$ rpki-client -vvvf rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.mft File: aFlbmOTCezC6ozHOqscmF2fLkus.mft (raw, json) Hash identifier: 4zHT8pw34brRl9RJyJR7QgdRr8KyaxdHKNjU7iB7agY= Subject key identifier: 9F:81:8A:B5:AC:9D:0A:25:23:C9:58:71:ED:27:8A:3E:5F:7E:01:22 Authority key identifier: 68:59:5B:98:E4:C2:7B:30:BA:A3:31:CE:AA:C7:26:17:67:CB:92:EB Certificate issuer: /CN=A9119AE2/serialNumber=68595B98E4C27B30BAA331CEAAC7261767CB92EB Certificate serial: 0768 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFlbmOTCezC6ozHOqscmF2fLkus.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.mft Manifest number: 0756 Signing time: Sun 04 Oct 2026 21:52:26 +0000 Manifest this update: Sun 04 Oct 2026 21:52:25 +0000 Manifest next update: Sun 11 Oct 2026 21:52:25 +0000 Files and hashes: 1: aFlbmOTCezC6ozHOqscmF2fLkus.crl (hash: c4pNd21Z1UsunoIu0u76VFVrGaIQRKN5voKDsDT4i44=) 2: 8D23BDE287C611EB8C8DDB70C4F9AE02.roa (hash: SmluGT3rSA2/F6vzSy9ujUd/VTUfXc20Bw3w5gO2FCs=) 3: 8D20F290411811ECA0929516C4F9AE02.roa (hash: lTuyJowUFMLOryc9O4taTNUF2BOa8A0yjVaiNstsNbo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.crl rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFlbmOTCezC6ozHOqscmF2fLkus.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 21:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1896 (0x768) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119AE2, serialNumber=68595B98E4C27B30BAA331CEAAC7261767CB92EB Validity Not Before: Oct 4 21:52:25 2026 GMT Not After : Oct 11 21:52:25 2026 GMT Subject: CN=6ac2ca9a-127f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:fc:b1:7f:e7:54:c1:3f:ad:09:35:a9:10:94: 62:83:fb:95:53:58:d4:c8:6a:65:19:69:48:45:da: 0e:9e:e0:5b:0f:93:92:10:5b:5f:ba:9f:6f:6c:1e: 1b:d0:b1:6c:0a:81:87:4b:60:f2:54:49:32:08:3b: e2:1c:7a:8f:f9:d4:e9:49:75:35:8a:23:6e:9a:01: cc:66:11:04:f8:28:41:37:60:08:80:64:98:22:87: 3b:bc:8e:c6:18:8c:d6:e0:61:12:d1:40:9f:14:d9: ac:e5:34:70:2a:f8:14:fa:da:2a:ee:4a:e3:ed:f4: 66:dc:f9:9e:f8:3e:9a:e3:68:9b:cc:1c:75:ee:38: dd:d5:7a:76:4e:79:9e:57:3c:97:bc:45:48:3d:e9: 99:f1:9e:34:91:95:25:d6:06:d2:cb:df:06:a1:75: ef:11:2e:77:a2:f9:0b:45:ad:c8:12:c2:ba:db:27: 73:83:1c:ff:98:3f:dd:19:67:ad:f0:f8:63:57:f0: ed:33:a1:dc:fc:4e:77:d6:f2:b4:5a:91:06:59:54: ad:ad:38:69:26:6b:24:e2:7e:45:a0:7d:18:ed:79: 62:cd:e6:ce:2f:5f:95:57:f3:ef:22:1d:61:0f:d6: d4:a4:c9:dc:f1:b0:da:a7:4b:2a:26:4f:35:87:11: 23:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:81:8A:B5:AC:9D:0A:25:23:C9:58:71:ED:27:8A:3E:5F:7E:01:22 X509v3 Authority Key Identifier: keyid:68:59:5B:98:E4:C2:7B:30:BA:A3:31:CE:AA:C7:26:17:67:CB:92:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFlbmOTCezC6ozHOqscmF2fLkus.