$ rpki-client -vvvf rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft File: A8f_7gyvSSWEnihuwO-7DIsqjk8.mft (raw, json) Hash identifier: bJQd2Xchhwi0Juynoo/Vmsy/Fx/OGDbPMLwJ+hp52qE= Subject key identifier: 76:18:2E:B9:74:6B:C8:C1:AC:E7:4C:D8:5D:5C:42:5F:9E:D2:C9:42 Authority key identifier: 03:C7:FF:EE:0C:AF:49:25:84:9E:28:6E:C0:EF:BB:0C:8B:2A:8E:4F Certificate issuer: /CN=A9156CFE/serialNumber=03C7FFEE0CAF4925849E286EC0EFBB0C8B2A8E4F Certificate serial: 0AC9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft Manifest number: 0AAA Signing time: Thu 24 Sep 2026 19:30:57 +0000 Manifest this update: Thu 24 Sep 2026 19:30:57 +0000 Manifest next update: Thu 01 Oct 2026 19:30:57 +0000 Files and hashes: 1: A8f_7gyvSSWEnihuwO-7DIsqjk8.crl (hash: 0lTSoDxfYvRdAbrqhSaikQFDqq5saWLDlsedr2jS/Cs=) 2: E00620C0267C11EE803B2155C4F9AE02.roa (hash: FjoaYasaX35xO0OxM5ZHWyDBaB3m3PCkgBiPkzevM+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.crl rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 19:30:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2761 (0xac9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156CFE, serialNumber=03C7FFEE0CAF4925849E286EC0EFBB0C8B2A8E4F Validity Not Before: Sep 24 19:30:57 2026 GMT Not After : Oct 1 19:30:57 2026 GMT Subject: CN=6ab57a71-948a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c3:32:ca:e2:1c:b6:2d:50:cc:f8:01:f0:6c: be:6a:87:d3:f3:ee:e1:ee:50:0a:3a:9f:ad:ab:a9: 6b:58:4d:e4:81:5c:4b:d7:54:d0:6d:46:1d:b0:c1: 0a:45:14:4c:30:b7:20:1b:94:37:48:d5:93:b3:c4: 9e:0c:25:c5:89:e3:dd:c3:69:da:5d:2f:73:f2:79: 1b:f4:3e:7a:a8:41:e8:30:4a:c8:44:40:16:40:af: 2e:00:3a:fc:01:37:4f:f0:e6:48:7d:fa:2d:4c:45: f2:0f:be:b7:2a:3a:20:65:02:a6:d1:55:e5:fb:cd: 6d:93:03:22:df:ea:57:35:37:9a:c2:7b:b7:f5:c4: bc:bd:e5:f5:33:21:9c:b2:cd:68:90:4b:78:a1:b4: 4b:f6:a2:8f:2e:f8:23:b8:11:ac:f7:96:b0:4d:5e: 9d:92:ff:fc:fc:6a:63:2f:ba:72:8d:51:43:4e:16: 5a:c9:0d:39:71:6c:a7:41:2e:63:5a:5c:d3:a6:ba: fb:e4:97:33:e3:f0:d6:a3:2c:61:38:60:37:e7:7d: 18:6a:f5:40:fc:5e:a7:6f:84:a8:b2:5b:7e:00:1b: ee:5c:53:92:88:67:84:61:39:d4:0c:e6:1b:e2:04: 4a:9c:11:ce:5b:11:b1:ed:85:81:4a:75:7a:e5:e1: 7e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:18:2E:B9:74:6B:C8:C1:AC:E7:4C:D8:5D:5C:42:5F:9E:D2:C9:42 X509v3 Authority Key Identifier: keyid:03:C7:FF:EE:0C:AF:49:25:84:9E:28:6E:C0:EF:BB:0C:8B:2A:8E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:ac:24:e8:a7:00:61:53:44:e8:d2:17:a4:53:03:14:93:7a: