$ rpki-client -vvvf rpki.apnic.net/member_repository/A9171155/09D36C90930511F0BEEAC611C4F9AE02/rT-mr4DjcxHQs67JSnV-VEY8Sbc.mft File: rT-mr4DjcxHQs67JSnV-VEY8Sbc.mft (raw, json) Hash identifier: puEqTRDxpYk4bHqFkJWaXhz6IUJshuMOaMPwqtVaelU= Subject key identifier: BA:8F:2D:B7:8E:68:53:1A:0F:12:61:BB:67:32:B5:B5:DC:DB:CC:D5 Authority key identifier: AD:3F:A6:AF:80:E3:73:11:D0:B3:AE:C9:4A:75:7E:54:46:3C:49:B7 Certificate issuer: /CN=A9171155/serialNumber=AD3FA6AF80E37311D0B3AEC94A757E54463C49B7 Certificate serial: C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT-mr4DjcxHQs67JSnV-VEY8Sbc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171155/09D36C90930511F0BEEAC611C4F9AE02/rT-mr4DjcxHQs67JSnV-VEY8Sbc.mft Manifest number: C3 Signing time: Sat 19 Sep 2026 06:58:32 +0000 Manifest this update: Sat 19 Sep 2026 06:58:31 +0000 Manifest next update: Sat 26 Sep 2026 06:58:31 +0000 Files and hashes: 1: rT-mr4DjcxHQs67JSnV-VEY8Sbc.crl (hash: OpRGNcC0jy0ryycqm/YSl2hzavnCdERMgF8eQO6RIAI=) 2: 4E6A35F869A311F1A9E0B0EB8B47A888.roa (hash: +j7WASClmmq8QX7LRzlqQ9DPx/iaZhcR7EWnDQold7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171155/09D36C90930511F0BEEAC611C4F9AE02/rT-mr4DjcxHQs67JSnV-VEY8Sbc.crl rsync://rpki.apnic.net/member_repository/A9171155/09D36C90930511F0BEEAC611C4F9AE02/rT-mr4DjcxHQs67JSnV-VEY8Sbc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT-mr4DjcxHQs67JSnV-VEY8Sbc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171155, serialNumber=AD3FA6AF80E37311D0B3AEC94A757E54463C49B7 Validity Not Before: Sep 19 06:58:31 2026 GMT Not After : Sep 26 06:58:31 2026 GMT Subject: CN=6aae3298-f859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:eb:79:e9:01:68:fc:79:36:b5:ef:1d:11:68: 64:8e:76:a4:95:be:f4:98:c6:e6:23:e4:b2:d0:90: 49:fc:3e:85:b9:c2:36:73:27:4b:21:58:b8:9c:47: fd:87:0e:a1:01:f6:60:c8:fe:a3:5f:80:fd:5b:a7: 73:ef:2a:53:f9:cc:45:6e:60:eb:ed:25:81:93:a5: 0b:85:47:f4:00:52:76:9d:9e:49:6f:65:f5:bf:ea: fe:06:b3:df:72:01:43:39:0d:5a:55:f5:38:29:14: 28:2e:0c:f1:c6:42:57:34:60:4d:16:49:38:27:a9: e2:45:ca:97:04:43:9e:dd:57:d6:85:22:75:ac:0f: 65:f0:44:73:93:76:8f:b0:34:e3:ab:bd:c2:3d:7b: 7c:92:05:3d:25:32:fb:b3:55:85:73:32:7c:26:e5: 46:29:58:1d:df:5e:cd:c7:25:c0:01:24:80:36:96: 3f:36:03:3e:1a:a9:49:a0:05:68:bc:44:1b:04:da: f6:eb:2d:b6:e7:c7:14:a1:b3:90:c6:e6:ef:d0:7f: 6d:9a:7a:43:d2:c5:e1:e2:72:c5:35:d3:4a:d5:f2: 2f:84:25:93:4c:d0:ec:69:8c:92:f9:47:01:f9:4e: e5:c3:a6:24:50:81:94:aa:73:e9:84:e4:77:62:fd: 10:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:8F:2D:B7:8E:68:53:1A:0F:12:61:BB:67:32:B5:B5:DC:DB:CC:D5 X509v3 Authority Key Identifier: