$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170DF0/5DEFACF0364411EEACE5C72EC4F9AE02/AAji7r5sVfJZSUmkd_hne_9Kf-Q.mft File: AAji7r5sVfJZSUmkd_hne_9Kf-Q.mft (raw, json) Hash identifier: onCIwvqKEPJ6ZjVlvilm843wqzITEkhQTfAie3q2tSU= Subject key identifier: D4:F4:02:8D:49:8B:88:CF:8A:0E:9A:6E:2A:62:F5:00:8B:4E:79:4F Authority key identifier: 00:08:E2:EE:BE:6C:55:F2:59:49:49:A4:77:F8:67:7B:FF:4A:7F:E4 Certificate issuer: /CN=A9170DF0/serialNumber=0008E2EEBE6C55F2594949A477F8677BFF4A7FE4 Certificate serial: 024F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AAji7r5sVfJZSUmkd_hne_9Kf-Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170DF0/5DEFACF0364411EEACE5C72EC4F9AE02/AAji7r5sVfJZSUmkd_hne_9Kf-Q.mft Manifest number: 024A Signing time: Mon 21 Sep 2026 02:25:39 +0000 Manifest this update: Mon 21 Sep 2026 02:25:38 +0000 Manifest next update: Mon 28 Sep 2026 02:25:38 +0000 Files and hashes: 1: AAji7r5sVfJZSUmkd_hne_9Kf-Q.crl (hash: mLW2AKDUxUkQH/pkLEdzgGIbkFzZIcDaD1usn0pJGGU=) 2: B022AC18368811EEB1BFE56AC4F9AE02.roa (hash: ChPU5idLRzFBAUfZXdVDn4ZS21EQnqWVbj2XL7b56XA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170DF0/5DEFACF0364411EEACE5C72EC4F9AE02/AAji7r5sVfJZSUmkd_hne_9Kf-Q.crl rsync://rpki.apnic.net/member_repository/A9170DF0/5DEFACF0364411EEACE5C72EC4F9AE02/AAji7r5sVfJZSUmkd_hne_9Kf-Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AAji7r5sVfJZSUmkd_hne_9Kf-Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:25:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 591 (0x24f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170DF0, serialNumber=0008E2EEBE6C55F2594949A477F8677BFF4A7FE4 Validity Not Before: Sep 21 02:25:38 2026 GMT Not After : Sep 28 02:25:38 2026 GMT Subject: CN=6ab095a3-5b78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0d:be:67:13:37:c7:ba:97:ae:fd:ea:92:73: 11:56:54:ba:2e:18:42:af:f0:5e:77:8b:6f:71:63: 31:fa:78:bc:90:b3:f6:7e:d2:c0:e1:73:80:a3:a5: 9e:60:1e:86:67:17:1d:3e:df:8b:55:cd:0a:40:44: 12:6f:92:00:fa:2b:f0:3d:22:9d:b5:0c:7f:f0:4b: 63:3c:b7:b2:6a:c4:30:98:da:b8:a6:db:0a:ca:88: bc:e7:7c:b2:99:e9:da:fb:1e:38:e5:13:c8:e7:0b: a8:1d:df:35:61:41:d1:bf:62:5a:52:2b:df:24:ee: 38:23:3c:fb:67:96:a1:b2:da:a1:25:71:ca:61:24: f0:61:60:63:d4:f1:6b:8f:65:fc:19:99:32:44:ef: 4e:86:2e:03:08:77:2d:7a:53:2b:aa:a1:bc:1e:23: 76:38:17:b2:6d:7d:4b:cf:03:5e:62:e7:e7:07:fa: 7d:c5:e5:f7:6f:41:43:c8:00:6e:0d:6a:d9:b2:6a: 81:9c:44:4c:82:c7:9f:fa:e9:7b:9d:5e:54:36:e4: cf:44:de:a0:a9:d3:fa:5c:a3:40:30:0b:16:bd:90: 9d:b9:57:9c:45:6d:8f:f7:27:33:aa:fd:29:c5:39: 49:a3:3c:5e:2b:13:77:31:ae:41:a7:9e:94:3e:b2: bf:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:F4:02:8D:49:8B:88:CF:8A:0E:9A:6E:2A:62:F5:00:8B:4E:79:4F X509v3 Authority Key Identifier: keyid:00:08:E2:EE:BE:6C:55:F2:59:49:49:A4:77:F8:67:7B:FF:4A:7F:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170DF0/5DEFACF0364411EEACE5C72EC4F9AE02/AAji7r5sVfJZSUmkd_hne_9Kf-Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AAji7r5sVfJZSUmkd_hne_9Kf-Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170DF0/5DEFACF0364411EEACE5C72EC4F9AE02/AAji7r5sVfJZSUmkd_hne_9Kf-Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:0a:fa:c3:1c:3b:bc:80:71:af:7f:69:95:61:69:e4:38:9b: 73:e8:5f:e6:f0:da:79:d9:bb:5a:6c:74:88:32:09:5c:bd:6a: 89:e1:08:c3:41:5b:8a:bc:e7:ce:10:ba:ac:61:1c:8d:91:87: 07:e0:7c:80:d8:a9:31:33:d0:bf:98:44:8b:81:4a:a0:2c:d3: 33:2c:d5:45:c6:0a:ec:f8:45:ad:8e:27:f4:da:b4:07:e4:97: dd:6f:4d:7d:e6:72:9a:8b:bf:c1:fd:36:ea:8d:5b:d4:d3:e6: db:cf:fb:a3:65:fc:f3:0a:17:1b:7a:d5:50:90:a6:0d:d8:57: 85:22:5c:13:aa:f0:c7:c7:d1:e2:8d:20:05:d6:36:61:91:8e: 00:b2:f1:88:9e:e5:92:c5:8e:5c:f9:69:17:a8:a2:72:6b:5d: dd:3a:c6:54:b2:12:aa:28:5d:e9:c9:b6:83:5a:b3:ac:83:9f: 8f:09:fa:2f:f7:b5:1e:15:bf:dc:7f:44:0a:c3:e1:05:68:1f: e3:89:47:16:08:a1:4b:b6:08:f5:b1:dc:a8:43:44:bc:2a:a4: 36:b7:dc:48:2c:33:3a:e3:4a:02:b7:29:ac:b3:31:b8:60:65: 4c:82:85:98:08:d0:ec:20:45:d4:b3:66:0a:de:8f:27:ba:79: f4:4a:2d:6b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBERjAxMTAvBgNVBAUTKDAwMDhFMkVFQkU2QzU1RjI1OTQ5NDlBNDc3Rjg2NzdC RkY0QTdGRTQwHhcNMjYwOTIxMDIyNTM4WhcNMjYwOTI4MDIyNTM4WjAYMRYwFAYD VQQDEw02YWIwOTVhMy01Yjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQ2+ZxM3x7qXrv3qknMRVlS6LhhCr/Bed4tvcWMx+ni8kLP2ftLA4XOAo6We YB6GZxcdPt+LVc0KQEQSb5IA+ivwPSKdtQx/8EtjPLeyasQwmNq4ptsKyoi853yy mena+x445RPI5wuoHd81YUHRv2JaUivfJO44Izz7Z5ahstqhJXHKYSTwYWBj1PFr j2X8GZkyRO9Ohi4DCHctelMrqqG8HiN2OBeybX1LzwNeYufnB/p9xeX3b0FDyABu DWrZsmqBnERMgsef+ul7nV5UNuTPRN6gqdP6XKNAMAsWvZCduVecRW2P9yczqv0p xTlJozxeKxN3Ma5Bp56UPrK/mQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNT0Ao1J i4jPig6abipi9QCLTnlPMB8GA1UdIwQYMBaAFAAI4u6+bFXyWUlJpHf4Z3v/Sn/k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MERGMC81REVGQUNGMDM2 NDQxMUVFQUNFNUM3MkVDNEY5QUUwMi9BQWppN3I1c1ZmSlpTVW1rZF9obmVfOUtm LVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0FBamk3cjVzVmZKWlNVbWtkX2huZV85S2YtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MERGMC81REVGQUNGMDM2NDQxMUVFQUNFNUM3MkVDNEY5QUUwMi9BQWppN3I1c1Zm SlpTVW1rZF9obmVfOUtmLVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqQr6wxw7vIBxr39plWFp5Dibc+hf5vDaedm7Wmx0iDIJXL1qieEIw0Fbirzn zhC6rGEcjZGHB+B8gNipMTPQv5hEi4FKoCzTMyzVRcYK7PhFrY4n9Nq0B+SX3W9N feZymou/wf026o1b1NPm28/7o2X88woXG3rVUJCmDdhXhSJcE6rwx8fR4o0gBdY2 YZGOALLxiJ7lksWOXPlpF6iicmtd3TrGVLISqihd6cm2g1qzrIOfjwn6L/e1HhW/ 3H9ECsPhBWgf44lHFgihS7YI9bHcqENEvCqkNrfcSCwzOuNKArcprLMxuGBlTIKF mAjQ7CBF1LNmCt6PJ7p59Eotaw== -----END CERTIFICATE-----Generated at Mon Sep 21 09:52:19 2026 by rpki-client