$ rpki-client -vvvf rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.mft File: AWZvx92HXf-g4ZvHPLrajs-aWCc.mft (raw, json) Hash identifier: xEkGX5nfVTau82qNZqDbaTYbiIz7jFbgQ3cqmUyx8x4= Subject key identifier: 65:8E:C1:6B:AA:E3:91:33:F4:F3:67:0E:8D:53:A4:D0:23:F2:3B:A2 Authority key identifier: 01:66:6F:C7:DD:87:5D:FF:A0:E1:9B:C7:3C:BA:DA:8E:CF:9A:58:27 Certificate issuer: /CN=A9129969/serialNumber=01666FC7DD875DFFA0E19BC73CBADA8ECF9A5827 Certificate serial: 0297 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWZvx92HXf-g4ZvHPLrajs-aWCc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.mft Manifest number: 0276 Signing time: Wed 23 Sep 2026 02:04:28 +0000 Manifest this update: Wed 23 Sep 2026 02:04:27 +0000 Manifest next update: Wed 30 Sep 2026 02:04:27 +0000 Files and hashes: 1: AWZvx92HXf-g4ZvHPLrajs-aWCc.crl (hash: vN9pE4X6zJ8urF5JErJbcl/nh6lz1QusQxQsicSzQ1w=) 2: A5D7263C1ECB11EE8FEFEE18C4F9AE02.roa (hash: ir+ohPjIccF3vHpqVtefjBEm+cD7sV1/e2b1iEqR4BI=) 3: 37649AB0D6C511EEB512CC7FC4F9AE02.roa (hash: akuOHZWMxhdBgYqE6Ifrb7JtsIz0NQwxFPmVS9VWAZI=) 4: 36E93942D6C511EEB512CC7FC4F9AE02.roa (hash: CJlRP/VDSjivJDg1KUXNqi92MzCGV7Ydo4BmSJUkkAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.crl rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWZvx92HXf-g4ZvHPLrajs-aWCc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 02:04:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 663 (0x297) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129969, serialNumber=01666FC7DD875DFFA0E19BC73CBADA8ECF9A5827 Validity Not Before: Sep 23 02:04:27 2026 GMT Not After : Sep 30 02:04:27 2026 GMT Subject: CN=6ab333ac-c233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f0:50:b6:d8:b9:b7:ab:e8:9b:67:63:5e:8f: 8b:46:f2:61:7b:9c:15:dd:84:2d:19:3a:29:cb:c6: df:f0:f0:b4:30:e1:8f:d4:8d:7f:31:74:2a:a2:c7: 59:da:8b:f3:56:8e:7c:89:10:bb:41:57:b3:7b:8a: 4b:40:94:66:d4:6c:cd:a8:41:09:e2:20:1e:92:e4: 9e:64:6e:0c:6f:53:4d:8d:e2:2b:96:68:d3:6b:6c: 7d:3b:99:c4:c0:0f:de:0d:06:a6:ba:69:03:9f:3a: 16:5f:c8:b5:50:b6:a2:58:40:35:dd:06:d2:59:31: 7e:43:81:71:b5:48:5b:6b:81:4d:76:a3:69:e1:e1: ab:38:33:e3:93:e2:d4:39:29:85:00:8b:eb:6b:ee: 82:9e:fd:0a:74:a5:18:74:19:32:3d:05:67:b2:25: 16:12:8c:84:a1:49:07:43:55:53:25:34:0b:23:08: 5b:ac:ad:d8:09:42:f5:88:d7:95:dc:04:d6:31:09: 19:84:a8:55:98:df:6d:8e:2a:16:a3:24:89:d7:f4: bf:73:b6:08:e9:65:e9:fb:d6:33:97:8c:73:9d:89: e0:c1:bb:5b:58:79:36:e4:31:a3:dd:b6:fb:07:6b: ad:5f:de:e0:3e:48:07:28:d1:41:ef:c0:ab:8f:c3: 81:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:8E:C1:6B:AA:E3:91:33:F4:F3:67:0E:8D:53:A4:D0:23:F2:3B:A2 