$ rpki-client -vvvf rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft File: B6YH3KkzMh_3j-xozXpMFJVDel8.mft (raw, json) Hash identifier: HFngl5wYVD8u//tTE+s7kD/EtgW+2+HA2hE3F23YiF8= Subject key identifier: 32:2E:A9:1D:74:AD:CC:D0:68:C9:92:43:D0:84:07:CF:78:FE:2F:E6 Authority key identifier: 07:A6:07:DC:A9:33:32:1F:F7:8F:EC:68:CD:7A:4C:14:95:43:7A:5F Certificate issuer: /CN=A9129DCB/serialNumber=07A607DCA933321FF78FEC68CD7A4C1495437A5F Certificate serial: 0AAA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft Manifest number: 0A99 Signing time: Mon 28 Sep 2026 19:41:58 +0000 Manifest this update: Mon 28 Sep 2026 19:41:58 +0000 Manifest next update: Mon 05 Oct 2026 19:41:58 +0000 Files and hashes: 1: B6YH3KkzMh_3j-xozXpMFJVDel8.crl (hash: qvVy6c/xLhSzO3lQsZlg+dbnH3YX4LHRjgPUskXzyyE=) 2: BAA6E77E852D11ED9A1A8D47C4F9AE02.roa (hash: 8Im/zm3jvYg6x17xxxV1bfF2mu5a90mnM/wSlnRSAPQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.crl rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 19:41:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2730 (0xaaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129DCB, serialNumber=07A607DCA933321FF78FEC68CD7A4C1495437A5F Validity Not Before: Sep 28 19:41:58 2026 GMT Not After : Oct 5 19:41:58 2026 GMT Subject: CN=6abac306-5111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c5:67:c0:f0:97:6d:26:13:c1:ba:1e:e5:e2: bc:eb:6b:d3:c9:2e:b3:20:9a:15:4f:c9:83:38:76: 9b:0e:fc:fc:26:d3:9c:cf:9f:0c:0e:8d:c3:92:e6: 61:cf:20:b9:cc:6a:a1:c6:21:ec:b5:68:89:e9:cb: 2c:da:d0:56:a9:12:e0:57:16:9c:70:e4:2d:e3:75: 44:f9:62:02:33:41:68:04:a3:05:3b:31:14:f0:2e: 62:a3:fb:86:03:ba:4f:e4:08:0a:d6:9b:ce:d5:eb: 41:ac:66:c8:b1:b0:1a:54:e6:0b:24:7a:17:19:22: 48:6a:ce:a4:13:89:d3:d2:1e:d9:59:6c:12:b6:53: 9d:c7:00:16:3e:65:d8:32:55:2b:99:4d:75:9b:61: c0:39:a2:24:11:c7:5f:cc:52:9f:e6:90:ad:3e:b4: 05:09:f3:ef:63:f0:6b:4d:5c:9f:06:c0:e2:d2:86: cb:19:be:29:f6:ec:ce:f8:f4:16:56:4c:ce:71:59: 83:da:28:ae:25:d7:fe:c2:b5:07:7b:43:7d:40:fb: 2a:1d:63:38:cd:4b:f1:a7:5e:d1:10:1e:10:d2:d1: 20:d5:91:07:c2:64:69:1f:15:90:cd:7d:df:2c:a7: 2a:97:ce:45:b2:22:d5:34:b8:c6:23:3d:0f:71:40: 38:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:2E:A9:1D:74:AD:CC:D0:68:C9:92:43:D0:84:07:CF:78:FE:2F:E6 X509v3 Authority Key Identifier: keyid:07:A6:07:DC:A9:33:32:1F:F7:8F:EC:68:CD:7A:4C:14:95:43:7A:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:b0:4c:8f:45:89:d4:67:ec:1d:fe:5f:40:c2:7b:9c:36:93: 