$ rpki-client -vvvf rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft File: B9hag3mLsXa8AxU9UQprljJs9WQ.mft (raw, json) Hash identifier: lCv/SjfnigUqOwG0zeUODzPhligdAOQpvnxgRnHxxwA= Subject key identifier: B5:D6:96:34:5E:E2:7F:11:31:65:CF:43:06:65:E0:2E:6E:F0:5A:A5 Authority key identifier: 07:D8:5A:83:79:8B:B1:76:BC:03:15:3D:51:0A:6B:96:32:6C:F5:64 Certificate issuer: /CN=A9123600/serialNumber=07D85A83798BB176BC03153D510A6B96326CF564 Certificate serial: 025C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B9hag3mLsXa8AxU9UQprljJs9WQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft Manifest number: 0255 Signing time: Wed 23 Sep 2026 02:08:49 +0000 Manifest this update: Wed 23 Sep 2026 02:08:48 +0000 Manifest next update: Wed 30 Sep 2026 02:08:48 +0000 Files and hashes: 1: B9hag3mLsXa8AxU9UQprljJs9WQ.crl (hash: On1XPrto2L6B7sKmfYZFZnkGWOVpWffKr4l9U5MDgKg=) 2: 51BD88882B6011EEB0127E84C4F9AE02.roa (hash: bopl7UbV+kveTfFUss6QZfXwjAk3OnM3ua/GuA1yHJQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.crl rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B9hag3mLsXa8AxU9UQprljJs9WQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 02:08:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 604 (0x25c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123600, serialNumber=07D85A83798BB176BC03153D510A6B96326CF564 Validity Not Before: Sep 23 02:08:48 2026 GMT Not After : Sep 30 02:08:48 2026 GMT Subject: CN=6ab334b1-4971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:94:9d:f8:79:52:99:4d:e2:e2:4f:ae:99:13: fc:d0:43:04:a9:85:03:a1:ee:c1:33:4a:c0:e9:71: a4:18:df:7d:78:27:cd:79:80:c3:b9:53:4e:dc:d5: 48:1d:92:17:d7:88:fc:a2:39:df:a8:05:cf:4a:2e: fc:fe:90:58:dc:60:20:f9:f0:1a:e4:b5:34:eb:be: aa:bc:f5:78:7d:2d:a5:48:04:73:30:78:46:69:3c: 28:4e:2f:a8:44:9d:a6:79:ae:5b:d4:9a:fb:75:01: 48:1c:e1:56:3b:cb:f1:27:b6:02:5d:6b:82:93:bb: 3d:b4:1d:bd:77:f8:bc:01:ea:c5:74:37:61:c4:39: a3:70:65:63:2a:b1:a9:b5:6d:75:45:dc:80:96:ae: 7b:0d:6c:62:94:9c:60:bd:1b:ba:34:a4:b7:63:4f: 98:b3:d1:3b:a4:be:27:42:89:a0:bf:b9:c6:56:e9: 4c:20:f7:b9:6f:7f:a9:d6:3e:c4:d8:81:be:48:2e: bb:dc:42:7b:dd:95:54:86:02:46:93:59:0d:e3:de: ea:b5:8a:ae:2f:4a:59:48:42:a9:16:f0:c2:1c:3d: 3f:42:e4:0d:fb:ee:6d:75:d5:f9:05:d8:07:bd:4a: f8:41:44:b0:04:a2:8b:61:a0:85:fe:fe:c5:ef:08: 73:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:D6:96:34:5E:E2:7F:11:31:65:CF:43:06:65:E0:2E:6E:F0:5A:A5 X509v3 Authority Key Identifier: