$ rpki-client -vvvf rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft File: -unC9P4gRTvpL8qxgsCVgcgTLfE.mft (raw, json) Hash identifier: ezJcUnM3raScDE8JG2xykgqwFDJL7kE/ZyVJxCpR/jY= Subject key identifier: D2:7A:76:74:98:06:CC:01:49:A4:C4:BC:64:D1:DA:09:90:13:49:57 Authority key identifier: FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1 Certificate issuer: /CN=A919103F/serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1 Certificate serial: 03E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft Manifest number: 03D3 Signing time: Wed 23 Sep 2026 00:11:33 +0000 Manifest this update: Wed 23 Sep 2026 00:11:33 +0000 Manifest next update: Wed 30 Sep 2026 00:11:33 +0000 Files and hashes: 1: -unC9P4gRTvpL8qxgsCVgcgTLfE.crl (hash: 9sMgcnbEshDqDb/VBGlj9hiQA/zON1XlPk517o6WorM=) 2: 7E8E2302014811F1B68E82C6516F56BC.roa (hash: NsJNeFTUhmJMJKgEFryykVvl22QsFpHn8M9X6CVnN4A=) 3: E75A8B8095D011EFA2CE197BC4F9AE02.roa (hash: kkOIjg6qoxuJ/Gjbd4gRj2XMV0e9Ga/KOtQLAeVKLPE=) 4: C4928820F06C11EC91459B5CC4F9AE02.roa (hash: 7b6vVIdZ0iAg7cHVnmso62PIpM5bGjmmeaRAwNPxKXE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 00:11:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 999 (0x3e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919103F, serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1 Validity Not Before: Sep 23 00:11:33 2026 GMT Not After : Sep 30 00:11:33 2026 GMT Subject: CN=6ab31935-b7aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e4:69:eb:3a:d1:11:a3:14:f5:83:41:16:f5: 48:fe:bd:00:30:28:be:b1:40:a6:5f:b3:fd:c5:47: d4:6c:9d:d5:83:9b:a4:bb:55:0a:6a:7c:d5:e3:5a: 75:d8:cd:5a:69:68:49:2e:ef:9a:80:9b:bd:d2:cf: 50:5f:27:8d:43:f0:02:de:37:7d:56:f0:3c:bb:6c: 22:f2:68:bf:79:3f:4f:bd:fb:7b:d7:b3:7e:64:02: 3b:a4:6c:c9:ae:fe:27:cd:1f:00:10:88:ed:11:84: 85:00:53:1a:df:ed:ff:cf:09:57:55:81:40:45:af: 11:d3:80:d2:e4:4e:65:19:b1:96:bf:de:c6:35:91: 11:14:c6:eb:e6:c9:b1:f2:dc:8e:e3:c7:73:e7:94: f9:02:e7:be:4b:0e:52:be:6c:bd:a6:7c:d2:c0:ee: 8e:74:d4:81:6e:63:28:5d:f1:4b:58:b9:3b:fc:dd: 57:e7:1e:0c:cf:f9:80:3a:ae:7c:20:2a:81:25:ff: 3d:dc:c1:c6:b8:12:e1:95:be:b2:28:0f:6d:62:1e: 7f:83:9a:b0:3f:1f:5a:6a:6a:d0:66:79:53:b0:31: b9:c0:71:02:df:1e:8d:f6:81:38:27:f2:b2:3a:69: 65:51:9c:cb:1d:a6:74:4f:06:19:27:4f:29:8a:a6: 52:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:7A:76:74:98:06:CC:01:49:A4:C4:BC:64:D1:DA:09:90:13:49:57 X509v3 Authority Key Identifier: keyid:FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:2b:17:8c:f3:ee:0b:0b:f9:5d:53:fd:2e:8a:47:eb:fe:1e: 83:39:10:57:5b:9c:5b:f3:f3:66:e5:cb:33:b5:70:7d:2b:58: 8a:14:8d:71:b5:1f:d8:e5:f1:98:09:6a:23:5f:f9:df:ad:99: a7:fd:b2:7e:8b:c1:44:18:ba:48:36:21:ad:4a:97:ed:51:c4: 97:2f:1d:76:39:d7:94:16:76:7b:48:01:80:08:49:37:d9:85: 86:ac:b9:77:8c:9d:f3:a4:c5:b0:d1:96:72:36:f0:f5:e9:6c: 3a:3e:7c:c2:b5:66:98:6e:2d:1d:36:ae:35:25:86:c4:2e:4a: 76:23:ef:f5:27:5d:cd:a2:82:d2:e8:33:57:30:38:7e:51:15: 14:6a:cd:15:ce:73:58:86:7b:7a:cf:3e:8d:67:b8:bd:1a:cb: 60:ab:c1:9d:d4:f9:4b:f8:92:94:32:cf:69:84:67:6b:29:82: 0e:c4:00:03:ab:36:90:75:83:87:7c:3b:47:06:6c:39:17:3b: b4:bb:25:04:f6:9f:4b:46:a2:fc:26:21:7d:3d:5b:a6:6a:58: 72:3e:f2:64:33:ca:2d:7f:8f:90:dc:23:63:06:74:ff:7d:b3: 83:f5:58:a0:53:90:2c:c2:cf:6b:fd:41:ae:8b:eb:56:fa:3b: 27:c7:5e:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA+cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEwM0YxMTAvBgNVBAUTKEZBRTlDMkY0RkUyMDQ1M0JFOTJGQ0FCMTgyQzA5NTgx QzgxMzJERjEwHhcNMjYwOTIzMDAxMTMzWhcNMjYwOTMwMDAxMTMzWjAYMRYwFAYD VQQDEw02YWIzMTkzNS1iN2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArORp6zrREaMU9YNBFvVI/r0AMCi+sUCmX7P9xUfUbJ3Vg5uku1UKanzV41p1 2M1aaWhJLu+agJu90s9QXyeNQ/AC3jd9VvA8u2wi8mi/eT9Pvft717N+ZAI7pGzJ rv4nzR8AEIjtEYSFAFMa3+3/zwlXVYFARa8R04DS5E5lGbGWv97GNZERFMbr5smx 8tyO48dz55T5Aue+Sw5Svmy9pnzSwO6OdNSBbmMoXfFLWLk7/N1X5x4Mz/mAOq58 ICqBJf893MHGuBLhlb6yKA9tYh5/g5qwPx9aamrQZnlTsDG5wHEC3x6N9oE4J/Ky OmllUZzLHaZ0TwYZJ08piqZSgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNJ6dnSY BswBSaTEvGTR2gmQE0lXMB8GA1UdIwQYMBaAFPrpwvT+IEU76S/KsYLAlYHIEy3x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTAzRi9GOEI0QkNEQ0Yw NjYxMUVDQTU0QzM3NDJDNEY5QUUwMi8tdW5DOVA0Z1JUdnBMOHF4Z3NDVmdjZ1RM ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy11bkM5UDRnUlR2cEw4cXhnc0NWZ2NnVExmRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTAzRi9GOEI0QkNEQ0YwNjYxMUVDQTU0QzM3NDJDNEY5QUUwMi8tdW5DOVA0Z1JU dnBMOHF4Z3NDVmdjZ1RMZkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARSsXjPPuCwv5XVP9LopH6/4egzkQV1ucW/PzZuXLM7VwfStYihSNcbUf2OXx mAlqI1/5362Zp/2yfovBRBi6SDYhrUqX7VHEly8ddjnXlBZ2e0gBgAhJN9mFhqy5 d4yd86TFsNGWcjbw9elsOj58wrVmmG4tHTauNSWGxC5KdiPv9SddzaKC0ugzVzA4 flEVFGrNFc5zWIZ7es8+jWe4vRrLYKvBndT5S/iSlDLPaYRnaymCDsQAA6s2kHWD h3w7RwZsORc7tLslBPafS0ai/CYhfT1bpmpYcj7yZDPKLX+PkNwjYwZ0/32zg/VY oFOQLMLPa/1BrovrVvo7J8dekQ== -----END CERTIFICATE-----Generated at Wed Sep 23 03:21:58 2026 by rpki-client