$ rpki-client -vvvf rpki.apnic.net/member_repository/A916B5CE/633AE306AB4311F183533DDD7011F970/A0gdFR3C7HY8R_Lba38ZvtKIAd0.mft File: A0gdFR3C7HY8R_Lba38ZvtKIAd0.mft (raw, json) Hash identifier: AD9tcbHEiEKA1tfTehcMcS7bN3+qN/qKPZk989NFahQ= Subject key identifier: ED:F5:AB:BD:8C:E4:0B:47:E3:68:E4:F0:2B:63:80:1A:42:3A:13:17 Authority key identifier: 03:48:1D:15:1D:C2:EC:76:3C:47:F2:DB:6B:7F:19:BE:D2:88:01:DD Certificate issuer: /CN=A916B5CE/serialNumber=03481D151DC2EC763C47F2DB6B7F19BED28801DD Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0gdFR3C7HY8R_Lba38ZvtKIAd0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B5CE/633AE306AB4311F183533DDD7011F970/A0gdFR3C7HY8R_Lba38ZvtKIAd0.mft Manifest number: 09 Signing time: Mon 21 Sep 2026 09:11:17 +0000 Manifest this update: Mon 21 Sep 2026 09:11:17 +0000 Manifest next update: Mon 28 Sep 2026 09:11:17 +0000 Files and hashes: 1: A0gdFR3C7HY8R_Lba38ZvtKIAd0.crl (hash: bNA48dhgQgZ1KwcViPuGmSONH+X8hWlxD2j+sYr1XMQ=) 2: 86656B28AB4611F19C0E979A7111F970.roa (hash: BzGaeJIXXko6guFlWp6+OZOjNO6jvG5AMimk+3YukgI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B5CE/633AE306AB4311F183533DDD7011F970/A0gdFR3C7HY8R_Lba38ZvtKIAd0.crl rsync://rpki.apnic.net/member_repository/A916B5CE/633AE306AB4311F183533DDD7011F970/A0gdFR3C7HY8R_Lba38ZvtKIAd0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0gdFR3C7HY8R_Lba38ZvtKIAd0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 09:11:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B5CE, serialNumber=03481D151DC2EC763C47F2DB6B7F19BED28801DD Validity Not Before: Sep 21 09:11:17 2026 GMT Not After : Sep 28 09:11:17 2026 GMT Subject: CN=6ab0f4b5-9c44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:97:b0:30:ca:b5:a2:6d:ce:1f:ef:85:93:05: 1e:ad:a5:0d:77:53:88:e9:f1:6f:e7:cb:bd:31:0f: 29:e5:2b:67:35:57:40:ef:e1:1a:ec:16:d1:47:97: 3c:c5:2c:8a:76:bf:41:16:85:f6:b9:d8:bd:71:6a: 2c:bf:df:fe:a9:cc:6f:b1:64:07:62:2b:e6:2e:ef: 56:8a:01:53:c2:f5:1f:2c:7c:ce:e5:85:00:be:ff: 19:d9:16:53:a9:46:8f:de:3a:07:b0:7c:59:d9:9b: 69:5e:1e:a8:62:41:15:dd:14:6f:5c:68:e9:c4:d7: 0a:ae:22:c1:38:45:94:18:ee:4f:05:18:a6:3c:11: 18:62:43:51:b7:14:7c:95:e0:7d:2f:19:d6:fc:44: ee:7f:be:5a:37:de:07:51:1a:c7:10:85:0e:74:3b: e5:c6:a8:32:5f:53:7e:e7:9a:6d:dc:8c:89:fa:79: 3e:13:04:6e:15:9a:e1:53:dd:92:b8:a7:a2:c9:63: be:ce:2a:08:16:48:34:5f:2e:a3:b6:14:68:2b:1c: 26:dd:a1:cd:09:9e:96:91:c4:8f:e0:18:17:ee:16: 15:03:58:d4:51:f0:9c:e8:31:83:f6:06:e3:b9:83: 34:0a:4f:e9:55:d9:85:a8:1d:4c:57:14:2e:83:a7: 54:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:F5:AB:BD:8C:E4:0B:47:E3:68:E4:F0:2B:63:80:1A:42:3A:13:17 X509v3 Authority Key Identifier: