$ rpki-client -vvvf rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.mft File: aamToYghmKytXxzqNQZrr0nn1dA.mft (raw, json) Hash identifier: d7exUPKFD31W6aoCcDS23YGncIZu8b7DLC+HREN4AYI= Subject key identifier: A3:48:B3:1E:E7:E0:10:17:67:C2:82:A2:48:48:6B:B7:4B:74:B2:4C Authority key identifier: 69:A9:93:A1:88:21:98:AC:AD:5F:1C:EA:35:06:6B:AF:49:E7:D5:D0 Certificate issuer: /CN=A912B23F/serialNumber=69A993A1882198ACAD5F1CEA35066BAF49E7D5D0 Certificate serial: 01F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aamToYghmKytXxzqNQZrr0nn1dA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.mft Manifest number: 01E6 Signing time: Fri 25 Sep 2026 03:38:23 +0000 Manifest this update: Fri 25 Sep 2026 03:38:23 +0000 Manifest next update: Fri 02 Oct 2026 03:38:23 +0000 Files and hashes: 1: aamToYghmKytXxzqNQZrr0nn1dA.crl (hash: KbVR+fIKXm+UqXZgJjYXPTDLzM8Nj9K4dgHTyxlMtIc=) 2: 78585C5EB6E011EFBB3E2A0DC4F9AE02.roa (hash: 2oAHDEIFByYEQyDK/rKoP4S6sMLoa9XHz0lxAFrOlyQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.crl rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aamToYghmKytXxzqNQZrr0nn1dA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 03:38:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 498 (0x1f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B23F, serialNumber=69A993A1882198ACAD5F1CEA35066BAF49E7D5D0 Validity Not Before: Sep 25 03:38:23 2026 GMT Not After : Oct 2 03:38:23 2026 GMT Subject: CN=6ab5ecaf-a964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:71:c9:5d:47:34:91:e3:a5:db:40:5a:7f:46: b1:18:41:35:4f:f6:6b:58:a3:47:a8:cb:6e:33:92: 90:1f:f1:27:d5:f7:cd:2b:92:67:c5:67:1e:f6:2d: 3a:6b:df:6d:49:4f:f7:36:b7:de:dc:0d:f5:e7:0b: 48:5b:94:b4:ea:45:4d:9c:64:2c:8d:70:8a:d8:f1: c3:4f:33:90:eb:81:e7:79:45:84:96:33:ab:a4:e3: 50:b7:2d:af:d9:90:cc:81:eb:96:ec:bc:1d:3f:a1: 51:24:4d:82:0c:26:6a:42:a0:6c:43:eb:84:00:0f: 57:8e:d3:d8:96:6e:7b:b7:0b:c3:38:d5:72:a0:94: b9:11:c6:47:84:1f:80:d4:62:e8:f6:38:e8:cf:30: 12:24:a1:f8:5f:1b:14:db:b4:34:28:4f:fa:26:da: 0f:23:5e:29:22:e3:71:90:d9:6f:bd:4a:2b:f3:d7: f3:d3:91:f9:3c:7f:ab:52:1d:c6:67:9b:88:83:65: b2:b3:59:00:e6:93:5f:15:cf:cd:7a:c0:ca:4b:f4: 4a:89:77:d3:99:93:d4:a9:f0:a2:6f:90:67:5b:e2: aa:19:5c:7c:11:d0:50:55:b4:9f:0e:93:58:28:e0: ad:c0:8e:f3:db:9f:8f:9f:a2:3a:b1:3b:66:7d:0a: 41:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:48:B3:1E:E7:E0:10:17:67:C2:82:A2:48:48:6B:B7:4B:74:B2:4C X509v3 Authority Key Identifier: keyid:69:A9:93:A1:88:21:98:AC:AD:5F:1C:EA:35:06:6B:AF:49:E7:D5:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aamToYghmKytXxzqNQZrr0nn1dA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:16:11:9b:a5:8d:cb:07:d6:38:6f:40:dc:b7:5c:6c:f5:a7: 5f:f2:87:25:9c:d8:1f:a2:39:8e:51:55:4f:60:d3:3b:79:51: 47:28:9a:92:77:52:c0:26:88:43:db:a2:25:74:c7:b7:5c:46: 69:eb:15:2a:14:3b:cc:6e:ae:e2:6d:b7:a0:74:e2:6b:9f:cc: 69:90:12:eb:e3:25:c0:79:a3:ea:a0:32:ba:d2:67:66:45:eb: 68:e6:1e:94:db:74:a8:e8:b3:f1:a1:6a:67:95:e6:15:c5:46: ab:bc:8e:50:89:96:05:47:df:d2:57:73:a5:c5:33:d9:ad:ff: 3e:c0:31:4e:0d:4b:da:c2:85:77:51:a0:9b:7f:b8:e5:76:f9: 46:50:a9:4d:ca:ba:f2:75:b5:4d:3e:a9:93:8b:35:9b:bf:4f: 25:30:e8:91:b0:17:e5:0a:81:d3:dc:4f:d5:8b:af:b1:8b:72: 01:76:32:d2:15:84:82:d9:f6:75:90:d7:c3:cb:25:de:b2:f0: 85:60:fa:68:f5:36:dd:92:cd:b4:2c:af:f6:17:55:46:9a:87: 17:52:bf:a3:4d:69:e9:5d:7d:e1:82:75:a5:ea:7b:9d:8e:3a: 59:75:03:f6:5e:0f:c5:28:69:8d:e2:c5:fe:a8:17:64:12:ea: d0:34:9f:46 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIyM0YxMTAvBgNVBAUTKDY5QTk5M0ExODgyMTk4QUNBRDVGMUNFQTM1MDY2QkFG NDlFN0Q1RDAwHhcNMjYwOTI1MDMzODIzWhcNMjYxMDAyMDMzODIzWjAYMRYwFAYD VQQDEw02YWI1ZWNhZi1hOTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs3HJXUc0keOl20Baf0axGEE1T/ZrWKNHqMtuM5KQH/En1ffNK5JnxWce9i06 a99tSU/3Nrfe3A315wtIW5S06kVNnGQsjXCK2PHDTzOQ64HneUWEljOrpONQty2v 2ZDMgeuW7LwdP6FRJE2CDCZqQqBsQ+uEAA9XjtPYlm57twvDONVyoJS5EcZHhB+A 1GLo9jjozzASJKH4XxsU27Q0KE/6JtoPI14pIuNxkNlvvUor89fz05H5PH+rUh3G Z5uIg2Wys1kA5pNfFc/NesDKS/RKiXfTmZPUqfCib5BnW+KqGVx8EdBQVbSfDpNY KOCtwI7z25+Pn6I6sTtmfQpBOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKNIsx7n 4BAXZ8KCokhIa7dLdLJMMB8GA1UdIwQYMBaAFGmpk6GIIZisrV8c6jUGa69J59XQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjIzRi82NzBDMkYyQ0Uy OUYxMUVFQjY4MkM2MTFDNEY5QUUwMi9hYW1Ub1lnaG1LeXRYeHpxTlFacnIwbm4x ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FhbVRvWWdobUt5dFh4enFOUVpycjBubjFkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjIzRi82NzBDMkYyQ0UyOUYxMUVFQjY4MkM2MTFDNEY5QUUwMi9hYW1Ub1lnaG1L eXRYeHpxTlFacnIwbm4xZEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqBYRm6WNywfWOG9A3LdcbPWnX/KHJZzYH6I5jlFVT2DTO3lRRyiakndSwCaI Q9uiJXTHt1xGaesVKhQ7zG6u4m23oHTia5/MaZAS6+MlwHmj6qAyutJnZkXraOYe lNt0qOiz8aFqZ5XmFcVGq7yOUImWBUff0ldzpcUz2a3/PsAxTg1L2sKFd1Ggm3+4 5Xb5RlCpTcq68nW1TT6pk4s1m79PJTDokbAX5QqB09xP1YuvsYtyAXYy0hWEgtn2 dZDXw8sl3rLwhWD6aPU23ZLNtCyv9hdVRpqHF1K/o01p6V194YJ1pep7nY46WXUD 9l4PxShpjeLF/qgXZBLq0DSfRg== -----END CERTIFICATE-----Generated at Fri Sep 25 22:09:28 2026 by rpki-client