$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.mft File: d0DODmzQVMQy3kbUw-2hT2Qv2hQ.mft (raw, json) Hash identifier: 4YfcvrF536KE9Ico68srH/7CunWI0JbM8VDFl+Ixmxw= Subject key identifier: B0:D7:8D:2D:52:A7:20:3E:95:B9:F1:C1:08:E2:8A:BA:19:D6:1F:65 Authority key identifier: 77:40:CE:0E:6C:D0:54:C4:32:DE:46:D4:C3:ED:A1:4F:64:2F:DA:14 Certificate issuer: /CN=A9120AC1/serialNumber=7740CE0E6CD054C432DE46D4C3EDA14F642FDA14 Certificate serial: 05BE Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.mft Manifest number: 05AA Signing time: Tue 22 Sep 2026 22:50:01 +0000 Manifest this update: Tue 22 Sep 2026 22:50:01 +0000 Manifest next update: Tue 29 Sep 2026 22:50:01 +0000 Files and hashes: 1: d0DODmzQVMQy3kbUw-2hT2Qv2hQ.crl (hash: Rx669xQEow9KUJZqdM0QgEVPbCoCyGXSB3ivgTSLPUc=) 2: 9BBDF5DEFFD611EF9AE4D35EC4F9AE02.roa (hash: Z6zpJNeDiRoumvX5lCIDf2X6SZzpmpEYlhnAJ6yadjo=) 3: EBF4C0063C8811EC889B9D78C4F9AE02.roa (hash: xL18VcZ56ntQg06dxu8mPMsho0DT/fe8AiSvaUT/7NM=) 4: B5AC177E3E0411ECABD9496CC4F9AE02.roa (hash: yeDD3azucqTXwa0Gdb8W5tD9O2qrp+zwpH6Y+zEBWbM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.crl rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 22:50:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1470 (0x5be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120AC1, serialNumber=7740CE0E6CD054C432DE46D4C3EDA14F642FDA14 Validity Not Before: Sep 22 22:50:01 2026 GMT Not After : Sep 29 22:50:01 2026 GMT Subject: CN=6ab30619-6980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d7:64:37:a4:51:17:eb:36:a0:13:8f:d7:67: 87:66:f5:2f:c3:41:c9:ed:40:68:33:f9:f9:2b:32: 7d:98:76:a3:6e:67:04:8b:77:c8:97:6d:c1:a5:06: f0:ed:b9:a1:95:28:21:d7:91:c6:63:a9:92:9d:97: 99:6a:f0:ba:fe:7a:e0:45:d2:f5:19:25:69:4b:64: 4a:df:17:a7:09:4b:4b:33:91:7a:45:9c:45:04:f3: 29:6c:c3:cb:87:29:0f:9b:46:13:df:5c:a6:23:40: 69:b7:28:0d:ec:d9:c9:77:08:ca:bb:5d:b4:76:76: 57:af:ca:e7:8b:eb:bd:fb:cf:00:6d:0c:38:94:8f: 35:d0:ae:a6:73:60:87:f7:64:35:22:fc:f6:2b:f7: a7:ba:97:a8:3d:8e:88:05:f4:c8:66:6b:39:cd:83: 1c:4b:9a:4b:cd:f0:43:40:70:05:75:5a:7c:7d:e2: ba:72:69:be:6e:73:89:54:e6:a9:69:1f:55:d4:a8: cc:a9:21:39:7d:54:06:51:02:5c:50:81:76:04:9d: 50:38:da:7d:d4:08:74:d8:eb:e5:b6:4f:d8:f6:66: f2:d1:4c:30:fb:50:b4:05:ca:14:46:6b:62:e0:c1: f0:84:5a:c2:6d:65:02:a7:db:dc:e7:39:8f:b9:81: 09:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:D7:8D:2D:52:A7:20:3E:95:B9:F1:C1:08:E2:8A:BA:19:D6:1F:65 X509v3 Authority Key Identifier: