$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft File: 9JfRcWknbUPFhSFcGYMxwzwiWnU.mft (raw, json) Hash identifier: 6xkoiclax6MRGSrEvImKcp4bo92U83SYyG9N2yaTiNc= Subject key identifier: 00:60:C7:D2:3F:C8:2C:AF:FB:38:C0:0D:EC:09:43:71:5E:D3:A6:AA Authority key identifier: F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75 Certificate issuer: /CN=A91ECC24/serialNumber=F497D17169276D43C585215C198331C33C225A75 Certificate serial: 030A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft Manifest number: 02E4 Signing time: Mon 21 Sep 2026 01:12:33 +0000 Manifest this update: Mon 21 Sep 2026 01:12:32 +0000 Manifest next update: Mon 28 Sep 2026 01:12:32 +0000 Files and hashes: 1: 9JfRcWknbUPFhSFcGYMxwzwiWnU.crl (hash: 5MUoZsnZdGt2gWotC0XP3dDA+oSUSru5gNTYjI7d+fc=) 2: C82A0778680811EE88B5527CC4F9AE02.roa (hash: dd4j1cMkfoQqlhKoNo5RMn6HGz5LML1C2NvGVZLqSDY=) 3: D3aCoPqKblQAIav7yYafPjAa_gw.asa (hash: 1aVy+bgOfWAPzgo5W1iz+66XID+mqsX5CTmdSYDd+3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.crl rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 01:12:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 778 (0x30a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECC24, serialNumber=F497D17169276D43C585215C198331C33C225A75 Validity Not Before: Sep 21 01:12:32 2026 GMT Not After : Sep 28 01:12:32 2026 GMT Subject: CN=6ab08481-b7ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:81:54:0a:f1:76:42:ae:b7:20:83:fc:65:86: 8b:90:71:74:44:ac:77:e9:90:8b:22:ed:19:95:bc: 2a:d8:9f:05:f6:95:aa:c9:d8:09:61:11:58:62:cd: e3:7b:48:50:a9:2b:cf:b4:a0:da:9d:89:e8:2e:87: 36:9e:88:3c:4f:e2:a1:dd:e1:b3:92:81:19:26:4f: 50:e0:98:5f:96:e1:5d:5d:ed:c0:5b:74:a5:11:d1: ca:e7:22:6e:73:ea:1c:1f:9b:89:d4:3d:45:f4:8f: 1f:78:6a:5d:c7:26:bc:95:67:24:4f:98:c9:6c:85: 18:d1:5b:fe:1f:53:ee:ca:29:03:1f:53:4e:a6:08: 5a:2a:c2:1f:29:93:d0:89:d8:f1:75:74:3d:3e:6d: fb:1d:13:08:87:b2:27:fe:4c:e6:4d:37:35:d0:10: 31:eb:fc:54:2a:6f:a1:38:5f:ac:d4:25:8b:72:11: a1:9f:e5:f7:da:bd:57:62:4c:f1:4e:50:78:11:a3: 3e:e7:41:38:0b:b0:d8:5b:2d:73:5d:5a:ed:9f:47: 97:c5:03:13:3d:b8:4a:dd:9d:6f:f3:30:02:e2:30: 24:b8:a3:b7:5f:0f:c6:cc:56:84:4d:96:38:a9:10: cc:11:8b:c8:2d:84:be:72:ca:5c:a8:b1:b7:8e:06: cc:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:60:C7:D2:3F:C8:2C:AF:FB:38:C0:0D:EC:09:43:71:5E:D3:A6:AA X509v3 Authority Key Identifier: keyid:F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:8e:0d:3c:53:cb:64:1d:a0:14:67:0d:e8:73:02:35:10:d7: ee:02:b8:ab:96:21:9f:39:8f:b6:86:94:8c:c6:aa:5c:86:76: 1e:de:46:76:b4:e9:8b:74:5a:45:22:25:1e:3c:60:ad:7c:fb: f4:6b:07:84:22:56:ac:3c:97:28:1e:40:c7:7f:e6:d7:d6:14: a5:09:78:fb:33:95:57:a0:f7:45:f2:1a:1c:43:dc:cd:4c:99: 4d:22:87:45:dd:15:32:ba:c3:db:20:b2:82:90:64:27:5a:38: 93:df:05:88:78:ef:da:68:a6:d4:b8:49:7c:4b:0e:62:c9:1f: 2a:27:14:3c:02:59:23:0c:ab:48:e6:20:dc:5e:07:06:90:8e: 97:80:bc:1d:4e:fd:ae:f1:46:6b:f2:c2:42:6d:34:51:93:1a: 2b:7b:fa:1c:06:17:7b:bc:98:a7:de:09:35:e4:05:4d:ea:b5: 27:4f:4f:5a:48:44:8c:8e:e0:0a:03:c4:34:44:ce:2f:b9:35: 9f:38:ea:74:42:40:15:af:31:0d:38:21:b8:fc:22:a1:63:5d: 5d:09:4a:7a:1e:be:51:b9:b0:c7:41:d1:78:0f:bf:35:a2:b2: 86:76:9f:75:14:59:a7:bf:f6:8e:fd:b5:bd:72:f5:5a:44:7a: 87:49:43:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAwowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNDMjQxMTAvBgNVBAUTKEY0OTdEMTcxNjkyNzZENDNDNTg1MjE1QzE5ODMzMUMz M0MyMjVBNzUwHhcNMjYwOTIxMDExMjMyWhcNMjYwOTI4MDExMjMyWjAYMRYwFAYD VQQDEw02YWIwODQ4MS1iN2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApYFUCvF2Qq63IIP8ZYaLkHF0RKx36ZCLIu0Zlbwq2J8F9pWqydgJYRFYYs3j e0hQqSvPtKDanYnoLoc2nog8T+Kh3eGzkoEZJk9Q4JhfluFdXe3AW3SlEdHK5yJu c+ocH5uJ1D1F9I8feGpdxya8lWckT5jJbIUY0Vv+H1PuyikDH1NOpghaKsIfKZPQ idjxdXQ9Pm37HRMIh7In/kzmTTc10BAx6/xUKm+hOF+s1CWLchGhn+X32r1XYkzx TlB4EaM+50E4C7DYWy1zXVrtn0eXxQMTPbhK3Z1v8zAC4jAkuKO3Xw/GzFaETZY4 qRDMEYvILYS+cspcqLG3jgbMGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFABgx9I/ yCyv+zjADewJQ3Fe06aqMB8GA1UdIwQYMBaAFPSX0XFpJ21DxYUhXBmDMcM8Ilp1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0MyNC8xNkM2MTMxNjZB RkExMUVEQjcwNkZGM0NDNEY5QUUwMi85SmZSY1drbmJVUEZoU0ZjR1lNeHd6d2lX blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlKZlJjV2tuYlVQRmhTRmNHWU14d3p3aVduVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Q0MyNC8xNkM2MTMxNjZBRkExMUVEQjcwNkZGM0NDNEY5QUUwMi85SmZSY1drbmJV UEZoU0ZjR1lNeHd6d2lXblUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHo4NPFPLZB2gFGcN6HMCNRDX7gK4q5YhnzmPtoaUjMaqXIZ2Ht5GdrTpi3Ra RSIlHjxgrXz79GsHhCJWrDyXKB5Ax3/m19YUpQl4+zOVV6D3RfIaHEPczUyZTSKH Rd0VMrrD2yCygpBkJ1o4k98FiHjv2mim1LhJfEsOYskfKicUPAJZIwyrSOYg3F4H BpCOl4C8HU79rvFGa/LCQm00UZMaK3v6HAYXe7yYp94JNeQFTeq1J09PWkhEjI7g CgPENETOL7k1nzjqdEJAFa8xDTghuPwioWNdXQlKeh6+Ubmwx0HReA+/NaKyhnaf dRRZp7/2jv21vXL1WkR6h0lD9w== -----END CERTIFICATE-----Generated at Tue Sep 22 07:10:14 2026 by rpki-client