$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft File: pAislKDTNvRzJJBakYrySQLw3os.mft (raw, json) Hash identifier: RodyUuMNXgEQtJrVztVVeIy/br7MzXs965uXFdMNeP8= Subject key identifier: 2D:36:7D:DC:81:AC:F2:4F:E5:40:80:F9:77:EB:E4:A8:43:9D:B4:41 Authority key identifier: A4:08:AC:94:A0:D3:36:F4:73:24:90:5A:91:8A:F2:49:02:F0:DE:8B Certificate issuer: /CN=A9158620/serialNumber=A408AC94A0D336F47324905A918AF24902F0DE8B Certificate serial: 0244 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft Manifest number: 0228 Signing time: Mon 21 Sep 2026 02:58:08 +0000 Manifest this update: Mon 21 Sep 2026 02:58:07 +0000 Manifest next update: Mon 28 Sep 2026 02:58:07 +0000 Files and hashes: 1: pAislKDTNvRzJJBakYrySQLw3os.crl (hash: w87j8Ef3NiLRYrubBbmgx8d77XMVENsNQ4hvtBQD/h8=) 2: 62C61398C93A11EEA1A4CA4FC4F9AE02.roa (hash: 24csX/QK3Rfd0VNE+KVxc4JCo6pG7QuAjIc0XCJ9N5M=) 3: 62258D42C93A11EEA1A4CA4FC4F9AE02.roa (hash: Pn3t7Q2xH1MHU013jHPh+VPRQQXIgRH1a2aFUOJ0g9I=) 4: 31A1996898F711EEB7B27877C4F9AE02.roa (hash: V73rrflKLTiVNK5j3ada2jgTwgOJk55X18oFDRCNd5g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.crl rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:58:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 580 (0x244) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158620, serialNumber=A408AC94A0D336F47324905A918AF24902F0DE8B Validity Not Before: Sep 21 02:58:07 2026 GMT Not After : Sep 28 02:58:07 2026 GMT Subject: CN=6ab09d3f-27b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:74:6b:24:ac:0d:fd:d8:83:19:06:be:43:19: 14:71:26:13:c7:41:d6:a3:78:8e:62:49:18:ac:aa: 15:6d:57:9a:0b:03:ed:75:86:79:5b:65:87:e5:8b: 7e:a0:f2:10:fd:20:c6:f6:13:8e:b2:59:35:36:44: 48:a4:1f:6f:39:d9:19:3f:a5:a1:63:60:9d:ab:ee: 20:4b:b5:94:96:e5:80:c6:7a:d9:e1:8f:d8:77:ce: 2e:84:4c:6e:7a:eb:24:d8:ed:dd:8a:b5:26:37:1d: 18:7a:0c:d3:ea:a4:7f:55:0d:36:e7:cf:4b:a6:70: 45:e3:82:74:38:2a:05:74:79:8e:14:a5:a1:b7:90: ad:3f:be:15:58:d6:99:be:2b:42:41:b6:0f:2d:8a: 70:14:ad:14:8a:70:37:3c:98:17:cf:75:01:61:17: ca:83:f7:fa:95:9d:66:99:61:a6:74:67:9c:ba:16: f4:c9:f9:4d:54:9f:1d:56:9a:da:66:16:ab:2e:a8: a5:44:96:b6:33:89:89:2f:42:82:74:cc:4f:74:89: 45:72:1a:c7:de:2d:0b:48:d3:ff:19:7f:22:8c:5a: 1d:e2:39:8e:b8:2c:c6:e1:a4:72:8f:34:26:ea:be: 31:23:5b:60:9d:09:41:aa:04:25:5f:c9:8e:75:89: 1e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:36:7D:DC:81:AC:F2:4F:E5:40:80:F9:77:EB:E4:A8:43:9D:B4:41 X509v3 Authority Key Identifier: keyid:A4:08:AC:94:A0:D3:36:F4:73:24:90:5A:91:8A:F2:49:02:F0:DE:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:da:38:1b:a8:0f:ea:36:38:b9:f3:d1:0c:74:0d:3d:e5:1a: f5:2b:83:9b:ec:3c:7b:12:95:fd:e3:8e:79:3d:b3:b0:f4:f8: b1:a9:7d:eb:27:44:52:4f:e8:41:94:5d:0e:44:6d:ef:9c:d0: 8a:76:79:af:82:15:1a:0b:af:56:36:d7:2d:d8:4a:be:8b:e7: 51:e1:58:23:d8:d5:38:c4:33:2d:3b:0f:0f:f2:70:fd:c5:77: 37:50:60:40:62:35:c0:1b:be:46:8b:33:41:58:51:1e:c0:06: 3e:a8:53:ee:28:d7:84:7c:ab:7d:65:dd:c8:78:ee:5b:58:66: 6d:e2:b3:ac:5f:e7:6f:d3:e6:1a:25:79:9c:f8:f4:bb:ee:79: cb:a8:c2:5b:93:96:b0:b3:63:1a:39:01:87:4d:6a:31:ad:db: 2e:5a:a7:72:8e:78:aa:86:9f:a2:46:cc:30:76:49:a7:ed:27: 9d:e4:69:9e:17:d3:e0:bc:d8:83:78:e9:25:a0:ee:98:ca:84: b1:48:07:3e:1e:07:cd:37:5a:d1:61:df:13:c1:b8:98:24:88: 85:fd:11:26:e5:75:7e:ae:67:6d:ef:9d:d3:a4:a1:3f:41:92: ef:3c:78:30:af:3b:bc:07:84:e1:60:f6:96:c7:0d:46:86:72: bd:54:16:14 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg2MjAxMTAvBgNVBAUTKEE0MDhBQzk0QTBEMzM2RjQ3MzI0OTA1QTkxOEFGMjQ5 MDJGMERFOEIwHhcNMjYwOTIxMDI1ODA3WhcNMjYwOTI4MDI1ODA3WjAYMRYwFAYD VQQDEw02YWIwOWQzZi0yN2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqnRrJKwN/diDGQa+QxkUcSYTx0HWo3iOYkkYrKoVbVeaCwPtdYZ5W2WH5Yt+ oPIQ/SDG9hOOslk1NkRIpB9vOdkZP6WhY2Cdq+4gS7WUluWAxnrZ4Y/Yd84uhExu eusk2O3dirUmNx0YegzT6qR/VQ02589LpnBF44J0OCoFdHmOFKWht5CtP74VWNaZ vitCQbYPLYpwFK0UinA3PJgXz3UBYRfKg/f6lZ1mmWGmdGecuhb0yflNVJ8dVpra ZharLqilRJa2M4mJL0KCdMxPdIlFchrH3i0LSNP/GX8ijFod4jmOuCzG4aRyjzQm 6r4xI1tgnQlBqgQlX8mOdYkeTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC02fdyB rPJP5UCA+Xfr5KhDnbRBMB8GA1UdIwQYMBaAFKQIrJSg0zb0cySQWpGK8kkC8N6L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODYyMC8wRTkxOTkzNDg4 NDIxMUVFQTdEOEM4MTRDNEY5QUUwMi9wQWlzbEtEVE52UnpKSkJha1lyeVNRTHcz b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BBaXNsS0RUTnZSekpKQmFrWXJ5U1FMdzNvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODYyMC8wRTkxOTkzNDg4NDIxMUVFQTdEOEM4MTRDNEY5QUUwMi9wQWlzbEtEVE52 UnpKSkJha1lyeVNRTHczb3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG9o4G6gP6jY4ufPRDHQNPeUa9SuDm+w8exKV/eOOeT2zsPT4sal96ydEUk/o QZRdDkRt75zQinZ5r4IVGguvVjbXLdhKvovnUeFYI9jVOMQzLTsPD/Jw/cV3N1Bg QGI1wBu+RoszQVhRHsAGPqhT7ijXhHyrfWXdyHjuW1hmbeKzrF/nb9PmGiV5nPj0 u+55y6jCW5OWsLNjGjkBh01qMa3bLlqnco54qoafokbMMHZJp+0nneRpnhfT4LzY g3jpJaDumMqEsUgHPh4HzTda0WHfE8G4mCSIhf0RJuV1fq5nbe+d06ShP0GS7zx4 MK87vAeE4WD2lscNRoZyvVQWFA== -----END CERTIFICATE-----Generated at Mon Sep 21 13:47:53 2026 by rpki-client