$ rpki-client -vvvf rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.mft File: 489F-AUQY7vbMX_dFREyqUAE_Vs.mft (raw, json) Hash identifier: BVj8KpXPUiG4Ce3gaurYiUYrJkoY2q0I6ntYQM9gt1k= Subject key identifier: 4C:91:F0:FE:8B:9F:23:71:7C:15:2A:25:80:C5:01:08:30:55:3D:6C Authority key identifier: E3:CF:45:F8:05:10:63:BB:DB:31:7F:DD:15:11:32:A9:40:04:FD:5B Certificate issuer: /CN=A9197202/serialNumber=E3CF45F8051063BBDB317FDD151132A94004FD5B Certificate serial: 03DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/489F-AUQY7vbMX_dFREyqUAE_Vs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.mft Manifest number: 03C0 Signing time: Mon 21 Sep 2026 00:26:36 +0000 Manifest this update: Mon 21 Sep 2026 00:26:35 +0000 Manifest next update: Mon 28 Sep 2026 00:26:35 +0000 Files and hashes: 1: 489F-AUQY7vbMX_dFREyqUAE_Vs.crl (hash: SNeVdLEQeyItApFuB/c6Noocj+u4/RlhJyUxYJjBSz8=) 2: 920E981CCAAA11ED8371524CC4F9AE02.roa (hash: WIB+DaMR2Ho4TV5ghi0y5dK6Bf7NomVsRIG38qN6/F0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.crl rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/489F-AUQY7vbMX_dFREyqUAE_Vs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:26:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 986 (0x3da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197202, serialNumber=E3CF45F8051063BBDB317FDD151132A94004FD5B Validity Not Before: Sep 21 00:26:35 2026 GMT Not After : Sep 28 00:26:35 2026 GMT Subject: CN=6ab079bb-5acf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:51:c1:c8:ba:9e:7c:3a:02:b1:f2:3b:17:97: 75:c3:c8:4f:09:d6:d2:4c:5a:55:14:70:af:0b:22: 28:1f:d3:9c:1e:82:ab:93:5d:dc:07:24:28:c3:02: f2:d3:10:af:67:38:06:0c:26:4e:24:e5:cc:61:1d: ee:86:86:a0:9c:12:eb:93:6e:83:4f:11:1d:62:7c: d7:e8:e3:02:33:60:21:de:f1:5a:48:09:df:36:9a: 01:c5:dd:d9:5e:6d:37:cf:b8:2f:07:a3:d2:05:3c: ec:4c:20:d1:77:9f:47:a5:71:ef:59:33:82:8e:e2: bc:d5:3c:d9:cb:a9:c4:f7:ea:58:7b:c5:97:2f:2c: e3:6b:d3:08:72:a2:9a:67:4a:e3:13:dc:77:9b:4c: b3:86:4f:f3:1a:ab:4c:24:c1:aa:db:13:4b:1d:58: 17:35:bb:6d:a2:48:78:3f:89:95:d3:cf:5b:27:bf: b6:a4:70:2e:04:dd:9f:3f:6a:88:db:3f:65:f5:d9: ff:d2:68:2e:69:4b:df:cb:75:38:71:f3:b7:43:46: ef:9e:8b:42:17:d9:57:0c:46:e6:6e:79:e1:93:fc: 81:e7:93:6c:ec:70:7a:e0:3a:7b:90:99:0c:5f:f1: 3b:a4:57:1c:b1:bb:61:3c:7c:a1:56:d1:52:44:7f: 5a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:91:F0:FE:8B:9F:23:71:7C:15:2A:25:80:C5:01:08:30:55:3D:6C X509v3 Authority Key Identifier: keyid:E3:CF:45:F8:05:10:63:BB:DB:31:7F:DD:15:11:32:A9:40:04:FD:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/489F-AUQY7vbMX_dFREyqUAE_Vs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:75:27:3c:ef:40:db:79:56:b1:4b:2f:ba:23:f7:4a:fe:e4: b9:36:99:2d:41:01:25:c4:7d:5e:56:16:87:21:84:3b:82:25: cb:09:bc:72:65:ec:25:e0:40:b9:15:fe:27:c7:57:1e:ea:df: 9e:6c:99:19:7e:a8:97:a2:28:d0:d2:7b:e4:5f:c9:d3:72:15: d2:1a:28:59:f1:7d:c0:92:eb:f2:e4:dc:a2:69:4f:8c:12:2e: 26:c5:eb:91:98:2f:a2:05:48:2b:8a:77:40:99:9d:9e:04:cf: d6:29:fb:a4:27:93:b7:86:c9:3e:34:59:5a:b9:7e:e8:09:6c: f9:60:62:df:8a:c0:1a:9c:3d:d9:e2:e2:70:12:ba:47:63:ae: 89:6f:51:98:52:50:d9:1a:10:60:12:ed:a4:63:cb:90:5e:a3: 0d:2a:4c:56:6a:4d:23:09:83:5f:17:c5:ff:44:d2:8d:14:f2: 41:05:8e:01:da:4e:86:83:8c:a8:09:fd:ab:38:05:70:e0:08: 0a:86:77:cd:cb:c3:1d:e6:66:44:4f:53:99:dd:b9:5f:85:63: ce:9f:85:11:75:f1:6a:f6:b7:1b:d7:c3:02:7b:e7:57:b0:5a: 46:f2:e4:b4:b1:19:fa:71:42:ae:8f:72:d8:4c:85:dc:87:e1: 4c:e7:7d:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA9owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcyMDIxMTAvBgNVBAUTKEUzQ0Y0NUY4MDUxMDYzQkJEQjMxN0ZERDE1MTEzMkE5 NDAwNEZENUIwHhcNMjYwOTIxMDAyNjM1WhcNMjYwOTI4MDAyNjM1WjAYMRYwFAYD VQQDEw02YWIwNzliYi01YWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzVHByLqefDoCsfI7F5d1w8hPCdbSTFpVFHCvCyIoH9OcHoKrk13cByQowwLy 0xCvZzgGDCZOJOXMYR3uhoagnBLrk26DTxEdYnzX6OMCM2Ah3vFaSAnfNpoBxd3Z Xm03z7gvB6PSBTzsTCDRd59HpXHvWTOCjuK81TzZy6nE9+pYe8WXLyzja9MIcqKa Z0rjE9x3m0yzhk/zGqtMJMGq2xNLHVgXNbttokh4P4mV089bJ7+2pHAuBN2fP2qI 2z9l9dn/0mguaUvfy3U4cfO3Q0bvnotCF9lXDEbmbnnhk/yB55Ns7HB64Dp7kJkM X/E7pFccsbthPHyhVtFSRH9apQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEyR8P6L nyNxfBUqJYDFAQgwVT1sMB8GA1UdIwQYMBaAFOPPRfgFEGO72zF/3RURMqlABP1b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzIwMi8wQUZFQ0E3MEY3 MDgxMUVDOTg0OUYzNUVDNEY5QUUwMi80ODlGLUFVUVk3dmJNWF9kRlJFeXFVQUVf VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ4OUYtQVVRWTd2Yk1YX2RGUkV5cVVBRV9Wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzIwMi8wQUZFQ0E3MEY3MDgxMUVDOTg0OUYzNUVDNEY5QUUwMi80ODlGLUFVUVk3 dmJNWF9kRlJFeXFVQUVfVnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAnUnPO9A23lWsUsvuiP3Sv7kuTaZLUEBJcR9XlYWhyGEO4Ilywm8cmXsJeBA uRX+J8dXHurfnmyZGX6ol6Io0NJ75F/J03IV0hooWfF9wJLr8uTcomlPjBIuJsXr kZgvogVIK4p3QJmdngTP1in7pCeTt4bJPjRZWrl+6Als+WBi34rAGpw92eLicBK6 R2OuiW9RmFJQ2RoQYBLtpGPLkF6jDSpMVmpNIwmDXxfF/0TSjRTyQQWOAdpOhoOM qAn9qzgFcOAICoZ3zcvDHeZmRE9Tmd25X4Vjzp+FEXXxava3G9fDAnvnV7BaRvLk tLEZ+nFCro9y2EyF3IfhTOd9fA== -----END CERTIFICATE-----Generated at Tue Sep 22 03:54:03 2026 by rpki-client