keyid:77:40:CE:0E:6C:D0:54:C4:32:DE:46:D4:C3:ED:A1:4F:64:2F:DA:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:91:b3:2a:c2:6c:9d:d1:0e:8b:92:63:c4:42:4b:6d:ff:44: d7:88:83:7a:86:e4:68:1b:98:11:ba:0c:d6:37:c6:57:32:aa: 24:df:36:85:32:57:e7:5f:3d:78:e4:fc:a9:c2:d5:63:16:2c: 11:09:d7:f0:4e:85:a1:d8:2a:81:c3:13:f4:48:fd:25:75:d6: ce:99:03:9d:fd:af:c4:48:6d:7b:05:b4:8b:8a:fa:11:3b:c3: 59:fc:93:47:9b:bc:23:cc:b6:e8:4f:7f:11:a7:e7:d3:88:fd: d7:30:6a:02:af:50:2b:80:3e:76:d5:13:fd:13:65:c2:b7:4b: 74:39:33:43:10:f6:f9:23:46:7d:96:d4:2f:29:1a:d7:3b:cb: ae:87:54:d8:44:09:98:8d:01:c2:25:7a:b8:36:ac:86:59:ae: 60:02:0e:88:40:81:c0:fd:e5:6e:14:3c:0e:37:0e:39:12:6e: 58:38:29:d9:9d:01:c7:a5:02:88:ef:f6:3a:5f:15:b6:14:02: 69:70:ab:e9:1f:a2:a3:5d:50:be:3f:68:84:33:e5:39:c1:84: a6:08:fd:11:89:ec:16:64:c0:0c:e3:f4:6d:58:35:99:99:67: 10:bd:23:6c:44:92:61:a8:1c:2d:c4:e4:88:83:ae:b1:52:7b: 8c:1a:47:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBBQzExMTAvBgNVBAUTKDc3NDBDRTBFNkNEMDU0QzQzMkRFNDZENEMzRURBMTRG NjQyRkRBMTQwHhcNMjYwOTIyMjI1MDAxWhcNMjYwOTI5MjI1MDAxWjAYMRYwFAYD VQQDEw02YWIzMDYxOS02OTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ddkN6RRF+s2oBOP12eHZvUvw0HJ7UBoM/n5KzJ9mHajbmcEi3fIl23BpQbw 7bmhlSgh15HGY6mSnZeZavC6/nrgRdL1GSVpS2RK3xenCUtLM5F6RZxFBPMpbMPL hykPm0YT31ymI0BptygN7NnJdwjKu120dnZXr8rni+u9+88AbQw4lI810K6mc2CH 92Q1Ivz2K/enupeoPY6IBfTIZms5zYMcS5pLzfBDQHAFdVp8feK6cmm+bnOJVOap aR9V1KjMqSE5fVQGUQJcUIF2BJ1QONp91Ah02Ovltk/Y9mby0Uww+1C0BcoURmti 4MHwhFrCbWUCp9vc5zmPuYEJ1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLDXjS1S pyA+lbnxwQjiiroZ1h9lMB8GA1UdIwQYMBaAFHdAzg5s0FTEMt5G1MPtoU9kL9oU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEFDMS8zNTkwNjVBNjMw OTcxMUVDQjI4NUE2NEJDNEY5QUUwMi9kMERPRG16UVZNUXkza2JVdy0yaFQyUXYy aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2QwRE9EbXpRVk1ReTNrYlV3LTJoVDJRdjJoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEFDMS8zNTkwNjVBNjMwOTcxMUVDQjI4NUE2NEJDNEY5QUUwMi9kMERPRG16UVZN UXkza2JVdy0yaFQyUXYyaFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhpGzKsJsndEOi5JjxEJLbf9E14iDeobkaBuYEboM1jfGVzKqJN82hTJX5189 eOT8qcLVYxYsEQnX8E6FodgqgcMT9Ej9JXXWzpkDnf2vxEhtewW0i4r6ETvDWfyT R5u8I8y26E9/Eafn04j91zBqAq9QK4A+dtUT/RNlwrdLdDkzQxD2+SNGfZbULyka 1zvLrodU2EQJmI0BwiV6uDashlmuYAIOiECBwP3lbhQ8DjcOORJuWDgp2Z0Bx6UC iO/2Ol8VthQCaXCr6R+io11Qvj9ohDPlOcGEpgj9EYnsFmTADOP0bVg1mZlnEL0j bESSYagcLcTkiIOusVJ7jBpHoQ== -----END CERTIFICATE-----Generated at Thu Sep 24 23:00:13 2026 by rpki-client