$ rpki-client -vvvf rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.mft File: aa41zc5jfrZF61Bl7eEtWOdZkjY.mft (raw, json) Hash identifier: 6PWie4Sy9hoMSf/s0shd5nutL82PmxpsOLPfBLygM7A= Subject key identifier: 4A:8A:2F:72:6F:FD:63:52:10:D5:C3:22:95:45:2A:0B:34:8F:A1:EE Authority key identifier: 69:AE:35:CD:CE:63:7E:B6:45:EB:50:65:ED:E1:2D:58:E7:59:92:36 Certificate issuer: /CN=A911BD6E/serialNumber=69AE35CDCE637EB645EB5065EDE12D58E7599236 Certificate serial: 95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aa41zc5jfrZF61Bl7eEtWOdZkjY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.mft Manifest number: 93 Signing time: Thu 01 Oct 2026 08:52:31 +0000 Manifest this update: Thu 01 Oct 2026 08:52:30 +0000 Manifest next update: Thu 08 Oct 2026 08:52:30 +0000 Files and hashes: 1: aa41zc5jfrZF61Bl7eEtWOdZkjY.crl (hash: Tvgqf3jqOx2UZ6XN2V8hzOvyyRPdLED3F4FgDTQaFY4=) 2: 8A1624CEE29211F0A7536C41456F56BC.roa (hash: 8wnCI5N573pkzZtHUtb6fStu9xHz76SfS/f/10QACGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.crl rsync://rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aa41zc5jfrZF61Bl7eEtWOdZkjY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Oct 2026 08:52:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BD6E, serialNumber=69AE35CDCE637EB645EB5065EDE12D58E7599236 Validity Not Before: Oct 1 08:52:30 2026 GMT Not After : Oct 8 08:52:30 2026 GMT Subject: CN=6abe1f4f-a8f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fd:8d:c4:f0:b2:53:df:5e:02:69:a7:2e:e4: 9a:b5:c0:5d:cd:33:71:ab:d8:08:4c:44:54:04:1f: 06:98:3b:40:33:95:05:85:3b:52:8f:18:64:3e:d7: e7:07:10:c7:d5:19:0e:36:85:3b:c8:6a:16:5c:a9: 83:f7:b8:4e:0d:80:a2:59:db:37:32:e4:ec:ca:b1: a3:8c:43:9a:28:d5:b7:7c:46:4e:e7:19:ef:b3:aa: fc:0e:4a:d0:37:a5:17:12:0f:0c:ee:b5:c8:22:5b: df:ad:e6:d1:25:07:79:91:dd:ff:15:f7:22:b3:5a: ca:b1:44:56:19:fd:48:e9:4e:e2:02:e8:77:fb:05: b1:e6:cf:09:b1:2a:61:de:fa:7f:0d:f3:f4:11:f9: 40:d8:97:29:0b:23:69:3a:d7:35:fb:f6:91:3f:ab: 13:d3:a2:19:08:b3:43:96:b6:5e:d2:24:3d:93:0e: 81:1f:4b:e7:6f:69:a1:14:17:9f:6c:f8:7c:d9:8d: 6c:7c:dc:ea:d0:83:55:bb:d3:e0:8f:eb:3a:23:b0: 0d:05:47:83:e1:3e:ba:95:fd:6d:1d:99:f8:af:98: 36:ee:92:90:8b:ce:05:c0:3f:7a:6e:a8:77:b0:0a: a8:ad:d2:85:1c:cc:ff:0b:05:6c:2b:8b:99:97:d9: 59:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:8A:2F:72:6F:FD:63:52:10:D5:C3:22:95:45:2A:0B:34:8F:A1:EE X509v3 Authority Key Identifier: keyid:69:AE:35:CD:CE:63:7E:B6:45:EB:50:65:ED:E1:2D:58:E7:59:92:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aa41zc5jfrZF61Bl7eEtWOdZkjY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:57:c3:14:8d:cd:c2:36:b0:dc:35:6f:af:70:ac:1a:e1:94: 15:80:79:8a:e3:00:47:60:89:eb:37:20:2c:a0:37:49:be:6e: db:cf:93:ed:11:ec:16:70:10:a9:86:60:c4:2f:8d:c9:e2:93: b2:28:ba:83:26:1c:38:a2:9e:ca:b2:b8:bb:42:02:88:f7:95: 72:ca:ee:a7:9b:7a:24:16:a9:69:65:f2:9b:43:4f:4d:4b:90: d0:de:26:a6:b2:c0:90:63:cb:a7:73:8b:b5:00:70:37:7d:c5: 99:32:8e:bc:9f:44:a2:39:ef:56:a3:f0:b6:4c:6c:61:60:9d: 82:5c:d2:29:10:39:27:56:ba:df:74:f8:41:22:86:2c:74:2a: 78:2a:be:9a:b7:06:e4:bb:6a:72:c1:95:92:12:31:dd:97:c4: 95:5d:43:fd:89:14:8c:48:e5:a5:bf:31:e6:d4:cc:a9:41:33: 1b:05:e2:7b:59:78:cb:d9:fd:0f:a4:c2:1d:4b:7b:ee:5c:f5: 3c:0d:4d:36:7c:93:f5:04:6a:70:91:f2:d3:61:b2:d0:db:1b: 26:04:30:12:f3:24:bc:8f:0f:a1:b7:54:76:0a:06:0b:cb:86: 6b:bc:05:ca:83:63:98:4b:7d:fb:d8:28:bc:5e:d8:29:64:ee: e3:bc:59:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJENkUxMTAvBgNVBAUTKDY5QUUzNUNEQ0U2MzdFQjY0NUVCNTA2NUVERTEyRDU4 RTc1OTkyMzYwHhcNMjYxMDAxMDg1MjMwWhcNMjYxMDA4MDg1MjMwWjAYMRYwFAYD VQQDEw02YWJlMWY0Zi1hOGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuP2NxPCyU99eAmmnLuSatcBdzTNxq9gITERUBB8GmDtAM5UFhTtSjxhkPtfn BxDH1RkONoU7yGoWXKmD97hODYCiWds3MuTsyrGjjEOaKNW3fEZO5xnvs6r8DkrQ N6UXEg8M7rXIIlvfrebRJQd5kd3/Ffcis1rKsURWGf1I6U7iAuh3+wWx5s8JsSph 3vp/DfP0EflA2JcpCyNpOtc1+/aRP6sT06IZCLNDlrZe0iQ9kw6BH0vnb2mhFBef bPh82Y1sfNzq0INVu9Pgj+s6I7ANBUeD4T66lf1tHZn4r5g27pKQi84FwD96bqh3 sAqordKFHMz/CwVsK4uZl9lZvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEqKL3Jv /WNSENXDIpVFKgs0j6HuMB8GA1UdIwQYMBaAFGmuNc3OY362RetQZe3hLVjnWZI2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ2RS9CRjRGMjQ3QUUy OTExMUYwOTZFMjdEMTE0NTZGNTZCQy9hYTQxemM1amZyWkY2MUJsN2VFdFdPZFpr alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FhNDF6YzVqZnJaRjYxQmw3ZUV0V09kWmtqWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkQ2RS9CRjRGMjQ3QUUyOTExMUYwOTZFMjdEMTE0NTZGNTZCQy9hYTQxemM1amZy WkY2MUJsN2VFdFdPZFpralkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmlfDFI3Nwjaw3DVvr3CsGuGUFYB5iuMAR2CJ6zcgLKA3Sb5u28+T7RHsFnAQ qYZgxC+NyeKTsii6gyYcOKKeyrK4u0ICiPeVcsrup5t6JBapaWXym0NPTUuQ0N4m prLAkGPLp3OLtQBwN33FmTKOvJ9EojnvVqPwtkxsYWCdglzSKRA5J1a633T4QSKG LHQqeCq+mrcG5LtqcsGVkhIx3ZfElV1D/YkUjEjlpb8x5tTMqUEzGwXie1l4y9n9 D6TCHUt77lz1PA1NNnyT9QRqcJHy02Gy0NsbJgQwEvMkvI8PobdUdgoGC8uGa7wF yoNjmEt9+9govF7YKWTu47xZZg== -----END CERTIFICATE-----Generated at Thu Oct 1 13:45:15 2026 by rpki-client