$ rpki-client -vvvf rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.mft File: AQMtnfw2KpWHQ-htPI0GEaatsFs.mft (raw, json) Hash identifier: oH+5dFxbPhJ8ciN931+xP5K5Sf7IGwDJ/zqqb2PhOIo= Subject key identifier: 3F:0A:FC:7D:F0:D2:C3:B3:39:1F:4D:DC:36:5F:09:AA:96:13:11:7B Authority key identifier: 01:03:2D:9D:FC:36:2A:95:87:43:E8:6D:3C:8D:06:11:A6:AD:B0:5B Certificate issuer: /CN=A9166E2B/serialNumber=01032D9DFC362A958743E86D3C8D0611A6ADB05B Certificate serial: 0D4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQMtnfw2KpWHQ-htPI0GEaatsFs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.mft Manifest number: 0D27 Signing time: Tue 22 Sep 2026 18:12:25 +0000 Manifest this update: Tue 22 Sep 2026 18:12:25 +0000 Manifest next update: Tue 29 Sep 2026 18:12:25 +0000 Files and hashes: 1: AQMtnfw2KpWHQ-htPI0GEaatsFs.crl (hash: Ik2YJYevPZXJSuittMtrE631jVuFisGkJr7DV8GqKYE=) 2: 20F1E6906B8C11F0A612561BC4F9AE02.roa (hash: ZU1zBpAfTGCrjm2xsGHreVQj4RFT5bNxMFoo9IRDAv0=) 3: 033EB676834D11F193DB325E60A30FBC.roa (hash: JeLY9INIwkxyYjsTV9pQhbhk/f5tgjUgFdxQQau5BR4=) 4: 2BA0624C078511ED87041524C4F9AE02.roa (hash: 0jbGDYo7DDfv4MFk7YXPgz8jJvCIX6bzZUVL+H0jKpo=) 5: 3FF85EE88A6C11F18AC6DE993F11F970.roa (hash: DQXrNc95cxUGYQVQkKsxBmvCdcmn9YS5SIvwcsF7Ii4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.crl rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQMtnfw2KpWHQ-htPI0GEaatsFs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 18:12:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3404 (0xd4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166E2B, serialNumber=01032D9DFC362A958743E86D3C8D0611A6ADB05B Validity Not Before: Sep 22 18:12:25 2026 GMT Not After : Sep 29 18:12:25 2026 GMT Subject: CN=6ab2c509-8a25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:cf:ba:c7:18:44:ff:16:bf:3c:af:d7:5c:74: 4f:f7:57:cb:db:2c:7b:36:0b:ac:8e:12:c5:cc:28: cc:9a:72:06:c6:39:af:2e:8d:12:7b:b5:89:bd:20: f1:98:67:a7:f6:3d:b6:28:a6:f6:6d:0a:d3:e9:d8: 6b:81:e8:c8:41:89:b2:f9:bf:44:7b:81:ef:94:3c: 85:a3:9a:df:7a:d5:68:17:5e:15:9a:05:30:5d:fd: 47:5c:a6:be:d2:70:09:55:27:af:9f:b1:43:75:41: 66:6f:40:ee:4d:ec:2c:d3:d7:f4:82:81:f0:19:5b: 42:de:d7:5d:15:2d:38:96:48:59:c3:33:5d:08:4a: c6:00:7c:38:d4:9b:bc:c4:fb:47:b2:b1:f8:0a:3e: d4:bd:97:c0:35:94:08:a1:0d:05:90:75:6a:4b:66: a9:e2:2e:7c:12:21:7e:de:37:cc:35:e2:f2:c7:84: 05:99:d3:16:6f:59:c2:b3:6b:fd:b4:0c:28:b7:70: 50:db:35:6e:ef:d3:4f:6e:2a:95:ce:9a:fa:04:bd: 0a:ee:77:95:fe:83:23:31:6f:23:0f:0a:4b:be:a2: 91:39:47:4f:ce:f8:c9:5f:99:49:55:a1:fd:94:54: 88:47:76:05:b5:ce:bc:69:f0:e0:ab:4a:fe:e2:93: 74:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:0A:FC:7D:F0:D2:C3:B3:39:1F:4D:DC:36:5F:09:AA:96:13:11:7B