$ rpki-client -vvvf rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft File: w97H_d1FyVFyYIZPqe68_nuLz1c.mft (raw, json) Hash identifier: 1rdIKtnKk/xXxvldPmXRW/QLiUc0bdRuCno7JHkdm78= Subject key identifier: D8:A5:02:9C:EC:56:D8:15:DE:0A:A2:8B:04:34:D9:E1:82:08:95:3F Authority key identifier: C3:DE:C7:FD:DD:45:C9:51:72:60:86:4F:A9:EE:BC:FE:7B:8B:CF:57 Certificate issuer: /CN=A9159234/serialNumber=C3DEC7FDDD45C9517260864FA9EEBCFE7B8BCF57 Certificate serial: 0665 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w97H_d1FyVFyYIZPqe68_nuLz1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft Manifest number: 0652 Signing time: Fri 18 Sep 2026 22:36:21 +0000 Manifest this update: Fri 18 Sep 2026 22:36:21 +0000 Manifest next update: Fri 25 Sep 2026 22:36:21 +0000 Files and hashes: 1: w97H_d1FyVFyYIZPqe68_nuLz1c.crl (hash: TAWNO/QF0HXde6lZXpnwNBTS/8ZWglsZHL290cFgjB0=) 2: B58C9578378011ECA9E26B5AC4F9AE02.roa (hash: 7EYVCJnCzEtN1QHSYAihuuFiHcgoW3hwFtVhlxVQpNQ=) 3: EO-lcNCPNdGLfnrT1XvCuZWzd0o.asa (hash: ksKpmYvOphy08sHwmt1rQUj1FHAYUu4L7/Ls6NhHISc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.crl rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w97H_d1FyVFyYIZPqe68_nuLz1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1637 (0x665) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159234, serialNumber=C3DEC7FDDD45C9517260864FA9EEBCFE7B8BCF57 Validity Not Before: Sep 18 22:36:21 2026 GMT Not After : Sep 25 22:36:21 2026 GMT Subject: CN=6aadbce5-b79e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3d:c8:6b:0f:cc:db:cf:6a:55:60:76:4a:af: 87:b7:d6:f2:92:32:06:89:d9:56:4a:c3:31:fc:bb: 95:ff:67:42:59:83:38:86:70:fa:7a:80:47:8d:58: 1a:c8:cb:52:55:7f:c1:38:02:4b:a1:4d:09:33:ee: 48:7c:c5:4d:ca:69:84:f0:16:40:ab:62:dc:be:0c: 9b:36:da:52:b3:bb:85:b9:93:de:73:a8:48:9c:96: 5d:50:4e:8e:eb:85:19:33:c6:1d:34:82:4f:fd:3a: 60:33:ea:25:cc:9b:60:7c:9a:19:39:fb:f2:77:7b: 0d:58:45:e7:a9:e1:94:db:c5:38:17:5d:36:e4:47: 43:90:cf:ab:39:d2:46:b5:a9:27:cd:2f:85:86:5a: f1:fa:a2:cd:bd:d8:53:d1:a6:89:9c:b7:15:37:a5: 70:af:22:c1:3c:b1:7d:e2:e3:99:1b:7b:f9:a6:86: 04:cd:70:d7:c8:de:cf:13:1d:da:3e:1e:f6:c7:eb: 60:ae:26:9d:aa:2c:bc:1d:43:b3:88:36:c8:c7:1f: aa:2b:71:77:21:93:58:43:47:50:b4:78:0e:1f:88: d6:bf:33:4e:83:c5:d9:27:ef:d1:ea:42:20:bd:61: 9f:90:16:9f:11:26:a0:ae:ee:32:d3:19:a0:6d:b6: 97:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:A5:02:9C:EC:56:D8:15:DE:0A:A2:8B:04:34:D9:E1:82:08:95:3F X509v3 Authority Key Identifier: