$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft File: l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft (raw, json) Hash identifier: 0r6UwS1hMQ9TheYluOK3vcp+Cw0Rb6xyzOzNQDoMUlg= Subject key identifier: 8A:F2:CF:47:35:DC:15:06:17:45:BE:99:02:D7:2B:53:48:EE:64:61 Authority key identifier: 97:D1:1A:E2:12:CB:21:3D:F9:65:2F:5B:B6:24:8E:40:CE:0C:29:FA Certificate issuer: /CN=A9194AF5/serialNumber=97D11AE212CB213DF9652F5BB6248E40CE0C29FA Certificate serial: 020A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft Manifest number: 01FF Signing time: Mon 21 Sep 2026 03:11:33 +0000 Manifest this update: Mon 21 Sep 2026 03:11:33 +0000 Manifest next update: Mon 28 Sep 2026 03:11:33 +0000 Files and hashes: 1: l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl (hash: MCGbiIIHQ3y8vOlvUyg2U6xwk8nJON6C/um93ozQGao=) 2: BC87CB52AB5711EEBC6EBB3FC4F9AE02.roa (hash: 7i/+pU2Et59KGbh7B5+qqFDZaAktF1/YoczW2JWdHFg=) 3: 6534CB6AA60711EFA9497E10C4F9AE02.roa (hash: 9ihywTWH8D0AsKW3lVgSJVrGmFJI4l3WNEZsqdCL8R8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 03:11:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 522 (0x20a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194AF5, serialNumber=97D11AE212CB213DF9652F5BB6248E40CE0C29FA Validity Not Before: Sep 21 03:11:33 2026 GMT Not After : Sep 28 03:11:33 2026 GMT Subject: CN=6ab0a065-af99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:06:79:52:62:6d:5d:39:cd:3c:9e:91:f0:a3: f4:26:bb:ba:b8:b6:b3:1b:f7:45:45:e6:9a:ef:6c: 28:c4:55:a3:70:72:70:30:bf:33:ba:de:7a:3a:ee: 34:25:71:fc:29:96:3f:9c:02:c1:dc:0b:07:95:d5: 73:11:68:82:ac:d1:ce:5a:ea:27:96:8b:39:7f:9a: e9:77:50:90:70:68:de:a0:e5:2c:a0:f3:ab:dd:10: c7:da:a6:cf:10:e4:71:71:b4:b6:65:e3:98:3d:a5: 21:e4:9f:d5:b3:3a:97:46:7e:ba:11:a5:ec:91:5d: f5:00:f7:12:e4:6b:5d:22:88:fb:61:ae:5e:ce:9f: 87:ee:4c:36:23:f1:c2:80:60:a8:d6:00:10:20:5d: 56:b2:37:2d:e4:88:04:c2:21:46:d9:e2:af:03:27: 2a:4a:9a:aa:1f:1f:a3:46:ea:77:62:3d:18:1f:f4: 69:26:9f:8e:e1:fe:f2:bd:4a:8c:c4:f6:11:5a:2b: 66:11:7b:a1:36:42:0b:dd:ef:b2:01:4c:f4:f1:23: e5:ec:46:f3:a7:fc:b4:0c:e4:0f:b3:46:1a:b2:ec: 83:e5:b0:a7:88:fc:1d:ce:73:78:ad:51:2c:ad:1f: d4:7c:1c:16:2d:ea:ad:8f:72:cc:d2:47:76:78:9e: 8e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F2:CF:47:35:DC:15:06:17:45:BE:99:02:D7:2B:53:48:EE:64:61 X509v3 Authority Key Identifier: