$ rpki-client -vvvf rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft File: ao09a_bbD13jJOQgxXOwqRhDx5Q.mft (raw, json) Hash identifier: amr1Z/6ldpcgmryr3HxMh1q77ou1H6eF4MibhzUCR8s= Subject key identifier: C8:0A:57:E4:16:08:4A:28:AD:C8:6F:6C:33:CC:74:14:D7:69:A9:65 Authority key identifier: 6A:8D:3D:6B:F6:DB:0F:5D:E3:24:E4:20:C5:73:B0:A9:18:43:C7:94 Certificate issuer: /CN=A911A108/serialNumber=6A8D3D6BF6DB0F5DE324E420C573B0A91843C794 Certificate serial: 022E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft Manifest number: 0228 Signing time: Mon 21 Sep 2026 02:46:48 +0000 Manifest this update: Mon 21 Sep 2026 02:46:47 +0000 Manifest next update: Mon 28 Sep 2026 02:46:47 +0000 Files and hashes: 1: ao09a_bbD13jJOQgxXOwqRhDx5Q.crl (hash: Mvr3CAiCAz5SRXQdX1WB2JK80Uq39U6DYeXmGzrUr4U=) 2: 2152B7B06C0411EEBC1AA814C4F9AE02.roa (hash: hDaWJ1MPMK/kTcYrElHYKR5D6BKNhIGyYI8+GpXOoQk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.crl rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:46:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 558 (0x22e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A108, serialNumber=6A8D3D6BF6DB0F5DE324E420C573B0A91843C794 Validity Not Before: Sep 21 02:46:47 2026 GMT Not After : Sep 28 02:46:47 2026 GMT Subject: CN=6ab09a98-f7bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:82:8a:8c:0d:d1:7a:9c:55:bc:a9:aa:57:64: cf:b1:3a:47:ad:b9:50:64:df:12:fc:a2:ef:6b:53: 2a:5f:75:d8:5e:53:23:17:bf:29:b2:52:fe:61:91: 49:d0:29:48:e7:8a:b2:70:65:a1:09:6e:4b:92:5c: 9a:d2:8c:0b:61:7d:95:49:6b:21:f0:32:a3:17:7d: 8d:6e:18:6c:19:44:6a:dd:f7:34:1c:5b:40:f0:29: 1f:54:50:42:45:38:f7:9b:28:3d:0f:34:c7:08:a3: df:42:b2:60:10:4b:d3:e6:50:61:59:fb:7b:1e:77: 0b:b7:da:44:38:69:6c:1a:03:31:4b:4d:92:02:71: 8f:06:67:6f:16:5b:ee:c6:fc:33:88:85:4a:f3:fc: e0:27:45:d1:0a:60:39:8b:27:27:b5:dc:28:91:44: 3e:e5:ff:61:4c:2b:d4:c1:53:c5:1b:66:c1:01:65: d6:54:3d:cc:90:60:22:09:25:5a:12:f7:72:8e:aa: 5f:87:d1:47:a7:e5:7a:a9:27:68:7a:cd:37:7a:8f: 4e:3e:28:9d:ab:53:28:25:da:00:01:ad:b1:99:0b: f3:0d:7f:df:84:2b:99:a8:2a:cb:c0:ff:43:b1:cf: cc:4b:b3:83:89:62:8f:69:37:9d:a3:b7:8d:13:21: 1c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:0A:57:E4:16:08:4A:28:AD:C8:6F:6C:33:CC:74:14:D7:69:A9:65 X509v3 Authority Key Identifier: keyid:6A:8D:3D:6B:F6:DB:0F:5D:E3:24:E4:20:C5:73:B0:A9:18:43:C7:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:af:f4:19:4c:50:9f:ff:4d:e2:6e:8a:8e:a2:c1:af:8f:8c: 