$ rpki-client -vvvf rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft File: aHvrJ3oFne_qK-3WevsbgjiOXrE.mft (raw, json) Hash identifier: bdxcnIUj2BZuuMZUTkKFEwxqjSFZ1iHjj6BYqkiGRrI= Subject key identifier: 9E:55:5B:B6:C2:5D:1A:14:52:A9:70:BA:5B:A3:BD:34:C0:5C:5F:FB Authority key identifier: 68:7B:EB:27:7A:05:9D:EF:EA:2B:ED:D6:7A:FB:1B:82:38:8E:5E:B1 Certificate issuer: /CN=A9165FAD/serialNumber=687BEB277A059DEFEA2BEDD67AFB1B82388E5EB1 Certificate serial: 08CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft Manifest number: 08AE Signing time: Fri 18 Sep 2026 20:40:09 +0000 Manifest this update: Fri 18 Sep 2026 20:40:08 +0000 Manifest next update: Fri 25 Sep 2026 20:40:08 +0000 Files and hashes: 1: aHvrJ3oFne_qK-3WevsbgjiOXrE.crl (hash: VTdpLd+0OyjOtzRq1m9pmTrIRUSvXBO8YQ9HgngequE=) 2: D5775FF4E54F11F0875E48B9366F56BC.roa (hash: dBaY0JbbVzl8W6CAtYQ8b8Su4AnGzP3sLeHSsKnDsdA=) 3: 0ED6FD58E4AC11F09CFF02084D6F56BC.roa (hash: c00S8PMH6seb894IcBTA4+jGD8At/7O3wWr5RItqF8c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.crl rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2251 (0x8cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165FAD, serialNumber=687BEB277A059DEFEA2BEDD67AFB1B82388E5EB1 Validity Not Before: Sep 18 20:40:08 2026 GMT Not After : Sep 25 20:40:08 2026 GMT Subject: CN=6aada1a9-b610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:45:3f:fd:ff:9d:41:f5:fd:ff:d0:96:71:01: 12:ff:81:23:6f:42:a5:03:56:8c:53:39:10:5c:8e: 01:a2:d6:aa:9b:6d:9c:4d:ef:f9:87:c3:da:ec:84: 25:1c:f5:2c:15:98:70:42:2b:f3:41:3a:e0:99:47: 2f:84:a7:d1:5a:cb:fa:a2:0e:ad:48:50:08:41:df: 19:92:87:59:3a:73:80:62:8d:dd:78:7b:87:f1:87: 4d:5e:5a:3c:b7:91:6e:68:52:b8:57:39:db:89:64: 3f:aa:d3:28:bb:2e:1b:d8:e9:b2:36:9f:a6:64:5c: 88:ba:bf:ad:fd:f0:68:3d:0c:d1:7e:13:8e:ec:c0: 2d:7c:89:5d:87:8e:be:37:7c:70:c0:c7:92:3c:fb: 44:15:38:c9:88:d4:bf:66:64:12:6c:14:99:25:4a: 3c:6b:62:2f:7e:25:59:e9:38:e7:82:3a:f7:a0:a9: 22:4d:ee:41:0b:d1:37:ea:e7:1a:31:c1:09:cc:f3: 01:3f:0a:53:0d:a5:61:eb:e9:7d:2c:18:be:a4:76: bd:91:d8:df:33:c6:e3:25:2e:31:5d:46:c1:c3:da: 7b:6b:87:af:bc:bc:a0:57:66:44:e6:b7:2a:af:ca: 79:4e:15:93:44:a8:46:7e:75:29:2e:42:3e:44:f6: b1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:55:5B:B6:C2:5D:1A:14:52:A9:70:BA:5B:A3:BD:34:C0:5C:5F:FB X509v3 Authority Key Identifier: keyid:68:7B:EB:27:7A:05:9D:EF:EA:2B:ED:D6:7A:FB:1B:82:38:8E:5E:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:5d:c7:db:46:ee:a5:87:24:28:be:1a:ec:7c:28:42:fb:77: 8f:9c:96:c4:31:c0:aa:47:d4:67:f8:37:90:39:70:c3:e0:f8: 93:a1:2d:4b:8e:f8:a0:9a:35:d1:e1:65:fc:c4:22:aa:b2:1b: 38:c9:a3:10:77:ed:d2:ec:fa:92:3f:2c:3c:66:b8:a4:ea:83: 54:9d:91:31:86:a4:63:f6:e7:99:a0:76:53:13:e9:57:b2:b0: a7:cb:8d:34:a8:87:55:3c:01:4f:e5:f0:8a:fc:89:ac:52:44: 02:ce:3f:e6:2f:33:b7:8f:28:f0:2a:28:90:3b:db:5a:de:95: 74:ee:e8:5a:89:0e:af:7e:14:0c:f8:0b:2e:83:c1:19:73:ea: 8c:62:e0:fa:29:97:f7:24:41:28:c0:b1:c3:39:3d:3c:ee:bd: f3:03:d5:19:29:48:0b:59:6b:eb:ed:39:69:d8:7e:9a:49:8f: 74:27:a1:75:aa:18:f5:a3:5c:c5:01:6b:30:f6:4c:f9:8c:7c: bd:f7:e0:44:c1:5f:98:71:d2:af:7b:2f:29:ff:57:7d:42:31: bd:bf:e9:0c:b9:f0:c2:92:93:83:93:67:c2:83:21:ba:a6:25: 32:03:8f:ba:ae:bb:6b:65:1f:77:39:20:05:f2:ea:4d:d5:6a: a8:72:7e:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVGQUQxMTAvBgNVBAUTKDY4N0JFQjI3N0EwNTlERUZFQTJCRURENjdBRkIxQjgy Mzg4RTVFQjEwHhcNMjYwOTE4MjA0MDA4WhcNMjYwOTI1MjA0MDA4WjAYMRYwFAYD VQQDEw02YWFkYTFhOS1iNjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArEU//f+dQfX9/9CWcQES/4Ejb0KlA1aMUzkQXI4Botaqm22cTe/5h8Pa7IQl HPUsFZhwQivzQTrgmUcvhKfRWsv6og6tSFAIQd8ZkodZOnOAYo3deHuH8YdNXlo8 t5FuaFK4VznbiWQ/qtMouy4b2OmyNp+mZFyIur+t/fBoPQzRfhOO7MAtfIldh46+ N3xwwMeSPPtEFTjJiNS/ZmQSbBSZJUo8a2IvfiVZ6Tjngjr3oKkiTe5BC9E36uca McEJzPMBPwpTDaVh6+l9LBi+pHa9kdjfM8bjJS4xXUbBw9p7a4evvLygV2ZE5rcq r8p5ThWTRKhGfnUpLkI+RPax9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ5VW7bC XRoUUqlwulujvTTAXF/7MB8GA1UdIwQYMBaAFGh76yd6BZ3v6ivt1nr7G4I4jl6x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUZBRC9BNEQ3ODk5RTA4 NjYxMUVCOEEyRDE1MzVDNEY5QUUwMi9hSHZySjNvRm5lX3FLLTNXZXZzYmdqaU9Y ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FIdnJKM29GbmVfcUstM1dldnNiZ2ppT1hyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUZBRC9BNEQ3ODk5RTA4NjYxMUVCOEEyRDE1MzVDNEY5QUUwMi9hSHZySjNvRm5l X3FLLTNXZXZzYmdqaU9YckUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFF3H20bupYckKL4a7HwoQvt3j5yWxDHAqkfUZ/g3kDlww+D4k6EtS474oJo1 0eFl/MQiqrIbOMmjEHft0uz6kj8sPGa4pOqDVJ2RMYakY/bnmaB2UxPpV7Kwp8uN NKiHVTwBT+XwivyJrFJEAs4/5i8zt48o8CookDvbWt6VdO7oWokOr34UDPgLLoPB GXPqjGLg+imX9yRBKMCxwzk9PO698wPVGSlIC1lr6+05adh+mkmPdCehdaoY9aNc xQFrMPZM+Yx8vffgRMFfmHHSr3svKf9XfUIxvb/pDLnwwpKTg5NnwoMhuqYlMgOP uq67a2UfdzkgBfLqTdVqqHJ+kQ== -----END CERTIFICATE-----Generated at Sun Sep 20 20:33:43 2026 by rpki-client