keyid:07:D8:5A:83:79:8B:B1:76:BC:03:15:3D:51:0A:6B:96:32:6C:F5:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B9hag3mLsXa8AxU9UQprljJs9WQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:66:ef:d2:0a:f4:d6:b0:10:83:a4:08:63:07:02:a6:0d:ef: ac:fb:b7:06:23:ad:0f:fd:18:2b:34:9b:95:08:19:dc:c5:71: 05:44:23:24:89:c9:9f:6a:4c:c1:82:41:a1:89:c5:10:07:0b: 4f:85:6a:02:d4:8f:18:36:a7:09:d3:03:c3:20:5e:91:15:6b: 6c:08:4a:f6:6e:e4:f8:23:c2:a9:68:6c:83:36:9d:bf:bb:e5: c7:c3:76:3e:ad:5b:d1:e5:80:83:5f:b9:77:bc:ac:3b:b1:13: 69:cb:52:8a:dc:6c:82:68:c6:7a:bf:3a:87:d5:57:69:2a:d6: 30:c4:19:7f:c1:ec:d2:4a:02:2a:c7:8a:f2:fc:7a:07:13:f3: 7b:ae:0f:d1:29:1d:97:45:8c:5d:97:03:d0:f7:38:5e:ca:7b: ec:31:5f:95:d3:a9:4b:1e:f5:cd:69:fe:78:e5:6b:55:00:fb: bc:5f:44:6a:a3:aa:6d:b7:51:12:b9:3a:57:9c:ed:ca:5a:63: 9b:11:cf:d8:1a:20:fc:ec:28:67:1b:27:85:d7:8c:2e:2d:77: 9a:77:25:71:0c:9f:b5:61:ae:e0:f8:0b:88:48:59:4d:06:17: 55:0a:cf:8c:ad:13:97:ce:e3:92:95:5d:18:f4:d0:a5:43:69: de:fa:67:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM2MDAxMTAvBgNVBAUTKDA3RDg1QTgzNzk4QkIxNzZCQzAzMTUzRDUxMEE2Qjk2 MzI2Q0Y1NjQwHhcNMjYwOTIzMDIwODQ4WhcNMjYwOTMwMDIwODQ4WjAYMRYwFAYD VQQDEw02YWIzMzRiMS00OTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3pSd+HlSmU3i4k+umRP80EMEqYUDoe7BM0rA6XGkGN99eCfNeYDDuVNO3NVI HZIX14j8ojnfqAXPSi78/pBY3GAg+fAa5LU0676qvPV4fS2lSARzMHhGaTwoTi+o RJ2mea5b1Jr7dQFIHOFWO8vxJ7YCXWuCk7s9tB29d/i8AerFdDdhxDmjcGVjKrGp tW11RdyAlq57DWxilJxgvRu6NKS3Y0+Ys9E7pL4nQomgv7nGVulMIPe5b3+p1j7E 2IG+SC673EJ73ZVUhgJGk1kN497qtYquL0pZSEKpFvDCHD0/QuQN++5tddX5BdgH vUr4QUSwBKKLYaCF/v7F7whzAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLXWljRe 4n8RMWXPQwZl4C5u8FqlMB8GA1UdIwQYMBaAFAfYWoN5i7F2vAMVPVEKa5YybPVk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzYwMC9BQzk2NEY1ODJC MkMxMUVFOEE1M0QzMTRDNEY5QUUwMi9COWhhZzNtTHNYYThBeFU5VVFwcmxqSnM5 V1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I5aGFnM21Mc1hhOEF4VTlVUXBybGpKczlXUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzYwMC9BQzk2NEY1ODJCMkMxMUVFOEE1M0QzMTRDNEY5QUUwMi9COWhhZzNtTHNY YThBeFU5VVFwcmxqSnM5V1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyGbv0gr01rAQg6QIYwcCpg3vrPu3BiOtD/0YKzSblQgZ3MVxBUQjJInJn2pM wYJBoYnFEAcLT4VqAtSPGDanCdMDwyBekRVrbAhK9m7k+CPCqWhsgzadv7vlx8N2 Pq1b0eWAg1+5d7ysO7ETactSitxsgmjGer86h9VXaSrWMMQZf8Hs0koCKseK8vx6 BxPze64P0Skdl0WMXZcD0Pc4Xsp77DFfldOpSx71zWn+eOVrVQD7vF9EaqOqbbdR Erk6V5ztylpjmxHP2Bog/OwoZxsnhdeMLi13mnclcQyftWGu4PgLiEhZTQYXVQrP jK0Tl87jkpVdGPTQpUNp3vpn0Q== -----END CERTIFICATE-----Generated at Wed Sep 23 21:39:40 2026 by rpki-client