$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft File: o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft (raw, json) Hash identifier: DyF2qDk0rjhgAbdd5G7FYcDHyWicW//gli7SVCQ0+D4= Subject key identifier: B1:DE:D4:99:73:B0:BE:22:74:B6:61:15:83:9B:BE:B9:0E:09:8A:C2 Authority key identifier: A3:D0:06:26:C2:F9:B4:62:C5:50:7F:F1:80:C3:6D:E9:C3:39:9C:B2 Certificate issuer: /CN=A9172878/serialNumber=A3D00626C2F9B462C5507FF180C36DE9C3399CB2 Certificate serial: 3614 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft Manifest number: 35BD Signing time: Sat 26 Sep 2026 14:33:05 +0000 Manifest this update: Sat 26 Sep 2026 14:33:04 +0000 Manifest next update: Sat 03 Oct 2026 14:33:04 +0000 Files and hashes: 1: o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl (hash: YKsQCioRHYDQr1maJMgeRdori6MFcgQyv0axI/60xKc=) 2: 8D2DEDF4C2A811EBA79A7055C4F9AE02.roa (hash: 1EvYa4g0ny35NvavzoObDfjafUpRKiAIL6vfsDblpTA=) 3: C552F48EC80011EAAD578B77C4F9AE02.roa (hash: djq3jcNv2IgImD/jJLxf2QEHt2Ixwwxzxo/g0EZ2JvI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 14:33:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13844 (0x3614) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172878, serialNumber=A3D00626C2F9B462C5507FF180C36DE9C3399CB2 Validity Not Before: Sep 26 14:33:04 2026 GMT Not After : Oct 3 14:33:04 2026 GMT Subject: CN=6ab7d7a1-0972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c2:a9:8d:d1:42:26:d7:c6:b4:8d:36:44:f2: f6:0f:fe:1d:ca:bb:13:c0:ca:3a:cb:67:ea:f6:ae: ff:c8:f2:07:89:d4:70:25:d6:fd:25:4b:51:6a:af: d1:e8:bf:c4:77:34:83:31:06:4b:aa:37:8b:65:a5: 3d:d9:a8:f3:9f:b8:0a:15:fa:33:2e:a2:e3:67:11: 25:04:cb:92:0e:ce:92:45:07:a9:9f:ba:22:46:3f: 6d:e8:28:16:b3:1d:85:cd:9c:42:56:c2:91:7c:2f: 34:7a:af:5e:46:b1:34:9f:71:5b:e6:7a:85:83:c3: 5e:63:88:2a:7c:39:e4:81:6c:b3:49:ea:bc:b6:3a: 05:c0:71:64:09:cd:a3:6d:f2:e6:17:cd:9f:73:c1: 92:1c:5d:71:6b:be:05:7a:c5:e6:de:6a:80:4f:7f: 01:71:61:ed:44:05:ec:ee:47:1a:9a:fc:e1:62:90: 99:03:4e:d9:45:09:ad:3e:cf:8e:a1:a3:b7:e4:f8: 21:8b:1c:60:e6:6a:da:d2:02:d9:bf:14:7b:ca:d3: 28:38:a4:f6:9a:cc:ea:87:f3:a8:9e:ed:66:d5:9e: 30:11:e1:31:92:e2:10:f6:24:03:75:ea:1f:25:cc: 44:d2:41:de:59:d4:2f:d3:13:1c:88:4c:eb:ad:f4: b8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:DE:D4:99:73:B0:BE:22:74:B6:61:15:83:9B:BE:B9:0E:09:8A:C2 X509v3 Authority Key Identifier: keyid:A3:D0:06:26:C2:F9:B4:62:C5:50:7F:F1:80:C3:6D:E9:C3:39:9C:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:e0:74:8b:fd:23:97:c0:43:3f:da:83:5f:45:72:75:90:69: 95:9a:4d:1b:d0:3a:59:14:c2:02:81:00:94:e2:91:ff:2b:d0: e3:e8:c2:34:12:80:2c:3c:ba:77:40:cc:d9:b8:85:02:a2:01: fe:6e:1e:fc:2c:73:80:e5:aa:fa:0b:d3:d1:f5:6e:46:d4:ef: a4:40:71:31:be:e4:54:f9:91:4c:25:a2:5e:1b:1b:75:db:75: 2b:81:43:9b:9c:18:8a:28:59:66:55:99:18:26:fb:c7:2e:ca: 09:6a:61:ac:da:4d:83:cc:71:95:04:78:22:9b:4a:7a:7d:df: f2:97:1e:85:3d:32:58:0f:c3:9b:a2:83:c9:f3:7b:09:10:83: 20:2f:8b:47:21:53:93:50:11:30:88:4a:7b:9e:05:d8:ab:1d: ae:98:fe:6b:32:b6:61:d9:15:b3:b0:8d:d7:06:f9:ae:a6:63: f2:f7:5d:2c:3b:af:76:48:ac:fa:f2:ee:49:d6:fd:8e:5f:10: 28:f8:68:3a:18:40:ef:4e:51:90:86:4e:3d:a1:17:c4:f2:9b: 2d:e2:23:af:b1:1c:1f:ab:50:90:95:d6:ba:c2:15:4f:1d:e8: 5d:c1:35:98:29:12:81:9d:b7:81:b2:03:ca:ed:07:75:04:d8: ad:25:21:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI4NzgxMTAvBgNVBAUTKEEzRDAwNjI2QzJGOUI0NjJDNTUwN0ZGMTgwQzM2REU5 QzMzOTlDQjIwHhcNMjYwOTI2MTQzMzA0WhcNMjYxMDAzMTQzMzA0WjAYMRYwFAYD VQQDEw02YWI3ZDdhMS0wOTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw8KpjdFCJtfGtI02RPL2D/4dyrsTwMo6y2fq9q7/yPIHidRwJdb9JUtRaq/R 6L/EdzSDMQZLqjeLZaU92ajzn7gKFfozLqLjZxElBMuSDs6SRQepn7oiRj9t6CgW sx2FzZxCVsKRfC80eq9eRrE0n3Fb5nqFg8NeY4gqfDnkgWyzSeq8tjoFwHFkCc2j bfLmF82fc8GSHF1xa74FesXm3mqAT38BcWHtRAXs7kcamvzhYpCZA07ZRQmtPs+O oaO35Pghixxg5mra0gLZvxR7ytMoOKT2mszqh/Oonu1m1Z4wEeExkuIQ9iQDdeof JcxE0kHeWdQv0xMciEzrrfS4VwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLHe1Jlz sL4idLZhFYObvrkOCYrCMB8GA1UdIwQYMBaAFKPQBibC+bRixVB/8YDDbenDOZyy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjg3OC80Qzk5OEEzNjFE OEExMUUyOEExRjIzRTQwOEIwMkNEMi9vOUFHSnNMNXRHTEZVSF94Z01OdDZjTTVu TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL285QUdKc0w1dEdMRlVIX3hnTU50NmNNNW5MSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjg3OC80Qzk5OEEzNjFEOEExMUUyOEExRjIzRTQwOEIwMkNEMi9vOUFHSnNMNXRH TEZVSF94Z01OdDZjTTVuTEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAROB0i/0jl8BDP9qDX0VydZBplZpNG9A6WRTCAoEAlOKR/yvQ4+jCNBKALDy6 d0DM2biFAqIB/m4e/CxzgOWq+gvT0fVuRtTvpEBxMb7kVPmRTCWiXhsbddt1K4FD m5wYiihZZlWZGCb7xy7KCWphrNpNg8xxlQR4IptKen3f8pcehT0yWA/Dm6KDyfN7 CRCDIC+LRyFTk1ARMIhKe54F2Ksdrpj+azK2YdkVs7CN1wb5rqZj8vddLDuvdkis +vLuSdb9jl8QKPhoOhhA705RkIZOPaEXxPKbLeIjr7EcH6tQkJXWusIVTx3oXcE1 mCkSgZ23gbIDyu0HdQTYrSUhjA== -----END CERTIFICATE-----Generated at Sun Sep 27 04:10:07 2026 by rpki-client