$ rpki-client -vvvf rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.mft File: DC9FtsiGIjJC7Jv5OzRpf2Td9oA.mft (raw, json) Hash identifier: jfzAufWjpeLo4cwNriVPKi5rmaklSbNf7XTQcLC6aAU= Subject key identifier: 06:5D:0E:9B:12:01:2D:1C:3C:6F:95:FF:33:15:D2:63:7B:DE:54:76 Authority key identifier: 0C:2F:45:B6:C8:86:22:32:42:EC:9B:F9:3B:34:69:7F:64:DD:F6:80 Certificate issuer: /CN=A9193B7A/serialNumber=0C2F45B6C886223242EC9BF93B34697F64DDF680 Certificate serial: DC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.mft Manifest number: D3 Signing time: Mon 21 Sep 2026 06:43:48 +0000 Manifest this update: Mon 21 Sep 2026 06:43:48 +0000 Manifest next update: Mon 28 Sep 2026 06:43:48 +0000 Files and hashes: 1: DC9FtsiGIjJC7Jv5OzRpf2Td9oA.crl (hash: n8PblflG+sXqAlc8pNg5YKuekH/ow55zEn3W2HzsdgE=) 2: 62B3880C7E5D11F0ACC14A80C4F9AE02.roa (hash: loa/gmNkqH5emPdqG1mfwNrpi51lh8r/Sh1SgqZBjbo=) 3: EBF5F8EC9A1411F1A4DC90745311F970.roa (hash: d4GsGfvnFtBw9POHYCcbpg5xEwjJpsB/1nvw60Ok9Nw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.crl rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:43:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193B7A, serialNumber=0C2F45B6C886223242EC9BF93B34697F64DDF680 Validity Not Before: Sep 21 06:43:48 2026 GMT Not After : Sep 28 06:43:48 2026 GMT Subject: CN=6ab0d224-383f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5b:de:90:f2:3d:c9:e9:ad:f5:2c:e3:16:99: e5:30:62:95:49:d7:11:67:01:49:00:38:36:cc:ca: 5c:6d:b5:da:1b:0d:76:09:4e:3f:10:a3:85:14:2a: cd:a0:a5:c9:72:a6:04:cf:65:a2:8d:a4:e3:4e:b7: 4c:aa:15:f2:09:2b:78:67:e2:47:3c:3a:85:52:14: ff:a2:c9:19:62:48:5a:0e:99:af:c0:64:e6:41:4d: 4f:7b:ed:85:72:c8:4f:f5:a7:d3:8e:7f:fb:22:71: a0:9a:ad:02:1f:19:40:54:6f:aa:99:d7:52:ac:9b: 20:7f:e6:bd:ba:95:a4:2a:41:d2:b8:3b:de:e1:8e: 0c:33:42:87:bd:85:b8:2b:88:76:ad:76:67:f0:7b: 94:92:0b:4a:16:e8:fb:52:cf:2d:77:f0:94:f6:35: 44:d3:39:e0:7b:f2:7e:c3:be:81:fc:e1:a6:bc:a9: ce:06:6c:f5:9e:a2:ef:c0:19:5d:9e:ab:39:93:35: d2:71:fb:b8:d4:b9:83:3f:3f:02:35:73:88:08:cd: d2:5d:27:d5:7a:5c:d5:f9:17:1e:d3:28:a1:96:f8: 53:b9:f7:37:97:22:ce:59:d9:74:7d:40:84:3f:cd: 7d:b0:a1:38:66:35:02:f4:70:8f:a2:aa:c8:a9:4b: 84:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:5D:0E:9B:12:01:2D:1C:3C:6F:95:FF:33:15:D2:63:7B:DE:54:76 X509v3 Authority Key Identifier: keyid:0C:2F:45:B6:C8:86:22:32:42:EC:9B:F9:3B:34:69:7F:64:DD:F6:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:d1:77:b5:85:fe:60:c8:2c:a8:1f:04:dd:ce:ac:4c:ca:cd: 