$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft File: c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft (raw, json) Hash identifier: GqI0+xHIcC+mdhfs+DhHCWgZtMSdRFZArrDa3tfeuUA= Subject key identifier: C9:5F:43:13:07:48:98:22:C9:DA:B1:DA:9C:9E:24:6A:8C:6A:D8:E2 Authority key identifier: 73:FB:B5:8F:55:71:F3:F4:C6:2A:63:FD:F5:AF:EF:9C:B7:0E:74:03 Certificate issuer: /CN=A911C3BB/serialNumber=73FBB58F5571F3F4C62A63FDF5AFEF9CB70E7403 Certificate serial: 02AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_u1j1Vx8_TGKmP99a_vnLcOdAM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft Manifest number: 02A8 Signing time: Fri 25 Sep 2026 01:34:26 +0000 Manifest this update: Fri 25 Sep 2026 01:34:25 +0000 Manifest next update: Fri 02 Oct 2026 01:34:25 +0000 Files and hashes: 1: c_u1j1Vx8_TGKmP99a_vnLcOdAM.crl (hash: ZNWJsLyaPU1dUc2flUIgvEQA8Zbrfq6fm2tyF/eYE/I=) 2: CB2788CAAB4C11EDB3DC7336C4F9AE02.roa (hash: GbmFJbbelNZSeQtz3x+IHWFg+LPNIaQa4LtKPhQUg28=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.crl rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_u1j1Vx8_TGKmP99a_vnLcOdAM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 01:34:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 687 (0x2af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C3BB, serialNumber=73FBB58F5571F3F4C62A63FDF5AFEF9CB70E7403 Validity Not Before: Sep 25 01:34:25 2026 GMT Not After : Oct 2 01:34:25 2026 GMT Subject: CN=6ab5cfa2-181c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:da:11:c9:7f:53:4c:10:ab:f7:bc:66:f0:c3: 13:4c:c7:d8:10:a3:93:a0:94:b7:c8:b5:b8:cc:b3: 8b:a4:be:89:fc:ca:8d:e3:54:8b:6d:da:f4:07:e5: be:ed:ef:b9:1e:54:7c:53:c3:6f:76:f4:9c:c1:47: 53:d1:9d:5c:7d:c9:b2:01:06:60:2a:8b:c6:c2:5c: f5:83:d7:86:3f:f2:0c:bb:92:05:b0:d9:59:3e:38: 1b:8a:73:35:67:03:29:60:92:e4:69:fb:98:29:40: 38:72:46:ea:09:70:49:d7:9b:95:d4:20:2a:4a:f8: 1c:5a:49:59:3e:df:ef:30:0d:d4:e9:a4:35:68:af: d0:f0:c5:de:ec:79:0a:dd:f6:19:d5:cf:9f:eb:7c: af:c1:0f:a7:da:2f:e6:7c:cd:45:30:b5:f9:53:9f: aa:eb:cb:35:cb:f6:25:5b:30:bb:84:11:2c:d3:59: d0:01:0e:8e:c7:a8:4e:c5:d8:29:2c:08:73:4c:31: b3:4b:96:e6:cd:ad:28:10:09:d4:47:41:40:0c:68: e0:96:48:b2:f7:61:36:a3:df:c6:16:82:c0:34:86: 2f:88:dc:17:1c:99:2d:b4:10:11:c6:59:6b:5c:27: de:be:f7:e8:b7:3b:b0:10:b2:bc:40:47:0d:0f:7d: d8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:5F:43:13:07:48:98:22:C9:DA:B1:DA:9C:9E:24:6A:8C:6A:D8:E2 X509v3 Authority Key Identifier: