$ rpki-client -vvvf rpki.apnic.net/member_repository/A915D062/B1B8BEA6DB9911F090A4BCD166D3641D/R9ff9rQb1GjB8MnQTF6F4MM_n6s.mft File: R9ff9rQb1GjB8MnQTF6F4MM_n6s.mft (raw, json) Hash identifier: 9qvin5KNhBlWck1xfINYIV6HsfrA5I8jGwLlQAIN5ag= Subject key identifier: 0A:0C:BB:F8:34:BB:8A:2A:1F:52:EE:D4:54:81:62:0F:5B:E0:81:43 Authority key identifier: 47:D7:DF:F6:B4:1B:D4:68:C1:F0:C9:D0:4C:5E:85:E0:C3:3F:9F:AB Certificate issuer: /CN=A915D062/serialNumber=47D7DFF6B41BD468C1F0C9D04C5E85E0C33F9FAB Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R9ff9rQb1GjB8MnQTF6F4MM_n6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D062/B1B8BEA6DB9911F090A4BCD166D3641D/R9ff9rQb1GjB8MnQTF6F4MM_n6s.mft Manifest number: 95 Signing time: Mon 21 Sep 2026 07:31:01 +0000 Manifest this update: Mon 21 Sep 2026 07:31:00 +0000 Manifest next update: Mon 28 Sep 2026 07:31:00 +0000 Files and hashes: 1: R9ff9rQb1GjB8MnQTF6F4MM_n6s.crl (hash: 9WlOG3ql2vCqUHNsX3K90YTJkut9nFhB9KTQgdDGp+4=) 2: 8CD89B6A6E0B11F18E1C163B6CA30FBC.roa (hash: ODcN04nvm1op9jk/kK2I+MGQlFGVTO3t6jC01S03434=) 3: 32024D1A6D4511F1A099DD6B7447A888.roa (hash: ukb9hjFJ1eESRePT76kluMTncWiap8Lmbsf2j/BGakc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D062/B1B8BEA6DB9911F090A4BCD166D3641D/R9ff9rQb1GjB8MnQTF6F4MM_n6s.crl rsync://rpki.apnic.net/member_repository/A915D062/B1B8BEA6DB9911F090A4BCD166D3641D/R9ff9rQb1GjB8MnQTF6F4MM_n6s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R9ff9rQb1GjB8MnQTF6F4MM_n6s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:30:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D062, serialNumber=47D7DFF6B41BD468C1F0C9D04C5E85E0C33F9FAB Validity Not Before: Sep 21 07:31:00 2026 GMT Not After : Sep 28 07:31:00 2026 GMT Subject: CN=6ab0dd34-126d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:77:74:86:07:3a:e8:23:3b:84:7a:37:f6:3b: 68:d8:ab:b8:9f:14:49:22:e3:c4:40:8d:fb:4b:21: 46:e2:59:a9:fd:a3:a3:52:db:49:e2:aa:2d:bd:a5: 01:6c:d2:d3:a1:30:61:1c:9c:ff:83:d9:5e:d1:ba: 66:f7:be:e3:b8:c3:a6:fc:20:fb:eb:14:4d:f7:6b: 2a:8f:fb:2d:54:bf:93:d8:df:7b:f5:aa:65:33:c8: b2:c3:ae:e7:0f:94:84:f4:8b:0b:80:3d:44:c0:3e: 15:1f:8f:a8:c9:20:6b:d0:29:53:66:66:f8:3b:2a: bf:75:35:b7:5f:9f:52:f1:d2:76:9f:5a:78:f1:cf: 1f:4f:85:b6:8e:c8:69:9c:2e:18:d2:99:91:b0:ab: 84:31:0a:66:32:16:b0:db:02:e3:ec:a4:ec:da:50: e0:56:a6:71:d9:96:70:dc:86:10:14:93:6c:92:71: bb:0c:d3:6d:47:86:6f:1d:a8:a1:ab:5f:a4:ae:bd: 10:89:d4:b3:e9:21:04:db:1c:3d:4f:e7:55:21:07: 93:09:31:a1:65:48:41:d6:e4:31:b6:21:af:66:eb: 53:96:95:89:62:4e:ae:ca:86:71:3f:75:0b:bb:84: df:a2:41:98:37:39:0c:fc:a0:e8:be:72:41:07:f0: 28:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:0C:BB:F8:34:BB:8A:2A:1F:52:EE:D4:54:81:62:0F:5B:E0:81:43 X509v3 Authority Key Identifier: keyid:47:D7:DF:F6:B4:1B:D4:68:C1:F0:C9:D0:4C:5E:85:E0:C3:3F:9F:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D062/B1B8BEA6DB9911F090A4BCD166D3641D/R9ff9rQb1GjB8MnQTF6F4MM_n6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R9ff9rQb1GjB8MnQTF6F4MM_n6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D062/B1B8BEA6DB9911F090A4BCD166D3641D/R9ff9rQb1GjB8MnQTF6F4MM_n6s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:ff:81:c6:44:3b:ce:96:04:d3:a7:ec:ab:98:7c:07:b9:7f: bf:14:d9:b5:58:b7:b6:82:33:0a:ba:86:31:85:a0:c7:19:6b: 84:12:23:60:4e:17:72:a0:2b:09:27:30:cb:03:af:a0:4f:5d: f0:0b:ef:68:97:f6:be:92:84:e8:16:8a:9e:a3:8d:ef:ab:77: 2e:d3:dc:32:e3:fd:f8:a3:89:4f:47:3a:03:b9:5e:61:a5:5c: f1:83:6a:3a:61:b1:e4:b2:31:be:d4:8c:c6:d2:1b:17:b6:7e: 1f:98:93:0e:9b:3a:5b:d8:c4:1d:d0:a9:c1:4b:f6:33:7e:79: 8e:79:db:29:8e:1f:b1:ab:ea:5f:4f:49:9d:dd:c2:71:e4:2a: 4f:d9:5e:6c:de:bb:ea:6f:c1:68:11:34:84:ea:ee:0b:b9:92: 93:46:05:71:f9:5f:b2:a6:19:fd:87:11:1a:c5:27:27:12:45: 6f:4a:14:b8:f1:8f:12:a9:95:b3:25:65:07:a4:2a:a8:cc:48: c2:5c:71:1d:cf:e9:85:f9:22:7b:71:1a:f5:20:4e:fb:f7:a2: 30:b1:b6:45:bb:ae:22:a1:d0:90:cc:dc:4c:26:27:73:98:e5: 00:d7:62:48:b3:41:dd:bf:38:16:a9:53:fe:11:9c:bf:61:7a: 78:9a:4e:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQwNjIxMTAvBgNVBAUTKDQ3RDdERkY2QjQxQkQ0NjhDMUYwQzlEMDRDNUU4NUUw QzMzRjlGQUIwHhcNMjYwOTIxMDczMTAwWhcNMjYwOTI4MDczMTAwWjAYMRYwFAYD VQQDEw02YWIwZGQzNC0xMjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqnd0hgc66CM7hHo39jto2Ku4nxRJIuPEQI37SyFG4lmp/aOjUttJ4qotvaUB bNLToTBhHJz/g9le0bpm977juMOm/CD76xRN92sqj/stVL+T2N979aplM8iyw67n D5SE9IsLgD1EwD4VH4+oySBr0ClTZmb4Oyq/dTW3X59S8dJ2n1p48c8fT4W2jshp nC4Y0pmRsKuEMQpmMhaw2wLj7KTs2lDgVqZx2ZZw3IYQFJNsknG7DNNtR4ZvHaih q1+krr0QidSz6SEE2xw9T+dVIQeTCTGhZUhB1uQxtiGvZutTlpWJYk6uyoZxP3UL u4TfokGYNzkM/KDovnJBB/AoawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAoMu/g0 u4oqH1Lu1FSBYg9b4IFDMB8GA1UdIwQYMBaAFEfX3/a0G9RowfDJ0ExeheDDP5+r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDA2Mi9CMUI4QkVBNkRC OTkxMUYwOTBBNEJDRDE2NkQzNjQxRC9SOWZmOXJRYjFHakI4TW5RVEY2RjRNTV9u NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1I5ZmY5clFiMUdqQjhNblFURjZGNE1NX242cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDA2Mi9CMUI4QkVBNkRCOTkxMUYwOTBBNEJDRDE2NkQzNjQxRC9SOWZmOXJRYjFH akI4TW5RVEY2RjRNTV9uNnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaP+BxkQ7zpYE06fsq5h8B7l/vxTZtVi3toIzCrqGMYWgxxlrhBIjYE4XcqAr CScwywOvoE9d8AvvaJf2vpKE6BaKnqON76t3LtPcMuP9+KOJT0c6A7leYaVc8YNq OmGx5LIxvtSMxtIbF7Z+H5iTDps6W9jEHdCpwUv2M355jnnbKY4fsavqX09Jnd3C ceQqT9lebN676m/BaBE0hOruC7mSk0YFcflfsqYZ/YcRGsUnJxJFb0oUuPGPEqmV syVlB6QqqMxIwlxxHc/phfkie3Ea9SBO+/eiMLG2RbuuIqHQkMzcTCYnc5jlANdi SLNB3b84FqlT/hGcv2F6eJpONw== -----END CERTIFICATE-----Generated at Tue Sep 22 12:40:46 2026 by rpki-client