$ rpki-client -vvvf rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft File: mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft (raw, json) Hash identifier: vDsBnUFn91XN5/FV2MNyq2Vmvyx+XwpiVjceJCEUM9k= Subject key identifier: 6E:54:7D:A5:9F:6D:4C:A4:1D:B9:3F:C9:2F:AF:61:D1:B4:CA:AE:A4 Authority key identifier: 98:93:19:F5:6A:7A:E2:42:08:D1:36:24:DD:69:D8:E4:09:1B:7C:24 Certificate issuer: /CN=A9136429/serialNumber=989319F56A7AE24208D13624DD69D8E4091B7C24 Certificate serial: 04CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft Manifest number: 04C1 Signing time: Tue 22 Sep 2026 23:29:36 +0000 Manifest this update: Tue 22 Sep 2026 23:29:35 +0000 Manifest next update: Tue 29 Sep 2026 23:29:35 +0000 Files and hashes: 1: mJMZ9Wp64kII0TYk3WnY5AkbfCQ.crl (hash: aQ3U3dfKhZr0/rMZBVS1ZeUpdna9dciErjl6MhgVO7k=) 2: A3FBC4668A3511ECB4502D0DC4F9AE02.roa (hash: wJwYPO+fwG1DzfXIB7tLWx4w4Z7LBKlhdGTpVmUtFJk=) 3: 3A51C4061DF211ED95A51A3EC4F9AE02.roa (hash: S9wcoj+b296y5ZY0Qh+LyMtLbA5mAbavBiIMN9qcung=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.crl rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 23:29:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1231 (0x4cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136429, serialNumber=989319F56A7AE24208D13624DD69D8E4091B7C24 Validity Not Before: Sep 22 23:29:35 2026 GMT Not After : Sep 29 23:29:35 2026 GMT Subject: CN=6ab30f5f-4802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fd:fb:be:63:ab:66:2c:0b:a9:e1:ef:5d:3b: b6:9d:04:1d:05:96:88:8e:a9:bf:89:06:ab:b4:f3: c9:60:42:e9:2e:1f:ec:4e:54:a9:a2:fa:1f:c2:72: a4:7e:23:23:5b:1b:d4:0c:8e:23:ae:e8:0f:f6:88: 3c:43:10:a6:a2:79:4f:4c:64:ad:ec:4c:db:74:47: a7:ec:61:aa:5f:79:0f:8f:37:a7:f6:2c:1c:eb:5f: 48:11:c1:38:d3:6e:a0:5f:2d:e7:22:88:2a:f4:af: 5f:3c:f7:5c:56:dc:0d:2e:33:fb:39:e7:0f:61:de: 19:14:f6:9c:e1:e5:68:ec:f6:47:86:48:f6:96:f9: a4:39:6d:87:3d:54:2f:4f:de:89:a7:2f:be:40:ee: d1:71:29:43:b5:00:a3:ab:88:83:59:db:bc:6d:75: 0d:3e:f2:a2:ee:c2:39:8e:e1:dd:a6:3a:fd:e2:cc: 0d:33:35:14:33:c4:08:18:8a:a9:4d:2d:28:8f:2b: 19:0d:f6:98:69:78:ca:16:a5:0c:a3:6d:19:33:34: 97:00:01:01:f3:e5:57:45:4e:53:4c:d8:d3:3f:bc: 64:73:c1:f5:67:4e:ca:39:51:00:40:69:6a:52:94: c4:ce:8b:cf:6b:c6:83:b1:32:96:12:42:fe:a0:9d: 01:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:54:7D:A5:9F:6D:4C:A4:1D:B9:3F:C9:2F:AF:61:D1:B4:CA:AE:A4 X509v3 Authority Key Identifier: keyid:98:93:19:F5:6A:7A:E2:42:08:D1:36:24:DD:69:D8:E4:09:1B:7C:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:c2:08:f9:e0:d7:76:58:6a:54:08:c7:47:48:55:e9:7d:41: 01:6a:21:d4:d7:5e:9f:4c:45:fe:10:3a:44:5d:0c:e7:49:b4: 47:ec:23:da:f7:79:d6:ff:f4:bf:d0:5e:9a:83:da:1d:13:c1: f5:ba:cb:7c:ae:1a:67:3f:5f:10:0b:15:ef:72:1e:44:96:9b: 3c:70:a4:75:a1:94:53:2c:89:14:0d:33:15:65:ef:b8:5e:68: cf:8f:e4:32:fa:17:29:37:18:d2:f8:ab:11:f6:b2:2f:e9:c1: cb:ee:df:89:34:06:04:0f:1f:dc:cc:5d:75:39:3e:5b:5c:e3: 48:96:cc:97:03:2f:ae:81:21:a5:3a:2f:1c:32:1e:a7:5e:f6: af:93:5f:43:ca:79:0e:aa:c2:22:5e:8e:83:4a:c7:d3:62:63: 90:cf:b9:db:22:5f:ec:16:0e:82:54:18:ab:0e:a2:48:5f:9f: 03:cd:22:e9:da:d0:3e:10:17:43:5d:6b:00:d5:66:9c:d0:2b: e8:dc:cd:4c:f3:c4:09:bf:fc:bf:13:a7:a3:c1:f9:61:d9:0f: 95:04:5a:c2:bf:ce:a3:d1:5f:86:4f:4e:e5:bc:d5:ba:3d:95: ca:13:91:5b:4b:6e:04:1e:06:aa:51:07:5e:bd:a8:46:9b:1e: e8:82:da:6c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY0MjkxMTAvBgNVBAUTKDk4OTMxOUY1NkE3QUUyNDIwOEQxMzYyNERENjlEOEU0 MDkxQjdDMjQwHhcNMjYwOTIyMjMyOTM1WhcNMjYwOTI5MjMyOTM1WjAYMRYwFAYD VQQDEw02YWIzMGY1Zi00ODAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtv37vmOrZiwLqeHvXTu2nQQdBZaIjqm/iQartPPJYELpLh/sTlSpovofwnKk fiMjWxvUDI4jrugP9og8QxCmonlPTGSt7EzbdEen7GGqX3kPjzen9iwc619IEcE4 026gXy3nIogq9K9fPPdcVtwNLjP7OecPYd4ZFPac4eVo7PZHhkj2lvmkOW2HPVQv T96Jpy++QO7RcSlDtQCjq4iDWdu8bXUNPvKi7sI5juHdpjr94swNMzUUM8QIGIqp TS0ojysZDfaYaXjKFqUMo20ZMzSXAAEB8+VXRU5TTNjTP7xkc8H1Z07KOVEAQGlq UpTEzovPa8aDsTKWEkL+oJ0BKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG5UfaWf bUykHbk/yS+vYdG0yq6kMB8GA1UdIwQYMBaAFJiTGfVqeuJCCNE2JN1p2OQJG3wk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjQyOS9FODBGRkI0ODhB MzIxMUVDQjA4RDkwMEFDNEY5QUUwMi9tSk1aOVdwNjRrSUkwVFlrM1duWTVBa2Jm Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21KTVo5V3A2NGtJSTBUWWszV25ZNUFrYmZDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjQyOS9FODBGRkI0ODhBMzIxMUVDQjA4RDkwMEFDNEY5QUUwMi9tSk1aOVdwNjRr SUkwVFlrM1duWTVBa2JmQ1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATMII+eDXdlhqVAjHR0hV6X1BAWoh1Nden0xF/hA6RF0M50m0R+wj2vd51v/0 v9BemoPaHRPB9brLfK4aZz9fEAsV73IeRJabPHCkdaGUUyyJFA0zFWXvuF5oz4/k MvoXKTcY0virEfayL+nBy+7fiTQGBA8f3MxddTk+W1zjSJbMlwMvroEhpTovHDIe p172r5NfQ8p5DqrCIl6Og0rH02JjkM+52yJf7BYOglQYqw6iSF+fA80i6drQPhAX Q11rANVmnNAr6NzNTPPECb/8vxOno8H5YdkPlQRawr/Oo9Ffhk9O5bzVuj2VyhOR W0tuBB4GqlEHXr2oRpse6ILabA== -----END CERTIFICATE-----Generated at Wed Sep 23 22:21:07 2026 by rpki-client