$ rpki-client -vvvf rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft File: aZoPjRWjT1mVbLSADGxEBNwOvV0.mft (raw, json) Hash identifier: wQzED+/nwNo27cYV8iLWjLCqWJ8F7LmDhBI0CovmTKo= Subject key identifier: F3:2D:65:DA:82:04:D9:8B:9B:69:D8:86:BB:6D:D2:67:63:1A:9B:57 Authority key identifier: 69:9A:0F:8D:15:A3:4F:59:95:6C:B4:80:0C:6C:44:04:DC:0E:BD:5D Certificate issuer: /CN=A915C1FE/serialNumber=699A0F8D15A34F59956CB4800C6C4404DC0EBD5D Certificate serial: 35B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft Manifest number: 358D Signing time: Sun 20 Sep 2026 15:14:57 +0000 Manifest this update: Sun 20 Sep 2026 15:14:57 +0000 Manifest next update: Sun 27 Sep 2026 15:14:57 +0000 Files and hashes: 1: aZoPjRWjT1mVbLSADGxEBNwOvV0.crl (hash: iTi7Lc52bJ+CFVb6q/RpdAcf9cs8HEwtVtl5mPU/WDg=) 2: Gbm9aJwn4Grd0bUlvCyB3YP5o-E.asa (hash: GfzS/0sFUcU3nk0Xd84HKIBNrFFblmJGFMfuUp5nQmE=) 3: 6BC5DC4AB10511E591A3E484C4F9AE02.roa (hash: FGtCl+rkKsPwQBZaBP2SI6ZyzxIcUGM879HPiMEoLJQ=) 4: 6A9E6940B10511E591A3E484C4F9AE02.roa (hash: RQy3CULDGNVnkWRkKUELBca0bv/+qjtto2dvJUv9MVk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.crl rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 15:14:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13747 (0x35b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C1FE, serialNumber=699A0F8D15A34F59956CB4800C6C4404DC0EBD5D Validity Not Before: Sep 20 15:14:57 2026 GMT Not After : Sep 27 15:14:57 2026 GMT Subject: CN=6aaff871-aa03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:f8:7a:18:c5:e5:ad:29:53:94:55:93:58:c6: f9:d3:cd:ef:90:d8:47:39:81:ee:67:2d:30:dc:8b: 6e:30:8c:00:c1:8b:53:91:72:bd:cb:35:9d:f3:03: cf:ff:db:20:de:9f:6f:c5:56:ff:b6:7d:3a:84:ce: e9:0c:09:11:2f:c3:99:30:7f:a3:f5:80:77:b7:f5: f7:f3:a8:9c:8d:e2:95:e6:00:d3:ec:58:7f:02:1f: 62:fe:6a:ed:7e:15:3d:37:dc:05:0f:8e:70:f9:21: 54:eb:ae:62:65:b4:54:a0:93:fa:3d:83:8e:e9:c8: cd:08:f2:f8:4a:f5:ef:15:21:aa:45:b9:9a:30:6c: f2:53:e3:c2:7d:ea:df:6b:e0:99:2d:9b:0f:26:01: df:45:fd:c3:aa:24:5d:db:61:4b:01:44:71:e4:47: bf:e2:9d:0f:8c:f5:a6:06:ea:c8:1e:72:7a:0e:72: e3:3d:49:1a:1f:dc:dd:32:86:1f:25:b8:cd:ba:da: 61:d8:a9:af:bc:61:ad:c8:61:a8:be:be:22:04:9c: b8:34:f1:1c:c8:0f:57:45:16:bb:5e:ac:49:cf:0b: 62:00:50:a1:a1:79:68:d3:ab:f4:7e:4a:35:70:59: 74:00:8f:5e:18:28:bc:ed:1a:78:17:ab:a8:1b:49: 73:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:2D:65:DA:82:04:D9:8B:9B:69:D8:86:BB:6D:D2:67:63:1A:9B:57 X509v3 Authority Key Identifier: keyid:69:9A:0F:8D:15:A3:4F:59:95:6C:B4:80:0C:6C:44:04:DC:0E:BD:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:af:8a:99:9c:c9:e5:47:08:fc:f8:43:3f:b7:4f:ff:e6:3b: c3:76:9a:cd:df:e6:94:c1:8e:53:9e:1f:19:b0:ff:36:e0:c5: 3c:23:13:bd:e4:49:cc:f5:fa:2e:65:a3:7c:bf:c2:93:c2:55: 8c:ef:29:a8:12:94:28:14:42:5b:d7:61:50:b2:15:a4:d3:01: 54:81:f5:9a:aa:ac:6a:c9:f0:6f:27:c3:17:5c:a7:52:ac:69: 29:3d:3a:e3:c5:49:a2:18:ed:41:fc:91:f2:89:76:9e:91:a3: 37:82:e5:1c:b4:0a:16:76:eb:3a:71:e8:69:6f:db:19:db:10: 9c:7b:33:da:1b:a6:fa:97:2b:b5:25:c4:8e:6b:fc:9f:12:b9: 0a:f6:6c:6e:3a:e7:0f:0e:6f:88:b9:32:f4:25:ed:ee:46:e2: d0:db:d3:57:c0:ec:1a:a2:75:ad:92:98:78:30:54:18:2f:af: 18:e3:02:42:e8:09:8c:98:10:8f:e5:d5:e4:7f:d6:52:5a:4b: 97:f5:ff:c6:1d:1c:75:67:f4:6c:7c:2a:ff:74:71:22:40:66: 08:10:1d:46:5b:f6:7d:60:37:0e:23:35:f2:87:74:92:6c:85: b6:cc:80:66:89:99:1f:11:be:62:1f:6b:47:d9:8a:75:b2:ff: 9c:d1:ff:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUMxRkUxMTAvBgNVBAUTKDY5OUEwRjhEMTVBMzRGNTk5NTZDQjQ4MDBDNkM0NDA0 REMwRUJENUQwHhcNMjYwOTIwMTUxNDU3WhcNMjYwOTI3MTUxNDU3WjAYMRYwFAYD VQQDEw02YWFmZjg3MS1hYTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Ph6GMXlrSlTlFWTWMb5083vkNhHOYHuZy0w3ItuMIwAwYtTkXK9yzWd8wPP /9sg3p9vxVb/tn06hM7pDAkRL8OZMH+j9YB3t/X386icjeKV5gDT7Fh/Ah9i/mrt fhU9N9wFD45w+SFU665iZbRUoJP6PYOO6cjNCPL4SvXvFSGqRbmaMGzyU+PCferf a+CZLZsPJgHfRf3DqiRd22FLAURx5Ee/4p0PjPWmBurIHnJ6DnLjPUkaH9zdMoYf JbjNutph2KmvvGGtyGGovr4iBJy4NPEcyA9XRRa7XqxJzwtiAFChoXlo06v0fko1 cFl0AI9eGCi87Rp4F6uoG0lzuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPMtZdqC BNmLm2nYhrtt0mdjGptXMB8GA1UdIwQYMBaAFGmaD40Vo09ZlWy0gAxsRATcDr1d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzFGRS9EMTE4QUFCQTFE QUExMUUyQTJFQ0NBQTYwOEIwMkNEMi9hWm9QalJXalQxbVZiTFNBREd4RUJOd092 VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Fab1BqUldqVDFtVmJMU0FER3hFQk53T3ZWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzFGRS9EMTE4QUFCQTFEQUExMUUyQTJFQ0NBQTYwOEIwMkNEMi9hWm9QalJXalQx bVZiTFNBREd4RUJOd092VjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASa+KmZzJ5UcI/PhDP7dP/+Y7w3aazd/mlMGOU54fGbD/NuDFPCMTveRJzPX6 LmWjfL/Ck8JVjO8pqBKUKBRCW9dhULIVpNMBVIH1mqqsasnwbyfDF1ynUqxpKT06 48VJohjtQfyR8ol2npGjN4LlHLQKFnbrOnHoaW/bGdsQnHsz2hum+pcrtSXEjmv8 nxK5CvZsbjrnDw5viLky9CXt7kbi0NvTV8DsGqJ1rZKYeDBUGC+vGOMCQugJjJgQ j+XV5H/WUlpLl/X/xh0cdWf0bHwq/3RxIkBmCBAdRlv2fWA3DiM18od0kmyFtsyA ZomZHxG+Yh9rR9mKdbL/nNH/iw== -----END CERTIFICATE-----Generated at Tue Sep 22 00:30:12 2026 by rpki-client