$ rpki-client -vvvf rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft File: AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft (raw, json) Hash identifier: sSR0Gtuk94okyVVcQ47jUpfB6TD7YE2c+v8uQ3dyGwA= Subject key identifier: 4A:DE:D4:02:69:B8:EB:82:83:D6:51:1C:E2:F9:5A:3E:69:54:5D:CE Authority key identifier: 00:84:F4:7A:43:72:C8:F8:A7:D5:11:83:D5:03:6C:59:3D:19:E1:C3 Certificate issuer: /CN=A916E9E3/serialNumber=0084F47A4372C8F8A7D51183D5036C593D19E1C3 Certificate serial: CD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AIT0ekNyyPin1RGD1QNsWT0Z4cM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft Manifest number: C2 Signing time: Mon 21 Sep 2026 06:58:26 +0000 Manifest this update: Mon 21 Sep 2026 06:58:25 +0000 Manifest next update: Mon 28 Sep 2026 06:58:25 +0000 Files and hashes: 1: AIT0ekNyyPin1RGD1QNsWT0Z4cM.crl (hash: /fK5032Fd46tFo5x9M3hFi8et28HlUYf+Lpwzt5foQ8=) 2: 2A148C7E1D4211F1BDB413AD1B3D8C67.roa (hash: gNHQ+czGqI81ehN9TB1XOXik2QCm558pJe3Upn1P8b0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.crl rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AIT0ekNyyPin1RGD1QNsWT0Z4cM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:58:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E9E3, serialNumber=0084F47A4372C8F8A7D51183D5036C593D19E1C3 Validity Not Before: Sep 21 06:58:25 2026 GMT Not After : Sep 28 06:58:25 2026 GMT Subject: CN=6ab0d592-dc52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1c:ba:78:65:15:b5:00:66:83:6f:59:99:c1: 4e:ed:df:69:18:b1:70:62:9e:2b:1b:32:1a:24:7d: 48:8f:19:dc:4a:c9:66:9b:60:d5:38:c0:f3:9f:b8: 85:3f:ec:84:ae:59:2d:04:03:85:33:2e:4d:e7:ac: f4:60:92:ec:29:57:f0:b0:11:3e:4e:86:57:1f:38: 41:8a:ea:1f:a0:70:ba:b4:bf:15:4e:b2:f5:6b:bc: f2:c0:4a:ff:b5:7c:59:80:12:d6:c8:86:a5:bb:15: ec:04:07:f3:5d:d1:90:97:62:75:bd:50:d3:0f:87: 59:9b:2a:fb:91:49:80:21:af:c9:23:a2:b2:db:3c: 83:bf:95:57:c6:5b:9f:c1:f9:fe:6f:5d:c3:66:34: 5f:ec:73:63:ca:da:88:1b:6a:3f:50:96:d3:2e:fd: b4:96:a6:98:a8:b6:38:8d:a7:f6:b1:f1:48:10:42: e2:7e:65:bf:06:a2:f5:b0:47:c8:a9:c0:8f:bf:d9: a1:99:c5:e3:ca:9b:04:ea:e2:ad:5f:27:c4:af:80: 15:58:3e:36:cb:02:29:6b:bb:fc:83:99:a2:ce:2c: c3:27:7c:23:71:f8:1d:f6:7b:fb:5b:d1:55:93:2d: c1:b4:65:a9:94:98:8b:75:62:4a:91:05:46:15:5b: f8:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:DE:D4:02:69:B8:EB:82:83:D6:51:1C:E2:F9:5A:3E:69:54:5D:CE X509v3 Authority Key Identifier: keyid:00:84:F4:7A:43:72:C8:F8:A7:D5:11:83:D5:03:6C:59:3D:19:E1:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AIT0ekNyyPin1RGD1QNsWT0Z4cM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:2f:b8:7d:33:b0:59:d3:e3:71:98:08:a8:dc:db:ec:14:6e: 0a:39:a1:58:f0:b2:5f:97:4d:2a:35:e2:36:e9:8d:85:0e:a4: 7d:a0:15:56:8b:70:9b:ca:44:56:3d:e6:d0:56:a0:bd:da:e4: 70:ee:88:5e:e3:a2:33:c4:8e:d5:f2:92:1e:62:7c:4a:fa:c9: 5b:4a:72:88:25:1c:0c:0d:ba:a9:d2:a9:91:13:33:be:6d:b2: f7:44:c9:1c:d7:61:46:c6:6d:1e:41:7c:a0:d5:cc:24:65:60: 7e:9e:0b:98:09:bc:67:61:ed:e6:62:9a:2e:2a:9b:84:5f:59: ae:ed:50:0b:5a:6b:fb:58:a5:bc:12:c0:0a:c0:f5:ce:26:9c: 12:b7:e8:38:05:40:4e:c0:ec:61:32:3f:4d:7e:49:4d:61:2a: 63:59:07:e7:65:db:8b:cc:58:1b:3a:41:0a:5f:ec:6c:d1:83: 3f:a3:ca:a2:bf:11:09:eb:66:93:2c:5e:68:84:ca:61:6d:9a: 88:21:de:b4:53:6f:cf:12:3d:f1:75:78:46:48:3a:bc:f5:28: 38:04:ab:82:71:02:2a:f8:08:d3:27:6c:dc:a0:94:99:e1:13: d8:b9:fa:2f:46:3c:a8:15:64:8e:46:c3:27:bf:44:8e:6a:c0: 7a:80:12:4e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkU5RTMxMTAvBgNVBAUTKDAwODRGNDdBNDM3MkM4RjhBN0Q1MTE4M0Q1MDM2QzU5 M0QxOUUxQzMwHhcNMjYwOTIxMDY1ODI1WhcNMjYwOTI4MDY1ODI1WjAYMRYwFAYD VQQDEw02YWIwZDU5Mi1kYzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsRy6eGUVtQBmg29ZmcFO7d9pGLFwYp4rGzIaJH1IjxncSslmm2DVOMDzn7iF P+yErlktBAOFMy5N56z0YJLsKVfwsBE+ToZXHzhBiuofoHC6tL8VTrL1a7zywEr/ tXxZgBLWyIaluxXsBAfzXdGQl2J1vVDTD4dZmyr7kUmAIa/JI6Ky2zyDv5VXxluf wfn+b13DZjRf7HNjytqIG2o/UJbTLv20lqaYqLY4jaf2sfFIEELifmW/BqL1sEfI qcCPv9mhmcXjypsE6uKtXyfEr4AVWD42ywIpa7v8g5mizizDJ3wjcfgd9nv7W9FV ky3BtGWplJiLdWJKkQVGFVv4KQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEre1AJp uOuCg9ZRHOL5Wj5pVF3OMB8GA1UdIwQYMBaAFACE9HpDcsj4p9URg9UDbFk9GeHD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTlFMy80NENFNEVEMkEz QTQxMUYwOTIwMTNFMjlDNEY5QUUwMi9BSVQwZWtOeXlQaW4xUkdEMVFOc1dUMFo0 Y00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0FJVDBla055eVBpbjFSR0QxUU5zV1QwWjRjTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTlFMy80NENFNEVEMkEzQTQxMUYwOTIwMTNFMjlDNEY5QUUwMi9BSVQwZWtOeXlQ aW4xUkdEMVFOc1dUMFo0Y00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdy+4fTOwWdPjcZgIqNzb7BRuCjmhWPCyX5dNKjXiNumNhQ6kfaAVVotwm8pE Vj3m0FagvdrkcO6IXuOiM8SO1fKSHmJ8SvrJW0pyiCUcDA26qdKpkRMzvm2y90TJ HNdhRsZtHkF8oNXMJGVgfp4LmAm8Z2Ht5mKaLiqbhF9Zru1QC1pr+1ilvBLACsD1 ziacErfoOAVATsDsYTI/TX5JTWEqY1kH52Xbi8xYGzpBCl/sbNGDP6PKor8RCetm kyxeaITKYW2aiCHetFNvzxI98XV4Rkg6vPUoOASrgnECKvgI0yds3KCUmeET2Ln6 L0Y8qBVkjkbDJ79EjmrAeoASTg== -----END CERTIFICATE-----Generated at Mon Sep 21 17:41:08 2026 by rpki-client