$ rpki-client -vvvf rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft File: v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft (raw, json) Hash identifier: k5nSS0P7r4L1s3RJI5gzrIhZyEbhitx4yiaENrO9GHk= Subject key identifier: 1D:AA:22:89:1E:6B:43:60:C4:DA:ED:F8:5C:76:1D:16:43:7A:BC:4D Authority key identifier: BF:AF:23:63:75:77:29:EE:05:AB:21:B7:1D:20:5A:B4:18:E1:B8:34 Certificate issuer: /CN=A9167FF5/serialNumber=BFAF2363757729EE05AB21B71D205AB418E1B834 Certificate serial: 029C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v68jY3V3Ke4FqyG3HSBatBjhuDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft Manifest number: 0296 Signing time: Mon 21 Sep 2026 01:42:42 +0000 Manifest this update: Mon 21 Sep 2026 01:42:41 +0000 Manifest next update: Mon 28 Sep 2026 01:42:41 +0000 Files and hashes: 1: v68jY3V3Ke4FqyG3HSBatBjhuDQ.crl (hash: RisPneCkA1N/TLb91jHXq6NlQmFM1EkcEy0WMQ8FMU4=) 2: DCEA0362C17C11ED92AD7D85C4F9AE02.roa (hash: tbYd8JflLqAHQOW0BH5GJ8PqKcZMxydsXpsTFe7lGrM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.crl rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v68jY3V3Ke4FqyG3HSBatBjhuDQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 01:42:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 668 (0x29c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167FF5, serialNumber=BFAF2363757729EE05AB21B71D205AB418E1B834 Validity Not Before: Sep 21 01:42:41 2026 GMT Not After : Sep 28 01:42:41 2026 GMT Subject: CN=6ab08b91-541a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a6:7a:3b:70:5e:ca:91:fe:49:61:ca:c3:5e: f8:0c:2b:72:44:16:46:ff:29:ce:37:fd:3a:29:45: 34:f9:2e:29:13:bf:b5:43:cc:f5:1f:8b:d8:43:6f: 19:12:d0:eb:08:e8:b3:a0:2b:10:24:2d:60:2a:9c: ce:50:c6:6c:34:4e:b3:81:8a:de:9f:7f:25:f6:c5: 21:37:45:fe:db:9e:4d:55:21:19:de:16:34:9c:09: 79:04:d1:bd:05:b2:f4:74:a2:57:63:ae:a4:6a:d5: 01:a8:fd:49:6c:ca:e5:cb:7e:c2:22:04:f4:36:59: e8:97:9c:3d:fe:be:61:61:b4:e6:6d:58:10:bb:d1: a2:2b:78:c8:97:a5:05:41:be:a4:20:d1:88:34:04: 04:93:4c:67:9a:50:96:da:88:41:a7:5e:2a:cd:54: d2:92:7e:c0:40:3f:c5:5b:a4:b0:6a:b0:c7:5f:bb: 6e:b6:dd:bf:b4:58:cd:b3:0b:b5:4d:38:fb:8e:ce: d3:da:bf:cf:1b:5f:b1:ed:27:88:d5:84:3e:f1:bb: 70:03:dc:95:55:8c:a5:ed:44:ee:87:db:05:60:22: ef:16:cf:d7:a9:b2:7b:2f:5a:af:27:6c:79:19:26: 86:ff:80:df:aa:3c:df:66:a5:06:84:22:d4:44:97: 59:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:AA:22:89:1E:6B:43:60:C4:DA:ED:F8:5C:76:1D:16:43:7A:BC:4D X509v3 Authority Key Identifier: keyid:BF:AF:23:63:75:77:29:EE:05:AB:21:B7:1D:20:5A:B4:18:E1:B8:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v68jY3V3Ke4FqyG3HSBatBjhuDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:d9:1f:c6:2a:f0:cc:5e:35:54:3d:e8:47:75:8a:ee:81:9f: 61:f8:fb:05:8f:70:1d:c9:e0:78:12:75:f7:8c:b0:e2:93:29: a6:a0:9d:0e:6e:7b:6b:ae:28:a1:29:77:ec:da:7a:88:d9:f2: 59:a3:fc:f9:6f:63:ea:30:b2:78:2c:44:93:34:19:e5:8b:32: 06:0b:d4:24:61:73:91:85:f6:77:ab:19:71:e5:ae:45:e4:1c: af:3d:93:62:0f:bc:e2:3d:8d:ea:91:d4:7f:6e:28:ca:1d:67: 5c:b7:bf:8d:80:5f:d5:52:b0:6d:b7:ff:05:76:35:71:a9:1c: ab:c2:49:2a:d1:b5:d4:7a:6a:c8:56:cc:be:4d:37:14:82:ea: 48:70:6e:49:a7:c9:c8:e2:0c:de:53:7b:0b:6c:21:b1:94:72: fd:df:d3:57:be:0f:7d:99:4f:66:1f:12:96:2a:09:8c:68:30: 27:47:3c:a7:63:e3:5a:a0:99:a9:6f:4d:4b:ed:ac:e4:97:1f: 10:05:b0:1a:8f:33:47:47:8e:03:55:dd:97:d8:43:7c:20:41: 2d:ad:06:27:d6:a6:09:75:70:34:56:43:3a:07:f3:80:71:bb: e0:a3:a3:6d:b4:b1:71:7f:6f:79:8f:59:f2:a9:c3:d7:1e:5d: 9b:3c:b5:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdGRjUxMTAvBgNVBAUTKEJGQUYyMzYzNzU3NzI5RUUwNUFCMjFCNzFEMjA1QUI0 MThFMUI4MzQwHhcNMjYwOTIxMDE0MjQxWhcNMjYwOTI4MDE0MjQxWjAYMRYwFAYD VQQDEw02YWIwOGI5MS01NDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArqZ6O3BeypH+SWHKw174DCtyRBZG/ynON/06KUU0+S4pE7+1Q8z1H4vYQ28Z EtDrCOizoCsQJC1gKpzOUMZsNE6zgYren38l9sUhN0X+255NVSEZ3hY0nAl5BNG9 BbL0dKJXY66katUBqP1JbMrly37CIgT0Nlnol5w9/r5hYbTmbVgQu9GiK3jIl6UF Qb6kINGINAQEk0xnmlCW2ohBp14qzVTSkn7AQD/FW6SwarDHX7tutt2/tFjNswu1 TTj7js7T2r/PG1+x7SeI1YQ+8btwA9yVVYyl7UTuh9sFYCLvFs/XqbJ7L1qvJ2x5 GSaG/4DfqjzfZqUGhCLURJdZVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB2qIoke a0NgxNrt+Fx2HRZDerxNMB8GA1UdIwQYMBaAFL+vI2N1dynuBashtx0gWrQY4bg0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0ZGNS8yNzIwNDM5MkMx NzgxMUVEQUY1NEE5NUZDNEY5QUUwMi92NjhqWTNWM0tlNEZxeUczSFNCYXRCamh1 RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Y2OGpZM1YzS2U0RnF5RzNIU0JhdEJqaHVEUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0ZGNS8yNzIwNDM5MkMxNzgxMUVEQUY1NEE5NUZDNEY5QUUwMi92NjhqWTNWM0tl NEZxeUczSFNCYXRCamh1RFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFdkfxirwzF41VD3oR3WK7oGfYfj7BY9wHcngeBJ194yw4pMppqCdDm57a64o oSl37Np6iNnyWaP8+W9j6jCyeCxEkzQZ5YsyBgvUJGFzkYX2d6sZceWuReQcrz2T Yg+84j2N6pHUf24oyh1nXLe/jYBf1VKwbbf/BXY1cakcq8JJKtG11HpqyFbMvk03 FILqSHBuSafJyOIM3lN7C2whsZRy/d/TV74PfZlPZh8SlioJjGgwJ0c8p2PjWqCZ qW9NS+2s5JcfEAWwGo8zR0eOA1Xdl9hDfCBBLa0GJ9amCXVwNFZDOgfzgHG74KOj bbSxcX9veY9Z8qnD1x5dmzy18Q== -----END CERTIFICATE-----Generated at Wed Sep 23 01:55:38 2026 by rpki-client