$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft File: -JdCLlAQBtJgHYWlAXlTJrr-c4g.mft (raw, json) Hash identifier: sTv3JN7bCVBEFddEM5Ne53uariCda3vK6NeSPWna6nY= Subject key identifier: B9:06:47:3F:B6:F9:1C:0D:65:C0:E4:A3:69:CF:D3:17:81:6A:AF:59 Authority key identifier: F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88 Certificate issuer: /CN=A9170829/serialNumber=F897422E501006D2601D85A501795326BAFE7388 Certificate serial: 026C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft Manifest number: 0767 Signing time: Sun 20 Sep 2026 23:25:34 +0000 Manifest this update: Sun 20 Sep 2026 23:25:33 +0000 Manifest next update: Sun 27 Sep 2026 23:25:33 +0000 Files and hashes: 1: -JdCLlAQBtJgHYWlAXlTJrr-c4g.crl (hash: 7w40eijpJ0KBg2DmqJxFXTLHtNw4Xse/1Gz2XgiWyRc=) 2: 14553DF893F711F18D8243663911F970.roa (hash: tj2oOYMVOIbsggb7cEy4mKeuFf8hW8OpJ6SdrtBFAtY=) 3: E6C709BAEADD11F088D8AEF6666F56BC.roa (hash: vC4STLzHVCOMzh9f2GrOs/JinLrCWg2GfnKg/8s/U3g=) 4: C5C77866584111EE85E40820C4F9AE02.roa (hash: o09B0PsJspIE7YM1wHmZQROS9GUS/vHR3P6a96Hv63k=) 5: C44DEE8E584111EE85E40820C4F9AE02.roa (hash: KPudjn9fAIyxH6iO+Vq+v5F8LqajNGVdpDuC+DrMuA0=) 6: C55784DE584111EE85E40820C4F9AE02.roa (hash: HVeRuKGPvgRMfPHsqbyGBs/7U9hBE+gCk7rxayLwau8=) 7: C4D7F9DA584111EE85E40820C4F9AE02.roa (hash: B9f80EoI0x+BIg2AFxeHEGvINQTmjdsYocZpJvfDc0A=) 8: F2706122D16E11F08E21851DC4F9AE02.roa (hash: U5FE2Jl9i12aLoYdhP4eL42j8vYOgjImKvyyJ7bw++c=) 9: 60579226AE0711F1AD8899954B11F970.roa (hash: 3jDhj2Pq9BBqQFus0YIz2v6pAN3jD4Crnk6VKCZLZhg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.crl rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 620 (0x26c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170829, serialNumber=F897422E501006D2601D85A501795326BAFE7388 Validity Not Before: Sep 20 23:25:33 2026 GMT Not After : Sep 27 23:25:33 2026 GMT Subject: CN=6ab06b6e-233d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:30:9b:4c:14:1e:b9:9d:1a:85:71:a9:76:b5: ec:11:c7:a6:d9:17:aa:7b:32:75:0d:8b:be:c1:b0: bf:cd:38:ca:ae:1c:cb:95:17:3b:e3:7b:9d:d8:80: 99:a6:bd:c5:95:a8:6f:29:e9:e7:c4:ae:82:7a:6d: df:08:8d:20:20:e0:fd:77:bd:b1:30:5f:8a:fa:ca: bf:74:16:c4:64:44:34:72:ad:17:f3:7d:16:dd:4f: e9:94:ec:66:81:e3:b3:86:f9:82:1c:6c:ec:8a:2b: d6:a7:76:7f:43:5a:86:60:e5:bd:21:23:1c:6c:c2: ed:ba:29:bd:f2:65:c9:ea:ee:f9:8d:e0:ec:d7:9e: c3:47:1b:13:d1:a5:be:3d:88:17:dd:99:6c:4d:ca: 3b:b3:0a:6b:9a:a4:54:63:98:b5:19:d8:4a:41:7e: 72:a1:46:a9:b9:bf:cd:ad:e2:b8:2c:d5:1f:f4:11: bd:38:26:c2:f4:c7:df:b2:82:2e:57:68:76:ca:01: 0f:27:72:a4:f9:b9:d7:31:ff:c9:fd:9e:04:f8:65: 87:8e:79:8a:be:04:11:73:54:dd:31:3c:9e:97:3e: 50:2a:3e:c4:77:cf:fb:eb:b3:65:bc:12:bd:7e:68: ae:a8:8d:6a:c9:3e:5d:4e:fb:fc:ef:7f:dc:8a:68: dc:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:06:47:3F:B6:F9:1C:0D:65:C0:E4:A3:69:CF:D3:17:81:6A:AF:59 X509v3 Authority Key Identifier: keyid:F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:a3:5d:8b:17:78:30:02:aa:84:6a:4c:a3:9c:10:fd:42:b9: ed:b4:4f:88:81:f2:af:a8:c9:64:c7:c3:49:44:71:fa:9d:dc: f0:07:e2:49:78:96:e5:f1:c1:d3:97:4c:c1:6b:cc:04:a3:67: be:79:58:3e:a7:4f:1c:12:26:82:98:84:39:4f:5e:85:f2:b3: 9b:aa:37:02:ba:41:75:9e:33:60:6c:ad:04:58:0f:cf:df:65: 6a:9b:d2:26:4e:b5:1b:41:b8:3f:06:e8:27:eb:8f:db:d5:d3: 08:b6:5d:49:2a:8f:9a:be:66:ed:9f:aa:db:98:42:2f:27:89: 31:b5:b1:a9:99:46:8b:ce:06:74:90:c3:25:ee:eb:9a:00:da: 6e:3c:18:52:f7:ac:1d:eb:9e:5a:bf:16:65:57:3c:03:e4:7a: 89:ba:69:71:bd:0d:d5:48:68:71:77:2d:dc:ce:88:a8:f0:07: c4:6d:c3:27:12:af:1f:53:be:b1:d1:9c:a3:f2:1c:bd:27:95: 52:68:4f:8b:d6:dd:22:23:0a:fe:69:08:b4:29:b5:fc:bc:67: eb:db:23:c8:dc:61:50:b8:0e:c2:1f:79:4a:87:62:48:dc:f8: 56:83:dc:08:49:5a:5a:21:d7:2f:9e:7c:00:76:eb:ac:8a:55: 11:15:a9:56 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA4MjkxMTAvBgNVBAUTKEY4OTc0MjJFNTAxMDA2RDI2MDFEODVBNTAxNzk1MzI2 QkFGRTczODgwHhcNMjYwOTIwMjMyNTMzWhcNMjYwOTI3MjMyNTMzWjAYMRYwFAYD VQQDEw02YWIwNmI2ZS0yMzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApDCbTBQeuZ0ahXGpdrXsEcem2ReqezJ1DYu+wbC/zTjKrhzLlRc743ud2ICZ pr3FlahvKennxK6Cem3fCI0gIOD9d72xMF+K+sq/dBbEZEQ0cq0X830W3U/plOxm geOzhvmCHGzsiivWp3Z/Q1qGYOW9ISMcbMLtuim98mXJ6u75jeDs157DRxsT0aW+ PYgX3ZlsTco7swprmqRUY5i1GdhKQX5yoUapub/NreK4LNUf9BG9OCbC9MffsoIu V2h2ygEPJ3Kk+bnXMf/J/Z4E+GWHjnmKvgQRc1TdMTyelz5QKj7Ed8/767NlvBK9 fmiuqI1qyT5dTvv873/cimjchwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLkGRz+2 +RwNZcDko2nP0xeBaq9ZMB8GA1UdIwQYMBaAFPiXQi5QEAbSYB2FpQF5Uya6/nOI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDgyOS83NjY3QkVEMDYz QTAxMUVDQUQ4Mjk5MUNDNEY5QUUwMi8tSmRDTGxBUUJ0SmdIWVdsQVhsVEpyci1j NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1KZENMbEFRQnRKZ0hZV2xBWGxUSnJyLWM0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDgyOS83NjY3QkVEMDYzQTAxMUVDQUQ4Mjk5MUNDNEY5QUUwMi8tSmRDTGxBUUJ0 SmdIWVdsQVhsVEpyci1jNGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAE6Ndixd4MAKqhGpMo5wQ/UK57bRPiIHyr6jJZMfDSURx+p3c8AfiSXiW5fHB 05dMwWvMBKNnvnlYPqdPHBImgpiEOU9ehfKzm6o3ArpBdZ4zYGytBFgPz99lapvS Jk61G0G4PwboJ+uP29XTCLZdSSqPmr5m7Z+q25hCLyeJMbWxqZlGi84GdJDDJe7r mgDabjwYUvesHeueWr8WZVc8A+R6ibppcb0N1UhocXct3M6IqPAHxG3DJxKvH1O+ sdGco/IcvSeVUmhPi9bdIiMK/mkItCm1/Lxn69sjyNxhULgOwh95SodiSNz4VoPc CElaWiHXL558AHbrrIpVERWpVg== -----END CERTIFICATE-----Generated at Mon Sep 21 06:27:25 2026 by rpki-client