$ rpki-client -vvvf rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft File: 5o7RJO9le2eb0SpY-gNQFODf6Cc.mft (raw, json) Hash identifier: MQdftXwmCKk7KgOSD4N8w/PzPi1Ay7te1CNouFfVsx8= Subject key identifier: BA:30:1A:E5:72:1B:83:F6:E2:E5:70:3E:ED:35:2D:E7:53:84:E5:81 Authority key identifier: E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27 Certificate issuer: /CN=A9191A09/serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827 Certificate serial: 0EC9 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft Manifest number: 0EB2 Signing time: Sun 20 Sep 2026 14:40:31 +0000 Manifest this update: Sun 20 Sep 2026 14:40:30 +0000 Manifest next update: Sun 27 Sep 2026 14:40:30 +0000 Files and hashes: 1: 5o7RJO9le2eb0SpY-gNQFODf6Cc.crl (hash: VGUMWfdL3hAHlsjpvV50pqOnF1Ln4v3wepCo78x1kLc=) 2: 9C06E51EE37A11EA84A20810C4F9AE02.roa (hash: VGb7fQ4+XdUAVdKkbAj+FraUZZtrQ9DDCForGAVJX7M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 14:40:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3785 (0xec9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191A09, serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827 Validity Not Before: Sep 20 14:40:30 2026 GMT Not After : Sep 27 14:40:30 2026 GMT Subject: CN=6aaff05f-3528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:81:83:05:d1:85:a4:2b:b4:1c:5e:2c:90:33: c4:c1:72:d6:c7:37:6c:df:0f:97:68:d5:01:3e:58: bc:85:0e:27:66:82:f6:4f:05:a8:a9:46:ba:7a:59: 60:e6:2a:6c:0c:0c:f9:a9:a0:75:f9:8f:b7:1d:19: a0:2c:c1:78:78:6b:2b:d6:12:84:8c:bb:b7:9d:79: 0a:0b:4a:dd:d5:4e:e6:52:2a:57:a5:a4:38:03:82: 6d:fb:1e:5b:2c:70:e2:f6:0e:b5:10:9b:66:08:36: ef:9d:60:c0:b7:c5:1e:5e:4f:3b:f3:9d:95:ac:3e: 41:22:c1:57:b2:85:57:72:c9:a6:e8:ee:09:6f:d1: ec:f9:d3:46:7a:d8:6c:a3:17:a3:2a:2f:f7:fa:7a: 14:76:a9:0b:f5:6d:c9:41:0a:c0:14:a7:4a:0d:05: 6b:b0:15:1d:2c:92:8e:5c:b5:25:f3:a4:ad:fa:be: 4f:30:31:2a:98:da:c0:6f:d1:a5:49:3f:d7:78:e3: 0f:e1:d0:87:1f:9f:ef:e3:9a:48:55:2f:3c:5d:9e: 1d:50:89:f8:cb:2d:cc:7b:97:3e:f9:96:a3:ec:ec: 18:32:a2:20:08:19:f5:c3:22:d6:7c:cd:44:6d:17: 6d:f8:db:0a:10:7c:6d:2c:1a:82:79:14:89:ab:c8: ce:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:30:1A:E5:72:1B:83:F6:E2:E5:70:3E:ED:35:2D:E7:53:84:E5:81 X509v3 Authority Key Identifier: keyid:E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:96:b3:3f:70:2e:a3:26:5c:d0:3a:58:e5:6c:a6:a2:00:3e: 