keyid:73:FB:B5:8F:55:71:F3:F4:C6:2A:63:FD:F5:AF:EF:9C:B7:0E:74:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_u1j1Vx8_TGKmP99a_vnLcOdAM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:b0:82:a1:f8:42:3f:59:59:86:06:a0:bc:4f:6b:ce:5f:36: 45:89:c7:d0:f5:46:e6:1e:b2:3e:ed:d8:95:05:7a:1d:68:8f: 56:3a:fa:b7:10:ff:11:84:9c:91:ea:d8:07:25:25:6b:f5:0a: c2:6e:8f:d1:54:d6:bc:de:3a:76:6f:2c:ba:70:42:7e:50:82: 66:96:a4:cc:b1:e6:33:25:bc:2d:ff:a4:0e:a3:bf:83:e1:be: b4:91:fd:dd:27:11:07:8d:7f:42:79:0a:ff:4c:83:b2:71:41: 7e:66:83:be:14:f7:e5:0f:da:97:53:98:bf:47:0b:b4:23:be: 92:b1:99:02:8a:ee:ce:6f:b1:4d:ba:0f:e8:7e:49:61:c6:3c: 95:33:0b:8c:cf:0a:a5:73:d2:80:a3:72:80:a0:bb:10:e4:84: 50:87:65:41:2f:be:c7:72:f3:ed:21:e1:42:76:c2:24:21:79: 13:0b:0b:98:5b:76:14:83:4e:8b:c7:9c:10:ae:6f:c9:19:e5: b0:a0:98:2a:c5:0e:4e:f0:72:93:9c:30:e7:b8:43:3c:aa:76: 36:bd:8c:28:aa:5d:d2:a0:a3:ba:0d:a8:d3:61:42:6a:e2:fa: 36:3f:91:85:51:1c:bc:23:80:0d:52:09:78:c5:a1:6e:21:a3: 10:50:a3:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMzQkIxMTAvBgNVBAUTKDczRkJCNThGNTU3MUYzRjRDNjJBNjNGREY1QUZFRjlD QjcwRTc0MDMwHhcNMjYwOTI1MDEzNDI1WhcNMjYxMDAyMDEzNDI1WjAYMRYwFAYD VQQDEw02YWI1Y2ZhMi0xODFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi9oRyX9TTBCr97xm8MMTTMfYEKOToJS3yLW4zLOLpL6J/MqN41SLbdr0B+W+ 7e+5HlR8U8NvdvScwUdT0Z1cfcmyAQZgKovGwlz1g9eGP/IMu5IFsNlZPjgbinM1 ZwMpYJLkafuYKUA4ckbqCXBJ15uV1CAqSvgcWklZPt/vMA3U6aQ1aK/Q8MXe7HkK 3fYZ1c+f63yvwQ+n2i/mfM1FMLX5U5+q68s1y/YlWzC7hBEs01nQAQ6Ox6hOxdgp LAhzTDGzS5bmza0oEAnUR0FADGjglkiy92E2o9/GFoLANIYviNwXHJkttBARxllr XCfevvfotzuwELK8QEcND33Y4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMlfQxMH SJgiydqx2pyeJGqMatjiMB8GA1UdIwQYMBaAFHP7tY9VcfP0xipj/fWv75y3DnQD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzNCQi9DOTA4ODc5QUFC NDkxMUVEOUZCNDBCMzVDNEY5QUUwMi9jX3UxajFWeDhfVEdLbVA5OWFfdm5MY09k QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NfdTFqMVZ4OF9UR0ttUDk5YV92bkxjT2RBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzNCQi9DOTA4ODc5QUFCNDkxMUVEOUZCNDBCMzVDNEY5QUUwMi9jX3UxajFWeDhf VEdLbVA5OWFfdm5MY09kQU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXbCCofhCP1lZhgagvE9rzl82RYnH0PVG5h6yPu3YlQV6HWiPVjr6txD/EYSc kerYByUla/UKwm6P0VTWvN46dm8sunBCflCCZpakzLHmMyW8Lf+kDqO/g+G+tJH9 3ScRB41/QnkK/0yDsnFBfmaDvhT35Q/al1OYv0cLtCO+krGZAoruzm+xTboP6H5J YcY8lTMLjM8KpXPSgKNygKC7EOSEUIdlQS++x3Lz7SHhQnbCJCF5EwsLmFt2FINO i8ecEK5vyRnlsKCYKsUOTvByk5ww57hDPKp2Nr2MKKpd0qCjug2o02FCauL6Nj+R hVEcvCOADVIJeMWhbiGjEFCjSw== -----END CERTIFICATE-----Generated at Fri Sep 25 07:30:26 2026 by rpki-client