$ rpki-client -vvvf rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft File: 09Fa7ppPiuXCgRCKfS062B1Oec0.mft (raw, json) Hash identifier: vWirtivdl36/dzwT6kFXQPPXHb209InS2buTSJza+xo= Subject key identifier: B9:28:B6:88:EE:05:A7:45:7A:69:70:96:40:01:AF:C9:63:76:EA:DF Authority key identifier: D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD Certificate issuer: /CN=A91397C2/serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD Certificate serial: 0911 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft Manifest number: 08D8 Signing time: Tue 22 Sep 2026 20:20:47 +0000 Manifest this update: Tue 22 Sep 2026 20:20:47 +0000 Manifest next update: Tue 29 Sep 2026 20:20:47 +0000 Files and hashes: 1: 09Fa7ppPiuXCgRCKfS062B1Oec0.crl (hash: sFzBuZcyomnx+ezjEsXFGaPkuRdXCy8yt4k6pkJCI88=) 2: B7AD6F08264611F1A7E2573D9F833773.roa (hash: cAi1E/gIPdIvRZ5EylPtBXr5xfvPwzP6uzvwERgkasg=) 3: E4FA38362D2311F1A198B1F8B7833773.roa (hash: AxJKOqSnxksdZpHOPb0q92RjtR735qgr4EIIyE6SdIo=) 4: 29BC840E002711EB8FA6A142C4F9AE02.roa (hash: 1hK6aCJ+7Fb1oUPOZ4u6IyJKzDYRKvTsmB4Y2o3Noe8=) 5: 0C64C6B2821011F0B329B866C4F9AE02.roa (hash: UuZBWjQy/vvCDj1GH11Ut9+9Pjsx/5KL/8Qu7tKsi7U=) 6: BE79CDCE16AF11F08B8C4061C4F9AE02.roa (hash: PXtviaHqQJLCMEu9tn+Fq2a2NfU37e2CJGxdPkOxh1g=) 7: C3738F60A78511F0B1D3342CC4F9AE02.roa (hash: tB/DnIqV82CpIIhO+TP7hcH1C9TgViQTWGZ17z9LsKo=) 8: 3AA556009A8411EFB791ED77C4F9AE02.roa (hash: 6t+wjHRQ/GqT5IcSFRj+6zc7NKRi89qTochP2LMsRS8=) 9: 931A1664264611F1BB7525369F833773.roa (hash: O+dFRmqz0HLQWE2NlORO6GptWeFGJW4FEbE2GeFkulo=) 10: 7F9EB0A28CF111F09EC8727CC4F9AE02.roa (hash: gzcB5bzyDXKQ7TWulNDMH2WNKACJo+cBlc1OpEzaIqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 20:20:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2321 (0x911) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91397C2, serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD Validity Not Before: Sep 22 20:20:47 2026 GMT Not After : Sep 29 20:20:47 2026 GMT Subject: CN=6ab2e31f-9c91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b9:4d:7c:56:73:9a:18:57:39:89:d9:9c:bf: a7:c5:f6:dd:5d:d8:a2:ae:16:1e:88:7b:1a:2f:8f: 66:e0:9e:66:ef:d9:dc:b0:bf:e0:d9:f9:e3:04:2e: 6e:1b:59:f2:05:7d:af:f7:b6:c7:6c:aa:f6:30:1b: 44:c7:4a:f2:7b:00:7c:22:3f:92:20:58:91:2a:ad: b6:c2:c4:c0:b1:9f:89:95:46:7a:ac:a6:2d:31:be: 7d:42:e0:fc:e6:2e:40:77:6c:de:72:b3:e8:b3:29: d0:51:8d:65:c4:70:a5:80:91:fc:53:2c:1b:55:05: f3:96:bb:ec:e9:57:36:3c:10:bc:e5:c6:ed:2e:6b: 59:d5:4b:98:9f:e8:90:de:70:c9:a3:8c:c8:e1:67: 68:cd:54:4b:40:57:de:5a:94:8f:fc:3c:b2:e1:5e: 7e:f5:9d:8e:84:71:61:9f:54:71:dd:09:93:9a:4c: dc:93:42:43:8b:bd:67:41:55:12:42:d4:d1:2f:e5: 48:b9:fa:0c:c8:7d:83:e2:63:48:4e:89:01:bf:e5: 