$ rpki-client -vvvf rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.mft File: D9Qkj9SLoa4LYNjPakPbM7b09ro.mft (raw, json) Hash identifier: wlQNH7hjuFHW+RFIjRYqxWABsPMyeXBOKVoknmagMVk= Subject key identifier: B8:E7:8B:E1:87:C1:D3:CD:29:7C:32:B5:B2:6A:A6:2F:3A:2B:95:F5 Authority key identifier: 0F:D4:24:8F:D4:8B:A1:AE:0B:60:D8:CF:6A:43:DB:33:B6:F4:F6:BA Certificate issuer: /CN=A911B5AC/serialNumber=0FD4248FD48BA1AE0B60D8CF6A43DB33B6F4F6BA Certificate serial: 02CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9Qkj9SLoa4LYNjPakPbM7b09ro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.mft Manifest number: 02C5 Signing time: Wed 23 Sep 2026 01:08:13 +0000 Manifest this update: Wed 23 Sep 2026 01:08:13 +0000 Manifest next update: Wed 30 Sep 2026 01:08:13 +0000 Files and hashes: 1: D9Qkj9SLoa4LYNjPakPbM7b09ro.crl (hash: 2XQ74g7vFpYrMPzTftkN9ynEvcqCTefX4AIeZdcRnrk=) 2: CA181F42791211ED9D926781C4F9AE02.roa (hash: yfzx4N8e3wjfsr320pF+EFitreK6BjvCPZ0wmG/4y/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.crl rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9Qkj9SLoa4LYNjPakPbM7b09ro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 01:08:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 715 (0x2cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B5AC, serialNumber=0FD4248FD48BA1AE0B60D8CF6A43DB33B6F4F6BA Validity Not Before: Sep 23 01:08:13 2026 GMT Not After : Sep 30 01:08:13 2026 GMT Subject: CN=6ab3267d-0029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c3:da:39:2a:7b:03:cd:f5:d1:02:7e:6a:c5: 33:ee:f7:d1:51:2c:f3:64:f1:90:3e:49:46:0e:5a: 4b:9a:32:d8:30:71:fa:b5:75:a5:a4:ae:87:70:ff: 08:bd:3f:c0:98:93:b0:99:b3:d5:c6:67:a2:50:a8: a2:9a:5f:12:e8:ab:da:19:c8:8c:ab:02:cf:76:0f: 68:5c:3e:c2:66:72:f9:6b:00:78:fc:04:d2:bd:25: b3:38:21:1d:41:c7:54:c8:92:c0:df:65:2a:e9:2f: de:5e:af:95:a5:5d:96:f7:74:9e:6d:e1:d6:51:7c: 2a:fa:37:a2:93:7b:59:d8:00:16:00:80:35:e9:0a: 7c:29:18:5b:69:ec:3f:aa:16:82:6b:80:c0:30:2d: bf:93:c8:8d:91:c5:66:6b:c1:99:ae:fb:73:49:d8: 41:fe:b1:9d:e7:03:52:9e:d6:6b:a9:97:58:09:d5: d4:ae:c9:da:0f:40:0a:d3:fb:2b:80:ab:f3:b3:d1: 85:14:56:c7:e4:e2:87:b1:63:08:22:30:38:dc:10: 7d:c8:a4:51:dd:95:18:6a:a5:64:53:93:86:4d:06: 88:f5:1d:0f:82:87:d8:02:a6:be:9b:49:43:05:01: 5c:2a:a3:81:13:cf:f7:c2:ba:d8:83:67:af:f6:69: 0d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E7:8B:E1:87:C1:D3:CD:29:7C:32:B5:B2:6A:A6:2F:3A:2B:95:F5 X509v3 Authority Key Identifier: keyid:0F:D4:24:8F:D4:8B:A1:AE:0B:60:D8:CF:6A:43:DB:33:B6:F4:F6:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9Qkj9SLoa4LYNjPakPbM7b09ro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:1e:0e:12:2d:91:f3:18:e7:14:10:c9:d0:6b:ae:be:fe:e9: 94:5b:ad:3a:58:82:b3:c6:a9:86:65:52:82:ba:b1:6b:02:b1: 08:82:d3:ae:f8:58:7f:60:3d:35:28:6d:cd:39:90:f8:27:cb: a8:be:57:50:35:7f:fc:bb:ef:e0:dc:38:49:5d:88:8b:f9:c6: 63:9a:78:e9:1e:41:4a:26:ba:53:04:66:7b:33:fc:97:5b:63: 56:7d:30:44:16:79:9c:da:46:5a:d4:15:b4:70:d0:5d:ba:7c: 32:40:f4:6a:43:e8:bc:e1:e5:74:89:43:d7:11:13:86:ee:6b: 78:14:e6:fa:d6:d4:00:91:48:12:af:60:4e:85:a9:bd:77:27: 50:9d:26:12:35:12:81:7e:ba:8e:42:68:b0:24:4f:45:22:36: f3:a5:65:3c:dd:0e:4e:f7:90:61:da:37:17:bc:69:63:fc:eb: 42:3a:ce:08:17:c2:fc:50:3f:6c:12:a2:e7:10:6b:27:1f:1e: f1:25:ae:09:cb:7d:17:c5:b3:42:ab:44:6b:a5:9d:64:90:c0: e4:95:f1:ba:3d:ed:ac:f3:f0:63:4c:34:92:f8:cf:88:ec:31: 99:0c:22:64:6a:8b:bc:a3:46:55:e8:0d:98:e4:39:87:77:38: 63:5d:ca:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAsswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI1QUMxMTAvBgNVBAUTKDBGRDQyNDhGRDQ4QkExQUUwQjYwRDhDRjZBNDNEQjMz QjZGNEY2QkEwHhcNMjYwOTIzMDEwODEzWhcNMjYwOTMwMDEwODEzWjAYMRYwFAYD VQQDEw02YWIzMjY3ZC0wMDI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlsPaOSp7A8310QJ+asUz7vfRUSzzZPGQPklGDlpLmjLYMHH6tXWlpK6HcP8I vT/AmJOwmbPVxmeiUKiiml8S6KvaGciMqwLPdg9oXD7CZnL5awB4/ATSvSWzOCEd QcdUyJLA32Uq6S/eXq+VpV2W93SebeHWUXwq+jeik3tZ2AAWAIA16Qp8KRhbaew/ qhaCa4DAMC2/k8iNkcVma8GZrvtzSdhB/rGd5wNSntZrqZdYCdXUrsnaD0AK0/sr gKvzs9GFFFbH5OKHsWMIIjA43BB9yKRR3ZUYaqVkU5OGTQaI9R0PgofYAqa+m0lD BQFcKqOBE8/3wrrYg2ev9mkNOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLjni+GH wdPNKXwytbJqpi86K5X1MB8GA1UdIwQYMBaAFA/UJI/Ui6GuC2DYz2pD2zO29Pa6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjVBQy81RkFGNTY0Mjc5 MEUxMUVEOEU3QzFCNzlDNEY5QUUwMi9EOVFrajlTTG9hNExZTmpQYWtQYk03YjA5 cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q5UWtqOVNMb2E0TFlOalBha1BiTTdiMDlyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjVBQy81RkFGNTY0Mjc5MEUxMUVEOEU3QzFCNzlDNEY5QUUwMi9EOVFrajlTTG9h NExZTmpQYWtQYk03YjA5cm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYR4OEi2R8xjnFBDJ0Guuvv7plFutOliCs8aphmVSgrqxawKxCILTrvhYf2A9 NShtzTmQ+CfLqL5XUDV//Lvv4Nw4SV2Ii/nGY5p46R5BSia6UwRmezP8l1tjVn0w RBZ5nNpGWtQVtHDQXbp8MkD0akPovOHldIlD1xEThu5reBTm+tbUAJFIEq9gToWp vXcnUJ0mEjUSgX66jkJosCRPRSI286VlPN0OTveQYdo3F7xpY/zrQjrOCBfC/FA/ bBKi5xBrJx8e8SWuCct9F8WzQqtEa6WdZJDA5JXxuj3trPPwY0w0kvjPiOwxmQwi ZGqLvKNGVegNmOQ5h3c4Y13Kcw== -----END CERTIFICATE-----Generated at Thu Sep 24 00:15:07 2026 by rpki-client