$ rpki-client -vvvf rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft File: -jVgKfx3KltDJpwxataFxLtaZW0.mft (raw, json) Hash identifier: 1cQxYabTGFu8qj7179BiAFp2z2ivWz9FleEpsPMvr7c= Subject key identifier: C9:6F:8B:4A:2F:51:18:1E:71:5B:9A:CE:5E:D7:6E:4B:6B:C8:44:4A Authority key identifier: FA:35:60:29:FC:77:2A:5B:43:26:9C:31:6A:D6:85:C4:BB:5A:65:6D Certificate issuer: /CN=A9116B5E/serialNumber=FA356029FC772A5B43269C316AD685C4BB5A656D Certificate serial: 0721 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft Manifest number: 0709 Signing time: Thu 24 Sep 2026 22:03:06 +0000 Manifest this update: Thu 24 Sep 2026 22:03:05 +0000 Manifest next update: Thu 01 Oct 2026 22:03:05 +0000 Files and hashes: 1: -jVgKfx3KltDJpwxataFxLtaZW0.crl (hash: WnoPuieQ3iZHBBESVNLCBZJxKqOkSTp61NJyohtZZOs=) 2: 26C5F4148FC111EF84928A68C4F9AE02.roa (hash: yoloep24o1atFGZiIYVLvf8FRxTCxFgmWJlp5tBVJqE=) 3: 93E364468FC111EFA7695485C4F9AE02.roa (hash: odXs70QtmjQH39+qx/iFdYWwlstVgEGIxhy6jVeMzv4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.crl rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 22:03:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1825 (0x721) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116B5E, serialNumber=FA356029FC772A5B43269C316AD685C4BB5A656D Validity Not Before: Sep 24 22:03:05 2026 GMT Not After : Oct 1 22:03:05 2026 GMT Subject: CN=6ab59e1a-e32d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:68:ef:0f:cc:f7:37:35:19:b0:0f:36:ab:a6: e0:b1:eb:e7:c2:29:93:ae:df:36:62:b4:d2:b3:2a: ab:83:ae:5c:e1:25:71:78:17:51:56:84:2f:9b:2f: da:62:9f:10:62:9f:88:20:ab:a8:a2:c4:43:2a:2f: 77:a2:fe:bd:8f:52:be:ca:84:18:09:6e:53:2f:0d: b2:ba:b5:02:a6:a8:47:f6:d6:e7:22:db:ba:f9:7c: 34:4c:e1:1e:a6:3d:2a:cc:b2:b3:9e:56:17:27:ae: ea:49:6a:94:c2:13:88:f6:0e:7d:41:d7:02:b9:eb: 84:a5:c5:1c:01:8f:49:5d:20:09:78:48:f8:49:05: d5:2e:85:b7:34:f2:b7:7b:55:47:d7:6f:58:f0:c4: 87:22:b3:d1:17:7a:6c:cc:4e:f8:c7:da:c8:d6:90: 06:fc:b5:8a:04:ca:fa:51:4b:87:9a:8f:62:ef:2a: 95:7b:43:4d:56:4a:a4:96:e8:16:cd:42:d6:b6:92: 98:ed:ca:11:88:de:c8:29:bb:87:96:4b:58:9b:e0: ae:f8:68:03:21:1e:9f:db:60:65:0b:ae:79:a4:57: 33:08:e3:3a:b4:ab:f7:87:6f:ea:ac:36:43:23:12: 69:90:04:69:5e:a7:2c:26:94:d5:99:e4:65:1c:2c: 6b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:6F:8B:4A:2F:51:18:1E:71:5B:9A:CE:5E:D7:6E:4B:6B:C8:44:4A X509v3 Authority Key Identifier: