$ rpki-client -vvvf rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft File: aMW6vfwSOWbQX4DD-kI3lELEIgw.mft (raw, json) Hash identifier: rX8k4zijp+9kT7zdsF3hwCFwWifBgWBFzfkvWbwzRi0= Subject key identifier: D3:36:47:09:EE:D3:CC:0C:8A:56:18:CF:C0:86:49:FF:9E:55:BD:16 Authority key identifier: 68:C5:BA:BD:FC:12:39:66:D0:5F:80:C3:FA:42:37:94:42:C4:22:0C Certificate issuer: /CN=A917201D/serialNumber=68C5BABDFC123966D05F80C3FA42379442C4220C Certificate serial: 35B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft Manifest number: 3592 Signing time: Sun 20 Sep 2026 14:43:38 +0000 Manifest this update: Sun 20 Sep 2026 14:43:37 +0000 Manifest next update: Sun 27 Sep 2026 14:43:37 +0000 Files and hashes: 1: aMW6vfwSOWbQX4DD-kI3lELEIgw.crl (hash: j13/4jm0MwHMNApIrO7ZvH2jdEYuZga0bPdh5N7J558=) 2: 73438FF06DED11E9A21D1341C4F9AE02.roa (hash: zgCYwMeP1UfI6GngEcCGqtGu4743/UjhmFPwZo3tqb0=) 3: E05FE99AB0D511E5B4F68B09C4F9AE02.roa (hash: 0QvFI/ahBWX5VoB/jvMXb7RKSIsf6B/YSEBaV7eS1ag=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.crl rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 14:43:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13750 (0x35b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917201D, serialNumber=68C5BABDFC123966D05F80C3FA42379442C4220C Validity Not Before: Sep 20 14:43:37 2026 GMT Not After : Sep 27 14:43:37 2026 GMT Subject: CN=6aaff11a-a8c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fe:d8:2d:e2:d6:ec:db:59:e4:6f:a7:40:b4: b0:a6:d9:91:3d:9a:97:fc:f2:bb:16:3e:ec:37:66: c6:0d:a7:31:0f:99:bc:07:9f:88:00:27:ab:79:0a: e3:7c:4d:92:39:3d:09:cd:58:02:89:cc:8e:d1:7a: 1d:d5:75:64:a7:03:17:f6:a9:1e:27:81:20:84:75: 34:d7:72:a6:ad:03:0f:08:eb:b9:29:1e:21:d8:ba: d9:ca:b7:dc:3b:21:fb:00:eb:55:06:fe:5c:a2:03: a3:56:e0:fe:83:8f:5f:12:b9:0b:b2:5a:07:c7:09: b6:35:ca:b8:19:0b:db:7e:97:3d:78:e8:f3:d9:e0: 6b:46:d6:d5:eb:c2:d7:ef:71:0a:a1:45:30:b6:86: 69:81:13:e2:70:7b:6d:5f:83:ff:79:fa:2d:2d:5a: c2:d8:db:b4:56:07:4e:0d:d1:b7:0d:18:a6:df:c8: 80:b4:3d:74:d3:f6:10:d0:d2:fd:ca:36:28:24:67: 7b:6d:69:19:19:1d:7a:5f:95:71:71:ea:24:95:05: 3f:8e:49:d9:e8:e0:6b:47:d1:2c:f1:e5:54:b0:92: fa:31:b8:41:bb:e4:76:04:db:f3:c6:d5:21:7a:b6: 36:c0:a4:69:58:90:6f:63:d0:5f:d4:1e:a6:2c:0b: fd:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:36:47:09:EE:D3:CC:0C:8A:56:18:CF:C0:86:49:FF:9E:55:BD:16 X509v3 Authority Key Identifier: keyid:68:C5:BA:BD:FC:12:39:66:D0:5F:80:C3:FA:42:37:94:42:C4:22:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:a9:d9:19:51:ce:7c:eb:2d:3b:13:07:aa:20:0d:af:2f:e8: 31:06:78:ff:2c:41:28:3f:2d:6b:ca:2a:68:bb:aa:7f:62:18: 09:e6:cc:c4:b9:78:4f:bc:b6:99:05:be:a0:f2:b6:e5:da:77: 97:e9:54:d5:86:31:62:fa:56:62:5b:67:b9:ae:24:24:e1:1f: 36:bf:61:55:cb:f9:69:13:61:12:8f:30:dd:28:b3:ee:57:fd: 98:5f:af:5e:92:ab:94:f5:a9:6e:9a:4d:79:ed:df:e0:4c:07: 05:4a:4f:7d:75:69:d2:85:3a:00:10:1b:da:83:86:63:94:35: ea:56:83:28:ba:99:cc:60:1b:45:93:9b:cb:76:26:4e:06:7d: 04:40:cf:0d:71:fc:64:e7:a6:c3:06:58:6f:a9:aa:bf:58:14: 9c:11:c4:8a:df:cd:a0:f7:7b:ba:3c:44:7d:a4:a6:6c:44:30: d3:78:27:31:1b:7d:af:f7:31:ad:89:d9:02:22:30:6d:74:81: 2b:a6:3e:b0:29:fc:1f:46:1d:31:e7:97:7b:c7:b4:58:c5:3f: e0:5c:23:71:9f:2d:65:f7:62:39:ab:7f:e4:d0:65:91:b9:04: 2d:2a:d5:ba:91:46:1e:a5:47:3d:a7:48:10:28:9d:c1:ff:31: 67:50:50:2c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzIwMUQxMTAvBgNVBAUTKDY4QzVCQUJERkMxMjM5NjZEMDVGODBDM0ZBNDIzNzk0 NDJDNDIyMEMwHhcNMjYwOTIwMTQ0MzM3WhcNMjYwOTI3MTQ0MzM3WjAYMRYwFAYD VQQDEw02YWFmZjExYS1hOGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/7YLeLW7NtZ5G+nQLSwptmRPZqX/PK7Fj7sN2bGDacxD5m8B5+IACereQrj fE2SOT0JzVgCicyO0Xod1XVkpwMX9qkeJ4EghHU013KmrQMPCOu5KR4h2LrZyrfc OyH7AOtVBv5cogOjVuD+g49fErkLsloHxwm2Ncq4GQvbfpc9eOjz2eBrRtbV68LX 73EKoUUwtoZpgRPicHttX4P/efotLVrC2Nu0VgdODdG3DRim38iAtD100/YQ0NL9 yjYoJGd7bWkZGR16X5VxceoklQU/jknZ6OBrR9Es8eVUsJL6MbhBu+R2BNvzxtUh erY2wKRpWJBvY9Bf1B6mLAv9UwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNM2Rwnu 08wMilYYz8CGSf+eVb0WMB8GA1UdIwQYMBaAFGjFur38Ejlm0F+Aw/pCN5RCxCIM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjAxRC9DRDFFMjk0ODFE OTIxMUUyQTNCMUY0RjUwOEIwMkNEMi9hTVc2dmZ3U09XYlFYNERELWtJM2xFTEVJ Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FNVzZ2ZndTT1diUVg0REQta0kzbEVMRUlndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjAxRC9DRDFFMjk0ODFEOTIxMUUyQTNCMUY0RjUwOEIwMkNEMi9hTVc2dmZ3U09X YlFYNERELWtJM2xFTEVJZ3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQanZGVHOfOstOxMHqiANry/oMQZ4/yxBKD8ta8oqaLuqf2IYCebMxLl4T7y2 mQW+oPK25dp3l+lU1YYxYvpWYltnua4kJOEfNr9hVcv5aRNhEo8w3Siz7lf9mF+v XpKrlPWpbppNee3f4EwHBUpPfXVp0oU6ABAb2oOGY5Q16laDKLqZzGAbRZOby3Ym TgZ9BEDPDXH8ZOemwwZYb6mqv1gUnBHEit/NoPd7ujxEfaSmbEQw03gnMRt9r/cx rYnZAiIwbXSBK6Y+sCn8H0YdMeeXe8e0WMU/4FwjcZ8tZfdiOat/5NBlkbkELSrV upFGHqVHPadIECidwf8xZ1BQLA== -----END CERTIFICATE-----Generated at Tue Sep 22 06:52:52 2026 by rpki-client