X509v3 Authority Key Identifier: keyid:01:66:6F:C7:DD:87:5D:FF:A0:E1:9B:C7:3C:BA:DA:8E:CF:9A:58:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWZvx92HXf-g4ZvHPLrajs-aWCc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:8c:f9:df:de:95:ef:27:0a:d1:d0:84:5c:1f:d5:96:c9:e2: 37:aa:6e:8e:4d:7f:0c:a8:e2:b8:e6:fc:9f:37:0e:ff:1e:44: b3:91:2e:88:82:4c:cd:8e:1c:35:c8:fe:fd:3e:65:6d:d1:57: 26:05:e5:e2:b2:d2:c1:61:79:25:08:50:83:38:95:13:25:4a: d9:b1:bc:81:51:37:ad:ed:0f:a7:be:81:4c:00:0e:6f:af:d0: 52:03:51:11:1b:23:bd:3a:79:1d:9f:f6:59:86:d4:64:1a:34: e8:94:cb:c1:1e:4b:6a:85:56:ac:4e:82:a2:88:55:0e:ab:f2: 2a:6f:6a:f2:66:c1:c2:d9:21:c4:80:ea:e0:22:a1:56:00:63: 72:58:41:26:4c:5c:14:69:ff:c1:ce:57:59:e3:df:ed:90:b7: 36:d8:b8:49:ce:2c:e1:40:aa:c2:b6:7f:40:c4:f5:41:e8:5d: 39:cc:c0:36:55:fb:8c:92:83:3e:6e:be:01:49:a4:76:7f:4d: 8c:4a:ff:cb:7b:54:90:f1:b6:5e:27:ae:7b:6d:3e:61:6f:35: df:36:7a:f9:51:f3:73:77:8a:3a:fd:3b:e6:75:22:db:06:ac: e3:ac:7b:c7:6f:0d:fa:fc:2b:43:f8:2a:ec:2a:ee:ab:2c:b9: 33:aa:60:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk5NjkxMTAvBgNVBAUTKDAxNjY2RkM3REQ4NzVERkZBMEUxOUJDNzNDQkFEQThF Q0Y5QTU4MjcwHhcNMjYwOTIzMDIwNDI3WhcNMjYwOTMwMDIwNDI3WjAYMRYwFAYD VQQDEw02YWIzMzNhYy1jMjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsfBQtti5t6vom2djXo+LRvJhe5wV3YQtGTopy8bf8PC0MOGP1I1/MXQqosdZ 2ovzVo58iRC7QVeze4pLQJRm1GzNqEEJ4iAekuSeZG4Mb1NNjeIrlmjTa2x9O5nE wA/eDQamumkDnzoWX8i1ULaiWEA13QbSWTF+Q4FxtUhba4FNdqNp4eGrODPjk+LU OSmFAIvra+6Cnv0KdKUYdBkyPQVnsiUWEoyEoUkHQ1VTJTQLIwhbrK3YCUL1iNeV 3ATWMQkZhKhVmN9tjioWoySJ1/S/c7YI6WXp+9Yzl4xznYngwbtbWHk25DGj3bb7 B2utX97gPkgHKNFB78Crj8OBuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGWOwWuq 45Ez9PNnDo1TpNAj8juiMB8GA1UdIwQYMBaAFAFmb8fdh13/oOGbxzy62o7Pmlgn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTk2OS9DRjM5NUMzODFD NkExMUVFQkY2MkFDMERDNEY5QUUwMi9BV1p2eDkySFhmLWc0WnZIUExyYWpzLWFX Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FXWnZ4OTJIWGYtZzRadkhQTHJhanMtYVdDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTk2OS9DRjM5NUMzODFDNkExMUVFQkY2MkFDMERDNEY5QUUwMi9BV1p2eDkySFhm LWc0WnZIUExyYWpzLWFXQ2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgoz5396V7ycK0dCEXB/VlsniN6pujk1/DKjiuOb8nzcO/x5Es5EuiIJMzY4c Ncj+/T5lbdFXJgXl4rLSwWF5JQhQgziVEyVK2bG8gVE3re0Pp76BTAAOb6/QUgNR ERsjvTp5HZ/2WYbUZBo06JTLwR5LaoVWrE6CoohVDqvyKm9q8mbBwtkhxIDq4CKh VgBjclhBJkxcFGn/wc5XWePf7ZC3Nti4Sc4s4UCqwrZ/QMT1QehdOczANlX7jJKD Pm6+AUmkdn9NjEr/y3tUkPG2Xieue20+YW813zZ6+VHzc3eKOv075nUi2was46x7 x28N+vwrQ/gq7Cruqyy5M6pgsA== -----END CERTIFICATE-----Generated at Wed Sep 23 09:46:16 2026 by rpki-client