keyid:AD:3F:A6:AF:80:E3:73:11:D0:B3:AE:C9:4A:75:7E:54:46:3C:49:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171155/09D36C90930511F0BEEAC611C4F9AE02/rT-mr4DjcxHQs67JSnV-VEY8Sbc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT-mr4DjcxHQs67JSnV-VEY8Sbc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171155/09D36C90930511F0BEEAC611C4F9AE02/rT-mr4DjcxHQs67JSnV-VEY8Sbc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:ec:97:84:d6:7c:df:aa:6c:e7:f9:4f:1f:73:22:64:d7:4a: fd:6b:8e:bb:5b:b1:39:7b:5a:7b:bc:7b:6d:e3:61:64:c6:e3: ac:ad:eb:ee:bf:d7:e7:29:ae:22:9a:f7:86:68:0a:83:7d:1f: 52:da:90:08:cf:c4:77:5f:88:5c:f6:31:1b:df:b4:c4:a3:bc: fb:1e:6d:e0:cd:7a:b6:9a:9a:eb:02:6e:4a:68:bd:08:74:2c: c7:2a:e7:29:ac:ec:f1:ac:fe:a4:5a:ac:49:c6:f0:e9:f9:f9: af:0e:42:1e:67:cb:0e:00:d1:f2:3a:ed:80:25:d2:75:54:2e: 07:71:83:d5:43:13:4d:49:7f:42:67:be:23:b9:f1:f5:47:8a: 0f:d1:7c:7a:f4:07:7b:4d:c7:b5:ae:d6:a4:5c:ff:a7:fd:51: e6:3e:97:da:0b:19:e9:e9:59:c6:3b:c7:b4:c6:a5:cb:b7:ef: 4a:0c:3f:e4:41:57:7f:b4:2c:38:a9:99:f7:69:4d:a6:04:1b: 3d:1c:70:54:a7:50:45:02:bf:44:b0:02:4e:1e:0e:1d:82:04: 64:ed:ae:31:3d:fe:be:c1:1d:7a:63:ef:d2:51:5b:27:e7:e1: 10:d0:4c:3f:e5:10:30:76:74:03:d0:3e:63:ef:67:5f:c7:6b: 5d:c2:95:29 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzExNTUxMTAvBgNVBAUTKEFEM0ZBNkFGODBFMzczMTFEMEIzQUVDOTRBNzU3RTU0 NDYzQzQ5QjcwHhcNMjYwOTE5MDY1ODMxWhcNMjYwOTI2MDY1ODMxWjAYMRYwFAYD VQQDEw02YWFlMzI5OC1mODU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApet56QFo/Hk2te8dEWhkjnaklb70mMbmI+Sy0JBJ/D6FucI2cydLIVi4nEf9 hw6hAfZgyP6jX4D9W6dz7ypT+cxFbmDr7SWBk6ULhUf0AFJ2nZ5Jb2X1v+r+BrPf cgFDOQ1aVfU4KRQoLgzxxkJXNGBNFkk4J6niRcqXBEOe3VfWhSJ1rA9l8ERzk3aP sDTjq73CPXt8kgU9JTL7s1WFczJ8JuVGKVgd317NxyXAASSANpY/NgM+GqlJoAVo vEQbBNr26y2258cUobOQxubv0H9tmnpD0sXh4nLFNdNK1fIvhCWTTNDsaYyS+UcB +U7lw6YkUIGUqnPphOR3Yv0QHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLqPLbeO aFMaDxJhu2cytbXc28zVMB8GA1UdIwQYMBaAFK0/pq+A43MR0LOuyUp1flRGPEm3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTE1NS8wOUQzNkM5MDkz MDUxMUYwQkVFQUM2MTFDNEY5QUUwMi9yVC1tcjREamN4SFFzNjdKU25WLVZFWThT YmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JULW1yNERqY3hIUXM2N0pTblYtVkVZOFNiYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTE1NS8wOUQzNkM5MDkzMDUxMUYwQkVFQUM2MTFDNEY5QUUwMi9yVC1tcjREamN4 SFFzNjdKU25WLVZFWThTYmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEeyXhNZ836ps5/lPH3MiZNdK/WuOu1uxOXtae7x7beNhZMbjrK3r7r/X5ymu Ipr3hmgKg30fUtqQCM/Ed1+IXPYxG9+0xKO8+x5t4M16tpqa6wJuSmi9CHQsxyrn Kazs8az+pFqsScbw6fn5rw5CHmfLDgDR8jrtgCXSdVQuB3GD1UMTTUl/Qme+I7nx 9UeKD9F8evQHe03Hta7WpFz/p/1R5j6X2gsZ6elZxjvHtMaly7fvSgw/5EFXf7Qs OKmZ92lNpgQbPRxwVKdQRQK/RLACTh4OHYIEZO2uMT3+vsEdemPv0lFbJ+fhENBM P+UQMHZ0A9A+Y+9nX8drXcKVKQ== -----END CERTIFICATE-----Generated at Mon Sep 21 07:10:54 2026 by rpki-client