keyid:FA:35:60:29:FC:77:2A:5B:43:26:9C:31:6A:D6:85:C4:BB:5A:65:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:e3:26:89:37:f6:2d:86:b1:d8:31:17:ae:0a:ec:39:4a:fb: fe:5b:3c:35:81:84:7f:39:7c:6d:8c:aa:2e:21:25:25:0f:fb: 03:47:8c:3e:8f:bb:3b:a9:b0:9e:09:4c:de:68:7b:ba:a3:ab: 34:06:d4:f6:01:4e:1c:5a:78:ca:14:4e:5d:74:32:aa:41:28: 73:c8:36:03:11:d3:f0:f2:10:64:fd:a2:eb:d3:50:c0:32:a6: 69:94:37:17:31:c2:76:4a:52:a4:0d:ec:7b:6b:c5:d7:89:c9: d5:ca:23:bb:b9:d0:ac:25:59:1d:90:66:01:b5:b2:bd:e7:71: fb:22:4d:6a:c5:38:29:71:22:5b:f8:50:c5:1b:6b:d9:49:a5: 79:97:5f:ed:b3:9d:e5:54:b7:50:d3:00:b0:f6:71:af:19:c1: 0d:00:de:00:2a:dc:85:cf:66:cf:a4:6d:ba:e5:f2:b2:f0:4d: 8d:94:3e:fe:ec:90:f7:5a:df:24:ee:0b:3b:b5:88:a9:49:26: 27:6c:23:43:70:7a:63:a2:1d:7a:41:3a:ad:c8:a7:2e:19:ab: 22:0c:44:fa:6b:1d:a1:c7:d6:31:84:20:98:c7:25:13:0b:06: d1:ad:42:ee:04:ad:d0:f8:41:5b:b5:3e:71:d0:21:fa:c5:2c: eb:80:8a:84 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICByEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZCNUUxMTAvBgNVBAUTKEZBMzU2MDI5RkM3NzJBNUI0MzI2OUMzMTZBRDY4NUM0 QkI1QTY1NkQwHhcNMjYwOTI0MjIwMzA1WhcNMjYxMDAxMjIwMzA1WjAYMRYwFAYD VQQDEw02YWI1OWUxYS1lMzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj2jvD8z3NzUZsA82q6bgsevnwimTrt82YrTSsyqrg65c4SVxeBdRVoQvmy/a Yp8QYp+IIKuoosRDKi93ov69j1K+yoQYCW5TLw2yurUCpqhH9tbnItu6+Xw0TOEe pj0qzLKznlYXJ67qSWqUwhOI9g59QdcCueuEpcUcAY9JXSAJeEj4SQXVLoW3NPK3 e1VH129Y8MSHIrPRF3pszE74x9rI1pAG/LWKBMr6UUuHmo9i7yqVe0NNVkqklugW zULWtpKY7coRiN7IKbuHlktYm+Cu+GgDIR6f22BlC655pFczCOM6tKv3h2/qrDZD IxJpkARpXqcsJpTVmeRlHCxrZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMlvi0ov URgecVuazl7XbktryERKMB8GA1UdIwQYMBaAFPo1YCn8dypbQyacMWrWhcS7WmVt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkI1RS9GNThDNTY5NEE2 RTAxMUVCQUMxREVCNTdDNEY5QUUwMi8talZnS2Z4M0tsdERKcHd4YXRhRnhMdGFa VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1qVmdLZngzS2x0REpwd3hhdGFGeEx0YVpXMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkI1RS9GNThDNTY5NEE2RTAxMUVCQUMxREVCNTdDNEY5QUUwMi8talZnS2Z4M0ts dERKcHd4YXRhRnhMdGFaVzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAo+MmiTf2LYax2DEXrgrsOUr7/ls8NYGEfzl8bYyqLiElJQ/7A0eMPo+7O6mw nglM3mh7uqOrNAbU9gFOHFp4yhROXXQyqkEoc8g2AxHT8PIQZP2i69NQwDKmaZQ3 FzHCdkpSpA3se2vF14nJ1coju7nQrCVZHZBmAbWyvedx+yJNasU4KXEiW/hQxRtr 2UmleZdf7bOd5VS3UNMAsPZxrxnBDQDeACrchc9mz6RtuuXysvBNjZQ+/uyQ91rf JO4LO7WIqUkmJ2wjQ3B6Y6IdekE6rcinLhmrIgxE+msdocfWMYQgmMclEwsG0a1C 7gSt0PhBW7U+cdAh+sUs64CKhA== -----END CERTIFICATE-----Generated at Fri Sep 25 07:18:54 2026 by rpki-client