$ rpki-client -vvvf rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft File: EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft (raw, json) Hash identifier: +3TQIBFuXZ1W+0zinlViG1ttYHJiXvw0izk3Rszw9eM= Subject key identifier: 93:7A:BD:83:A8:74:A0:22:6B:3F:86:B7:FF:AB:96:EC:F6:D3:13:AA Authority key identifier: 10:0D:9A:EE:91:D2:27:FE:47:59:34:F2:97:8C:36:17:D8:CF:A8:EE Certificate issuer: /CN=A9160C9E/serialNumber=100D9AEE91D227FE475934F2978C3617D8CFA8EE Certificate serial: 01A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft Manifest number: 018C Signing time: Mon 21 Sep 2026 04:54:04 +0000 Manifest this update: Mon 21 Sep 2026 04:54:04 +0000 Manifest next update: Mon 28 Sep 2026 04:54:04 +0000 Files and hashes: 1: EA2a7pHSJ_5HWTTyl4w2F9jPqO4.crl (hash: eFstn3YQH5oYuDo2HLLmYSDTmHpcOT60Pxojujijdp0=) 2: 44B65A3890FF11EFA6BECB58C4F9AE02.roa (hash: 9p5HLgmT1CdIHAjr4jafHOekxC05g0RlL/udgHGc7xY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.crl rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 04:54:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 423 (0x1a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160C9E, serialNumber=100D9AEE91D227FE475934F2978C3617D8CFA8EE Validity Not Before: Sep 21 04:54:04 2026 GMT Not After : Sep 28 04:54:04 2026 GMT Subject: CN=6ab0b86c-e919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b3:39:ef:a2:72:3e:7a:b4:9a:bb:e8:37:5c: d9:fd:bb:ca:a2:fc:6e:92:ce:19:af:01:00:6c:69: 97:35:ff:54:b4:13:c8:cf:1e:fa:5a:a5:5b:e3:e5: 27:e6:48:a9:31:19:15:32:48:8b:c4:5d:0d:02:75: 4f:77:ac:02:08:f6:6e:d7:e2:65:90:8a:de:2c:e1: 30:cc:65:78:46:a8:2e:f5:75:3d:b9:d3:5d:fa:83: 40:cd:af:bd:62:19:94:6f:90:a0:17:51:a7:1d:3c: 5a:d1:ff:a4:5f:03:20:ff:fe:91:3e:bc:ea:13:51: b1:87:17:66:d2:87:64:21:a8:bb:1c:78:44:c2:c6: 06:ab:ba:a7:65:68:60:95:dd:69:88:ad:01:8a:d3: 9c:4f:e9:2c:a4:15:99:1d:38:1f:52:e3:64:73:57: e4:a6:bc:25:58:6c:24:99:58:12:2d:b0:16:b2:3d: ab:bd:38:16:4f:c9:38:07:bd:a3:92:5e:1c:47:84: 08:49:e9:fc:8a:61:a1:31:b3:b1:2e:bf:cb:aa:29: 12:c5:74:c1:cf:8c:93:bd:fd:7e:ac:a5:6a:e0:73: 3c:c1:c0:97:a8:74:5e:95:40:83:c1:c3:20:92:06: aa:a9:ff:66:ef:e9:04:28:85:cb:1e:70:65:3f:8a: 2f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:7A:BD:83:A8:74:A0:22:6B:3F:86:B7:FF:AB:96:EC:F6:D3:13:AA X509v3 Authority Key Identifier: keyid:10:0D:9A:EE:91:D2:27:FE:47:59:34:F2:97:8C:36:17:D8:CF:A8:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:f0:74:2c:8a:ee:c0:f1:c4:c9:70:52:fb:fa:57:ba:22:d8: 