$ rpki-client -vvvf rpki.apnic.net/member_repository/A9122796/B4C8D8269E0111F1A1C9CC584811F970/c-CQ73mbZ1mwPSJR3ES3rANTpr0.mft File: c-CQ73mbZ1mwPSJR3ES3rANTpr0.mft (raw, json) Hash identifier: KgbA+xDHiPak9sZ4kBwUd695lpXMYr+fhKCY0iRCbl0= Subject key identifier: 8E:42:45:01:2A:32:04:70:8C:65:7B:A0:DC:3D:B8:E5:75:8A:8E:1F Authority key identifier: 73:E0:90:EF:79:9B:67:59:B0:3D:22:51:DC:44:B7:AC:03:53:A6:BD Certificate issuer: /CN=A9122796/serialNumber=73E090EF799B6759B03D2251DC44B7AC0353A6BD Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c-CQ73mbZ1mwPSJR3ES3rANTpr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122796/B4C8D8269E0111F1A1C9CC584811F970/c-CQ73mbZ1mwPSJR3ES3rANTpr0.mft Manifest number: 14 Signing time: Wed 23 Sep 2026 08:49:23 +0000 Manifest this update: Wed 23 Sep 2026 08:49:23 +0000 Manifest next update: Wed 30 Sep 2026 08:49:23 +0000 Files and hashes: 1: c-CQ73mbZ1mwPSJR3ES3rANTpr0.crl (hash: gM+dPIXLYnqcmxC5aQVm+oefN7GBKLIJjQ3izypeMXs=) 2: 2AE7F0209E0A11F1A6A4064D4C11F970.roa (hash: Q55ns3qgHzfdd9tA6C9B2IGZDy2kja6eWDaQp3SdxZ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122796/B4C8D8269E0111F1A1C9CC584811F970/c-CQ73mbZ1mwPSJR3ES3rANTpr0.crl rsync://rpki.apnic.net/member_repository/A9122796/B4C8D8269E0111F1A1C9CC584811F970/c-CQ73mbZ1mwPSJR3ES3rANTpr0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c-CQ73mbZ1mwPSJR3ES3rANTpr0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:49:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122796, serialNumber=73E090EF799B6759B03D2251DC44B7AC0353A6BD Validity Not Before: Sep 23 08:49:23 2026 GMT Not After : Sep 30 08:49:23 2026 GMT Subject: CN=6ab39293-c8af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8c:91:4b:3b:c8:72:16:c6:76:6e:7c:6d:57: 55:00:0f:69:ab:4c:c5:6a:68:d4:48:38:fe:f3:7c: b3:d8:09:a9:0e:74:5a:e1:a3:76:41:9d:f3:d2:e7: a4:dd:c5:97:5d:f6:95:0c:7e:b2:55:19:16:4a:aa: f3:b4:b9:fd:29:69:72:8f:21:e5:31:09:71:ab:c2: b0:7a:d7:28:70:4b:7e:58:8e:f1:ba:ef:41:dd:3a: 2e:36:5b:e6:fd:89:e0:75:b2:34:dd:65:98:14:12: ab:26:82:60:84:43:0d:ae:54:50:46:5c:67:b2:88: cc:d5:f7:52:dd:4b:dc:2e:91:10:09:4c:e4:90:a3: 93:3c:d4:6f:3c:9e:cf:40:42:5a:75:5f:5a:95:f9: 0c:9d:3f:60:53:53:39:b5:c1:10:5d:98:d1:8e:56: 8c:fc:1a:6f:4c:75:4f:00:45:1e:32:f2:6a:7a:fb: 5a:50:d8:c8:eb:d3:79:df:ea:43:b3:e1:aa:2b:60: 98:c2:3a:a6:60:b4:ef:22:52:db:cc:34:e4:99:d7: a8:b1:4f:b6:ea:51:a4:7c:7f:cc:4d:d4:0e:54:bb: 4b:88:91:eb:57:d9:e6:ec:1d:e0:55:e9:34:ab:d1: 4e:35:ba:eb:79:89:91:92:21:79:41:b6:3b:10:cf: 26:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:42:45:01:2A:32:04:70:8C:65:7B:A0:DC:3D:B8:E5:75:8A:8E:1F X509v3 Authority Key Identifier: