$ rpki-client -vvvf rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/R0v3Ne0o81GLzgrEYpWL7Fgs12U.mft File: R0v3Ne0o81GLzgrEYpWL7Fgs12U.mft (raw, json) Hash identifier: DcT9nX7eJmgl6iCaH2fukJfe1iRkv1XzGG/nn59oODA= Subject key identifier: BB:31:89:74:98:C6:4E:69:0C:C0:06:E2:E2:C6:A2:8F:CE:06:D2:11 Authority key identifier: 47:4B:F7:35:ED:28:F3:51:8B:CE:0A:C4:62:95:8B:EC:58:2C:D7:65 Certificate issuer: /CN=A9166279/serialNumber=474BF735ED28F3518BCE0AC462958BEC582CD765 Certificate serial: EF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R0v3Ne0o81GLzgrEYpWL7Fgs12U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/R0v3Ne0o81GLzgrEYpWL7Fgs12U.mft Manifest number: EA Signing time: Mon 21 Sep 2026 06:28:02 +0000 Manifest this update: Mon 21 Sep 2026 06:28:01 +0000 Manifest next update: Mon 28 Sep 2026 06:28:01 +0000 Files and hashes: 1: R0v3Ne0o81GLzgrEYpWL7Fgs12U.crl (hash: uRzvxmvRSKn2o/NQ9JPqmEw1gI9C8oVN4FK4ciXCQF8=) 2: C92D041297BE11F08D37F648C4F9AE02.roa (hash: 1yGUy+FEcu5CKxFiOOSQ5RewENgHpvN09c5O9/FyM64=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/R0v3Ne0o81GLzgrEYpWL7Fgs12U.crl rsync://rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/R0v3Ne0o81GLzgrEYpWL7Fgs12U.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R0v3Ne0o81GLzgrEYpWL7Fgs12U.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:28:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 239 (0xef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166279, serialNumber=474BF735ED28F3518BCE0AC462958BEC582CD765 Validity Not Before: Sep 21 06:28:01 2026 GMT Not After : Sep 28 06:28:01 2026 GMT Subject: CN=6ab0ce71-4feb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:72:6a:36:80:90:5a:e3:96:63:2c:c6:40:f3: 26:5c:90:14:3c:d5:43:cb:2c:59:fd:e4:af:e7:dc: 26:1f:23:07:90:89:ae:26:ec:66:22:a0:28:ed:97: 26:67:b1:97:af:2d:9f:3a:5a:ed:b8:96:15:09:85: ac:99:95:9c:d5:48:75:ac:f3:6b:05:18:85:c3:b8: 31:d5:37:c5:82:04:58:2d:58:13:64:a9:a4:c1:33: 0b:e5:cf:95:cf:44:cf:35:f9:97:c7:dd:da:dd:26: 33:af:d5:f5:f6:2f:8d:19:18:56:f5:95:2c:dd:f5: 57:45:37:60:c8:1b:a5:da:23:63:0c:f5:6f:2e:c8: e0:40:cf:7f:b3:d6:e1:fd:a0:3f:de:3d:c5:6b:9f: 24:ab:b9:cd:df:4b:49:ae:b7:63:dd:1f:16:74:b5: 29:10:82:74:60:72:06:65:2e:89:93:77:ac:b3:a4: dc:66:35:ee:3a:6b:ea:3d:27:99:33:38:83:bc:c7: 59:75:ea:78:c2:92:44:af:e7:7b:38:fe:83:70:78: 8c:70:98:97:64:28:5e:19:e0:22:72:9f:37:e5:4f: 00:b6:e1:26:ab:c8:a4:a0:dc:3b:6e:88:01:cd:c7: aa:07:d9:8e:38:98:80:68:d2:34:77:a0:14:b8:00: 95:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:31:89:74:98:C6:4E:69:0C:C0:06:E2:E2:C6:A2:8F:CE:06:D2:11 X509v3 Authority Key Identifier: keyid:47:4B:F7:35:ED:28:F3:51:8B:CE:0A:C4:62:95:8B:EC:58:2C:D7:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/R0v3Ne0o81GLzgrEYpWL7Fgs12U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R0v3Ne0o81GLzgrEYpWL7Fgs12U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/R0v3Ne0o81GLzgrEYpWL7Fgs12U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:49:d4:d4:0c:64:b2:de:d2:c9:73:26:36:5a:db:01:d1:bc: 3a:19:45:74:75:0c:9c:5c:81:b7:60:43:7f:27:49:17:c5:c9: e6:f2:7c:a3:17:f1:49:91:12:6d:3b:f2:e9:54:c8:a3:ff:e2: 55:5e:a7:60:51:1d:ee:9b:1b:05:8f:9e:ab:89:8b:8b:2b:d3: 4f:f0:86:7e:e3:77:5a:90:32:b0:48:3e:20:2a:ff:df:37:20: 87:fb:0b:03:ac:b3:01:a7:d6:88:28:af:ad:4d:86:22:06:a6: 79:c9:ad:5d:f7:0f:4c:26:2b:f4:e2:26:14:72:fb:7e:3e:2b: c1:1e:e1:0b:1b:3e:3a:12:2f:0f:4e:04:53:de:d0:30:f5:ee: 89:0f:6c:0d:40:97:14:a5:14:2f:9a:94:1d:9d:ac:3d:23:bd: aa:b1:0b:9e:20:4f:d7:2a:4f:64:a6:b2:cc:9b:26:f5:32:4c: 6b:af:a8:6d:52:14:3f:cd:c1:7f:48:3c:2c:01:56:60:97:c4: 3a:8d:31:7a:27:24:eb:93:8e:38:59:28:75:7c:30:54:26:32: 36:31:b1:f1:29:ea:bb:73:be:30:ff:54:e2:74:76:82:4c:b0: f0:cd:25:17:02:5c:67:0e:26:7c:49:76:6e:2e:08:13:69:35: 78:a3:d9:1f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjYyNzkxMTAvBgNVBAUTKDQ3NEJGNzM1RUQyOEYzNTE4QkNFMEFDNDYyOTU4QkVD NTgyQ0Q3NjUwHhcNMjYwOTIxMDYyODAxWhcNMjYwOTI4MDYyODAxWjAYMRYwFAYD VQQDEw02YWIwY2U3MS00ZmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA23JqNoCQWuOWYyzGQPMmXJAUPNVDyyxZ/eSv59wmHyMHkImuJuxmIqAo7Zcm Z7GXry2fOlrtuJYVCYWsmZWc1Uh1rPNrBRiFw7gx1TfFggRYLVgTZKmkwTML5c+V z0TPNfmXx93a3SYzr9X19i+NGRhW9ZUs3fVXRTdgyBul2iNjDPVvLsjgQM9/s9bh /aA/3j3Fa58kq7nN30tJrrdj3R8WdLUpEIJ0YHIGZS6Jk3ess6TcZjXuOmvqPSeZ MziDvMdZdep4wpJEr+d7OP6DcHiMcJiXZCheGeAicp835U8AtuEmq8ikoNw7bogB zceqB9mOOJiAaNI0d6AUuACVbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLsxiXSY xk5pDMAG4uLGoo/OBtIRMB8GA1UdIwQYMBaAFEdL9zXtKPNRi84KxGKVi+xYLNdl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjI3OS8zOEIyQzdCQzU4 Q0QxMUYwQUQxMDA4NzdDNEY5QUUwMi9SMHYzTmUwbzgxR0x6Z3JFWXBXTDdGZ3Mx MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1IwdjNOZTBvODFHTHpnckVZcFdMN0ZnczEyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NjI3OS8zOEIyQzdCQzU4Q0QxMUYwQUQxMDA4NzdDNEY5QUUwMi9SMHYzTmUwbzgx R0x6Z3JFWXBXTDdGZ3MxMlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmknU1Axkst7SyXMmNlrbAdG8OhlFdHUMnFyBt2BDfydJF8XJ5vJ8oxfxSZES bTvy6VTIo//iVV6nYFEd7psbBY+eq4mLiyvTT/CGfuN3WpAysEg+ICr/3zcgh/sL A6yzAafWiCivrU2GIgamecmtXfcPTCYr9OImFHL7fj4rwR7hCxs+OhIvD04EU97Q MPXuiQ9sDUCXFKUUL5qUHZ2sPSO9qrELniBP1ypPZKayzJsm9TJMa6+obVIUP83B f0g8LAFWYJfEOo0xeick65OOOFkodXwwVCYyNjGx8Snqu3O+MP9U4nR2gkyw8M0l FwJcZw4mfEl2bi4IE2k1eKPZHw== -----END CERTIFICATE-----Generated at Tue Sep 22 20:17:48 2026 by rpki-client