$ rpki-client -vvvf rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft File: aTtxpbXaYFTff5wNN5z1IMHI8pE.mft (raw, json) Hash identifier: SAcTXCcfIq0g1O2+b6krM6YZV7oQEyeyAkauKgAEHJE= Subject key identifier: A4:1D:C2:BA:0C:2C:C9:9C:15:C3:6C:AF:26:AE:F4:91:2F:80:71:13 Authority key identifier: 69:3B:71:A5:B5:DA:60:54:DF:7F:9C:0D:37:9C:F5:20:C1:C8:F2:91 Certificate issuer: /CN=A917DB52/serialNumber=693B71A5B5DA6054DF7F9C0D379CF520C1C8F291 Certificate serial: 08E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft Manifest number: 08D7 Signing time: Sun 20 Sep 2026 20:23:42 +0000 Manifest this update: Sun 20 Sep 2026 20:23:42 +0000 Manifest next update: Sun 27 Sep 2026 20:23:42 +0000 Files and hashes: 1: aTtxpbXaYFTff5wNN5z1IMHI8pE.crl (hash: XhWxco5iO+MTGacYv44jwwpDNrvsW9/T/EfcNbhJ/e0=) 2: FC73A04E22D611F184630225C8833773.roa (hash: lirFwSfFP2XyhuyherlCKtjHYjqBn+tnL1KG1MSa/FQ=) 3: F43185921DF211F18E2EA673173D8C67.roa (hash: 7NFN5oMtgNPaVhWbz0nsBbRwBO/bYjYwDJggWSxO5PE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.crl rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 20:23:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2281 (0x8e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DB52, serialNumber=693B71A5B5DA6054DF7F9C0D379CF520C1C8F291 Validity Not Before: Sep 20 20:23:42 2026 GMT Not After : Sep 27 20:23:42 2026 GMT Subject: CN=6ab040ce-157f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:74:61:1d:35:b1:0b:af:62:a5:e3:fd:c6:a9: 28:05:23:f2:52:00:d9:51:1e:cf:8d:cc:aa:a4:14: ee:54:c0:76:d0:b7:b7:3c:a3:f6:fe:df:49:b1:b4: 20:11:03:32:2c:e5:2a:45:d7:9b:95:9a:c1:eb:f8: e2:4f:9e:ab:e0:c3:7a:ac:58:b5:78:3d:33:b4:88: 8e:21:9e:a4:88:01:ab:61:b7:6d:eb:de:a8:cb:9e: bc:7b:0f:92:15:29:a0:03:cc:8b:67:33:8d:fc:8a: 14:b8:4e:73:b4:42:e4:9f:e6:06:2c:08:4c:39:96: 84:31:47:2f:9b:7b:18:cd:a2:f3:27:f1:1c:50:54: d8:b8:f6:04:0c:ec:fd:e1:7f:ea:a5:b2:ba:a3:c5: 0e:b0:97:78:33:68:05:24:ca:bf:3f:7f:ac:7b:3f: 04:e0:73:7d:d7:9b:2d:0b:f2:bf:93:88:ec:d3:13: 5e:52:66:71:d7:18:f4:7e:2e:3c:8a:a1:9e:de:a0: 0c:92:9b:bc:af:c4:64:d6:7d:f2:57:2e:3f:1b:86: 52:54:99:6f:12:44:d8:d9:2e:f3:a7:eb:8b:3c:e4: 65:77:e0:20:30:12:f5:4b:d4:83:79:72:53:1e:9e: b7:a1:21:5a:73:08:3e:23:b2:06:77:1d:8f:87:88: f6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:1D:C2:BA:0C:2C:C9:9C:15:C3:6C:AF:26:AE:F4:91:2F:80:71:13 X509v3 Authority Key Identifier: keyid:69:3B:71:A5:B5:DA:60:54:DF:7F:9C:0D:37:9C:F5:20:C1:C8:F2:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:eb:40:cb:91:2e:a2:66:43:6c:3d:4a:97:9f:53:56:f7:a4: fe:db:6e:02:26:e2:42:0f:a1:c1:86:1a:d1:34:ca:86:45:e3: 8f:3f:4c:39:ba:44:99:c8:53:1e:81:ec:e6:ea:ff:53:a2:58: 69:80:79:ec:bb:b2:93:39:72:76:62:28:f9:29:bb:97:76:30: 14:a4:5d:9e:40:02:58:5a:37:a6:87:d1:d9:19:02:c9:e2:a7: d7:0f:05:14:4f:3a:7e:c2:59:28:27:88:ba:1c:ac:cb:7f:b8: 47:f9:ec:4c:86:5a:63:d4:3f:4d:8c:9e:d5:58:a1:86:71:5e: 8e:05:ca:b8:c1:b3:2e:49:bd:39:8f:53:2a:70:b9:28:80:a9: 4f:08:18:e4:56:ab:71:95:f7:cc:73:ad:ca:44:62:a4:21:85: cd:18:2d:3e:62:02:92:00:b1:3f:f8:bd:1d:f5:3d:76:9d:b1: 02:a2:53:52:20:3f:1e:3f:10:16:b8:64:9d:fc:05:83:cd:3a: 7e:22:2a:0b:03:70:91:f5:62:c8:95:82:35:33:1e:83:c2:3c: 12:08:19:bf:fc:7d:54:15:e3:06:08:8a:e7:8e:f3:90:c6:5b: 3f:1c:0f:28:64:ad:28:61:56:c4:ba:3d:77:e8:27:f6:a2:91: cd:d5:b0:6d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RCNTIxMTAvBgNVBAUTKDY5M0I3MUE1QjVEQTYwNTRERjdGOUMwRDM3OUNGNTIw QzFDOEYyOTEwHhcNMjYwOTIwMjAyMzQyWhcNMjYwOTI3MjAyMzQyWjAYMRYwFAYD VQQDEw02YWIwNDBjZS0xNTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn3RhHTWxC69ipeP9xqkoBSPyUgDZUR7PjcyqpBTuVMB20Le3PKP2/t9JsbQg EQMyLOUqRdeblZrB6/jiT56r4MN6rFi1eD0ztIiOIZ6kiAGrYbdt696oy568ew+S FSmgA8yLZzON/IoUuE5ztELkn+YGLAhMOZaEMUcvm3sYzaLzJ/EcUFTYuPYEDOz9 4X/qpbK6o8UOsJd4M2gFJMq/P3+sez8E4HN915stC/K/k4js0xNeUmZx1xj0fi48 iqGe3qAMkpu8r8Rk1n3yVy4/G4ZSVJlvEkTY2S7zp+uLPORld+AgMBL1S9SDeXJT Hp63oSFacwg+I7IGdx2Ph4j2xwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKQdwroM LMmcFcNsryau9JEvgHETMB8GA1UdIwQYMBaAFGk7caW12mBU33+cDTec9SDByPKR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REI1Mi80NUY1NTZCRUYy ODAxMUVBODcxQkFENkFDNEY5QUUwMi9hVHR4cGJYYVlGVGZmNXdOTjV6MUlNSEk4 cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FUdHhwYlhhWUZUZmY1d05ONXoxSU1ISThwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REI1Mi80NUY1NTZCRUYyODAxMUVBODcxQkFENkFDNEY5QUUwMi9hVHR4cGJYYVlG VGZmNXdOTjV6MUlNSEk4cEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwutAy5EuomZDbD1Kl59TVvek/ttuAibiQg+hwYYa0TTKhkXjjz9MObpEmchT HoHs5ur/U6JYaYB57LuykzlydmIo+Sm7l3YwFKRdnkACWFo3pofR2RkCyeKn1w8F FE86fsJZKCeIuhysy3+4R/nsTIZaY9Q/TYye1VihhnFejgXKuMGzLkm9OY9TKnC5 KICpTwgY5FarcZX3zHOtykRipCGFzRgtPmICkgCxP/i9HfU9dp2xAqJTUiA/Hj8Q FrhknfwFg806fiIqCwNwkfViyJWCNTMeg8I8EggZv/x9VBXjBgiK547zkMZbPxwP KGStKGFWxLo9d+gn9qKRzdWwbQ== -----END CERTIFICATE-----Generated at Tue Sep 22 01:12:06 2026 by rpki-client