$ rpki-client -vvvf rpki.apnic.net/member_repository/A9175C96/71A72E2C710511F188C0061E65A30FBC/ax_z7YHR7aC43YxdpE5A-css0q8.mft File: ax_z7YHR7aC43YxdpE5A-css0q8.mft (raw, json) Hash identifier: 93ecfIMFxI383y9X8s5qmpdfjUf4fgKONxNtRD8WYOA= Subject key identifier: 2B:1B:4A:DE:DB:0B:C9:69:DF:AC:0F:C3:EE:7D:FE:1E:31:84:55:A4 Authority key identifier: 6B:1F:F3:ED:81:D1:ED:A0:B8:DD:8C:5D:A4:4E:40:F9:CB:2C:D2:AF Certificate issuer: /CN=A9175C96/serialNumber=6B1FF3ED81D1EDA0B8DD8C5DA44E40F9CB2CD2AF Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ax_z7YHR7aC43YxdpE5A-css0q8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175C96/71A72E2C710511F188C0061E65A30FBC/ax_z7YHR7aC43YxdpE5A-css0q8.mft Manifest number: 32 Signing time: Sun 27 Sep 2026 09:16:04 +0000 Manifest this update: Sun 27 Sep 2026 09:16:04 +0000 Manifest next update: Sun 04 Oct 2026 09:16:04 +0000 Files and hashes: 1: ax_z7YHR7aC43YxdpE5A-css0q8.crl (hash: AGbLbZ4o8x0NuQRrAy4vTE8+BAe2SjvAbRtRLOAlUVs=) 2: F9F4A9C6710511F1AB87369C65A30FBC.roa (hash: vF7yzq71bKd9/EBHrcKUsFw6zWZiI9lEWL6wZYfxLto=) 3: CC84D0BA710511F1A8E0DB7B65A30FBC.roa (hash: W/k3tTym2pPqddOTOs65rSq65DSs2mHOJ53vJkYkUlI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175C96/71A72E2C710511F188C0061E65A30FBC/ax_z7YHR7aC43YxdpE5A-css0q8.crl rsync://rpki.apnic.net/member_repository/A9175C96/71A72E2C710511F188C0061E65A30FBC/ax_z7YHR7aC43YxdpE5A-css0q8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ax_z7YHR7aC43YxdpE5A-css0q8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 07:26:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175C96, serialNumber=6B1FF3ED81D1EDA0B8DD8C5DA44E40F9CB2CD2AF Validity Not Before: Sep 27 09:16:04 2026 GMT Not After : Oct 4 09:16:04 2026 GMT Subject: CN=6ab8ded4-4301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:32:40:6d:e1:47:21:2f:69:d9:1e:43:57:d8: 29:27:ca:b6:bb:2c:69:40:16:db:ef:97:79:fc:48: 17:bb:2a:ce:42:a1:aa:6d:8e:f0:58:ea:96:d6:72: bb:2e:c7:d0:3a:1b:85:ec:1f:e5:6e:c0:d6:c6:6b: d7:bd:62:ee:3b:02:f8:1e:00:86:ea:8b:9d:c5:3b: c7:e3:c9:fa:04:35:7a:e7:14:45:47:42:48:ca:9a: 4b:c4:19:5c:b0:36:ba:65:99:c5:d5:8a:3a:6a:c6: e4:54:23:ff:3a:98:f6:de:22:e3:80:b7:eb:90:4b: 8c:d3:70:0e:04:1f:38:ea:ea:d9:74:39:c4:17:09: 57:68:aa:3e:37:29:02:b2:30:d5:74:c9:c0:d0:ae: d0:2a:4e:d9:f9:fa:29:11:15:b4:d7:6f:28:7d:6c: 99:b0:1b:d6:c1:75:d9:1f:5c:16:b3:bb:35:5c:34: 9d:da:1c:c2:df:2b:87:6c:71:2a:18:1c:42:e5:b5: 01:f7:4b:4d:1f:56:ab:05:81:f9:9e:10:a0:c5:70: 7f:fb:f4:6e:c0:25:6f:cc:a7:d4:93:20:a9:09:96: 2f:5d:91:00:fe:8c:70:ae:4c:9a:ae:ee:46:b9:8a: d8:fa:1a:91:7e:dc:bf:c0:77:d0:03:0f:3b:5f:1d: 05:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:1B:4A:DE:DB:0B:C9:69:DF:AC:0F:C3:EE:7D:FE:1E:31:84:55:A4 X509v3 Authority Key Identifier: keyid:6B:1F:F3:ED:81:D1:ED:A0:B8:DD:8C:5D:A4:4E:40:F9:CB:2C:D2:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175C96/71A72E2C710511F188C0061E65A30FBC/ax_z7YHR7aC43YxdpE5A-css0q8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ax_z7YHR7aC43YxdpE5A-css0q8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175C96/71A72E2C710511F188C0061E65A30FBC/ax_z7YHR7aC43YxdpE5A-css0q8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:98:f2:02:e7:21:cd:c0:d9:69:cb:c5:64:66:6c:74:4e:b7: c7:a4:b3:ef:45:28:3d:f8:b4:14:db:b1:c6:cd:5c:49:3a:ad: 94:25:9c:45:b9:f8:65:a1:37:5c:f8:5b:a6:36:c5:92:90:3f: c6:cb:12:af:0c:af:b2:48:3c:a2:e1:25:07:4a:64:73:39:d6: 10:13:ae:ea:a1:b9:9d:cc:76:d3:ab:46:d9:a5:45:f3:ec:59: 17:27:c6:d5:e6:ab:d9:68:20:f4:af:44:3a:b5:58:9d:66:78: 27:0a:92:eb:dd:0f:43:1c:5e:90:55:f3:97:09:61:0f:6a:0a: 32:f8:c2:19:94:64:45:d6:07:e0:99:23:f8:54:41:9f:6b:5b: fc:83:24:2a:07:3e:76:ef:a5:1d:b4:b7:7f:c8:4f:b3:5c:8a: 4f:6b:31:9b:33:2a:31:e8:c7:48:fa:26:1b:ce:a1:cb:57:4f: 39:9d:2c:71:dd:4e:1e:2d:55:9d:ab:44:ad:3e:c7:e4:84:78: 23:97:0b:36:0c:71:52:23:90:26:e6:46:ee:b8:dd:65:46:00: 91:34:ee:8e:8f:22:b9:a4:5d:7d:ad:ab:b5:77:d7:58:04:81: 7a:e0:67:40:d2:f7:e3:60:73:82:9e:4a:03:a8:4d:c5:c0:a7: c0:cc:80:93 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NUM5NjExMC8GA1UEBRMoNkIxRkYzRUQ4MUQxRURBMEI4REQ4QzVEQTQ0RTQwRjlD QjJDRDJBRjAeFw0yNjA5MjcwOTE2MDRaFw0yNjEwMDQwOTE2MDRaMBgxFjAUBgNV BAMTDTZhYjhkZWQ0LTQzMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBMkBt4UchL2nZHkNX2Cknyra7LGlAFtvvl3n8SBe7Ks5CoaptjvBY6pbWcrsu x9A6G4XsH+VuwNbGa9e9Yu47AvgeAIbqi53FO8fjyfoENXrnFEVHQkjKmkvEGVyw NrplmcXVijpqxuRUI/86mPbeIuOAt+uQS4zTcA4EHzjq6tl0OcQXCVdoqj43KQKy MNV0ycDQrtAqTtn5+ikRFbTXbyh9bJmwG9bBddkfXBazuzVcNJ3aHMLfK4dscSoY HELltQH3S00fVqsFgfmeEKDFcH/79G7AJW/Mp9STIKkJli9dkQD+jHCuTJqu7ka5 itj6GpF+3L/Ad9ADDztfHQVXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUKxtK3tsL yWnfrA/D7n3+HjGEVaQwHwYDVR0jBBgwFoAUax/z7YHR7aC43YxdpE5A+css0q8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1Qzk2LzcxQTcyRTJDNzEw NTExRjE4OEMwMDYxRTY1QTMwRkJDL2F4X3o3WUhSN2FDNDNZeGRwRTVBLWNzczBx OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYXhfejdZSFI3YUM0M1l4ZHBFNUEtY3NzMHE4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1 Qzk2LzcxQTcyRTJDNzEwNTExRjE4OEMwMDYxRTY1QTMwRkJDL2F4X3o3WUhSN2FD NDNZeGRwRTVBLWNzczBxOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCjmPIC5yHNwNlpy8VkZmx0TrfHpLPvRSg9+LQU27HGzVxJOq2UJZxFufhloTdc +FumNsWSkD/GyxKvDK+ySDyi4SUHSmRzOdYQE67qobmdzHbTq0bZpUXz7FkXJ8bV 5qvZaCD0r0Q6tVidZngnCpLr3Q9DHF6QVfOXCWEPagoy+MIZlGRF1gfgmSP4VEGf a1v8gyQqBz5276UdtLd/yE+zXIpPazGbMyox6MdI+iYbzqHLV085nSxx3U4eLVWd q0StPsfkhHgjlws2DHFSI5Am5kbuuN1lRgCRNO6OjyK5pF19rau1d9dYBIF64GdA 0vfjYHOCnkoDqE3FwKfAzICT -----END CERTIFICATE-----Generated at Sun Sep 27 12:28:00 2026 by rpki-client