keyid:03:48:1D:15:1D:C2:EC:76:3C:47:F2:DB:6B:7F:19:BE:D2:88:01:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B5CE/633AE306AB4311F183533DDD7011F970/A0gdFR3C7HY8R_Lba38ZvtKIAd0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0gdFR3C7HY8R_Lba38ZvtKIAd0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B5CE/633AE306AB4311F183533DDD7011F970/A0gdFR3C7HY8R_Lba38ZvtKIAd0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e3:19:44:43:59:77:78:a3:9e:4e:7d:72:bc:5f:76:b9:eb:a6: ce:ae:88:09:52:5b:40:7d:5b:0a:bc:85:d8:bf:01:14:fb:5e: 06:18:fc:68:b9:21:28:46:78:ff:a1:ce:b1:bd:b3:3f:99:52: 92:45:ea:a9:96:75:38:0e:3e:7d:f0:45:10:2c:ed:d9:27:14: 58:5b:61:80:41:9d:00:0f:cf:09:02:e7:74:b8:06:5a:1d:b5: 25:d7:41:1b:21:fb:14:7c:7d:7c:ad:3d:03:a5:20:57:0a:e0: 80:ae:6b:a1:e6:bc:09:65:1b:45:8b:b3:8f:c1:46:28:f6:df: 2c:1a:44:15:6b:08:56:f2:24:9f:66:a9:14:23:f7:7e:9b:99: 9e:3f:a1:6b:61:1a:eb:53:d7:27:32:db:6b:9d:17:c7:ef:83: 7f:3e:b3:ec:30:56:51:b8:9c:61:00:29:50:94:fd:b1:ad:44: f0:c7:aa:7d:ab:f7:aa:68:4c:a4:10:e0:68:1b:be:97:54:51: 5f:63:24:59:61:8c:10:dd:74:ee:b2:b6:72:3c:5b:74:42:50: c3:c8:03:de:ca:48:bf:9b:f6:b9:50:33:bd:bf:46:fd:fc:f4: 79:b4:63:66:e0:77:c5:ad:4e:45:5d:d9:d9:a9:40:ce:42:b6: 45:45:92:98 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QjVDRTExMC8GA1UEBRMoMDM0ODFEMTUxREMyRUM3NjNDNDdGMkRCNkI3RjE5QkVE Mjg4MDFERDAeFw0yNjA5MjEwOTExMTdaFw0yNjA5MjgwOTExMTdaMBgxFjAUBgNV BAMTDTZhYjBmNGI1LTljNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCJl7AwyrWibc4f74WTBR6tpQ13U4jp8W/ny70xDynlK2c1V0Dv4RrsFtFHlzzF LIp2v0EWhfa52L1xaiy/3/6pzG+xZAdiK+Yu71aKAVPC9R8sfM7lhQC+/xnZFlOp Ro/eOgewfFnZm2leHqhiQRXdFG9caOnE1wquIsE4RZQY7k8FGKY8ERhiQ1G3FHyV 4H0vGdb8RO5/vlo33gdRGscQhQ50O+XGqDJfU37nmm3cjIn6eT4TBG4VmuFT3ZK4 p6LJY77OKggWSDRfLqO2FGgrHCbdoc0JnpaRxI/gGBfuFhUDWNRR8JzoMYP2BuO5 gzQKT+lV2YWoHUxXFC6Dp1SJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU7fWrvYzk C0fjaOTwK2OAGkI6ExcwHwYDVR0jBBgwFoAUA0gdFR3C7HY8R/Lba38ZvtKIAd0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCNUNFLzYzM0FFMzA2QUI0 MzExRjE4MzUzM0RERDcwMTFGOTcwL0EwZ2RGUjNDN0hZOFJfTGJhMzhadnRLSUFk MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQTBnZEZSM0M3SFk4Ul9MYmEzOFp2dEtJQWQwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZC NUNFLzYzM0FFMzA2QUI0MzExRjE4MzUzM0RERDcwMTFGOTcwL0EwZ2RGUjNDN0hZ OFJfTGJhMzhadnRLSUFkMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDjGURDWXd4o55OfXK8X3a566bOrogJUltAfVsKvIXYvwEU+14GGPxouSEoRnj/ oc6xvbM/mVKSReqplnU4Dj598EUQLO3ZJxRYW2GAQZ0AD88JAud0uAZaHbUl10Eb IfsUfH18rT0DpSBXCuCArmuh5rwJZRtFi7OPwUYo9t8sGkQVawhW8iSfZqkUI/d+ m5meP6FrYRrrU9cnMttrnRfH74N/PrPsMFZRuJxhAClQlP2xrUTwx6p9q/eqaEyk EOBoG76XVFFfYyRZYYwQ3XTusrZyPFt0QlDDyAPeyki/m/a5UDO9v0b9/PR5tGNm 4HfFrU5FXdnZqUDOQrZFRZKY -----END CERTIFICATE-----Generated at Tue Sep 22 18:50:27 2026 by rpki-client