$ rpki-client -vvvf rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft File: aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft (raw, json) Hash identifier: hmWkPwLyizY29XdqEASoNbx5qW+ZYgspuWuq8h6Hh78= Subject key identifier: D8:7E:88:95:91:CC:D5:CF:BF:0A:39:14:7A:15:F9:22:8E:E8:47:B3 Authority key identifier: 69:9E:67:42:56:7B:E7:32:9C:C3:A7:86:DE:B7:85:7E:2C:24:20:F9 Certificate issuer: /CN=A9119333/serialNumber=699E6742567BE7329CC3A786DEB7857E2C2420F9 Certificate serial: 23C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft Manifest number: 2377 Signing time: Thu 24 Sep 2026 15:47:42 +0000 Manifest this update: Thu 24 Sep 2026 15:47:41 +0000 Manifest next update: Thu 01 Oct 2026 15:47:41 +0000 Files and hashes: 1: aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl (hash: uYXaScXBi75+1/zBZ/a7aFQavf5ueUmHGimPqTUlHZs=) 2: DD73806ED3C811EF9D76942FC4F9AE02.roa (hash: EwnErXsu5NYk/vKrNa7Bl73VtntPwcy5vYXbhPAWFt0=) 3: 1AC9199AD3CB11EF84052053C4F9AE02.roa (hash: plwWFq4k0Hgx6vP8bTzqJt9GJIcOt71z9VOfufJhc6Q=) 4: 443C3AF2D3F611EFB03C5C14C4F9AE02.roa (hash: kvJG9W7BesVloRiSNTznQQ2Vu/TG695dXNyQ/qNO4G8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 15:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9154 (0x23c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119333, serialNumber=699E6742567BE7329CC3A786DEB7857E2C2420F9 Validity Not Before: Sep 24 15:47:41 2026 GMT Not After : Oct 1 15:47:41 2026 GMT Subject: CN=6ab5461e-3c78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:43:ee:d2:ea:e1:80:59:82:95:ac:f5:4c:96: 74:66:1b:cd:68:ca:48:93:d7:5b:b3:5a:c9:1f:17: 26:e7:13:95:d6:94:4b:63:a8:e8:1a:bc:79:c7:ec: 49:dc:a7:1f:51:34:dc:fb:08:b9:a8:b5:7b:91:c4: 0b:2d:a6:cd:5f:66:cc:8f:dd:4d:e9:c2:e2:69:46: a3:c9:8a:b9:dd:fd:96:29:8d:09:2d:43:8d:50:df: 50:db:d0:b2:98:55:f9:4f:57:51:8b:57:f4:44:82: c3:14:5c:7d:1a:14:22:2e:42:e8:c9:d1:27:b1:79: 89:93:67:44:1b:b3:12:78:9e:f7:b4:c9:70:d7:27: e4:a0:e0:64:a9:6c:de:95:02:ab:8b:a1:eb:26:64: d0:43:a3:22:7e:ac:12:3d:67:a1:4f:68:58:74:0b: ad:ff:15:e7:a9:5a:7c:1c:e6:6f:1b:64:49:e5:18: ea:20:9d:f0:6e:6f:d5:cf:ea:ee:a8:1c:fe:02:5a: 7d:9a:56:cb:57:de:59:94:c9:30:0f:f9:2c:d3:25: 70:27:0e:ba:67:e7:b4:79:98:7c:ae:7f:08:6d:75: b4:8c:20:b1:b0:af:fa:57:c7:07:b3:a2:f3:bb:b8: 7a:eb:34:9c:01:87:a1:36:96:ad:11:07:a0:bb:86: a9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:7E:88:95:91:CC:D5:CF:BF:0A:39:14:7A:15:F9:22:8E:E8:47:B3 X509v3 Authority Key Identifier: