$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173526/70A022C49AAC11F1B63AA1684111F970/5imE0s0CFCbG34LJV7TilIT_Q2I.mft File: 5imE0s0CFCbG34LJV7TilIT_Q2I.mft (raw, json) Hash identifier: iAO+VZ/rPSWMsfOpm9LcfQ3Zoq4gN55xMnnB8HPOuBw= Subject key identifier: 6D:68:CE:8F:37:1D:0D:30:67:D2:3A:2B:CF:CC:09:DB:15:F6:CA:D3 Authority key identifier: E6:29:84:D2:CD:02:14:26:C6:DF:82:C9:57:B4:E2:94:84:FF:43:62 Certificate issuer: /CN=A9173526/serialNumber=E62984D2CD021426C6DF82C957B4E29484FF4362 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5imE0s0CFCbG34LJV7TilIT_Q2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173526/70A022C49AAC11F1B63AA1684111F970/5imE0s0CFCbG34LJV7TilIT_Q2I.mft Manifest number: 15 Signing time: Mon 21 Sep 2026 09:02:05 +0000 Manifest this update: Mon 21 Sep 2026 09:02:04 +0000 Manifest next update: Mon 28 Sep 2026 09:02:04 +0000 Files and hashes: 1: 5imE0s0CFCbG34LJV7TilIT_Q2I.crl (hash: m4EemUOL10hZ/tKHwCIDrGpQkBxiNcTjYJP3Y9rwKQ4=) 2: 9A230CB4A1C411F18B639EF37011F970.roa (hash: jN77xCqz4BuEwPpgFbg35RBWUcfVOZyD82B73N0I+TI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173526/70A022C49AAC11F1B63AA1684111F970/5imE0s0CFCbG34LJV7TilIT_Q2I.crl rsync://rpki.apnic.net/member_repository/A9173526/70A022C49AAC11F1B63AA1684111F970/5imE0s0CFCbG34LJV7TilIT_Q2I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5imE0s0CFCbG34LJV7TilIT_Q2I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 09:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173526, serialNumber=E62984D2CD021426C6DF82C957B4E29484FF4362 Validity Not Before: Sep 21 09:02:04 2026 GMT Not After : Sep 28 09:02:04 2026 GMT Subject: CN=6ab0f28d-3a71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f0:7f:b3:07:fc:4f:c3:59:ad:02:7a:85:78: ad:56:1f:5d:0f:48:62:74:fe:22:27:f8:4e:c4:7e: 03:20:42:df:ae:dc:8d:58:7f:c2:64:ba:31:0c:24: ef:d7:c0:99:7c:34:04:6d:0b:9f:8d:5a:55:1c:46: 2e:4c:cb:6d:08:ab:e9:54:c7:33:f6:80:ac:f2:25: d8:58:0f:40:20:eb:4e:80:3f:a3:eb:e5:8f:d6:cc: 88:78:a1:e3:cb:05:95:d5:bf:c0:37:9e:cb:46:50: 96:d6:71:43:4f:52:ce:f5:b1:94:3d:36:6e:05:20: a4:1b:03:a4:ab:08:90:9b:2f:38:bb:7e:b7:c8:44: a5:ba:46:a2:f8:24:ec:75:e1:76:04:8d:79:3b:52: 33:42:25:59:36:1e:0e:af:1a:ed:64:ac:57:f5:9a: d3:3b:4c:ac:98:a9:62:21:00:b2:50:96:49:d7:c3: e0:5e:f1:ca:41:45:81:45:4a:6e:7e:a7:d5:ce:b2: fc:11:d5:1b:ff:7a:f1:7a:b7:6e:f7:2a:cd:22:68: 38:59:6a:91:1b:1f:9c:c7:21:79:24:b3:c2:dc:81: 00:82:f1:44:c9:c3:6e:bf:6a:a8:3f:da:60:3c:53: ab:3f:f6:3c:ba:f1:a4:12:0f:cc:8a:69:95:94:e4: 0f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:68:CE:8F:37:1D:0D:30:67:D2:3A:2B:CF:CC:09:DB:15:F6:CA:D3 X509v3 Authority Key Identifier: keyid:E6:29:84:D2:CD:02:14:26:C6:DF:82:C9:57:B4:E2:94:84:FF:43:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173526/70A022C49AAC11F1B63AA1684111F970/5imE0s0CFCbG34LJV7TilIT_Q2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5imE0s0CFCbG34LJV7TilIT_Q2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173526/70A022C49AAC11F1B63AA1684111F970/5imE0s0CFCbG34LJV7TilIT_Q2I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:e5:be:55:19:ec:6b:d3:1f:d8:14:2c:be:88:ce:a2:c8:da: 1d:41:a4:29:44:90:67:36:a4:98:3c:fa:28:0d:05:af:eb:04: 81:fc:fc:08:48:25:58:32:6c:2c:b2:11:01:13:52:d4:55:c6: 77:65:36:43:02:db:71:2c:e6:81:98:8a:06:0e:ae:62:b3:5e: 19:31:28:d6:db:9d:4a:62:e0:e4:89:4e:94:b8:51:37:bf:ed: 92:a5:3b:0e:5d:a1:99:f8:52:b4:b9:4b:9e:99:0e:8e:e3:8b: 7c:e7:a3:b7:24:df:0d:c2:39:52:ca:42:e8:f5:9d:1d:93:3a: 50:24:bc:62:cc:d2:cf:b0:90:4c:15:19:1d:7a:02:db:72:6b: 97:dc:60:34:6f:cb:82:a6:4b:72:db:2b:b7:fd:1f:ad:4c:6b: 61:f1:40:fe:3c:3b:d2:5a:79:e7:dc:c5:ae:53:69:a5:40:19: 6b:ec:cc:3e:11:ba:65:e7:b6:10:64:3d:f0:f2:13:a1:8a:eb: da:7e:80:56:17:2a:de:c5:25:b3:cc:22:f3:fe:de:90:26:4b: cd:70:a4:7c:2a:d6:05:aa:9b:5b:6b:a4:23:08:5e:28:f0:e3: ce:a9:0d:dd:46:5d:d6:57:6b:2b:c6:e2:83:c1:86:85:c4:4a: 96:eb:ce:3e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MzUyNjExMC8GA1UEBRMoRTYyOTg0RDJDRDAyMTQyNkM2REY4MkM5NTdCNEUyOTQ4 NEZGNDM2MjAeFw0yNjA5MjEwOTAyMDRaFw0yNjA5MjgwOTAyMDRaMBgxFjAUBgNV BAMTDTZhYjBmMjhkLTNhNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC98H+zB/xPw1mtAnqFeK1WH10PSGJ0/iIn+E7EfgMgQt+u3I1Yf8JkujEMJO/X wJl8NARtC5+NWlUcRi5My20Iq+lUxzP2gKzyJdhYD0Ag606AP6Pr5Y/WzIh4oePL BZXVv8A3nstGUJbWcUNPUs71sZQ9Nm4FIKQbA6SrCJCbLzi7frfIRKW6RqL4JOx1 4XYEjXk7UjNCJVk2Hg6vGu1krFf1mtM7TKyYqWIhALJQlknXw+Be8cpBRYFFSm5+ p9XOsvwR1Rv/evF6t273Ks0iaDhZapEbH5zHIXkks8LcgQCC8UTJw26/aqg/2mA8 U6s/9jy68aQSD8yKaZWU5A+1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUbWjOjzcd DTBn0jorz8wJ2xX2ytMwHwYDVR0jBBgwFoAU5imE0s0CFCbG34LJV7TilIT/Q2Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczNTI2LzcwQTAyMkM0OUFB QzExRjFCNjNBQTE2ODQxMTFGOTcwLzVpbUUwczBDRkNiRzM0TEpWN1RpbElUX1Ey SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNWltRTBzMENGQ2JHMzRMSlY3VGlsSVRfUTJJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcz NTI2LzcwQTAyMkM0OUFBQzExRjFCNjNBQTE2ODQxMTFGOTcwLzVpbUUwczBDRkNi RzM0TEpWN1RpbElUX1EySS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAP5b5VGexr0x/YFCy+iM6iyNodQaQpRJBnNqSYPPooDQWv6wSB/PwISCVYMmws shEBE1LUVcZ3ZTZDAttxLOaBmIoGDq5is14ZMSjW251KYuDkiU6UuFE3v+2SpTsO XaGZ+FK0uUuemQ6O44t856O3JN8NwjlSykLo9Z0dkzpQJLxizNLPsJBMFRkdegLb cmuX3GA0b8uCpkty2yu3/R+tTGth8UD+PDvSWnnn3MWuU2mlQBlr7Mw+Ebpl57YQ ZD3w8hOhiuvafoBWFyrexSWzzCLz/t6QJkvNcKR8KtYFqptba6QjCF4o8OPOqQ3d Rl3WV2srxuKDwYaFxEqW684+ -----END CERTIFICATE-----Generated at Tue Sep 22 12:03:44 2026 by rpki-client