$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft File: siw9CrzTkZSGo-YejXiJI5Ir9qU.mft (raw, json) Hash identifier: fnAEqaG8HBy+lxAdEzgCVdP2ZVq2JJ6DSa214zg6rI0= Subject key identifier: 97:F9:5A:1F:34:C9:C5:98:5B:7A:5C:5C:AB:03:D3:0E:40:6B:B6:95 Authority key identifier: B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5 Certificate issuer: /CN=A917A66F/serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5 Certificate serial: 025A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft Manifest number: 0214 Signing time: Mon 21 Sep 2026 03:25:18 +0000 Manifest this update: Mon 21 Sep 2026 03:25:17 +0000 Manifest next update: Mon 28 Sep 2026 03:25:17 +0000 Files and hashes: 1: siw9CrzTkZSGo-YejXiJI5Ir9qU.crl (hash: 0x6XQl3uZDTXZvceojhkOrvev2NonzAVBBU87m1SRlM=) 2: 936A4548AC3A11F0A9C43F44C4F9AE02.roa (hash: Gs+o75R0CrmcD+NQIkcYwtnmpB0ywQTdRm5wnPFVnIM=) 3: ABCE17E0E15511F0A05B89F1756F56BC.roa (hash: QYg5E4x9LMPZOJAculgNlzjCkNXYjlhGRkbG+GBuYHI=) 4: 6E1519E8E1B211EEB4706E18C4F9AE02.roa (hash: hmZ9rhVcrGO06WP8qu78jvi4b6IvbPBAGiBlO+wAulM=) 5: B4B6C2B0C1AA11EF83A31D6CC4F9AE02.roa (hash: N8v/F0kkHOcAXXcaXcs+RFT9ux96p8fZZgpGPcvAFVg=) 6: BB982DDC211611F08D31C34DC4F9AE02.roa (hash: SfV5OG0U5jsZ6Mwuu8Y5IVx/FMdaDgzIJTsS5IAAOGI=) 7: BB17221E211611F08D31C34DC4F9AE02.roa (hash: ECHAhZZ0CVyTf5Z6KxlgeILhQqidZfMXf11w6LMS5Rw=) 8: A0BD00DEF5B311EFA334BB67C4F9AE02.roa (hash: VDY+BPq5lSeRusGk8bxhC79JQgZcEdSIsVPdLXN6r9Y=) 9: 4C7C5ECCE1B211EE84F03918C4F9AE02.roa (hash: sb5ey6r6KthuUUgBgPz/nG3qYIAoINFMyiJ2oK7kvBU=) 10: E26269722E3811EFA4AF2445C4F9AE02.roa (hash: PKvSSpOGOUZkaKayjQ0ld+FA1UfUrUiyGl2E5RZXAzw=) 11: 555E0D90B71F11EFBBE56410C4F9AE02.roa (hash: rtxZNHAmUN+FuTjKHb7X3f4iRwjxEjW+Bf2CPl1P+z8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 03:25:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 602 (0x25a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A66F, serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5 Validity Not Before: Sep 21 03:25:17 2026 GMT Not After : Sep 28 03:25:17 2026 GMT Subject: CN=6ab0a39e-5312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:88:ce:49:f6:27:29:7f:6d:bc:2d:ab:a1:9d: 95:36:c7:50:f6:a1:05:c3:55:21:dd:47:57:8b:ad: ad:02:b4:4f:9f:83:90:e0:c9:6a:72:f9:f0:1b:a9: 3c:48:65:3c:23:e3:8c:3b:df:db:ee:4e:af:56:56: ec:d5:29:ca:b9:fd:1d:a2:28:8f:bf:dd:a3:6a:25: 5a:96:bc:be:57:b0:8d:3e:41:39:b2:c5:2d:3b:f1: b5:cc:d5:d1:40:8c:8e:07:4f:70:21:a9:13:32:d9: 0f:6a:6a:4b:9b:cb:04:e9:a0:37:fa:05:6a:43:ca: 9b:34:c1:eb:ff:27:d3:38:05:22:0c:db:dd:5e:b1: 66:63:d5:88:a0:7d:cf:9a:44:34:f1:c8:98:03:71: 7b:35:69:12:2b:d2:32:5c:7a:62:4c:b8:3d:76:0a: c2:00:09:f6:77:8d:a1:ab:97:7c:53:49:e7:57:1d: 7a:d0:58:4a:a0:bc:d4:c4:84:db:d4:8e:af:24:b3: 