$ rpki-client -vvvf rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft File: lML0ajLRB3XhZJuiUPaX_0esBj0.mft (raw, json) Hash identifier: CTfYdWdWdIsB0ZcdpmwTVh9z8AeUQKFpNGyIxn982Uw= Subject key identifier: 70:27:C8:71:06:81:A6:65:6D:71:85:0A:5B:83:41:C6:2F:39:5D:C5 Authority key identifier: 94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D Certificate issuer: /CN=A9121071/serialNumber=94C2F46A32D10775E1649BA250F697FF47AC063D Certificate serial: 02F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft Manifest number: 02D9 Signing time: Wed 23 Sep 2026 01:13:36 +0000 Manifest this update: Wed 23 Sep 2026 01:13:35 +0000 Manifest next update: Wed 30 Sep 2026 01:13:35 +0000 Files and hashes: 1: lML0ajLRB3XhZJuiUPaX_0esBj0.crl (hash: JdBo/vlOeLc7H3s7LMRtPbqoDqd9Dtthm4QU7vUF6Ok=) 2: 42C28C36A80711F0A622350DC4F9AE02.roa (hash: BpCSL66Kcxa7BlGBFMkmM3b3I1bmGIXPHueAxzsNq50=) 3: M8jBNirzp-FPjI2dNrVehbsa11Q.asa (hash: ZDZzGQIxLYumQFcobn7nkzlTWAEhcjsopzajkoxdG2w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.crl rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 01:13:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 755 (0x2f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121071, serialNumber=94C2F46A32D10775E1649BA250F697FF47AC063D Validity Not Before: Sep 23 01:13:35 2026 GMT Not After : Sep 30 01:13:35 2026 GMT Subject: CN=6ab327c0-7c85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:57:8c:1c:12:72:60:3b:a6:1b:66:bd:41:f3: 59:8a:44:30:61:65:50:7f:13:f6:92:b0:54:6c:65: 38:ee:0c:ea:ae:d2:86:3f:83:16:00:76:de:c1:7a: 5b:e0:50:a7:20:90:94:07:93:a4:10:2a:71:4a:59: 8a:1a:7b:ea:30:34:6a:83:b4:c8:c1:d9:14:3a:7b: c9:4d:2f:d1:82:2f:04:e6:25:f2:75:eb:d3:76:bc: 2f:e9:3a:0f:e8:e8:54:9b:a9:51:65:8a:54:2a:c2: ae:2e:4f:19:a1:9a:fb:a5:fd:43:51:aa:2c:fd:ca: 34:1c:4e:a9:6e:58:48:bf:31:fd:53:73:c1:a4:64: 9c:74:d5:ac:dc:83:97:6b:67:6f:38:d2:88:67:a1: 62:bf:b3:85:95:7a:f0:0d:73:9a:bd:dd:1f:51:16: 62:ee:18:2b:00:2c:eb:58:84:e8:88:6f:16:44:93: 04:a7:3a:e8:a4:4d:b7:ca:41:81:85:8c:32:cc:8b: 92:ba:48:5a:7a:d8:dd:4d:f8:e3:ce:ae:fe:9f:eb: 59:76:ad:16:32:18:15:19:af:8a:f7:c8:fe:b7:48: f4:89:00:c9:a0:58:b5:64:7f:a8:63:e4:fc:2b:05: 7e:c8:4a:c3:b0:aa:24:3c:3a:8a:6b:8c:14:c3:d3: 17:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:27:C8:71:06:81:A6:65:6D:71:85:0A:5B:83:41:C6:2F:39:5D:C5 X509v3 Authority Key Identifier: keyid:94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:67:fa:06:2b:d3:0a:6f:01:98:77:58:2b:58:65:c5:81:3c: 32:1a:ec:d2:e3:0a:20:c6:c8:23:01:55:1f:ea:33:b8:80:80: 16:86:b3:1a:7e:61:41:22:dc:f6:13:85:ce:00:14:3b:7e:69: 62:ad:0c:af:2e:20:7b:70:5b:89:09:9b:6a:05:89:fe:58:4f: 8b:40:80:95:bb:de:94:b4:c7:63:af:72:37:1f:99:7b:92:ff: ef:a3:32:79:fc:0d:12:57:26:69:21:da:4f:33:de:36:7d:24: b6:ac:ee:9b:d9:0d:f3:22:f8:8b:7c:7a:cb:c0:1e:4b:5f:b4: 54:44:85:b8:3c:89:30:e3:93:2e:7b:01:25:cf:ed:6b:53:ab: 36:25:75:a5:9b:94:4f:17:04:af:89:d8:48:de:7d:8b:bc:ad: c7:99:e3:17:0c:0f:34:5a:63:90:c9:ca:9e:f3:b2:ea:78:fc: 77:f6:bb:e8:2f:52:be:e1:c3:9b:f3:c4:cf:1d:d1:70:6b:48: dc:6f:cc:b6:ff:d1:c1:b3:08:73:ca:74:af:6b:cf:d9:a0:92: 83:16:92:f8:b0:4e:bd:c6:f0:c9:89:78:9b:9b:53:40:f3:0a: d6:ef:db:d4:c4:89:aa:8a:99:17:06:8a:21:c3:a0:65:c3:42: 8d:ea:ee:34 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAvMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjEwNzExMTAvBgNVBAUTKDk0QzJGNDZBMzJEMTA3NzVFMTY0OUJBMjUwRjY5N0ZG NDdBQzA2M0QwHhcNMjYwOTIzMDExMzM1WhcNMjYwOTMwMDExMzM1WjAYMRYwFAYD VQQDEw02YWIzMjdjMC03Yzg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA11eMHBJyYDumG2a9QfNZikQwYWVQfxP2krBUbGU47gzqrtKGP4MWAHbewXpb 4FCnIJCUB5OkECpxSlmKGnvqMDRqg7TIwdkUOnvJTS/Rgi8E5iXydevTdrwv6ToP 6OhUm6lRZYpUKsKuLk8ZoZr7pf1DUaos/co0HE6pblhIvzH9U3PBpGScdNWs3IOX a2dvONKIZ6Fiv7OFlXrwDXOavd0fURZi7hgrACzrWIToiG8WRJMEpzropE23ykGB hYwyzIuSukhaetjdTfjjzq7+n+tZdq0WMhgVGa+K98j+t0j0iQDJoFi1ZH+oY+T8 KwV+yErDsKokPDqKa4wUw9MXtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHAnyHEG gaZlbXGFCluDQcYvOV3FMB8GA1UdIwQYMBaAFJTC9Goy0Qd14WSbolD2l/9HrAY9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTA3MS8yRjBGN0E0ODg2 QjYxMUVEQUEzQjJCMzNDNEY5QUUwMi9sTUwwYWpMUkIzWGhaSnVpVVBhWF8wZXNC ajAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xNTDBhakxSQjNYaFpKdWlVUGFYXzBlc0JqMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTA3MS8yRjBGN0E0ODg2QjYxMUVEQUEzQjJCMzNDNEY5QUUwMi9sTUwwYWpMUkIz WGhaSnVpVVBhWF8wZXNCajAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ2f6BivTCm8BmHdYK1hlxYE8Mhrs0uMKIMbIIwFVH+ozuICAFoazGn5hQSLc 9hOFzgAUO35pYq0Mry4ge3BbiQmbagWJ/lhPi0CAlbvelLTHY69yNx+Ze5L/76My efwNElcmaSHaTzPeNn0ktqzum9kN8yL4i3x6y8AeS1+0VESFuDyJMOOTLnsBJc/t a1OrNiV1pZuUTxcEr4nYSN59i7ytx5njFwwPNFpjkMnKnvOy6nj8d/a76C9SvuHD m/PEzx3RcGtI3G/Mtv/RwbMIc8p0r2vP2aCSgxaS+LBOvcbwyYl4m5tTQPMK1u/b 1MSJqoqZFwaKIcOgZcNCjeruNA== -----END CERTIFICATE-----Generated at Thu Sep 24 12:18:22 2026 by rpki-client