE0MzgyMzMwHhcNMjYwOTIwMTczODIyWhcNMjYwOTI3MTczODIyWjAYMRYwFAYD VQQDEw02YWIwMWEwZS1iOWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApgulB7h/HRXbrLdXcsf3nv/wApgQ2jOlYBGWpdFCao3pwVLyAdZZGp0e4uEt MXlM4PvVb7cc/7jRJa8FyfXeEAhzyrb11MSpdMaeNsY0kNO/w8u9U4esmgGsCE/x mvx1uUsmlk5O57U1RavSZDKk+6DoDWXJ7NlLoTzCCMyW84eTYOdq8KToVMLULMJp mbz91wxjVLu2TAi/fwmqo+3ew3JVmAAy74co212DhAy2ZYb5hDmgCwjViimFSV88 d5iLwyVFBXU7tGikDq8yO5QTDYEp2lXj5evmEgl686tKwYBBR1du/2e3DU3Hk4S9 iQkKDpFyuSdfbsEZV2dcsn+sJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK/wr98/ hwVm+7Et5U+R9MuAmzcqMB8GA1UdIwQYMBaAFGmfUanZ4UVtFgG+g9i5StWaQ4Iz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkVEMy9GODU4NEY3Q0Iz OEExMUU5ODcyODgxNjZDNEY5QUUwMi9hWjlScWRuaFJXMFdBYjZEMkxsSzFacERn ak0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FaOVJxZG5oUlcwV0FiNkQyTGxLMVpwRGdqTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkVEMy9GODU4NEY3Q0IzOEExMUU5ODcyODgxNjZDNEY5QUUwMi9hWjlScWRuaFJX MFdBYjZEMkxsSzFacERnak0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfdPL/rn4iYj2YEWkn56Wb/+/d5D4b83z25Bn6W0yJ5MAj4u8TOhlsMzKQXNu kPEb28eXxLkLFe0SpmQ5LShow83blOnzVsqk8mzaGXxaiFnNTAh9suDWg/CA5p0P rXD14AU2+tXaYSimdP04Lnm8VkjvQBEpWjJCrvS/QNZNKZfd7NVtkQv/17d+20Nt FTTJELw6Zv6BS4JTixDZrqwrREUfvpGwtCrRb+4zGMd3Pgg5E4ZHHMOb9j5TqUDW O0l7/0PFTnIdwC2NGiG+CBB88FaabgK9XU9eV/jD112t9ADAuvjeAh7IMVbd3Y8h I/9zeU4OekAR77CSc1c3GyXSAQ== -----END CERTIFICATE-----Generated at Mon Sep 21 20:15:39 2026 by rpki-client