$ rpki-client -vvvf rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft File: bJoSIRV5G44VBIAXqXV-WHq1b4A.mft (raw, json) Hash identifier: YhkiIp+KGBWp4ELHc1I9Vrslm8PyEAnnrdEQ0brwh0w= Subject key identifier: D9:13:F8:EE:4A:55:27:54:5E:A2:51:3A:3A:CC:E3:E1:DC:B3:CA:1B Authority key identifier: 6C:9A:12:21:15:79:1B:8E:15:04:80:17:A9:75:7E:58:7A:B5:6F:80 Certificate issuer: /CN=A9133239/serialNumber=6C9A122115791B8E15048017A9757E587AB56F80 Certificate serial: 01AD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJoSIRV5G44VBIAXqXV-WHq1b4A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft Manifest number: 01A9 Signing time: Fri 25 Sep 2026 04:08:31 +0000 Manifest this update: Fri 25 Sep 2026 04:08:31 +0000 Manifest next update: Fri 02 Oct 2026 04:08:31 +0000 Files and hashes: 1: bJoSIRV5G44VBIAXqXV-WHq1b4A.crl (hash: Ou0Mvr2RWWTt5YT0hEUQdExkbdk0ae83hMZwA0L7b1w=) 2: CA2855CC2F0211EFB28E0271C4F9AE02.roa (hash: 2BRjq0vlRoD+HqKB9CtvDdhLLOAhzln8ABpkfA4fmK0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.crl rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJoSIRV5G44VBIAXqXV-WHq1b4A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 04:08:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 429 (0x1ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133239, serialNumber=6C9A122115791B8E15048017A9757E587AB56F80 Validity Not Before: Sep 25 04:08:31 2026 GMT Not After : Oct 2 04:08:31 2026 GMT Subject: CN=6ab5f3bf-6f10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2f:c8:7e:98:27:e1:2e:a5:3a:b2:d1:ef:00: 74:0d:72:15:9d:85:f4:02:fc:44:17:76:21:68:86: be:37:f2:e6:da:7f:3e:d8:1e:3c:30:ab:4b:82:d8: 78:e9:d1:7c:d3:a9:5b:6a:be:aa:8b:a4:f3:3d:45: 3f:19:c6:c2:36:5a:55:32:c5:4c:8a:c0:0e:2c:1e: 30:9e:65:74:37:e7:bf:3e:cb:e0:00:f1:ac:a9:3f: 52:d4:94:67:c2:e7:30:f1:13:a2:47:d1:54:96:10: 4c:e6:53:71:2b:ce:af:80:3d:14:0c:7f:7f:c9:48: b5:7c:99:71:52:db:e2:5d:77:d7:dd:ac:6a:9f:db: 1a:7a:e6:1b:b8:3c:1f:1e:13:3d:5c:74:4e:ac:9c: 37:a5:13:2d:db:8b:c1:4f:f3:bb:18:69:19:df:81: 2b:7f:c7:c9:e4:47:03:ec:f9:ff:79:7b:4c:83:96: 97:16:76:2f:32:52:db:e3:43:e3:99:5d:99:da:75: 61:0c:44:8b:4f:46:a2:b0:a5:ca:ad:3e:09:0e:4c: 2f:5d:c3:41:b3:70:fc:d1:84:12:aa:18:d7:64:56: 62:31:e7:b4:9d:0f:bd:9b:1b:e7:fe:c6:a9:a4:4c: 2c:3d:59:74:24:06:fc:ab:d2:b2:33:7e:f3:3e:d4: 8b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:13:F8:EE:4A:55:27:54:5E:A2:51:3A:3A:CC:E3:E1:DC:B3:CA:1B X509v3 Authority Key Identifier: keyid:6C:9A:12:21:15:79:1B:8E:15:04:80:17:A9:75:7E:58:7A:B5:6F:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJoSIRV5G44VBIAXqXV-WHq1b4A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:74:7f:c2:f0:b9:7b:17:eb:3d:52:00:11:72:ce:35:85:a5: 1e:e3:58:9f:bd:2d:d5:a9:de:28:18:02:05:64:a9:bf:4b:bc: 20:e8:87:ae:1e:6f:43:4e:99:f7:fb:00:41:d0:ba:44:e9:08: f4:d6:49:45:6d:f4:88:e0:ba:f9:9f:65:7e:19:88:2c:16:c4: 54:0c:1a:59:35:2f:e1:dc:54:a0:80:1a:fe:8b:6b:68:4e:dc: 2c:73:f8:5e:ed:32:77:d9:81:5d:f9:e3:80:b6:b7:0a:d0:ef: 76:d1:ce:85:0a:a9:7d:ad:39:9d:3a:3e:7e:cb:7a:db:69:67: d8:c4:aa:f9:f6:10:ad:65:cf:60:e5:f5:22:91:e0:29:e1:c1: 08:3f:08:87:e0:01:d9:ea:9b:ff:3b:7a:b6:00:10:39:bd:c7: ca:7e:d6:40:fa:1b:fa:ca:8f:3f:4f:4e:15:16:5a:0b:10:b3: 89:93:fc:24:40:ce:ae:5d:1b:31:f5:d5:17:91:13:86:03:62: 28:dd:76:ff:14:a8:17:c1:63:69:86:81:2c:ec:7d:66:4b:72: 1c:bf:24:a2:d7:43:29:bd:92:2b:32:ab:13:c3:ca:22:34:96: c5:1c:6d:8c:ad:be:a3:b4:0c:19:88:5e:95:36:2c:aa:6c:06: 69:34:34:df -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzMyMzkxMTAvBgNVBAUTKDZDOUExMjIxMTU3OTFCOEUxNTA0ODAxN0E5NzU3RTU4 N0FCNTZGODAwHhcNMjYwOTI1MDQwODMxWhcNMjYxMDAyMDQwODMxWjAYMRYwFAYD VQQDEw02YWI1ZjNiZi02ZjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwy/Ifpgn4S6lOrLR7wB0DXIVnYX0AvxEF3YhaIa+N/Lm2n8+2B48MKtLgth4 6dF806lbar6qi6TzPUU/GcbCNlpVMsVMisAOLB4wnmV0N+e/PsvgAPGsqT9S1JRn wucw8ROiR9FUlhBM5lNxK86vgD0UDH9/yUi1fJlxUtviXXfX3axqn9saeuYbuDwf HhM9XHROrJw3pRMt24vBT/O7GGkZ34Erf8fJ5EcD7Pn/eXtMg5aXFnYvMlLb40Pj mV2Z2nVhDESLT0aisKXKrT4JDkwvXcNBs3D80YQSqhjXZFZiMee0nQ+9mxvn/sap pEwsPVl0JAb8q9KyM37zPtSLXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNkT+O5K VSdUXqJROjrM4+Hcs8obMB8GA1UdIwQYMBaAFGyaEiEVeRuOFQSAF6l1flh6tW+A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzIzOS83NDdBQTQ0QTJG MDIxMUVGOEM3QTU4NzBDNEY5QUUwMi9iSm9TSVJWNUc0NFZCSUFYcVhWLVdIcTFi NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2JKb1NJUlY1RzQ0VkJJQVhxWFYtV0hxMWI0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzIzOS83NDdBQTQ0QTJGMDIxMUVGOEM3QTU4NzBDNEY5QUUwMi9iSm9TSVJWNUc0 NFZCSUFYcVhWLVdIcTFiNEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhXR/wvC5exfrPVIAEXLONYWlHuNYn70t1aneKBgCBWSpv0u8IOiHrh5vQ06Z 9/sAQdC6ROkI9NZJRW30iOC6+Z9lfhmILBbEVAwaWTUv4dxUoIAa/otraE7cLHP4 Xu0yd9mBXfnjgLa3CtDvdtHOhQqpfa05nTo+fst622ln2MSq+fYQrWXPYOX1IpHg KeHBCD8Ih+AB2eqb/zt6tgAQOb3Hyn7WQPob+sqPP09OFRZaCxCziZP8JEDOrl0b MfXVF5EThgNiKN12/xSoF8FjaYaBLOx9ZktyHL8kotdDKb2SKzKrE8PKIjSWxRxt jK2+o7QMGYhelTYsqmwGaTQ03w== -----END CERTIFICATE-----Generated at Fri Sep 25 20:20:39 2026 by rpki-client