f2:43:48:44:8d:e9:7e:db:01:85:34:af:4a:4c:9b:1d:92:b3: 06:a4:58:fe:23:a4:bb:1d:c6:c3:92:aa:4a:01:62:e4:3c:aa: ee:f5:72:c7:14:c3:27:f0:79:f8:ab:04:a4:6a:3f:69:2c:55: 03:dc:3b:18:ea:8e:1e:ec:c2:00:0b:d7:fe:68:23:6f:a4:13: 64:cc:d2:03:65:0e:59:f2:d7:2f:dd:3d:8d:18:3d:d8:e8:dc: f3:b7:53:d4:df:30:69:ef:7e:f9:d3:e0:d0:1b:0e:18:92:42: ab:a9:f3:60:c9:a0:28:2e:27:96:56:00:82:e8:45:e0:c8:f5: 6b:27:cb:c9:c2:c3:13:57:f6:4b:9a:e8:5b:6d:fb:07:7d:a8: 8d:fa:74:e7:db:5d:62:f4:f4:f5:0b:a1:62:45:49:b6:e4:d3: cb:10:0f:cd:5b:6e:a4:0d:c8:3e:14:85:54:23:9d:ca:6f:70: 7c:0a:55:b3:cf:40:ee:88:2c:e0:c0:db:11:8b:e6:b2:ac:cf: 6a:60:71:44:22:40:12:b4:a9:09:a4:29:aa:11:df:73:5e:ef: e9:e7:6a:d9:80:f3:09:3f:3d:bd:fb:6d:69:dd:df:5d:95:0c: b5:c9:27:67 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZDRkUxMTAvBgNVBAUTKDAzQzdGRkVFMENBRjQ5MjU4NDlFMjg2RUMwRUZCQjBD OEIyQThFNEYwHhcNMjYwOTI0MTkzMDU3WhcNMjYxMDAxMTkzMDU3WjAYMRYwFAYD VQQDEw02YWI1N2E3MS05NDhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMMyyuIcti1QzPgB8Gy+aofT8+7h7lAKOp+tq6lrWE3kgVxL11TQbUYdsMEK RRRMMLcgG5Q3SNWTs8SeDCXFiePdw2naXS9z8nkb9D56qEHoMErIREAWQK8uADr8 ATdP8OZIffotTEXyD763KjogZQKm0VXl+81tkwMi3+pXNTeawnu39cS8veX1MyGc ss1okEt4obRL9qKPLvgjuBGs95awTV6dkv/8/GpjL7pyjVFDThZayQ05cWynQS5j WlzTprr75Jcz4/DWoyxhOGA3530YavVA/F6nb4Soslt+ABvuXFOSiGeEYTnUDOYb 4gRKnBHOWxGx7YWBSnV65eF+nwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHYYLrl0 a8jBrOdM2F1cQl+e0slCMB8GA1UdIwQYMBaAFAPH/+4Mr0klhJ4obsDvuwyLKo5P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkNGRS9CMzkwMzE3MDhB QjIxMUVBQjAyMjE5M0NDNEY5QUUwMi9BOGZfN2d5dlNTV0VuaWh1d08tN0RJc3Fq azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E4Zl83Z3l2U1NXRW5paHV3Ty03RElzcWprOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkNGRS9CMzkwMzE3MDhBQjIxMUVBQjAyMjE5M0NDNEY5QUUwMi9BOGZfN2d5dlNT V0VuaWh1d08tN0RJc3FqazgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVqwk6KcAYVNE6NIXpFMDFJN68kNIRI3pftsBhTSvSkybHZKzBqRY/iOkux3G w5KqSgFi5Dyq7vVyxxTDJ/B5+KsEpGo/aSxVA9w7GOqOHuzCAAvX/mgjb6QTZMzS A2UOWfLXL909jRg92Ojc87dT1N8wae9++dPg0BsOGJJCq6nzYMmgKC4nllYAguhF 4Mj1ayfLycLDE1f2S5roW237B32ojfp059tdYvT09QuhYkVJtuTTyxAPzVtupA3I PhSFVCOdym9wfApVs89A7ogs4MDbEYvmsqzPamBxRCJAErSpCaQpqhHfc17v6edq 2YDzCT89vfttad3fXZUMtcknZw== -----END CERTIFICATE-----Generated at Sat Sep 26 09:04:57 2026 by rpki-client