$ rpki-client -vvvf rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft File: sD57-ytL2vouqlCreZD3T_y8rdc.mft (raw, json) Hash identifier: tjaEVkB70oF9zW/qecBoeVZ+tFRXbXXkoJrY91KIMfw= Subject key identifier: 34:66:89:33:5B:BF:77:49:B6:60:7C:15:F4:33:FA:BD:A2:39:99:C6 Authority key identifier: B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7 Certificate issuer: /CN=A9150CF2/serialNumber=B03E7BFB2B4BDAFA2EAA50AB7990F74FFCBCADD7 Certificate serial: 0DC5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft Manifest number: 0DA4 Signing time: Sun 20 Sep 2026 17:54:57 +0000 Manifest this update: Sun 20 Sep 2026 17:54:56 +0000 Manifest next update: Sun 27 Sep 2026 17:54:56 +0000 Files and hashes: 1: sD57-ytL2vouqlCreZD3T_y8rdc.crl (hash: 7e3kooJVVKxH0u1yd+KglmQwjkyxm/bj7Y57U/lfZps=) 2: 029E3ED44ADF11EEB17F2D4CC4F9AE02.roa (hash: CausEKBJvcLCY2g+bHYlOvrLzaOZNNslUPs7u8h+azo=) 3: 34060B22C2B311EE97B0B776C4F9AE02.roa (hash: Z+WXuAeNXEm2DshVUamhEUi82/2PD1ZlUuuRrwwUJi4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.crl rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 17:54:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3525 (0xdc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150CF2, serialNumber=B03E7BFB2B4BDAFA2EAA50AB7990F74FFCBCADD7 Validity Not Before: Sep 20 17:54:56 2026 GMT Not After : Sep 27 17:54:56 2026 GMT Subject: CN=6ab01df1-d6d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ad:1c:31:b8:ac:76:b1:8d:5d:55:35:a9:50: 96:41:4b:7e:3c:8f:64:6e:56:a5:dd:63:d3:fb:8b: 93:27:2a:72:d4:54:23:b7:43:33:dc:03:36:1e:aa: 9f:cd:e8:fa:2f:6a:ab:20:a3:2a:59:3e:d5:a1:38: f9:3c:05:c2:8b:b7:3e:6f:e1:cb:80:d5:04:51:fa: 0a:1d:17:a5:63:68:af:81:fb:60:51:ca:f6:07:fc: 39:7b:7c:02:44:57:58:c9:f3:a0:cf:53:39:59:89: 0c:13:1e:ec:b0:40:d0:e3:99:13:23:2e:9f:a3:9e: f7:0d:16:a6:b9:a3:c0:1f:e4:63:d2:f4:a3:17:a3: 92:8f:c8:6b:6d:d1:fa:42:31:7e:d5:ee:2e:01:30: 27:f1:37:b9:c6:20:b3:bf:a6:8e:f7:7f:a2:33:57: 77:c9:05:d1:69:96:ff:48:08:bd:29:ed:9d:42:7a: 3f:05:ac:fc:66:9b:17:e6:17:b7:ec:21:66:9d:e4: dc:77:8a:48:e6:ce:00:24:7e:3a:1f:41:48:fa:27: ad:76:54:d1:1d:df:f0:8f:f1:1f:b9:83:24:31:bd: 24:75:aa:20:dc:b2:b1:df:57:9c:47:cd:c5:0a:61: ac:04:2a:18:b9:cc:d3:ec:a7:d6:84:7d:03:82:36: 35:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:66:89:33:5B:BF:77:49:B6:60:7C:15:F4:33:FA:BD:A2:39:99:C6 X509v3 Authority Key Identifier: keyid:B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:b4:cd:cd:df:00:88:52:20:90:a5:c0:a1:21:42:ec:20:84: fe:c1:01:ab:48:ee:bc:5a:c7:40:3b:ae:eb:93:91:8f:a9:47: 15:98:d6:0f:d5:67:f2:6d:4a:35:7b:0c:c1:88:e0:fb:b4:43: 34:9c:32:a4:4e:9f:d7:35:c1:c1:71:d3:81:60:8d:c3:24:ff: ab:77:6b:9c:db:08:ac:75:d8:d4:9d:05:f2:c4:36:1a:70:78: cd:fe:b8:e0:82:55:df:04:19:fa:07:2a:f1:e0:d2:6e:42:e9: a2:82:cf:30:ea:9e:0c:fc:e8:2c:35:e0:1d:b1:de:85:54:7b: 9f:c6:eb:9a:3d:79:0c:39:61:06:d6:ee:55:f5:96:ef:49:e4: f4:3f:e4:84:c0:85:ab:9f:50:f8:c4:50:60:31:81:98:27:2d: 6a:db:1d:9a:f9:c0:3e:ff:b6:24:18:90:1f:da:4c:da:15:f1: d5:50:11:73:25:03:5a:76:ea:07:ed:34:95:7c:15:3a:c6:3e: e4:83:bd:3e:ba:87:40:76:83:70:65:aa:78:09:14:01:63:30: 3f:18:5b:40:ce:37:88:a2:13:7a:c2:3f:b4:7e:52:9e:26:81: 8a:da:a6:e9:53:10:e5:ca:f0:05:8e:54:5a:59:39:d5:36:17: 0f:cf:d4:41 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBDRjIxMTAvBgNVBAUTKEIwM0U3QkZCMkI0QkRBRkEyRUFBNTBBQjc5OTBGNzRG RkNCQ0FERDcwHhcNMjYwOTIwMTc1NDU2WhcNMjYwOTI3MTc1NDU2WjAYMRYwFAYD VQQDEw02YWIwMWRmMS1kNmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApK0cMbisdrGNXVU1qVCWQUt+PI9kblal3WPT+4uTJypy1FQjt0Mz3AM2Hqqf zej6L2qrIKMqWT7VoTj5PAXCi7c+b+HLgNUEUfoKHRelY2ivgftgUcr2B/w5e3wC RFdYyfOgz1M5WYkMEx7ssEDQ45kTIy6fo573DRamuaPAH+Rj0vSjF6OSj8hrbdH6 QjF+1e4uATAn8Te5xiCzv6aO93+iM1d3yQXRaZb/SAi9Ke2dQno/Baz8ZpsX5he3 7CFmneTcd4pI5s4AJH46H0FI+ietdlTRHd/wj/EfuYMkMb0kdaog3LKx31ecR83F CmGsBCoYuczT7KfWhH0DgjY1EQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDRmiTNb v3dJtmB8FfQz+r2iOZnGMB8GA1UdIwQYMBaAFLA+e/srS9r6LqpQq3mQ90/8vK3X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MENGMi9EMDBEQjc2RUY0 RUUxMUU5QUVGRUE4MTlDNEY5QUUwMi9zRDU3LXl0TDJ2b3VxbENyZVpEM1RfeThy ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NENTcteXRMMnZvdXFsQ3JlWkQzVF95OHJkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MENGMi9EMDBEQjc2RUY0RUUxMUU5QUVGRUE4MTlDNEY5QUUwMi9zRDU3LXl0TDJ2 b3VxbENyZVpEM1RfeThyZGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASLTNzd8AiFIgkKXAoSFC7CCE/sEBq0juvFrHQDuu65ORj6lHFZjWD9Vn8m1K NXsMwYjg+7RDNJwypE6f1zXBwXHTgWCNwyT/q3drnNsIrHXY1J0F8sQ2GnB4zf64 4IJV3wQZ+gcq8eDSbkLpooLPMOqeDPzoLDXgHbHehVR7n8brmj15DDlhBtbuVfWW 70nk9D/khMCFq59Q+MRQYDGBmCctatsdmvnAPv+2JBiQH9pM2hXx1VARcyUDWnbq B+00lXwVOsY+5IO9PrqHQHaDcGWqeAkUAWMwPxhbQM43iKITesI/tH5SniaBitqm 6VMQ5crwBY5UWlk51TYXD8/UQQ== -----END CERTIFICATE-----Generated at Mon Sep 21 15:44:26 2026 by rpki-client