3c:1e:32:57:34:e2:6d:d5:08:fd:69:02:df:63:c6:ab:d6:59: e4:7c:4b:38:d7:2f:d1:23:34:12:9f:fd:16:83:c6:b3:c0:61: a5:19:a4:b7:b2:57:f1:e7:10:ad:fe:49:d5:9c:45:24:b7:d3: ca:7f:ba:ea:9a:b3:d2:52:56:e6:c0:10:47:73:70:ae:bf:b7: 4e:e6:62:d6:2d:52:37:b6:ea:4c:92:2e:9a:52:da:bc:b7:8d: fe:4e:c0:bb:7b:e6:fa:f7:4c:47:1e:f7:7d:a3:8c:c5:85:bd: 07:3c:c8:f7:95:f9:d7:f6:57:a0:0f:7d:27:50:ab:3d:97:26: 5f:1e:73:25:43:af:96:50:c6:37:ab:ac:3f:49:95:04:9c:9a: d4:18:a1:02:e6:64:da:f7:e1:20:88:0d:76:fc:af:d0:e0:36: a6:45:16:7e:93:78:82:3c:72:d2:38:2d:a1:1d:e4:53:50:0c: 81:a3:bb:7b:7b:4b:0c:f9:53:1b:0a:71:50:c9:ad:95:a8:5b: 43:19:8d:99:e0:b6:04:34:60:17:a2:a8:58:39:a4:f8:e9:8a: 5b:8e:95:4c:e3:1b:56:55:4c:1e:f7:56:78:9b:ce:c0:ff:60: 5e:6a:c3:9e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBDOUUxMTAvBgNVBAUTKDEwMEQ5QUVFOTFEMjI3RkU0NzU5MzRGMjk3OEMzNjE3 RDhDRkE4RUUwHhcNMjYwOTIxMDQ1NDA0WhcNMjYwOTI4MDQ1NDA0WjAYMRYwFAYD VQQDEw02YWIwYjg2Yy1lOTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn7M576JyPnq0mrvoN1zZ/bvKovxuks4ZrwEAbGmXNf9UtBPIzx76WqVb4+Un 5kipMRkVMkiLxF0NAnVPd6wCCPZu1+JlkIreLOEwzGV4Rqgu9XU9udNd+oNAza+9 YhmUb5CgF1GnHTxa0f+kXwMg//6RPrzqE1Gxhxdm0odkIai7HHhEwsYGq7qnZWhg ld1piK0BitOcT+kspBWZHTgfUuNkc1fkprwlWGwkmVgSLbAWsj2rvTgWT8k4B72j kl4cR4QISen8imGhMbOxLr/LqikSxXTBz4yTvf1+rKVq4HM8wcCXqHRelUCDwcMg kgaqqf9m7+kEKIXLHnBlP4ovVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJN6vYOo dKAiaz+Gt/+rluz20xOqMB8GA1UdIwQYMBaAFBANmu6R0if+R1k08peMNhfYz6ju MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEM5RS81N0ZGNEJDQThC Q0ExMUVGQUJGQzFBMzlDNEY5QUUwMi9FQTJhN3BIU0pfNUhXVFR5bDR3MkY5alBx TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VBMmE3cEhTSl81SFdUVHlsNHcyRjlqUHFPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEM5RS81N0ZGNEJDQThCQ0ExMUVGQUJGQzFBMzlDNEY5QUUwMi9FQTJhN3BIU0pf NUhXVFR5bDR3MkY5alBxTzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANvB0LIruwPHEyXBS+/pXuiLYPB4yVzTibdUI/WkC32PGq9ZZ5HxLONcv0SM0 Ep/9FoPGs8BhpRmkt7JX8ecQrf5J1ZxFJLfTyn+66pqz0lJW5sAQR3Nwrr+3TuZi 1i1SN7bqTJIumlLavLeN/k7Au3vm+vdMRx73faOMxYW9BzzI95X51/ZXoA99J1Cr PZcmXx5zJUOvllDGN6usP0mVBJya1BihAuZk2vfhIIgNdvyv0OA2pkUWfpN4gjxy 0jgtoR3kU1AMgaO7e3tLDPlTGwpxUMmtlahbQxmNmeC2BDRgF6KoWDmk+OmKW46V TOMbVlVMHvdWeJvOwP9gXmrDng== -----END CERTIFICATE-----Generated at Mon Sep 21 18:22:29 2026 by rpki-client