49:e9:7d:d7:15:3a:85:00:9f:d5:a0:31:3e:2c:d8:7f:15:af: 0e:06:87:ff:37:b7:69:31:86:a9:f5:b2:b0:d4:d1:8b:bb:67: 9c:c9:c5:a0:a2:d1:92:95:65:06:fe:96:94:fc:23:1c:49:f0: 36:8d:92:f8:9f:75:61:e4:ee:3c:04:d0:e5:53:d0:e0:48:b5: 0c:04:b2:5e:5c:2c:98:57:9b:06:da:0c:c8:3f:b0:a1:b1:fc: 97:3b:4a:d1:fa:60:23:67:50:03:7a:33:4e:11:2b:64:47:ed: 08:60:2a:78:a4:81:92:3e:e2:cd:af:36:d4:fb:16:d4:ad:8d: 67:c6:04:44:93:1d:c1:e7:c7:5b:f5:d4:03:12:51:eb:4b:08: 00:c5:6a:54:20:b0:7d:c2:b0:80:0f:c2:9c:e8:0d:6f:71:14: 4c:c2:a7:70:91:eb:b7:2d:da:0f:8c:b8:6f:1b:89:ec:e0:d5: 2b:9a:ee:98:d6:64:72:62:65:28:74:3a:c5:97:1e:53:2c:81: 11:14:db:91:c2:fa:2c:0c:13:12:f5:44:22:0e:63:69:67:07: 17:27:62:95:d4:89:b6:3d:8b:ae:76:64:30:5c:82:82:fa:df: b2:45:ff:0c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNCN0ExMTAvBgNVBAUTKDBDMkY0NUI2Qzg4NjIyMzI0MkVDOUJGOTNCMzQ2OTdG NjREREY2ODAwHhcNMjYwOTIxMDY0MzQ4WhcNMjYwOTI4MDY0MzQ4WjAYMRYwFAYD VQQDEw02YWIwZDIyNC0zODNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAllvekPI9yemt9SzjFpnlMGKVSdcRZwFJADg2zMpcbbXaGw12CU4/EKOFFCrN oKXJcqYEz2WijaTjTrdMqhXyCSt4Z+JHPDqFUhT/oskZYkhaDpmvwGTmQU1Pe+2F cshP9afTjn/7InGgmq0CHxlAVG+qmddSrJsgf+a9upWkKkHSuDve4Y4MM0KHvYW4 K4h2rXZn8HuUkgtKFuj7Us8td/CU9jVE0znge/J+w76B/OGmvKnOBmz1nqLvwBld nqs5kzXScfu41LmDPz8CNXOICM3SXSfVelzV+Rce0yihlvhTufc3lyLOWdl0fUCE P819sKE4ZjUC9HCPoqrIqUuEoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAZdDpsS AS0cPG+V/zMV0mN73lR2MB8GA1UdIwQYMBaAFAwvRbbIhiIyQuyb+Ts0aX9k3faA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0I3QS9DMDg1MDY5MjdE QkIxMUYwQkM0RDc3NjFDNEY5QUUwMi9EQzlGdHNpR0lqSkM3SnY1T3pScGYyVGQ5 b0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0RDOUZ0c2lHSWpKQzdKdjVPelJwZjJUZDlvQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0I3QS9DMDg1MDY5MjdEQkIxMUYwQkM0RDc3NjFDNEY5QUUwMi9EQzlGdHNpR0lq SkM3SnY1T3pScGYyVGQ5b0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALNF3tYX+YMgsqB8E3c6sTMrNSel91xU6hQCf1aAxPizYfxWvDgaH/ze3aTGG qfWysNTRi7tnnMnFoKLRkpVlBv6WlPwjHEnwNo2S+J91YeTuPATQ5VPQ4Ei1DASy XlwsmFebBtoMyD+wobH8lztK0fpgI2dQA3ozThErZEftCGAqeKSBkj7iza821PsW 1K2NZ8YERJMdwefHW/XUAxJR60sIAMVqVCCwfcKwgA/CnOgNb3EUTMKncJHrty3a D4y4bxuJ7ODVK5rumNZkcmJlKHQ6xZceUyyBERTbkcL6LAwTEvVEIg5jaWcHFydi ldSJtj2LrnZkMFyCgvrfskX/DA== -----END CERTIFICATE-----Generated at Mon Sep 21 17:37:48 2026 by rpki-client