keyid:69:9E:67:42:56:7B:E7:32:9C:C3:A7:86:DE:B7:85:7E:2C:24:20:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:1a:49:9b:44:2b:fe:11:3d:b9:8a:ce:99:6a:c2:b0:b5:b4: 1e:af:96:32:4c:dc:f5:1a:e0:e8:87:22:02:cc:b9:76:38:fd: e8:5e:95:2a:11:f2:d3:a9:7d:5b:d8:28:c1:49:d7:43:d2:6e: 0f:2a:b3:78:7b:ec:e6:31:3a:5b:30:fb:ce:de:ae:5e:da:c9: 13:fa:4d:b5:64:7a:64:06:32:e8:11:0f:ba:75:85:be:20:49: 95:44:50:08:6d:80:c6:42:33:cc:6d:92:69:37:18:e7:bd:a9: 16:cb:d1:42:d8:e3:4f:21:fa:08:1e:56:49:03:3c:0a:4a:6b: 50:22:73:d3:a7:c7:b0:d9:73:bd:fa:b3:f3:59:1a:d3:e8:64: 5b:3b:ce:af:6a:ec:4c:e6:ed:92:38:84:d2:9d:7e:ab:21:98: c4:87:e8:83:f9:77:bb:31:fa:f5:61:f3:12:ce:60:04:c3:fc: 0d:24:5a:ff:29:94:14:bf:8f:34:eb:4f:09:6f:56:b5:da:ad: c9:d5:02:8b:01:68:c6:42:49:26:38:29:a9:78:94:79:a1:39: 46:2a:72:1b:3a:23:b9:23:9b:53:22:a0:fb:50:87:36:d0:d1: 06:0a:e7:79:c7:ed:29:11:be:76:7f:91:d6:04:29:e6:df:94: 86:2d:75:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICI8IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkzMzMxMTAvBgNVBAUTKDY5OUU2NzQyNTY3QkU3MzI5Q0MzQTc4NkRFQjc4NTdF MkMyNDIwRjkwHhcNMjYwOTI0MTU0NzQxWhcNMjYxMDAxMTU0NzQxWjAYMRYwFAYD VQQDEw02YWI1NDYxZS0zYzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv0Pu0urhgFmClaz1TJZ0ZhvNaMpIk9dbs1rJHxcm5xOV1pRLY6joGrx5x+xJ 3KcfUTTc+wi5qLV7kcQLLabNX2bMj91N6cLiaUajyYq53f2WKY0JLUONUN9Q29Cy mFX5T1dRi1f0RILDFFx9GhQiLkLoydEnsXmJk2dEG7MSeJ73tMlw1yfkoOBkqWze lQKri6HrJmTQQ6MifqwSPWehT2hYdAut/xXnqVp8HOZvG2RJ5RjqIJ3wbm/Vz+ru qBz+Alp9mlbLV95ZlMkwD/ks0yVwJw66Z+e0eZh8rn8IbXW0jCCxsK/6V8cHs6Lz u7h66zScAYehNpatEQegu4apyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNh+iJWR zNXPvwo5FHoV+SKO6EezMB8GA1UdIwQYMBaAFGmeZ0JWe+cynMOnht63hX4sJCD5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTMzMy8wNjVEQTNCQUI4 NDQxMUU1QjUzNTdCMkZDNEY5QUUwMi9hWjVuUWxaNzV6S2N3NmVHM3JlRmZpd2tJ UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FaNW5RbFo3NXpLY3c2ZUczcmVGZml3a0lQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTMzMy8wNjVEQTNCQUI4NDQxMUU1QjUzNTdCMkZDNEY5QUUwMi9hWjVuUWxaNzV6 S2N3NmVHM3JlRmZpd2tJUGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHRpJm0Qr/hE9uYrOmWrCsLW0Hq+WMkzc9Rrg6IciAsy5djj96F6VKhHy06l9 W9gowUnXQ9JuDyqzeHvs5jE6WzD7zt6uXtrJE/pNtWR6ZAYy6BEPunWFviBJlURQ CG2AxkIzzG2SaTcY572pFsvRQtjjTyH6CB5WSQM8CkprUCJz06fHsNlzvfqz81ka 0+hkWzvOr2rsTObtkjiE0p1+qyGYxIfog/l3uzH69WHzEs5gBMP8DSRa/ymUFL+P NOtPCW9WtdqtydUCiwFoxkJJJjgpqXiUeaE5RipyGzojuSObUyKg+1CHNtDRBgrn ecftKRG+dn+R1gQp5t+Uhi11qA== -----END CERTIFICATE-----Generated at Fri Sep 25 02:16:55 2026 by rpki-client