keyid:97:D1:1A:E2:12:CB:21:3D:F9:65:2F:5B:B6:24:8E:40:CE:0C:29:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:ab:a1:30:15:4f:e3:6c:b4:08:de:10:1a:12:89:ba:1d:c4: 96:8c:f8:a5:77:86:f5:92:81:49:5c:1d:c5:f5:10:15:45:c2: 6e:f4:57:f6:24:00:68:ce:c9:2f:85:10:3c:63:0e:3d:e1:c6: f2:0d:0d:8e:4a:cc:a5:b9:6b:d0:07:d1:32:77:a8:7e:79:f7: cd:32:18:95:d1:fa:57:37:2d:49:b2:b5:4b:a3:50:50:31:65: 56:48:51:9e:17:1b:46:08:89:63:65:20:c4:74:b1:a7:c7:f0: 55:c8:d1:5f:f5:3b:a4:cf:d3:42:14:8f:3f:09:77:6a:9f:ca: 97:01:f1:7e:51:15:c3:78:1c:8d:f0:b2:6f:5e:df:43:5a:2f: e8:25:ee:df:b2:90:fe:d1:d6:2d:d7:9f:70:2e:ae:5e:46:fc: 78:72:e5:29:6f:c2:13:cc:47:40:34:fa:12:66:b2:36:be:3a: 5a:bf:e9:fa:6e:eb:7a:2c:82:62:e5:eb:43:36:4f:f2:c5:23: 52:55:c7:99:1d:ec:11:37:3f:e6:9f:33:32:cf:b9:59:37:79: 19:04:45:d5:10:d3:85:71:50:f2:e8:17:82:64:99:b6:96:41: 6a:96:4d:0e:29:93:da:77:fc:f0:56:5d:56:cc:5e:e9:3b:27: ac:03:61:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRBRjUxMTAvBgNVBAUTKDk3RDExQUUyMTJDQjIxM0RGOTY1MkY1QkI2MjQ4RTQw Q0UwQzI5RkEwHhcNMjYwOTIxMDMxMTMzWhcNMjYwOTI4MDMxMTMzWjAYMRYwFAYD VQQDEw02YWIwYTA2NS1hZjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxwZ5UmJtXTnNPJ6R8KP0Jru6uLazG/dFReaa72woxFWjcHJwML8zut56Ou40 JXH8KZY/nALB3AsHldVzEWiCrNHOWuonlos5f5rpd1CQcGjeoOUsoPOr3RDH2qbP EORxcbS2ZeOYPaUh5J/VszqXRn66EaXskV31APcS5GtdIoj7Ya5ezp+H7kw2I/HC gGCo1gAQIF1Wsjct5IgEwiFG2eKvAycqSpqqHx+jRup3Yj0YH/RpJp+O4f7yvUqM xPYRWitmEXuhNkIL3e+yAUz08SPl7Ebzp/y0DOQPs0YasuyD5bCniPwdznN4rVEs rR/UfBwWLeqtj3LM0kd2eJ6O8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIryz0c1 3BUGF0W+mQLXK1NI7mRhMB8GA1UdIwQYMBaAFJfRGuISyyE9+WUvW7YkjkDODCn6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEFGNS8xQjFDMjQ2NkFC NTcxMUVFODE4QTI4M0VDNEY5QUUwMi9sOUVhNGhMTElUMzVaUzlidGlTT1FNNE1L Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w5RWE0aExMSVQzNVpTOWJ0aVNPUU00TUtmby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEFGNS8xQjFDMjQ2NkFCNTcxMUVFODE4QTI4M0VDNEY5QUUwMi9sOUVhNGhMTElU MzVaUzlidGlTT1FNNE1LZm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA6uhMBVP42y0CN4QGhKJuh3Eloz4pXeG9ZKBSVwdxfUQFUXCbvRX9iQAaM7J L4UQPGMOPeHG8g0NjkrMpblr0AfRMneofnn3zTIYldH6VzctSbK1S6NQUDFlVkhR nhcbRgiJY2UgxHSxp8fwVcjRX/U7pM/TQhSPPwl3ap/KlwHxflEVw3gcjfCyb17f Q1ov6CXu37KQ/tHWLdefcC6uXkb8eHLlKW/CE8xHQDT6EmayNr46Wr/p+m7reiyC YuXrQzZP8sUjUlXHmR3sETc/5p8zMs+5WTd5GQRF1RDThXFQ8ugXgmSZtpZBapZN DimT2nf88FZdVsxe6TsnrANhNg== -----END CERTIFICATE-----Generated at Mon Sep 21 22:23:52 2026 by rpki-client