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:a0:f8:41:34:ff:ac:b3:06:e3:39:a4:28:14:08:07:20:ef: a1:30:f5:45:5a:54:16:00:88:39:22:9f:fd:f6:b8:8d:1b:19: 5b:e4:e4:90:c0:71:40:72:e6:5d:29:64:ad:01:5a:5b:80:84: 13:1d:95:8b:20:fc:00:94:d0:9a:99:ee:48:90:28:5c:1c:62: f4:18:d0:d7:51:19:a3:8d:a8:59:20:6a:8c:55:04:6e:ef:6e: 7f:27:14:8d:e6:f1:94:d4:f5:7e:69:78:94:0a:e4:58:50:05: e9:b6:8d:81:f0:db:84:12:bd:dd:f0:73:a1:71:6d:93:89:27: 88:f4:f2:a8:b1:c9:1d:d7:60:e2:ef:93:92:14:25:49:8c:2d: 09:7c:20:15:2e:d0:e3:30:82:2a:27:ae:93:8c:9e:12:49:71: 23:e0:4e:0c:af:89:76:9b:85:f7:73:a8:95:d8:69:20:83:5b: 82:31:94:21:94:0c:4c:bd:5f:c9:8f:8b:b9:89:d6:61:7d:58: e1:5b:a9:a2:1f:9e:bd:71:dc:13:57:db:bd:79:7e:f7:c0:37: 02:19:7e:a6:f2:dc:d2:ac:b3:b7:03:eb:a5:53:ab:85:a6:fe: d8:42:95:c3:bd:31:47:78:3f:ee:e5:85:45:32:ac:de:3a:34: 63:65:af:61 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB2gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlBRTIxMTAvBgNVBAUTKDY4NTk1Qjk4RTRDMjdCMzBCQUEzMzFDRUFBQzcyNjE3 NjdDQjkyRUIwHhcNMjYxMDA0MjE1MjI1WhcNMjYxMDExMjE1MjI1WjAYMRYwFAYD VQQDEw02YWMyY2E5YS0xMjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3vyxf+dUwT+tCTWpEJRig/uVU1jUyGplGWlIRdoOnuBbD5OSEFtfup9vbB4b 0LFsCoGHS2DyVEkyCDviHHqP+dTpSXU1iiNumgHMZhEE+ChBN2AIgGSYIoc7vI7G GIzW4GES0UCfFNms5TRwKvgU+toq7krj7fRm3Pme+D6a42ibzBx17jjd1Xp2Tnme VzyXvEVIPemZ8Z40kZUl1gbSy98GoXXvES53ovkLRa3IEsK62ydzgxz/mD/dGWet 8PhjV/DtM6Hc/E531vK0WpEGWVStrThpJmsk4n5FoH0Y7XlizebOL1+VV/PvIh1h D9bUpMnc8bDap0sqJk81hxEjTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ+BirWs nQolI8lYce0nij5ffgEiMB8GA1UdIwQYMBaAFGhZW5jkwnswuqMxzqrHJhdny5Lr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUFFMi84QUI4QzE4QTg3 QzQxMUVCQTFGREQ4NkJDNEY5QUUwMi9hRmxibU9UQ2V6QzZvekhPcXNjbUYyZkxr dXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FGbGJtT1RDZXpDNm96SE9xc2NtRjJmTGt1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OUFFMi84QUI4QzE4QTg3QzQxMUVCQTFGREQ4NkJDNEY5QUUwMi9hRmxibU9UQ2V6 QzZvekhPcXNjbUYyZkxrdXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOqD4QTT/rLMG4zmkKBQIByDvoTD1RVpUFgCIOSKf/fa4jRsZW+TkkMBxQHLm XSlkrQFaW4CEEx2ViyD8AJTQmpnuSJAoXBxi9BjQ11EZo42oWSBqjFUEbu9ufycU jebxlNT1fml4lArkWFAF6baNgfDbhBK93fBzoXFtk4kniPTyqLHJHddg4u+TkhQl SYwtCXwgFS7Q4zCCKieuk4yeEklxI+BODK+JdpuF93OoldhpIINbgjGUIZQMTL1f yY+LuYnWYX1Y4Vupoh+evXHcE1fbvXl+98A3Ahl+pvLc0qyztwPrpVOrhab+2EKV w70xR3g/7uWFRTKs3jo0Y2WvYQ== -----END CERTIFICATE-----Generated at Mon Oct 5 19:33:35 2026 by rpki-client