$ rpki-client -vvvf rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft File: AOQNlW1o1h2oWB5U6LjC26Fssyc.mft (raw, json) Hash identifier: wbb9lTau/4+bBLGUxQU9T9JW6DXXcoiKzPkRpnCJCnM= Subject key identifier: BA:DA:16:F2:C3:DD:B7:77:27:A0:D5:1C:A3:83:17:34:56:C0:A4:78 Authority key identifier: 00:E4:0D:95:6D:68:D6:1D:A8:58:1E:54:E8:B8:C2:DB:A1:6C:B3:27 Certificate issuer: /CN=A918C21E/serialNumber=00E40D956D68D61DA8581E54E8B8C2DBA16CB327 Certificate serial: 025B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AOQNlW1o1h2oWB5U6LjC26Fssyc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft Manifest number: 024E Signing time: Mon 21 Sep 2026 02:24:26 +0000 Manifest this update: Mon 21 Sep 2026 02:24:26 +0000 Manifest next update: Mon 28 Sep 2026 02:24:26 +0000 Files and hashes: 1: AOQNlW1o1h2oWB5U6LjC26Fssyc.crl (hash: qJQ1SBi0NvVe9p8NMnPmL0/VXcYvn9nwuteUAXx7drY=) 2: 79266D5C32AB11EE8EEB9940C4F9AE02.roa (hash: 7rtrVLMZyddd2bc8J1cyHY3+ySdHuEAk7XVUcJ9NUus=) 3: 79A8653C32AB11EE8EEB9940C4F9AE02.roa (hash: XP82ynjeu3f3SnDV4F+8eS1osM+/5TBWQsdmPDnKj7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.crl rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AOQNlW1o1h2oWB5U6LjC26Fssyc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:24:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 603 (0x25b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C21E, serialNumber=00E40D956D68D61DA8581E54E8B8C2DBA16CB327 Validity Not Before: Sep 21 02:24:26 2026 GMT Not After : Sep 28 02:24:26 2026 GMT Subject: CN=6ab0955a-d5ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:79:38:b3:fb:56:2c:6b:58:f2:d1:bd:78:50: c5:ef:c8:6c:94:76:42:46:4c:7c:1e:76:55:96:80: 97:7e:34:be:36:dd:87:c5:e2:ce:0a:ef:d3:f1:36: b8:18:f2:1e:ef:9b:94:4a:b3:69:43:dd:70:fd:00: e0:2d:cf:bb:68:d6:fb:4b:c3:cc:f4:dc:59:19:31: 0f:ea:39:aa:46:3b:ed:b8:61:ee:f1:78:ab:23:4e: 37:21:e9:18:5d:e3:64:02:8a:9d:51:83:46:a7:38: f7:bb:d0:d1:7a:23:91:0b:bc:36:d7:a9:ea:38:50: da:aa:a2:d3:07:98:d1:56:5c:b0:a9:4f:33:46:6c: b9:2f:9d:50:e5:35:ff:8b:77:24:14:0e:da:34:ed: a4:86:9b:c9:3b:6a:e6:dd:3f:2f:a8:17:58:74:8f: 45:d8:60:d5:93:ba:3b:86:22:55:27:b4:a1:6a:51: 2c:fb:f9:0e:a6:ce:c2:8b:83:45:9c:4a:70:12:bc: 62:c2:68:6c:ac:b4:d4:8b:13:cb:23:20:a5:d0:72: d9:ea:c7:c4:aa:87:37:f6:10:df:52:81:59:43:e4: 32:1e:29:72:1d:15:e6:ad:b6:9b:85:11:cf:48:2c: c8:3b:9c:94:7b:1b:37:40:9b:6e:3c:59:97:2c:83: 10:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:DA:16:F2:C3:DD:B7:77:27:A0:D5:1C:A3:83:17:34:56:C0:A4:78 X509v3 Authority Key Identifier: keyid:00:E4:0D:95:6D:68:D6:1D:A8:58:1E:54:E8:B8:C2:DB:A1:6C:B3:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AOQNlW1o1h2oWB5U6LjC26Fssyc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:18:35:fd:fd:3b:ca:1c:00:65:95:5a:0c:2b:28:fb:db:6d: 6a:ad:73:cf:2e:5e:f5:a5:3f:22:ea:be:8c:a2:9a:09:c2:c1: 48:42:44:6f:1d:40:33:9a:b2:b1:bc:63:1c:52:2c:72:70:94: e5:4b:c6:21:45:37:75:97:6f:c9:d8:0d:3f:ff:03:2f:0b:fd: 79:01:a0:48:1d:fe:6a:71:03:71:84:fa:e1:4a:49:73:69:4b: 32:36:d4:52:01:c3:a1:08:4b:a9:6e:bf:61:1c:43:80:54:b9: 9a:30:f8:62:c9:db:0f:72:d3:5f:8b:d9:b9:be:db:17:ff:79: b5:41:f2:c6:02:6e:f4:c0:ce:60:0c:94:6b:88:c1:d5:a6:97: d4:d5:73:9b:85:27:69:30:38:3b:09:3a:59:10:d3:4e:c6:09: 9d:09:9c:44:87:50:c6:25:93:15:ee:5a:ef:3c:a3:dd:e7:58: 39:55:89:ed:8f:ef:76:8f:d6:4f:08:95:bd:58:b8:af:31:a1: 75:16:62:a8:7d:42:06:ff:d8:fb:9a:fc:c9:8c:a6:c2:d0:77: 32:60:c2:9d:b7:b6:5c:96:90:f9:c8:63:a0:e9:79:19:9c:88: 88:84:3a:e6:d1:c9:39:e6:e3:03:cd:6d:a1:0a:d8:20:c4:a1: 9c:16:4a:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMyMUUxMTAvBgNVBAUTKDAwRTQwRDk1NkQ2OEQ2MURBODU4MUU1NEU4QjhDMkRC QTE2Q0IzMjcwHhcNMjYwOTIxMDIyNDI2WhcNMjYwOTI4MDIyNDI2WjAYMRYwFAYD VQQDEw02YWIwOTU1YS1kNWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtnk4s/tWLGtY8tG9eFDF78hslHZCRkx8HnZVloCXfjS+Nt2HxeLOCu/T8Ta4 GPIe75uUSrNpQ91w/QDgLc+7aNb7S8PM9NxZGTEP6jmqRjvtuGHu8XirI043IekY XeNkAoqdUYNGpzj3u9DReiORC7w216nqOFDaqqLTB5jRVlywqU8zRmy5L51Q5TX/ i3ckFA7aNO2khpvJO2rm3T8vqBdYdI9F2GDVk7o7hiJVJ7ShalEs+/kOps7Ci4NF nEpwErxiwmhsrLTUixPLIyCl0HLZ6sfEqoc39hDfUoFZQ+QyHilyHRXmrbabhRHP SCzIO5yUexs3QJtuPFmXLIMQJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLraFvLD 3bd3J6DVHKODFzRWwKR4MB8GA1UdIwQYMBaAFADkDZVtaNYdqFgeVOi4wtuhbLMn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzIxRS8yNTc1Q0ZGMDMy QUExMUVFQTYwOTlCM0JDNEY5QUUwMi9BT1FObFcxbzFoMm9XQjVVNkxqQzI2RnNz eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FPUU5sVzFvMWgyb1dCNVU2TGpDMjZGc3N5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzIxRS8yNTc1Q0ZGMDMyQUExMUVFQTYwOTlCM0JDNEY5QUUwMi9BT1FObFcxbzFo Mm9XQjVVNkxqQzI2RnNzeWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAhg1/f07yhwAZZVaDCso+9ttaq1zzy5e9aU/Iuq+jKKaCcLBSEJEbx1AM5qy sbxjHFIscnCU5UvGIUU3dZdvydgNP/8DLwv9eQGgSB3+anEDcYT64UpJc2lLMjbU UgHDoQhLqW6/YRxDgFS5mjD4YsnbD3LTX4vZub7bF/95tUHyxgJu9MDOYAyUa4jB 1aaX1NVzm4UnaTA4Owk6WRDTTsYJnQmcRIdQxiWTFe5a7zyj3edYOVWJ7Y/vdo/W TwiVvVi4rzGhdRZiqH1CBv/Y+5r8yYymwtB3MmDCnbe2XJaQ+chjoOl5GZyIiIQ6 5tHJOebjA81toQrYIMShnBZKug== -----END CERTIFICATE-----Generated at Tue Sep 22 18:10:00 2026 by rpki-client