keyid:C3:DE:C7:FD:DD:45:C9:51:72:60:86:4F:A9:EE:BC:FE:7B:8B:CF:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w97H_d1FyVFyYIZPqe68_nuLz1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:ca:fe:79:42:9b:c2:96:40:6a:08:df:6d:27:f5:b1:93:ca: 08:d1:ff:93:e5:bd:cf:26:ec:c0:a6:b9:b5:04:31:f3:fd:b5: 34:32:4a:ed:d3:74:71:95:d6:61:93:2b:aa:73:d2:2c:7b:5a: e8:84:de:d8:8c:ef:3a:0f:a0:9d:d0:f4:6c:7a:57:08:cf:19: eb:81:30:b3:d5:47:51:ac:33:be:03:2a:2f:a5:f4:00:48:1b: 79:e2:ec:c9:c4:62:20:9a:76:31:2c:9e:b9:51:e9:e4:00:fd: 0b:ea:a3:f8:77:47:97:7c:26:42:91:ee:51:6c:da:ab:aa:36: 8b:14:58:ab:ba:48:d7:3f:86:7b:75:68:aa:6d:2b:e3:f2:72: 48:52:a3:92:fc:5e:ff:e9:50:63:b5:f9:6a:11:70:d1:b0:d6: 89:b4:a7:5d:45:21:10:63:65:49:a5:ec:69:44:af:8b:82:0c: 0c:27:02:49:56:83:15:cd:80:1c:ca:50:d6:64:97:5d:42:1d: 78:40:b9:bb:99:f4:c0:84:93:32:69:e4:41:0a:cc:0c:19:a8: 1c:91:a7:18:2d:73:70:3b:79:fd:75:04:ac:63:68:07:cd:f1: 8a:b9:4c:6c:8a:f6:33:17:32:0b:13:02:3b:cb:93:ae:5f:52: e6:41:10:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkyMzQxMTAvBgNVBAUTKEMzREVDN0ZEREQ0NUM5NTE3MjYwODY0RkE5RUVCQ0ZF N0I4QkNGNTcwHhcNMjYwOTE4MjIzNjIxWhcNMjYwOTI1MjIzNjIxWjAYMRYwFAYD VQQDEw02YWFkYmNlNS1iNzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArD3Iaw/M289qVWB2Sq+Ht9bykjIGidlWSsMx/LuV/2dCWYM4hnD6eoBHjVga yMtSVX/BOAJLoU0JM+5IfMVNymmE8BZAq2LcvgybNtpSs7uFuZPec6hInJZdUE6O 64UZM8YdNIJP/TpgM+olzJtgfJoZOfvyd3sNWEXnqeGU28U4F1025EdDkM+rOdJG taknzS+Fhlrx+qLNvdhT0aaJnLcVN6VwryLBPLF94uOZG3v5poYEzXDXyN7PEx3a Ph72x+tgriadqiy8HUOziDbIxx+qK3F3IZNYQ0dQtHgOH4jWvzNOg8XZJ+/R6kIg vWGfkBafESagru4y0xmgbbaXMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNilApzs VtgV3gqiiwQ02eGCCJU/MB8GA1UdIwQYMBaAFMPex/3dRclRcmCGT6nuvP57i89X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTIzNC82QThFMDBFQUVG OEExMUVCQTI5MjE3NjRDNEY5QUUwMi93OTdIX2QxRnlWRnlZSVpQcWU2OF9udUx6 MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c5N0hfZDFGeVZGeVlJWlBxZTY4X251THoxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTIzNC82QThFMDBFQUVGOEExMUVCQTI5MjE3NjRDNEY5QUUwMi93OTdIX2QxRnlW RnlZSVpQcWU2OF9udUx6MWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADcr+eUKbwpZAagjfbSf1sZPKCNH/k+W9zybswKa5tQQx8/21NDJK7dN0cZXW YZMrqnPSLHta6ITe2IzvOg+gndD0bHpXCM8Z64Ews9VHUawzvgMqL6X0AEgbeeLs ycRiIJp2MSyeuVHp5AD9C+qj+HdHl3wmQpHuUWzaq6o2ixRYq7pI1z+Ge3Voqm0r 4/JySFKjkvxe/+lQY7X5ahFw0bDWibSnXUUhEGNlSaXsaUSvi4IMDCcCSVaDFc2A HMpQ1mSXXUIdeEC5u5n0wISTMmnkQQrMDBmoHJGnGC1zcDt5/XUErGNoB83xirlM bIr2MxcyCxMCO8uTrl9S5kEQ+w== -----END CERTIFICATE-----Generated at Sun Sep 20 15:45:39 2026 by rpki-client