$ rpki-client -vvvf rpki.apnic.net/member_repository/A9125AAB/0C7AC5F2A7E911F1B6AD1A4BA6EE528E/SAzQQM6QucENq4TppH0Bd7fEO8w.mft File: SAzQQM6QucENq4TppH0Bd7fEO8w.mft (raw, json) Hash identifier: GL7zIoIHdTnC4ulNzpEakF4FiUKGXAErChqM8qRfMdo= Subject key identifier: 74:7F:07:D4:01:AB:2D:EE:83:41:34:DA:40:D4:27:AB:1A:C1:D1:49 Authority key identifier: 48:0C:D0:40:CE:90:B9:C1:0D:AB:84:E9:A4:7D:01:77:B7:C4:3B:CC Certificate issuer: /CN=A9125AAB/serialNumber=480CD040CE90B9C10DAB84E9A47D0177B7C43BCC Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SAzQQM6QucENq4TppH0Bd7fEO8w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125AAB/0C7AC5F2A7E911F1B6AD1A4BA6EE528E/SAzQQM6QucENq4TppH0Bd7fEO8w.mft Manifest number: 0E Signing time: Wed 23 Sep 2026 08:54:43 +0000 Manifest this update: Wed 23 Sep 2026 08:54:43 +0000 Manifest next update: Wed 30 Sep 2026 08:54:43 +0000 Files and hashes: 1: SAzQQM6QucENq4TppH0Bd7fEO8w.crl (hash: +0yMWdRh8oHBnIuZTvcwd2l2gKwyKDhUc4d+8XFkexE=) 2: 371683BAA81511F1A2613F346C11F970.roa (hash: ZvobOfSHvKfkS0iZ8xobG9gfo4X0d2AGnndJbzDUNME=) 3: 3CD5799CA81411F1ACF783166C11F970.roa (hash: k73Ngvm1ezkdKpCRSRtbpY3GE9dGVk7FjtJUuQJyN5Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125AAB/0C7AC5F2A7E911F1B6AD1A4BA6EE528E/SAzQQM6QucENq4TppH0Bd7fEO8w.crl rsync://rpki.apnic.net/member_repository/A9125AAB/0C7AC5F2A7E911F1B6AD1A4BA6EE528E/SAzQQM6QucENq4TppH0Bd7fEO8w.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SAzQQM6QucENq4TppH0Bd7fEO8w.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:54:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125AAB, serialNumber=480CD040CE90B9C10DAB84E9A47D0177B7C43BCC Validity Not Before: Sep 23 08:54:43 2026 GMT Not After : Sep 30 08:54:43 2026 GMT Subject: CN=6ab393d3-799e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:17:7e:3d:ad:9b:91:00:aa:d0:2b:f4:a1:c5: c3:69:bf:99:20:16:21:c0:1b:f1:fb:cf:e7:66:3d: c2:a0:4a:03:45:29:d0:08:ae:bf:53:32:44:ff:a5: 74:83:ac:40:fe:0b:2c:f5:da:32:68:29:d2:13:91: 5a:14:a1:e8:71:c9:6f:32:b1:4f:d4:8e:e1:26:00: f9:1b:f5:86:db:10:fc:0b:c3:7d:b9:db:52:7d:16: 73:e9:f1:68:50:2f:99:60:ad:54:3e:1e:4a:29:84: 15:a9:7f:77:c3:ba:17:ce:08:ec:f8:a5:7b:ee:4f: 39:b8:d2:92:f7:f4:cb:ff:05:72:bf:d8:35:15:84: 7b:55:25:cf:ff:ff:41:3f:f3:0f:b2:c1:6a:d3:59: 8b:e3:07:41:24:5b:68:57:8a:d6:b4:9a:88:5b:9e: 53:ac:8f:9b:c0:2e:8b:51:9e:64:85:0b:48:e6:b6: 7e:59:8d:97:45:ad:d7:87:b8:3a:04:2a:d0:b1:2d: d3:ad:59:dd:ee:2c:9d:c3:94:82:b9:4c:bd:d6:40: c8:11:b3:c9:bb:ef:bc:ab:f7:fe:f1:49:0a:ed:fd: 68:4c:f6:49:5f:93:ac:de:5a:6d:90:f1:12:e5:f9: dd:43:6d:d0:e9:40:96:b9:4a:b5:eb:cf:16:bd:45: f8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:7F:07:D4:01:AB:2D:EE:83:41:34:DA:40:D4:27:AB:1A:C1:D1:49 X509v3 Authority Key Identifier: keyid:48:0C:D0:40:CE:90:B9:C1:0D:AB:84:E9:A4:7D:01:77:B7:C4:3B:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125AAB/0C7AC5F2A7E911F1B6AD1A4BA6EE528E/SAzQQM6QucENq4TppH0Bd7fEO8w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SAzQQM6QucENq4TppH0Bd7fEO8w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125AAB/0C7AC5F2A7E911F1B6AD1A4BA6EE528E/SAzQQM6QucENq4TppH0Bd7fEO8w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:e4:63:d9:b1:bf:de:22:4d:c8:40:2a:21:7e:26:97:a1:77: 56:6d:a0:bf:04:a4:9b:f9:51:88:d5:9c:33:f0:27:77:74:6f: 0c:0a:13:8e:fa:fa:a5:e8:93:48:fe:62:1b:ee:8b:72:65:86: 97:67:b8:94:e0:0f:b9:4d:48:91:de:e7:30:7c:11:01:d1:55: d3:ba:35:56:ec:71:20:13:26:f8:d5:16:5b:53:cf:1f:41:27: 2b:1c:22:f8:5f:12:08:be:56:b0:fe:81:63:eb:1c:cc:ea:71: 77:71:fd:b9:ad:5e:4a:07:44:14:26:0d:cc:b7:9b:be:69:f0: 57:eb:85:9f:39:8c:85:a2:4e:37:94:fd:a8:48:b7:fc:72:5a: ef:30:64:a0:04:0f:bb:2b:34:bc:15:8d:c4:93:b9:65:91:a1: ea:cb:9d:e7:a7:42:d2:1e:f4:70:2d:d8:68:92:52:93:3a:39: 17:c2:ee:54:a6:d7:2b:70:3c:6f:5f:d0:7f:75:3e:fd:26:f1: 73:8c:f9:3c:42:51:a2:23:28:88:06:60:0f:d2:d7:a9:8b:d5: 71:6a:64:06:e8:cc:86:7f:f3:2b:7b:09:b1:dc:30:95:0b:8e: 35:db:27:24:34:21:0e:74:b9:11:b6:6b:ad:71:9b:fa:b1:f7: 33:4f:8e:81 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NUFBQjExMC8GA1UEBRMoNDgwQ0QwNDBDRTkwQjlDMTBEQUI4NEU5QTQ3RDAxNzdC N0M0M0JDQzAeFw0yNjA5MjMwODU0NDNaFw0yNjA5MzAwODU0NDNaMBgxFjAUBgNV BAMTDTZhYjM5M2QzLTc5OWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxF349rZuRAKrQK/ShxcNpv5kgFiHAG/H7z+dmPcKgSgNFKdAIrr9TMkT/pXSD rED+Cyz12jJoKdITkVoUoehxyW8ysU/UjuEmAPkb9YbbEPwLw32521J9FnPp8WhQ L5lgrVQ+HkophBWpf3fDuhfOCOz4pXvuTzm40pL39Mv/BXK/2DUVhHtVJc///0E/ 8w+ywWrTWYvjB0EkW2hXita0mohbnlOsj5vALotRnmSFC0jmtn5ZjZdFrdeHuDoE KtCxLdOtWd3uLJ3DlIK5TL3WQMgRs8m777yr9/7xSQrt/WhM9klfk6zeWm2Q8RLl +d1DbdDpQJa5SrXrzxa9RfgJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUdH8H1AGr Le6DQTTaQNQnqxrB0UkwHwYDVR0jBBgwFoAUSAzQQM6QucENq4TppH0Bd7fEO8ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1QUFCLzBDN0FDNUYyQTdF OTExRjFCNkFEMUE0QkE2RUU1MjhFL1NBelFRTTZRdWNFTnE0VHBwSDBCZDdmRU84 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvU0F6UVFNNlF1Y0VOcTRUcHBIMEJkN2ZFTzh3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1 QUFCLzBDN0FDNUYyQTdFOTExRjFCNkFEMUE0QkE2RUU1MjhFL1NBelFRTTZRdWNF TnE0VHBwSDBCZDdmRU84dy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAv5GPZsb/eIk3IQCohfiaXoXdWbaC/BKSb+VGI1Zwz8Cd3dG8MChOO+vql6JNI /mIb7otyZYaXZ7iU4A+5TUiR3ucwfBEB0VXTujVW7HEgEyb41RZbU88fQScrHCL4 XxIIvlaw/oFj6xzM6nF3cf25rV5KB0QUJg3Mt5u+afBX64WfOYyFok43lP2oSLf8 clrvMGSgBA+7KzS8FY3Ek7llkaHqy53np0LSHvRwLdhoklKTOjkXwu5UptcrcDxv X9B/dT79JvFzjPk8QlGiIyiIBmAP0tepi9VxamQG6MyGf/Mrewmx3DCVC4412yck NCEOdLkRtmutcZv6sfczT46B -----END CERTIFICATE-----Generated at Wed Sep 23 17:34:25 2026 by rpki-client