$ rpki-client -vvvf rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.mft File: -o32EYRRvVM4cqyjdiK_c77RlEE.mft (raw, json) Hash identifier: 2IBh6O5TXV+lE4s6sWudoAv3oDUe2AhbTNJVKYkqtw4= Subject key identifier: B0:9F:A1:CA:68:03:0A:07:7C:02:45:8D:49:A0:9E:DF:76:2C:C5:1D Authority key identifier: FA:8D:F6:11:84:51:BD:53:38:72:AC:A3:76:22:BF:73:BE:D1:94:41 Certificate issuer: /CN=A9135450/serialNumber=FA8DF6118451BD533872ACA37622BF73BED19441 Certificate serial: 035C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-o32EYRRvVM4cqyjdiK_c77RlEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.mft Manifest number: 0355 Signing time: Wed 23 Sep 2026 00:33:46 +0000 Manifest this update: Wed 23 Sep 2026 00:33:46 +0000 Manifest next update: Wed 30 Sep 2026 00:33:46 +0000 Files and hashes: 1: -o32EYRRvVM4cqyjdiK_c77RlEE.crl (hash: 8tNQG3oFlnNAfykLLU3wdgS+yPT/HHn5gy8gq+2vF/k=) 2: CA57150418B311EDB72D3165C4F9AE02.roa (hash: Be6od45jLeada4bxpuPeqCUQhUOB88eDEOcvjcAauYw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.crl rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-o32EYRRvVM4cqyjdiK_c77RlEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 00:33:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 860 (0x35c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135450, serialNumber=FA8DF6118451BD533872ACA37622BF73BED19441 Validity Not Before: Sep 23 00:33:46 2026 GMT Not After : Sep 30 00:33:46 2026 GMT Subject: CN=6ab31e6a-273d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fa:f7:1a:99:39:41:df:f5:c7:6f:d7:c5:f4: 49:54:4c:f6:fc:d4:ae:c2:a7:61:02:35:c4:14:dd: db:e3:73:fc:81:87:86:7f:5e:68:ea:99:1a:a9:a7: 2c:b5:1d:8d:f6:dd:d0:74:9d:1d:c5:4c:ce:aa:2b: 3f:88:85:a9:21:69:6a:ea:21:eb:0c:b5:47:fe:b0: bc:56:c0:aa:e2:56:51:7c:14:a4:e7:ab:bf:a8:98: 7d:9b:1f:af:8d:48:0b:e4:26:64:e9:e3:19:03:b5: 1f:b7:18:4f:cd:13:a4:93:57:3e:0b:5f:1c:0b:f2: aa:14:01:0d:75:9e:04:2f:74:09:38:b0:7b:08:c2: 23:66:2e:1d:ce:b4:98:a5:3f:5b:3b:e8:28:f6:c6: 7b:ee:93:54:c7:73:6f:52:09:a5:1c:9f:eb:71:97: 8f:44:65:6e:55:23:ef:27:73:62:8e:bb:48:1a:f0: 95:6a:27:c5:cb:28:27:08:3d:f5:6f:2b:6e:c0:15: ec:dd:0b:af:31:cf:a9:92:02:2e:11:b5:c9:a8:13: c8:48:bb:c7:70:3c:29:de:af:c6:f6:1f:9c:f8:29: c8:33:28:00:5e:50:1b:1c:86:45:39:7e:44:b7:90: 72:38:a2:03:ff:64:ed:2a:e2:9c:50:85:41:66:ac: 85:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:9F:A1:CA:68:03:0A:07:7C:02:45:8D:49:A0:9E:DF:76:2C:C5:1D X509v3 Authority Key Identifier: keyid:FA:8D:F6:11:84:51:BD:53:38:72:AC:A3:76:22:BF:73:BE:D1:94:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-o32EYRRvVM4cqyjdiK_c77RlEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:a4:e1:8b:78:7c:c9:b9:f2:1f:66:07:c1:6f:0d:10:c7:68: 9a:17:a0:94:1c:f1:aa:80:98:9d:b7:63:6f:e5:46:1e:e0:0a: 90:a1:0f:b1:41:74:aa:71:f3:ab:76:25:b7:dd:83:ab:12:4d: c5:9b:0b:2f:c5:dc:c9:29:09:11:a9:39:07:c3:48:d4:91:f1: f8:4e:5b:7f:ad:7a:d2:cc:8c:05:91:5c:12:4f:8a:21:e6:0f: 13:60:64:ee:ea:f3:d4:74:01:05:1e:d3:17:a9:67:ca:1a:26: b8:7b:1b:a6:7f:a9:4f:df:e8:74:24:1a:21:cf:fa:24:c7:e9: 5a:f9:72:a3:9c:c1:f0:10:96:28:7f:62:95:86:05:ef:6c:8a: 50:46:20:60:d3:38:83:b7:5f:c8:f4:8e:ab:d8:dd:2f:3e:47: 58:a3:5e:7b:1f:f8:58:a2:12:56:80:7b:e2:3e:62:77:55:83: fb:51:37:e1:91:f7:14:3c:d0:11:b7:03:69:9e:9e:33:e9:9f: 08:8e:ce:05:d6:f2:61:4f:a6:8c:91:e0:cb:10:35:cd:93:4b: dd:c7:6c:ed:51:95:7b:37:38:ef:4b:27:e6:03:05:a4:ba:81: ab:39:7c:a1:88:8d:e2:f5:0f:dd:c6:04:75:5d:bb:46:d1:a0: 4c:09:97:f8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA1wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU0NTAxMTAvBgNVBAUTKEZBOERGNjExODQ1MUJENTMzODcyQUNBMzc2MjJCRjcz QkVEMTk0NDEwHhcNMjYwOTIzMDAzMzQ2WhcNMjYwOTMwMDAzMzQ2WjAYMRYwFAYD VQQDEw02YWIzMWU2YS0yNzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvr3Gpk5Qd/1x2/XxfRJVEz2/NSuwqdhAjXEFN3b43P8gYeGf15o6pkaqacs tR2N9t3QdJ0dxUzOqis/iIWpIWlq6iHrDLVH/rC8VsCq4lZRfBSk56u/qJh9mx+v jUgL5CZk6eMZA7UftxhPzROkk1c+C18cC/KqFAENdZ4EL3QJOLB7CMIjZi4dzrSY pT9bO+go9sZ77pNUx3NvUgmlHJ/rcZePRGVuVSPvJ3NijrtIGvCVaifFyygnCD31 bytuwBXs3QuvMc+pkgIuEbXJqBPISLvHcDwp3q/G9h+c+CnIMygAXlAbHIZFOX5E t5ByOKID/2TtKuKcUIVBZqyF1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLCfocpo AwoHfAJFjUmgnt92LMUdMB8GA1UdIwQYMBaAFPqN9hGEUb1TOHKso3Yiv3O+0ZRB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTQ1MC84NDNEQzY5NjE4 QjExMUVEQkVDNUZFNjNDNEY5QUUwMi8tbzMyRVlSUnZWTTRjcXlqZGlLX2M3N1Js RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1vMzJFWVJSdlZNNGNxeWpkaUtfYzc3UmxFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTQ1MC84NDNEQzY5NjE4QjExMUVEQkVDNUZFNjNDNEY5QUUwMi8tbzMyRVlSUnZW TTRjcXlqZGlLX2M3N1JsRUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP6Thi3h8ybnyH2YHwW8NEMdomheglBzxqoCYnbdjb+VGHuAKkKEPsUF0qnHz q3Ylt92DqxJNxZsLL8XcySkJEak5B8NI1JHx+E5bf6160syMBZFcEk+KIeYPE2Bk 7urz1HQBBR7TF6lnyhomuHsbpn+pT9/odCQaIc/6JMfpWvlyo5zB8BCWKH9ilYYF 72yKUEYgYNM4g7dfyPSOq9jdLz5HWKNeex/4WKISVoB74j5id1WD+1E34ZH3FDzQ EbcDaZ6eM+mfCI7OBdbyYU+mjJHgyxA1zZNL3cds7VGVezc470sn5gMFpLqBqzl8 oYiN4vUP3cYEdV27RtGgTAmX+A== -----END CERTIFICATE-----Generated at Thu Sep 24 23:42:18 2026 by rpki-client