82:d9:eb:74:dd:19:26:33:da:de:d3:62:2b:51:f0:b3:6c:8d: 0d:db:9f:ca:6f:17:9d:fa:13:1e:13:3a:8c:e1:c1:d0:fb:fc: 47:25:f7:37:c2:b8:01:6d:b0:6e:9b:36:57:84:13:52:b6:e0: e5:4a:c1:06:b7:2d:c5:e7:40:b3:fa:07:d6:d4:f1:f1:60:88: 40:9d:56:47:96:54:b6:59:5a:43:58:c9:d1:cc:bf:98:99:ab: 96:11:99:02:3e:cd:33:c3:6d:d9:ba:69:34:7a:bd:f7:f7:9b: 77:15:05:b4:90:09:e0:ef:a1:d0:7b:e3:6a:c4:43:9a:d2:c5: 53:c7:5d:3f:90:1e:9f:65:dd:8f:04:f4:96:c8:ec:34:6d:a7: 7f:49:0f:a1:f9:df:90:51:b4:e4:3f:a8:eb:a9:99:08:5f:a5: 8e:94:2e:1c:2d:85:49:07:2f:fb:0c:b6:65:f8:3d:00:c5:3c: 04:ff:4a:c8:bc:7a:eb:c1:84:24:1f:93:e8:e0:bb:d9:57:8f: f1:8f:14:20:05:1c:3f:87:d1:14:90:23:8f:4d:fc:cd:84:ce: 2c:5c:30:42:94:c8:65:87:03:6e:ed:9d:dc:d9:68:b1:54:4b: 3f:79:83:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUExMDgxMTAvBgNVBAUTKDZBOEQzRDZCRjZEQjBGNURFMzI0RTQyMEM1NzNCMEE5 MTg0M0M3OTQwHhcNMjYwOTIxMDI0NjQ3WhcNMjYwOTI4MDI0NjQ3WjAYMRYwFAYD VQQDEw02YWIwOWE5OC1mN2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnYKKjA3RepxVvKmqV2TPsTpHrblQZN8S/KLva1MqX3XYXlMjF78pslL+YZFJ 0ClI54qycGWhCW5Lklya0owLYX2VSWsh8DKjF32NbhhsGURq3fc0HFtA8CkfVFBC RTj3myg9DzTHCKPfQrJgEEvT5lBhWft7HncLt9pEOGlsGgMxS02SAnGPBmdvFlvu xvwziIVK8/zgJ0XRCmA5iycntdwokUQ+5f9hTCvUwVPFG2bBAWXWVD3MkGAiCSVa Evdyjqpfh9FHp+V6qSdoes03eo9OPiidq1MoJdoAAa2xmQvzDX/fhCuZqCrLwP9D sc/MS7ODiWKPaTedo7eNEyEcgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMgKV+QW CEoorchvbDPMdBTXaallMB8GA1UdIwQYMBaAFGqNPWv22w9d4yTkIMVzsKkYQ8eU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTEwOC9GOTU4RkM0QTZD MDAxMUVFQjk4QjQzMEVDNEY5QUUwMi9hbzA5YV9iYkQxM2pKT1FneFhPd3FSaER4 NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FvMDlhX2JiRDEzakpPUWd4WE93cVJoRHg1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTEwOC9GOTU4RkM0QTZDMDAxMUVFQjk4QjQzMEVDNEY5QUUwMi9hbzA5YV9iYkQx M2pKT1FneFhPd3FSaER4NVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYq/0GUxQn/9N4m6KjqLBr4+MgtnrdN0ZJjPa3tNiK1Hws2yNDdufym8XnfoT HhM6jOHB0Pv8RyX3N8K4AW2wbps2V4QTUrbg5UrBBrctxedAs/oH1tTx8WCIQJ1W R5ZUtllaQ1jJ0cy/mJmrlhGZAj7NM8Nt2bppNHq99/ebdxUFtJAJ4O+h0HvjasRD mtLFU8ddP5Aen2XdjwT0lsjsNG2nf0kPofnfkFG05D+o66mZCF+ljpQuHC2FSQcv +wy2Zfg9AMU8BP9KyLx668GEJB+T6OC72VeP8Y8UIAUcP4fRFJAjj038zYTOLFww QpTIZYcDbu2d3NlosVRLP3mDRQ== -----END CERTIFICATE-----Generated at Wed Sep 23 00:55:04 2026 by rpki-client