95:c8:a0:8d:6f:38:0c:f3:ab:ff:3f:fa:17:a7:b8: 78:71:3f:6c:e5:a1:ce:cb:02:0a:9a:f9:79:79:36: 51:c4:04:ce:f6:95:6b:65:04:63:79:c5:37:b4:98: 91:c1:d1:7a:eb:4f:d1:10:b5:88:ce:1d:43:f7:df: 7f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F9:5A:1F:34:C9:C5:98:5B:7A:5C:5C:AB:03:D3:0E:40:6B:B6:95 X509v3 Authority Key Identifier: keyid:B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:b8:9b:a4:90:ea:58:aa:99:d8:1e:61:c4:e7:71:ed:89:91: 3e:b8:83:d1:14:0b:20:77:d8:e0:d0:fa:16:1b:67:fe:45:f1: 98:2f:e9:ac:3b:4b:76:f9:50:86:f2:f0:b7:fa:1c:ce:f0:31: 5b:09:98:63:99:c5:99:b1:cf:58:dc:68:9a:29:11:3a:15:03: 8e:39:7b:aa:57:87:8e:a0:24:92:d7:37:85:18:26:d3:61:f5: ed:97:b7:fe:d8:48:85:19:18:a3:b0:65:b5:c0:41:e9:ca:1d: 81:73:64:23:f9:7a:3e:ce:5f:5f:55:2a:a6:fe:b4:31:64:f9: 67:d4:a6:4a:20:ba:c5:5b:55:7d:a7:fe:68:c3:11:63:55:76: 3e:de:9f:8a:2e:69:d2:67:6a:76:da:fe:27:e4:34:1a:c3:9b: f3:50:0a:0d:e7:cd:12:ab:f8:53:4e:25:eb:33:0f:6e:68:de: 28:d4:81:db:f9:23:b2:fd:6e:d5:3d:e3:16:e8:7c:f5:40:53: d7:4d:2a:9f:e2:5f:71:99:2d:76:a4:cc:36:47:c5:36:47:ed: 70:0b:f6:4a:fe:3c:df:cf:f1:6c:a8:6b:7e:d0:1c:2a:39:37: ff:a5:f7:af:ef:44:15:98:65:80:dc:e6:c4:7b:a0:7b:70:cb: fa:93:5c:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E2NkYxMTAvBgNVBAUTKEIyMkMzRDBBQkNEMzkxOTQ4NkEzRTYxRThENzg4OTIz OTIyQkY2QTUwHhcNMjYwOTIxMDMyNTE3WhcNMjYwOTI4MDMyNTE3WjAYMRYwFAYD VQQDEw02YWIwYTM5ZS01MzEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ojOSfYnKX9tvC2roZ2VNsdQ9qEFw1Uh3UdXi62tArRPn4OQ4MlqcvnwG6k8 SGU8I+OMO9/b7k6vVlbs1SnKuf0doiiPv92jaiValry+V7CNPkE5ssUtO/G1zNXR QIyOB09wIakTMtkPampLm8sE6aA3+gVqQ8qbNMHr/yfTOAUiDNvdXrFmY9WIoH3P mkQ08ciYA3F7NWkSK9IyXHpiTLg9dgrCAAn2d42hq5d8U0nnVx160FhKoLzUxITb 1I6vJLOVyKCNbzgM86v/P/oXp7h4cT9s5aHOywIKmvl5eTZRxATO9pVrZQRjecU3 tJiRwdF660/RELWIzh1D999/hQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJf5Wh80 ycWYW3pcXKsD0w5Aa7aVMB8GA1UdIwQYMBaAFLIsPQq805GUhqPmHo14iSOSK/al MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTY2Ri84RkNDOUQyOEM2 RjkxMUVFOTdFNkZCMURDNEY5QUUwMi9zaXc5Q3J6VGtaU0dvLVllalhpSkk1SXI5 cVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NpdzlDcnpUa1pTR28tWWVqWGlKSTVJcjlxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTY2Ri84RkNDOUQyOEM2RjkxMUVFOTdFNkZCMURDNEY5QUUwMi9zaXc5Q3J6VGta U0dvLVllalhpSkk1SXI5cVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsLibpJDqWKqZ2B5hxOdx7YmRPriD0RQLIHfY4ND6Fhtn/kXxmC/prDtLdvlQ hvLwt/oczvAxWwmYY5nFmbHPWNxomikROhUDjjl7qleHjqAkktc3hRgm02H17Ze3 /thIhRkYo7BltcBB6codgXNkI/l6Ps5fX1Uqpv60MWT5Z9SmSiC6xVtVfaf+aMMR Y1V2Pt6fii5p0mdqdtr+J+Q0GsOb81AKDefNEqv4U04l6zMPbmjeKNSB2/kjsv1u 1T3jFuh89UBT100qn+JfcZktdqTMNkfFNkftcAv2Sv4838/xbKhrftAcKjk3/6X3 r+9EFZhlgNzmxHuge3DL+pNcyw== -----END CERTIFICATE-----Generated at Mon Sep 21 18:12:25 2026 by rpki-client