18:ee:c7:c5:f6:f2:95:11:1d:8d:ea:ed:32:7e:b7:93:7a:14: 72:1f:08:82:79:d8:5b:6e:3b:bf:92:0e:9d:7c:c8:90:b5:c6: 0a:52:4b:ae:cd:12:0c:4f:95:3e:1c:fd:d3:04:02:59:5e:43: 4b:81:6a:36:fb:18:70:6b:4b:ce:97:a2:1c:ce:df:d7:b8:7d: 21:7e:c0:be:2d:6d:a9:3c:74:b3:46:8d:55:88:44:d9:55:0d: d4:af:e4:da:e4:23:02:8b:01:b0:cc:88:bc:c8:a0:28:48:92: 2e:13:37:35:cc:56:55:6f:22:4a:2e:15:3a:a3:a2:4e:83:90: e3:2a:42:5a:d0:ea:2e:53:6e:9c:73:01:b3:17:48:a4:b9:0d: 7c:10:47:cd:1c:e6:20:db:22:a7:e3:d4:4c:10:58:79:6b:e6: be:87:a1:26:a5:ee:cf:cb:55:ae:24:66:a1:54:bd:db:86:24: 8c:df:fe:73:e2:04:1b:77:f6:36:c8:7e:2e:fb:52:db:d0:fd: 2e:6f:cd:5b:35:cc:8f:07:d8:77:49:09:fe:f1:a5:92:b8:82: c1:84:ee:69:e2:49:c2:1e:08:b9:a9:ca:31:db:ee:89:7b:71: 0e:9e:7e:a0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFBMDkxMTAvBgNVBAUTKEU2OEVEMTI0RUY2NTdCNjc5QkQxMkE1OEZBMDM1MDE0 RTBERkU4MjcwHhcNMjYwOTIwMTQ0MDMwWhcNMjYwOTI3MTQ0MDMwWjAYMRYwFAYD VQQDEw02YWFmZjA1Zi0zNTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhIGDBdGFpCu0HF4skDPEwXLWxzds3w+XaNUBPli8hQ4nZoL2TwWoqUa6ellg 5ipsDAz5qaB1+Y+3HRmgLMF4eGsr1hKEjLu3nXkKC0rd1U7mUipXpaQ4A4Jt+x5b LHDi9g61EJtmCDbvnWDAt8UeXk87852VrD5BIsFXsoVXcsmm6O4Jb9Hs+dNGeths oxejKi/3+noUdqkL9W3JQQrAFKdKDQVrsBUdLJKOXLUl86St+r5PMDEqmNrAb9Gl ST/XeOMP4dCHH5/v45pIVS88XZ4dUIn4yy3Me5c++Zaj7OwYMqIgCBn1wyLWfM1E bRdt+NsKEHxtLBqCeRSJq8jOxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLowGuVy G4P24uVwPu01LedThOWBMB8GA1UdIwQYMBaAFOaO0STvZXtnm9EqWPoDUBTg3+gn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUEwOS8zQzQxMkMzNkJG MzkxMUU5ODk3RDdDMkVDNEY5QUUwMi81bzdSSk85bGUyZWIwU3BZLWdOUUZPRGY2 Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzVvN1JKTzlsZTJlYjBTcFktZ05RRk9EZjZDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUEwOS8zQzQxMkMzNkJGMzkxMUU5ODk3RDdDMkVDNEY5QUUwMi81bzdSSk85bGUy ZWIwU3BZLWdOUUZPRGY2Q2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzJazP3AuoyZc0DpY5WymogA+GO7HxfbylREdjertMn63k3oUch8IgnnYW247 v5IOnXzIkLXGClJLrs0SDE+VPhz90wQCWV5DS4FqNvsYcGtLzpeiHM7f17h9IX7A vi1tqTx0s0aNVYhE2VUN1K/k2uQjAosBsMyIvMigKEiSLhM3NcxWVW8iSi4VOqOi ToOQ4ypCWtDqLlNunHMBsxdIpLkNfBBHzRzmINsip+PUTBBYeWvmvoehJqXuz8tV riRmoVS924YkjN/+c+IEG3f2Nsh+LvtS29D9Lm/NWzXMjwfYd0kJ/vGlkriCwYTu aeJJwh4IuanKMdvuiXtxDp5+oA== -----END CERTIFICATE-----Generated at Mon Sep 21 19:37:14 2026 by rpki-client