X509v3 Authority Key Identifier: keyid:01:03:2D:9D:FC:36:2A:95:87:43:E8:6D:3C:8D:06:11:A6:AD:B0:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQMtnfw2KpWHQ-htPI0GEaatsFs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:8b:d6:ae:33:d9:c8:bb:86:35:e0:31:1a:fa:24:39:c5:26: 9d:8f:14:6f:b8:b4:bd:d4:cd:c7:51:69:ad:ae:49:c6:fd:50: 72:6b:9b:47:e2:60:b0:30:f8:60:3c:0b:80:bb:08:e0:1f:94: c8:f2:43:27:dc:64:37:56:06:4d:93:2a:2f:cd:39:43:22:5f: d8:e0:96:65:22:c2:52:63:10:a0:da:06:6b:d8:ca:42:08:ee: 05:27:36:49:c8:3a:8a:ff:e4:7b:48:37:54:1b:ee:a7:15:42: 67:73:12:1e:f7:c4:e7:48:d8:f4:08:1e:b8:4f:6c:70:c8:c5: 02:56:6e:3e:44:96:a9:38:53:db:09:f1:76:ab:3f:df:f0:a4: ac:48:89:57:dc:46:46:a9:d5:13:80:6c:b7:b1:3f:c7:65:ab: 72:5a:03:2f:46:23:2e:66:bc:6e:14:96:06:9a:7a:24:47:8e: c6:f0:e9:15:03:d3:26:e7:aa:6e:5d:da:ef:d2:c8:47:a5:16: 82:4c:48:2b:d5:d1:5b:b7:62:65:6d:ef:19:91:06:5b:80:8e: 12:99:f1:e2:71:d3:6d:da:86:6f:30:20:ae:cf:08:5a:a8:d1: 65:02:fd:49:7b:db:93:c9:6b:82:e3:a3:92:31:83:2a:c0:06: ba:0b:15:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjZFMkIxMTAvBgNVBAUTKDAxMDMyRDlERkMzNjJBOTU4NzQzRTg2RDNDOEQwNjEx QTZBREIwNUIwHhcNMjYwOTIyMTgxMjI1WhcNMjYwOTI5MTgxMjI1WjAYMRYwFAYD VQQDEw02YWIyYzUwOS04YTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqM+6xxhE/xa/PK/XXHRP91fL2yx7NgusjhLFzCjMmnIGxjmvLo0Se7WJvSDx mGen9j22KKb2bQrT6dhrgejIQYmy+b9Ee4HvlDyFo5rfetVoF14VmgUwXf1HXKa+ 0nAJVSevn7FDdUFmb0DuTews09f0goHwGVtC3tddFS04lkhZwzNdCErGAHw41Ju8 xPtHsrH4Cj7UvZfANZQIoQ0FkHVqS2ap4i58EiF+3jfMNeLyx4QFmdMWb1nCs2v9 tAwot3BQ2zVu79NPbiqVzpr6BL0K7neV/oMjMW8jDwpLvqKROUdPzvjJX5lJVaH9 lFSIR3YFtc68afDgq0r+4pN0LQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD8K/H3w 0sOzOR9N3DZfCaqWExF7MB8GA1UdIwQYMBaAFAEDLZ38NiqVh0PobTyNBhGmrbBb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NkUyQi8yN0U3Q0FBNjBD MkQxMUVBQjAyOURCNTNDNEY5QUUwMi9BUU10bmZ3MktwV0hRLWh0UEkwR0VhYXRz RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FRTXRuZncyS3BXSFEtaHRQSTBHRWFhdHNGcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NkUyQi8yN0U3Q0FBNjBDMkQxMUVBQjAyOURCNTNDNEY5QUUwMi9BUU10bmZ3Mktw V0hRLWh0UEkwR0VhYXRzRnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXYvWrjPZyLuGNeAxGvokOcUmnY8Ub7i0vdTNx1Fpra5Jxv1QcmubR+JgsDD4 YDwLgLsI4B+UyPJDJ9xkN1YGTZMqL805QyJf2OCWZSLCUmMQoNoGa9jKQgjuBSc2 Scg6iv/ke0g3VBvupxVCZ3MSHvfE50jY9AgeuE9scMjFAlZuPkSWqThT2wnxdqs/ 3/CkrEiJV9xGRqnVE4Bst7E/x2WrcloDL0YjLma8bhSWBpp6JEeOxvDpFQPTJueq bl3a79LIR6UWgkxIK9XRW7diZW3vGZEGW4COEpnx4nHTbdqGbzAgrs8IWqjRZQL9 SXvbk8lrguOjkjGDKsAGugsVhQ== -----END CERTIFICATE-----Generated at Wed Sep 23 07:35:20 2026 by rpki-client