keyid:73:E0:90:EF:79:9B:67:59:B0:3D:22:51:DC:44:B7:AC:03:53:A6:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122796/B4C8D8269E0111F1A1C9CC584811F970/c-CQ73mbZ1mwPSJR3ES3rANTpr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c-CQ73mbZ1mwPSJR3ES3rANTpr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122796/B4C8D8269E0111F1A1C9CC584811F970/c-CQ73mbZ1mwPSJR3ES3rANTpr0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:89:74:34:1f:fc:bf:d8:dd:11:b9:4b:11:4a:e7:1d:4f:0b: 57:f7:c7:73:e4:8f:34:64:07:2d:42:eb:c7:29:47:5c:80:70: ba:eb:22:3d:9d:a9:23:f4:83:9d:30:3d:91:41:dd:c7:a3:3b: ed:bb:45:34:9f:46:ce:f4:e9:d6:dd:b9:89:98:62:79:08:6e: 8a:e8:26:56:3b:26:76:d6:f3:3c:36:d8:59:0a:90:de:c6:68: ed:b9:21:8d:a8:73:00:96:26:72:8e:07:a4:3f:ff:0a:82:3e: 7d:f2:b5:65:f3:01:e0:da:5c:71:e0:25:6f:18:ec:14:4a:da: 4a:ba:17:7d:c1:d8:0d:fe:71:b7:17:6e:49:57:f1:61:77:cc: 97:eb:ad:28:a0:01:73:3c:34:9c:0a:e0:1d:45:79:f9:32:73: f1:06:c5:f9:68:df:82:37:58:2a:4f:8b:f4:c3:d4:c6:f0:05: 03:1c:dc:18:1b:68:b7:ae:6a:d4:eb:ab:24:e5:c9:53:2c:46: fc:66:78:be:e8:3c:d4:c5:96:47:fe:2e:e6:d2:c9:a3:cf:aa: fc:02:0e:8e:07:e4:51:77:15:bd:ff:1a:a5:f2:49:c1:af:1f: 20:49:d5:7c:68:0c:43:6c:ed:b5:2e:7b:b3:ee:c8:69:6e:74: 4b:2e:b9:36 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy Mjc5NjExMC8GA1UEBRMoNzNFMDkwRUY3OTlCNjc1OUIwM0QyMjUxREM0NEI3QUMw MzUzQTZCRDAeFw0yNjA5MjMwODQ5MjNaFw0yNjA5MzAwODQ5MjNaMBgxFjAUBgNV BAMTDTZhYjM5MjkzLWM4YWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCejJFLO8hyFsZ2bnxtV1UAD2mrTMVqaNRIOP7zfLPYCakOdFrho3ZBnfPS56Td xZdd9pUMfrJVGRZKqvO0uf0paXKPIeUxCXGrwrB61yhwS35YjvG670HdOi42W+b9 ieB1sjTdZZgUEqsmgmCEQw2uVFBGXGeyiMzV91LdS9wukRAJTOSQo5M81G88ns9A Qlp1X1qV+QydP2BTUzm1wRBdmNGOVoz8Gm9MdU8ARR4y8mp6+1pQ2Mjr03nf6kOz 4aorYJjCOqZgtO8iUtvMNOSZ16ixT7bqUaR8f8xN1A5Uu0uIketX2ebsHeBV6TSr 0U41uut5iZGSIXlBtjsQzyZvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUjkJFASoy BHCMZXug3D245XWKjh8wHwYDVR0jBBgwFoAUc+CQ73mbZ1mwPSJR3ES3rANTpr0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIyNzk2L0I0QzhEODI2OUUw MTExRjFBMUM5Q0M1ODQ4MTFGOTcwL2MtQ1E3M21iWjFtd1BTSlIzRVMzckFOVHBy MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYy1DUTczbWJaMW13UFNKUjNFUzNyQU5UcHIwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIy Nzk2L0I0QzhEODI2OUUwMTExRjFBMUM5Q0M1ODQ4MTFGOTcwL2MtQ1E3M21iWjFt d1BTSlIzRVMzckFOVHByMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQALiXQ0H/y/2N0RuUsRSucdTwtX98dz5I80ZActQuvHKUdcgHC66yI9nakj9IOd MD2RQd3Hozvtu0U0n0bO9OnW3bmJmGJ5CG6K6CZWOyZ21vM8NthZCpDexmjtuSGN qHMAliZyjgekP/8Kgj598rVl8wHg2lxx4CVvGOwUStpKuhd9wdgN/nG3F25JV/Fh d8yX660ooAFzPDScCuAdRXn5MnPxBsX5aN+CN1gqT4v0w9TG8AUDHNwYG2i3rmrU 66sk5clTLEb8Zni+6DzUxZZH/i7m0smjz6r8Ag6OB+RRdxW9/xql8knBrx8gSdV8 aAxDbO21Lnuz7shpbnRLLrk2 -----END CERTIFICATE-----Generated at Thu Sep 24 13:03:22 2026 by rpki-client