40:88:be:8d:00:4f:46:87:bc:53:a6:ff:04:07:86:12:89:c5: 9d:bc:9f:69:50:ff:6d:80:83:cd:a5:09:81:5d:38:ef:2d:6b: 2f:95:d4:25:82:b2:b5:a9:99:a4:be:dc:d9:80:3d:a1:d1:9b: 32:56:e6:c9:fc:6a:61:d7:ef:da:e1:1c:d1:1c:99:eb:a9:7e: 03:2d:f3:32:8f:ca:ea:89:9b:f7:24:58:e4:ba:fa:24:83:71: b0:d4:22:49:da:1d:cc:89:25:5f:3d:7c:34:8e:40:32:83:aa: 43:c3:8b:9b:9d:47:f8:c3:c3:02:2f:c8:d1:5a:95:6a:3e:fb: 50:17:28:ce:68:1b:de:92:34:0d:09:c5:04:80:a3:24:a1:18: cc:fb:07:8d:28:c6:0e:06:1f:2e:c1:20:a3:e9:e3:3f:09:cb: 6b:1f:64:bf:e1:f3:16:64:26:bf:f1:3b:52:39:e8:5e:e4:a5: 06:0f:82:a6:03:94:9a:6c:9b:47:03:37:06:4d:4b:ed:f3:10: 8a:e5:6d:0a:c8:ff:fa:da:f3:5e:9b:70:4c:56:6f:e0:1b:b4: 28:59:93:36:d2:4e:02:7d:90:90:11:7c:e6:aa:4b:3e:11:3d: b4:4d:b9:32 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlEQ0IxMTAvBgNVBAUTKDA3QTYwN0RDQTkzMzMyMUZGNzhGRUM2OENEN0E0QzE0 OTU0MzdBNUYwHhcNMjYwOTI4MTk0MTU4WhcNMjYxMDA1MTk0MTU4WjAYMRYwFAYD VQQDEw02YWJhYzMwNi01MTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2MVnwPCXbSYTwboe5eK862vTyS6zIJoVT8mDOHabDvz8JtOcz58MDo3DkuZh zyC5zGqhxiHstWiJ6css2tBWqRLgVxaccOQt43VE+WICM0FoBKMFOzEU8C5io/uG A7pP5AgK1pvO1etBrGbIsbAaVOYLJHoXGSJIas6kE4nT0h7ZWWwStlOdxwAWPmXY MlUrmU11m2HAOaIkEcdfzFKf5pCtPrQFCfPvY/BrTVyfBsDi0obLGb4p9uzO+PQW VkzOcVmD2iiuJdf+wrUHe0N9QPsqHWM4zUvxp17REB4Q0tEg1ZEHwmRpHxWQzX3f LKcql85FsiLVNLjGIz0PcUA4YQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDIuqR10 rczQaMmSQ9CEB894/i/mMB8GA1UdIwQYMBaAFAemB9ypMzIf94/saM16TBSVQ3pf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOURDQi83QzlFQzlCQThD NEMxMUVBQTA1MTg1ODJDNEY5QUUwMi9CNllIM0trek1oXzNqLXhvelhwTUZKVkRl bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I2WUgzS2t6TWhfM2oteG96WHBNRkpWRGVsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OURDQi83QzlFQzlCQThDNEMxMUVBQTA1MTg1ODJDNEY5QUUwMi9CNllIM0trek1o XzNqLXhvelhwTUZKVkRlbDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcbBMj0WJ1GfsHf5fQMJ7nDaTQIi+jQBPRoe8U6b/BAeGEonFnbyfaVD/bYCD zaUJgV047y1rL5XUJYKytamZpL7c2YA9odGbMlbmyfxqYdfv2uEc0RyZ66l+Ay3z Mo/K6omb9yRY5Lr6JINxsNQiSdodzIklXz18NI5AMoOqQ8OLm51H+MPDAi/I0VqV aj77UBcozmgb3pI0DQnFBICjJKEYzPsHjSjGDgYfLsEgo+njPwnLax9kv+HzFmQm v/E7UjnoXuSlBg+CpgOUmmybRwM3Bk1L7fMQiuVtCsj/+trzXptwTFZv4Bu0KFmT NtJOAn2QkBF85qpLPhE9tE25Mg== -----END CERTIFICATE-----Generated at Tue Sep 29 17:37:23 2026 by rpki-client