$ rpki-client -vvvf rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft File: rwJRH3yA38Do7VBvZjD2e9ZADgk.mft (raw, json) Hash identifier: BztNV6iokaqSQ2u65ZviCnlPYhZFRyVVfx36MPO64jY= Subject key identifier: F0:58:19:A6:5A:EE:9D:32:84:93:A3:B1:31:8D:A3:56:0D:2A:2C:E6 Authority key identifier: AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09 Certificate issuer: /CN=A9168B4A/serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09 Certificate serial: 1544 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft Manifest number: 150F Signing time: Tue 22 Sep 2026 16:45:19 +0000 Manifest this update: Tue 22 Sep 2026 16:45:19 +0000 Manifest next update: Tue 29 Sep 2026 16:45:19 +0000 Files and hashes: 1: rwJRH3yA38Do7VBvZjD2e9ZADgk.crl (hash: axFX4sM7ZYLyzgM4bV/G3ShFNSa1mom0TiG4qONsN/M=) 2: 26F19BD2EFFE11EDA34BD84DC4F9AE02.roa (hash: vb+PgKr3CsY3jfH+MFyFgbnwnwtfBrgXKUjCdpIDvJ8=) 3: 98A0F2BE450611F093EC3A65C4F9AE02.roa (hash: jZuSh+WR7sCoYoKT4uhJCvNVaW6YZAz1ccOdtL1PD1o=) 4: 4C6227D2B69B11EFA181E00AC4F9AE02.roa (hash: nJvpana4kulWgfMWn8Ke1ZkiWP+ZraOaHP2EjEVXLI8=) 5: 983A5536450611F093EC3A65C4F9AE02.roa (hash: rlIDc3lNpEtnI3hRK54wCg94Be4WAJirdysXicNPq4g=) 6: A83ECFAE791B11F0B7D48969C4F9AE02.roa (hash: NqFw3mgMpkOvoVPWGjo2SvS7iIeakeWssWWni91l9EM=) 7: 7EA2ADC0C3A411ED8EFA6F13C4F9AE02.roa (hash: LLmj75OnEITMWNmTNzFRCr8M2iJFtW1A7GWU5CHlz+4=) 8: 7F444842C3A411ED8EFA6F13C4F9AE02.roa (hash: HdUBPRtbQQrEcIOoId2r+rm38MPN/eH1nuT0g27/Ga8=) 9: 97A9C872450611F093EC3A65C4F9AE02.roa (hash: 4Ydikq6YDNqhVsd3RsOKhT3gtOyRUGklOgVJco/t5aw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 16:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5444 (0x1544) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168B4A, serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09 Validity Not Before: Sep 22 16:45:19 2026 GMT Not After : Sep 29 16:45:19 2026 GMT Subject: CN=6ab2b09f-914a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:60:e1:bb:63:ff:28:b7:d6:5f:91:09:d3:48: 95:46:f1:00:fb:c6:e3:bc:2d:7f:d2:72:70:88:14: e8:88:69:fc:f2:c9:19:35:b7:df:9f:4b:1b:d0:ca: 23:2b:e0:e9:a5:4e:39:e2:a4:90:65:cd:2f:78:64: 5e:fb:8b:52:9d:95:dd:8b:21:6a:72:1c:32:6e:76: fe:7c:9a:63:80:c6:54:b0:d1:d1:73:0b:96:89:30: f3:83:c8:6c:70:53:c5:eb:21:72:d4:fd:a2:80:d4: 5c:01:bc:d4:0c:df:34:38:f3:f2:54:4f:39:d0:1a: fe:d9:60:ee:c4:f5:5c:23:2f:72:d1:92:62:a1:34: 16:85:49:16:2b:03:0c:27:d9:91:2a:52:a1:d3:ff: 8a:15:41:71:7d:0d:50:7e:c9:b6:f7:d4:4d:fe:d2: df:84:8d:d6:10:53:b3:ec:dc:6d:2d:e8:61:be:ce: 03:1e:1c:85:f6:e8:79:68:55:bb:c5:e4:2a:8e:a9: 71:01:bd:d8:42:26:9c:23:69:6d:2f:0a:da:57:60: 47:37:9c:f3:fa:31:3e:b0:63:3b:12:15:fc:4b:e9: 