$ rpki-client -vvvf rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft File: rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft (raw, json) Hash identifier: jcqARvGZ2bW0Ty3/EaP3qMQRrmJz9hGLv36+7p0nUNQ= Subject key identifier: 59:66:DF:3F:39:7F:FA:96:04:C0:59:96:DF:05:11:2F:1D:AE:C5:AF Authority key identifier: AC:D4:F8:32:F6:D8:39:78:BE:69:59:D6:98:3F:E3:58:F3:B7:A9:25 Certificate issuer: /CN=A9152C89/serialNumber=ACD4F832F6D83978BE6959D6983FE358F3B7A925 Certificate serial: 0581 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft Manifest number: 0573 Signing time: Tue 22 Sep 2026 22:59:36 +0000 Manifest this update: Tue 22 Sep 2026 22:59:36 +0000 Manifest next update: Tue 29 Sep 2026 22:59:36 +0000 Files and hashes: 1: rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl (hash: SNa/3A7P0jl+xgqCsoGNxCAYca9jY/wtUzbIlQ4ysiQ=) 2: 1291593861AC11ED9EFE1B4DC4F9AE02.roa (hash: JfzH8J7I3Xe9UEf/VNBPygrk3zbv7cEsEtGZ7BOGvr8=) 3: 33DAC0AE640211EDA193F079C4F9AE02.roa (hash: ybViUyQ0AAqzvnSq9WOp3P59LX2uT96EcoWguD8yea0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 22:59:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1409 (0x581) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152C89, serialNumber=ACD4F832F6D83978BE6959D6983FE358F3B7A925 Validity Not Before: Sep 22 22:59:36 2026 GMT Not After : Sep 29 22:59:36 2026 GMT Subject: CN=6ab30858-4c84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3a:40:f1:3a:28:41:e9:81:fc:f4:b4:22:f3: 9e:f9:ed:33:64:e3:a7:6d:d2:15:85:82:cc:23:25: 7f:d6:73:04:92:0b:4c:90:e6:e0:2a:6e:ae:c5:e5: 83:67:82:7b:10:25:90:96:e0:3a:77:32:73:70:8c: b7:8c:2b:fd:f0:a9:06:ba:fb:b5:c7:18:b6:be:00: de:3f:b9:ec:a4:ac:40:2c:01:4d:e9:4a:2c:d1:73: 72:fd:ac:f7:1c:9e:60:98:5c:1c:c7:24:0c:fa:3d: 88:22:29:2a:b3:68:28:2c:2b:dc:0d:58:1c:65:3e: b1:9a:ea:25:7b:b2:77:8f:68:75:13:7d:4b:c5:28: 11:e9:96:49:52:28:8e:f4:4a:bf:85:cc:50:e6:8e: ac:4a:6f:8e:69:61:58:0d:36:13:ee:c2:af:9e:00: b7:24:e3:6a:97:47:6f:ca:67:83:a3:39:d0:a8:d7: b7:0b:68:30:b0:48:e8:fd:8c:95:71:82:f3:f2:71: ed:79:39:a4:f3:02:27:33:00:55:d1:23:4b:c4:94: b4:63:7e:86:78:36:69:40:51:44:a2:5e:93:42:65: 6c:29:6f:33:5d:26:29:d8:27:35:63:5e:d4:02:16: 75:80:2c:1e:9a:ad:1d:53:d3:a0:e6:82:99:f1:34: 88:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:66:DF:3F:39:7F:FA:96:04:C0:59:96:DF:05:11:2F:1D:AE:C5:AF X509v3 Authority Key Identifier: keyid:AC:D4:F8:32:F6:D8:39:78:BE:69:59:D6:98:3F:E3:58:F3:B7:A9:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:86:3c:38:67:06:2d:32:03:af:0d:dc:f7:8d:c5:25:bf:2c: a6:0b:45:16:b1:c3:85:76:8a:11:b0:db:4e:f3:b7:b6:67:e8: c9:d4:15:77:56:c2:ac:53:8a:b3:82:16:fa:2c:7c:e0:64:77: f5:4d:83:64:c0:ad:81:73:aa:36:26:35:8f:93:50:29:b2:6d: c4:c2:72:d6:59:8b:96:63:7c:f5:18:05:a9:14:74:fd:7f:55: e9:85:1d:61:00:c0:c4:c7:0c:1b:41:db:ba:7b:77:1c:8f:bd: 70:63:79:3a:cd:dc:35:bc:b4:90:21:5d:0c:d5:bb:be:05:4f: c7:5b:3c:f0:93:4d:f5:df:92:63:f6:6d:8c:f0:26:0e:f1:a4: 65:42:64:ca:70:f0:cc:a3:de:92:a2:b3:67:8a:c4:40:6d:a6: 8c:d1:6b:ca:87:5d:fa:51:8e:c7:19:3c:0d:fd:4e:e2:00:4c: a2:8a:d9:42:d7:53:64:23:95:f6:4a:9b:3c:c0:04:a0:47:05: 86:1b:ac:c9:b0:d9:bd:ef:94:78:02:1d:2f:9c:33:bb:3a:86: 5f:2d:fb:57:91:b6:16:f7:76:2c:5b:3d:a1:80:ba:f1:17:d2: 4e:fa:f9:1b:62:5e:2e:f7:8a:ab:84:3e:e6:55:14:9f:e7:2a: 24:41:58:dd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJDODkxMTAvBgNVBAUTKEFDRDRGODMyRjZEODM5NzhCRTY5NTlENjk4M0ZFMzU4 RjNCN0E5MjUwHhcNMjYwOTIyMjI1OTM2WhcNMjYwOTI5MjI1OTM2WjAYMRYwFAYD VQQDEw02YWIzMDg1OC00Yzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApzpA8TooQemB/PS0IvOe+e0zZOOnbdIVhYLMIyV/1nMEkgtMkObgKm6uxeWD Z4J7ECWQluA6dzJzcIy3jCv98KkGuvu1xxi2vgDeP7nspKxALAFN6Uos0XNy/az3 HJ5gmFwcxyQM+j2IIikqs2goLCvcDVgcZT6xmuole7J3j2h1E31LxSgR6ZZJUiiO 9Eq/hcxQ5o6sSm+OaWFYDTYT7sKvngC3JONql0dvymeDoznQqNe3C2gwsEjo/YyV cYLz8nHteTmk8wInMwBV0SNLxJS0Y36GeDZpQFFEol6TQmVsKW8zXSYp2Cc1Y17U AhZ1gCwemq0dU9Og5oKZ8TSIrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFlm3z85 f/qWBMBZlt8FES8drsWvMB8GA1UdIwQYMBaAFKzU+DL22Dl4vmlZ1pg/41jzt6kl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkM4OS84RkE5N0FGRTQ1 MTAxMUVDOEM4NkVENDhDNEY5QUUwMi9yTlQ0TXZiWU9YaS1hVm5XbURfaldQTzNx U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JOVDRNdmJZT1hpLWFWbldtRF9qV1BPM3FTVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkM4OS84RkE5N0FGRTQ1MTAxMUVDOEM4NkVENDhDNEY5QUUwMi9yTlQ0TXZiWU9Y aS1hVm5XbURfaldQTzNxU1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcoY8OGcGLTIDrw3c943FJb8spgtFFrHDhXaKEbDbTvO3tmfoydQVd1bCrFOK s4IW+ix84GR39U2DZMCtgXOqNiY1j5NQKbJtxMJy1lmLlmN89RgFqRR0/X9V6YUd YQDAxMcMG0Hbunt3HI+9cGN5Os3cNby0kCFdDNW7vgVPx1s88JNN9d+SY/ZtjPAm DvGkZUJkynDwzKPekqKzZ4rEQG2mjNFryodd+lGOxxk8Df1O4gBMoorZQtdTZCOV 9kqbPMAEoEcFhhusybDZve+UeAIdL5wzuzqGXy37V5G2Fvd2LFs9oYC68RfSTvr5 G2JeLveKq4Q+5lUUn+cqJEFY3Q== -----END CERTIFICATE-----Generated at Thu Sep 24 02:03:41 2026 by rpki-client