$ rpki-client -vvvf rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft File: sDUqu0PwqFVkm512GmVcP8YPbmM.mft (raw, json) Hash identifier: zFdi6oi/DADuIhRtsNtr5m+aTv81UuzVAcAmztFnF8A= Subject key identifier: 4F:7A:30:B8:F4:7B:76:D4:00:D3:28:DD:5D:45:A0:AF:11:0A:6A:15 Authority key identifier: B0:35:2A:BB:43:F0:A8:55:64:9B:9D:76:1A:65:5C:3F:C6:0F:6E:63 Certificate issuer: /CN=A9176DFC/serialNumber=B0352ABB43F0A855649B9D761A655C3FC60F6E63 Certificate serial: 0267 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft Manifest number: 025A Signing time: Mon 21 Sep 2026 02:18:31 +0000 Manifest this update: Mon 21 Sep 2026 02:18:30 +0000 Manifest next update: Mon 28 Sep 2026 02:18:30 +0000 Files and hashes: 1: sDUqu0PwqFVkm512GmVcP8YPbmM.crl (hash: lIGM24T0EWwNtbDD4M7MY4sWrlZYjqOQtkFKG7KC3KQ=) 2: 7BFE665EE17F11EF9536DC48C4F9AE02.roa (hash: PEc8Q36ZmFJmCyC4ydlSensDrscyZNlNt/tGuMlxL2g=) 3: 230A1090248C11EEA9EE1935C4F9AE02.roa (hash: rkU50GhDXfA75Ey44jTzfhYBTmuiCkN9RKfLyY3jdes=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.crl rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 615 (0x267) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176DFC, serialNumber=B0352ABB43F0A855649B9D761A655C3FC60F6E63 Validity Not Before: Sep 21 02:18:30 2026 GMT Not After : Sep 28 02:18:30 2026 GMT Subject: CN=6ab093f6-debf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a8:b8:e9:5c:93:a2:9b:65:76:d1:ea:ad:2c: af:5a:25:a1:39:c2:92:36:28:3e:9c:fe:ef:8b:21: 3f:ec:32:20:c2:6e:24:91:f8:6b:d9:7d:1a:f5:65: b5:63:58:a2:00:1f:9f:21:96:e5:f5:e0:5f:58:b0: b6:86:41:f4:be:43:c9:87:76:08:8b:dd:ab:ff:01: 1d:49:ee:72:07:aa:01:f5:1e:cd:b7:07:44:7a:2c: 50:2a:80:20:30:00:33:a9:91:0f:37:f7:26:ff:83: f1:10:92:d4:a3:22:f5:b0:cc:86:a2:c2:d9:b5:8c: 3c:86:96:7f:5d:0d:bb:bf:0d:11:dd:1b:4a:55:d7: 4c:53:09:69:37:f0:2b:54:e7:e9:c2:4b:92:cc:60: 5f:52:a2:b1:a8:7e:76:38:09:36:05:76:f7:d4:f7: 8d:99:9a:f1:22:60:5c:38:ed:aa:eb:dd:4d:c5:59: 95:6b:a7:3b:5b:7f:de:54:f2:85:ad:a8:f5:3f:6e: 89:bc:e3:28:2b:e3:a7:2e:00:c3:7a:64:b5:b4:11: 91:1a:64:89:ef:85:d1:01:01:8d:97:1b:b4:7a:3f: 68:a4:e5:5c:fd:bd:f8:fe:64:75:ba:0e:6a:17:ac: 33:a2:36:c8:23:1a:90:b1:f3:07:74:39:83:ac:e0: 3c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:7A:30:B8:F4:7B:76:D4:00:D3:28:DD:5D:45:A0:AF:11:0A:6A:15 X509v3 Authority Key Identifier: keyid:B0:35:2A:BB:43:F0:A8:55:64:9B:9D:76:1A:65:5C:3F:C6:0F:6E:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:21:a9:b7:1f:43:f2:6c:9a:4d:78:a6:1f:64:73:dc:1f:21: 0c:7a:e1:ab:6a:52:e4:ac:76:25:32:db:76:61:57:e2:7c:aa: f3:7f:6a:60:9f:70:16:a0:67:d7:2f:fe:e3:9f:b4:7c:07:de: 5f:76:60:b1:f5:15:06:27:bc:9d:b5:d6:ce:29:de:95:b0:a3: a0:49:dd:d8:35:8d:fc:2f:f0:c2:4d:d5:0e:8d:cb:86:19:1b: 6f:3a:29:52:94:a9:a6:54:84:ca:a2:c2:f9:79:4e:b5:79:88: d6:5e:a3:af:cd:58:e7:50:e1:97:c2:be:5c:73:4a:10:5f:cd: d2:95:b0:05:68:b9:84:11:61:a6:72:c2:1b:cf:19:fd:11:4f: a1:36:5d:a7:66:c3:3f:ef:08:c8:f6:f1:1f:08:e4:43:98:71: 89:0a:5d:89:b9:e0:19:b3:af:cf:31:78:9c:96:04:62:3b:8b: 41:6c:db:11:84:0c:6c:fc:41:c8:ae:49:bf:00:f7:dd:10:e4: 96:2a:88:29:3e:62:42:aa:b6:ea:51:5f:29:1d:1e:2d:56:65: 82:a5:85:1b:e6:45:55:ff:1c:f5:fe:58:d9:3e:7a:b7:2e:3a: 5f:83:6c:fd:ad:98:cc:8b:5c:3b:17:cd:47:01:72:af:12:76: 81:d6:10:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZERkMxMTAvBgNVBAUTKEIwMzUyQUJCNDNGMEE4NTU2NDlCOUQ3NjFBNjU1QzNG QzYwRjZFNjMwHhcNMjYwOTIxMDIxODMwWhcNMjYwOTI4MDIxODMwWjAYMRYwFAYD VQQDEw02YWIwOTNmNi1kZWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv6i46VyToptldtHqrSyvWiWhOcKSNig+nP7viyE/7DIgwm4kkfhr2X0a9WW1 Y1iiAB+fIZbl9eBfWLC2hkH0vkPJh3YIi92r/wEdSe5yB6oB9R7NtwdEeixQKoAg MAAzqZEPN/cm/4PxEJLUoyL1sMyGosLZtYw8hpZ/XQ27vw0R3RtKVddMUwlpN/Ar VOfpwkuSzGBfUqKxqH52OAk2BXb31PeNmZrxImBcOO2q691NxVmVa6c7W3/eVPKF raj1P26JvOMoK+OnLgDDemS1tBGRGmSJ74XRAQGNlxu0ej9opOVc/b34/mR1ug5q F6wzojbIIxqQsfMHdDmDrOA8QwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE96MLj0 e3bUANMo3V1FoK8RCmoVMB8GA1UdIwQYMBaAFLA1KrtD8KhVZJuddhplXD/GD25j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkRGQy9CRTQwQzEzNjI0 OEIxMUVFQTM0RjZGMzRDNEY5QUUwMi9zRFVxdTBQd3FGVmttNTEyR21WY1A4WVBi bU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NEVXF1MFB3cUZWa201MTJHbVZjUDhZUGJtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NkRGQy9CRTQwQzEzNjI0OEIxMUVFQTM0RjZGMzRDNEY5QUUwMi9zRFVxdTBQd3FG VmttNTEyR21WY1A4WVBibU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVyGptx9D8myaTXimH2Rz3B8hDHrhq2pS5Kx2JTLbdmFX4nyq839qYJ9wFqBn 1y/+45+0fAfeX3ZgsfUVBie8nbXWzinelbCjoEnd2DWN/C/wwk3VDo3Lhhkbbzop UpSpplSEyqLC+XlOtXmI1l6jr81Y51Dhl8K+XHNKEF/N0pWwBWi5hBFhpnLCG88Z /RFPoTZdp2bDP+8IyPbxHwjkQ5hxiQpdibngGbOvzzF4nJYEYjuLQWzbEYQMbPxB yK5JvwD33RDkliqIKT5iQqq26lFfKR0eLVZlgqWFG+ZFVf8c9f5Y2T56ty46X4Ns /a2YzItcOxfNRwFyrxJ2gdYQ4Q== -----END CERTIFICATE-----Generated at Tue Sep 22 03:23:02 2026 by rpki-client