02:10:f1:e3:0e:0f:27:4e:83:ab:7a:40:84:ef:5f: ae:80:85:7a:b6:2c:4f:ab:9d:9f:7b:0f:d7:c7:dd: 03:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:58:19:A6:5A:EE:9D:32:84:93:A3:B1:31:8D:A3:56:0D:2A:2C:E6 X509v3 Authority Key Identifier: keyid:AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:8d:c3:a3:62:cd:d5:fe:20:f0:3b:e8:33:3c:a2:a3:31:f8: 1e:80:0e:e2:ac:4d:b5:6d:b5:3d:cd:b8:1d:ae:36:84:db:e8: b5:ee:50:b9:1a:07:70:15:26:b6:c1:33:ab:6d:05:53:92:a2: 11:8d:d0:a7:e4:9b:1b:cc:3b:86:05:85:a3:4e:41:f8:1c:41: b7:b3:cf:9a:32:b4:87:5b:59:9e:47:26:28:40:41:97:d5:8a: 02:67:a6:2b:77:d7:f5:0d:74:f7:45:80:42:20:59:d2:1a:59: e4:57:51:e7:8e:8e:37:5d:6b:a3:4f:2b:2c:2c:99:3f:d3:8c: 1f:ac:16:17:83:f7:9c:e8:e4:de:43:0f:6b:66:38:e2:5b:38: f6:f4:87:af:07:dd:05:23:c7:ef:94:8e:cd:a7:ac:83:7c:30: 42:e5:c9:05:3a:17:ce:b0:ff:4f:13:dc:c5:32:82:71:03:bc: d1:ec:3f:e9:c5:3c:5c:88:ae:49:f8:c1:cd:25:8f:7e:5a:25: 44:e2:3e:59:9a:ee:9b:c8:d4:0d:9b:04:6b:1f:28:dd:c3:44: a8:f6:50:ab:8c:7f:67:87:da:4c:fa:df:96:90:75:a1:95:c5: d4:f3:54:b5:34:36:30:df:14:59:99:8c:f8:6e:7a:49:1c:6f: 16:65:2c:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhCNEExMTAvBgNVBAUTKEFGMDI1MTFGN0M4MERGQzBFOEVENTA2RjY2MzBGNjdC RDY0MDBFMDkwHhcNMjYwOTIyMTY0NTE5WhcNMjYwOTI5MTY0NTE5WjAYMRYwFAYD VQQDEw02YWIyYjA5Zi05MTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAumDhu2P/KLfWX5EJ00iVRvEA+8bjvC1/0nJwiBToiGn88skZNbffn0sb0Moj K+DppU454qSQZc0veGRe+4tSnZXdiyFqchwybnb+fJpjgMZUsNHRcwuWiTDzg8hs cFPF6yFy1P2igNRcAbzUDN80OPPyVE850Br+2WDuxPVcIy9y0ZJioTQWhUkWKwMM J9mRKlKh0/+KFUFxfQ1Qfsm299RN/tLfhI3WEFOz7NxtLehhvs4DHhyF9uh5aFW7 xeQqjqlxAb3YQiacI2ltLwraV2BHN5zz+jE+sGM7EhX8S+kCEPHjDg8nToOrekCE 71+ugIV6tixPq52few/Xx90DswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPBYGaZa 7p0yhJOjsTGNo1YNKizmMB8GA1UdIwQYMBaAFK8CUR98gN/A6O1Qb2Yw9nvWQA4J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEI0QS8wQURCMTdDMDgw MEExMUU4OUI0ODNFN0NDNEY5QUUwMi9yd0pSSDN5QTM4RG83VkJ2WmpEMmU5WkFE Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3J3SlJIM3lBMzhEbzdWQnZaakQyZTlaQURnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEI0QS8wQURCMTdDMDgwMEExMUU4OUI0ODNFN0NDNEY5QUUwMi9yd0pSSDN5QTM4 RG83VkJ2WmpEMmU5WkFEZ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjo3Do2LN1f4g8DvoMzyiozH4HoAO4qxNtW21Pc24Ha42hNvote5QuRoHcBUm tsEzq20FU5KiEY3Qp+SbG8w7hgWFo05B+BxBt7PPmjK0h1tZnkcmKEBBl9WKAmem K3fX9Q1090WAQiBZ0hpZ5FdR546ON11ro08rLCyZP9OMH6wWF4P3nOjk3kMPa2Y4 4ls49vSHrwfdBSPH75SOzaesg3wwQuXJBToXzrD/TxPcxTKCcQO80ew/6cU8XIiu SfjBzSWPflolROI+WZrum8jUDZsEax8o3cNEqPZQq4x/Z4faTPrflpB1oZXF1PNU tTQ2MN8UWZmM+G56SRxvFmUsxQ== -----END CERTIFICATE-----Generated at Wed Sep 23 12:50:11 2026 by rpki-client