97:72:d7:be:e2:4a:9d:32:48:4c:75:79:2a:26:48: 65:bd:44:34:11:c4:09:e9:42:a5:fc:cf:45:98:42: b5:7b:d0:fd:3e:83:c2:b3:7a:71:f9:fd:46:a5:f5: 7a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:28:B6:88:EE:05:A7:45:7A:69:70:96:40:01:AF:C9:63:76:EA:DF X509v3 Authority Key Identifier: keyid:D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:b7:ab:42:22:bf:a2:a5:4f:a1:80:03:66:da:37:cc:82:51: d9:c7:45:a6:df:68:03:d8:1c:d7:1b:6b:52:a1:04:7f:10:2c: a8:36:08:3d:d2:38:96:7f:35:73:bd:f4:be:86:61:40:68:e6: b9:79:ba:f9:c6:97:3b:05:52:08:eb:bf:37:c5:bc:12:fb:34: 0b:47:69:9a:39:e5:9a:e0:14:24:fe:78:81:56:ce:0f:66:b9: 17:32:f3:b8:4f:62:ae:81:53:89:4d:a3:21:aa:83:32:af:00: da:2d:1a:77:6b:aa:15:15:c5:d4:2d:19:da:86:2e:46:88:0c: b7:9c:37:af:c0:85:00:c3:83:d1:78:25:93:40:18:3a:12:a5: 24:28:fc:33:46:a9:f7:d8:05:e6:96:a2:d0:28:de:5f:7a:0c: 6c:05:d3:ab:fa:93:6a:25:a3:8a:58:3f:d3:97:2e:da:fd:f6: 05:92:89:8f:35:b3:1b:5f:a5:dd:e5:88:e2:91:ca:1b:f6:5b: 87:45:fe:99:94:16:04:db:66:85:3c:a8:24:2c:71:40:7a:f4: 57:f9:eb:bf:ef:2d:08:ed:f4:23:8d:cc:0e:42:c2:b5:63:0d: b0:ad:27:61:e0:f2:fb:a4:a2:03:4c:ba:f5:39:8f:25:1a:75: ac:c1:8f:6a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk3QzIxMTAvBgNVBAUTKEQzRDE1QUVFOUE0RjhBRTVDMjgxMTA4QTdEMkQzQUQ4 MUQ0RTc5Q0QwHhcNMjYwOTIyMjAyMDQ3WhcNMjYwOTI5MjAyMDQ3WjAYMRYwFAYD VQQDEw02YWIyZTMxZi05YzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnLlNfFZzmhhXOYnZnL+nxfbdXdiirhYeiHsaL49m4J5m79ncsL/g2fnjBC5u G1nyBX2v97bHbKr2MBtEx0ryewB8Ij+SIFiRKq22wsTAsZ+JlUZ6rKYtMb59QuD8 5i5Ad2zecrPosynQUY1lxHClgJH8UywbVQXzlrvs6Vc2PBC85cbtLmtZ1UuYn+iQ 3nDJo4zI4WdozVRLQFfeWpSP/Dyy4V5+9Z2OhHFhn1Rx3QmTmkzck0JDi71nQVUS QtTRL+VIufoMyH2D4mNITokBv+WXcte+4kqdMkhMdXkqJkhlvUQ0EcQJ6UKl/M9F mEK1e9D9PoPCs3px+f1GpfV6AQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLkotoju BadFemlwlkABr8ljdurfMB8GA1UdIwQYMBaAFNPRWu6aT4rlwoEQin0tOtgdTnnN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTdDMi80RTQyNkRFOEZC RUExMUVBOTQwQTFEMTlDNEY5QUUwMi8wOUZhN3BwUGl1WENnUkNLZlMwNjJCMU9l YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5RmE3cHBQaXVYQ2dSQ0tmUzA2MkIxT2VjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTdDMi80RTQyNkRFOEZCRUExMUVBOTQwQTFEMTlDNEY5QUUwMi8wOUZhN3BwUGl1 WENnUkNLZlMwNjJCMU9lYzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAI7erQiK/oqVPoYADZto3zIJR2cdFpt9oA9gc1xtrUqEEfxAsqDYIPdI4ln81 c730voZhQGjmuXm6+caXOwVSCOu/N8W8Evs0C0dpmjnlmuAUJP54gVbOD2a5FzLz uE9iroFTiU2jIaqDMq8A2i0ad2uqFRXF1C0Z2oYuRogMt5w3r8CFAMOD0Xglk0AY OhKlJCj8M0ap99gF5pai0CjeX3oMbAXTq/qTaiWjilg/05cu2v32BZKJjzWzG1+l 3eWI4pHKG/Zbh0X+mZQWBNtmhTyoJCxxQHr0V/nrv+8tCO30I43MDkLCtWMNsK0n YeDy+6SiA0y69TmPJRp1rMGPag== -----END CERTIFICATE-----Generated at Thu Sep 24 04:06:12 2026 by rpki-client