$ rpki-client -vvvf rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft File: 09Fa7ppPiuXCgRCKfS062B1Oec0.mft (raw, json) Hash identifier: bS9BFe5gHhc5q7FyorLB/Ql8Tsm42S+aCN8i9hUZK2M= Subject key identifier: B1:E0:94:8F:C0:B3:33:A9:95:19:19:34:F8:71:52:64:16:09:87:92 Authority key identifier: D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD Certificate issuer: /CN=A91397C2/serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD Certificate serial: 0912 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft Manifest number: 08D9 Signing time: Thu 24 Sep 2026 20:29:06 +0000 Manifest this update: Thu 24 Sep 2026 20:29:05 +0000 Manifest next update: Thu 01 Oct 2026 20:29:05 +0000 Files and hashes: 1: 09Fa7ppPiuXCgRCKfS062B1Oec0.crl (hash: om/DjM8SHfUBuUPtX8DJPlUbT8mByNFfx8wrSkE14mY=) 2: C3738F60A78511F0B1D3342CC4F9AE02.roa (hash: tB/DnIqV82CpIIhO+TP7hcH1C9TgViQTWGZ17z9LsKo=) 3: 0C64C6B2821011F0B329B866C4F9AE02.roa (hash: UuZBWjQy/vvCDj1GH11Ut9+9Pjsx/5KL/8Qu7tKsi7U=) 4: 7F9EB0A28CF111F09EC8727CC4F9AE02.roa (hash: gzcB5bzyDXKQ7TWulNDMH2WNKACJo+cBlc1OpEzaIqo=) 5: 3AA556009A8411EFB791ED77C4F9AE02.roa (hash: 6t+wjHRQ/GqT5IcSFRj+6zc7NKRi89qTochP2LMsRS8=) 6: E4FA38362D2311F1A198B1F8B7833773.roa (hash: AxJKOqSnxksdZpHOPb0q92RjtR735qgr4EIIyE6SdIo=) 7: 931A1664264611F1BB7525369F833773.roa (hash: O+dFRmqz0HLQWE2NlORO6GptWeFGJW4FEbE2GeFkulo=) 8: BE79CDCE16AF11F08B8C4061C4F9AE02.roa (hash: PXtviaHqQJLCMEu9tn+Fq2a2NfU37e2CJGxdPkOxh1g=) 9: B7AD6F08264611F1A7E2573D9F833773.roa (hash: cAi1E/gIPdIvRZ5EylPtBXr5xfvPwzP6uzvwERgkasg=) 10: 29BC840E002711EB8FA6A142C4F9AE02.roa (hash: 1hK6aCJ+7Fb1oUPOZ4u6IyJKzDYRKvTsmB4Y2o3Noe8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 20:29:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2322 (0x912) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91397C2, serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD Validity Not Before: Sep 24 20:29:05 2026 GMT Not After : Oct 1 20:29:05 2026 GMT Subject: CN=6ab58811-43df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:06:d9:1f:5d:ae:eb:8a:86:25:b2:03:8f:e4: 54:86:f0:ab:5e:59:ca:87:89:ef:60:cb:40:85:88: 9a:a9:35:20:80:af:6a:79:02:7a:a7:32:09:30:a0: 58:8a:b9:a4:d0:46:69:74:02:96:31:f0:59:d3:f7: 2b:b8:7d:bf:2b:83:51:76:5d:05:4d:75:ec:01:2f: 4f:5e:34:cc:5d:ba:c8:41:e4:f5:91:03:ae:14:bc: e8:12:4b:61:28:dd:e1:08:5c:e0:c2:87:fe:09:c5: a9:22:9b:91:e5:a7:92:5a:8b:27:e9:f1:47:c8:72: b4:b3:97:54:54:db:93:90:9f:e2:3e:7e:c4:3e:bd: 51:64:68:a2:d0:f7:f0:39:64:c4:b7:78:2d:84:5a: 51:57:65:36:a8:86:fb:57:a4:b3:c6:19:7e:3a:8b: 2a:0e:ec:e5:d4:39:ed:06:50:6e:f4:76:9d:e2:35: 38:be:c3:18:8b:46:79:aa:cc:7b:21:e2:68:62:40: 0d:e0:52:df:1d:28:50:51:1f:d5:d8:50:a3:6a:5a: 0f:f7:e4:98:b8:2a:07:27:93:78:b4:07:15:0a:4b: f3:16:56:55:61:a3:fa:f6:24:bd:12:04:9e:e2:51: 62:23:96:a7:d4:44:03:c8:61:0c:ca:f8:31:b0:9a: 62:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:E0:94:8F:C0:B3:33:A9:95:19:19:34:F8:71:52:64:16:09:87:92 X509v3 Authority Key Identifier: keyid:D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:b1:36:77:ab:84:4b:ab:e0:bd:2c:55:8c:72:d3:8b:15:86: 1d:8b:a5:30:cf:5c:87:47:66:4a:e6:05:50:c6:79:b7:fe:d8: 63:71:08:95:13:4c:ef:9a:65:70:42:25:69:ac:bc:cf:69:16: ad:02:6b:23:60:25:7f:0f:82:ba:e8:5e:70:db:7b:64:c0:b0: 51:c5:3d:3d:b9:db:6f:56:87:55:61:7c:cb:d8:9f:52:55:a9: 70:c4:35:40:73:18:54:56:66:1a:b9:3b:f6:c2:26:14:21:2a: e9:ef:4b:e8:5c:d3:a8:0e:05:ca:ff:82:36:8b:15:9b:c3:e2: 14:ff:e3:8c:3e:ff:43:cc:3f:2f:99:d1:b0:c6:f9:4d:2a:a2: a8:7b:a8:57:8e:1e:f0:9c:d9:d0:12:f0:02:d5:f6:57:5d:2f: de:e6:1f:51:ff:b9:90:9b:7f:6c:61:04:2e:cd:6e:bb:6a:05: e4:82:9f:4c:a7:fb:c1:26:9d:38:88:24:eb:6a:17:bd:fe:fc: 0e:a5:c5:03:61:7d:58:0d:03:5b:c8:ef:40:06:f0:be:47:8c: 12:2c:ea:19:5d:07:e5:d4:39:1e:0b:b8:88:62:bc:4c:8d:bb: 9a:80:97:6d:12:40:0a:d1:49:62:60:cb:cc:74:28:da:96:1a: 5b:38:6a:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCRIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk3QzIxMTAvBgNVBAUTKEQzRDE1QUVFOUE0RjhBRTVDMjgxMTA4QTdEMkQzQUQ4 MUQ0RTc5Q0QwHhcNMjYwOTI0MjAyOTA1WhcNMjYxMDAxMjAyOTA1WjAYMRYwFAYD VQQDEw02YWI1ODgxMS00M2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQbZH12u64qGJbIDj+RUhvCrXlnKh4nvYMtAhYiaqTUggK9qeQJ6pzIJMKBY irmk0EZpdAKWMfBZ0/cruH2/K4NRdl0FTXXsAS9PXjTMXbrIQeT1kQOuFLzoEkth KN3hCFzgwof+CcWpIpuR5aeSWosn6fFHyHK0s5dUVNuTkJ/iPn7EPr1RZGii0Pfw OWTEt3gthFpRV2U2qIb7V6Szxhl+OosqDuzl1DntBlBu9Had4jU4vsMYi0Z5qsx7 IeJoYkAN4FLfHShQUR/V2FCjaloP9+SYuCoHJ5N4tAcVCkvzFlZVYaP69iS9EgSe 4lFiI5an1EQDyGEMyvgxsJpiuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLHglI/A szOplRkZNPhxUmQWCYeSMB8GA1UdIwQYMBaAFNPRWu6aT4rlwoEQin0tOtgdTnnN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTdDMi80RTQyNkRFOEZC RUExMUVBOTQwQTFEMTlDNEY5QUUwMi8wOUZhN3BwUGl1WENnUkNLZlMwNjJCMU9l YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5RmE3cHBQaXVYQ2dSQ0tmUzA2MkIxT2VjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTdDMi80RTQyNkRFOEZCRUExMUVBOTQwQTFEMTlDNEY5QUUwMi8wOUZhN3BwUGl1 WENnUkNLZlMwNjJCMU9lYzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG7E2d6uES6vgvSxVjHLTixWGHYulMM9ch0dmSuYFUMZ5t/7YY3EIlRNM75pl cEIlaay8z2kWrQJrI2Alfw+CuuhecNt7ZMCwUcU9Pbnbb1aHVWF8y9ifUlWpcMQ1 QHMYVFZmGrk79sImFCEq6e9L6FzTqA4Fyv+CNosVm8PiFP/jjD7/Q8w/L5nRsMb5 TSqiqHuoV44e8JzZ0BLwAtX2V10v3uYfUf+5kJt/bGEELs1uu2oF5IKfTKf7wSad OIgk62oXvf78DqXFA2F9WA0DW8jvQAbwvkeMEizqGV0H5dQ5Hgu4iGK8TI27moCX bRJACtFJYmDLzHQo2pYaWzhqOA== -----END CERTIFICATE-----Generated at Sat Sep 26 02:10:41 2026 by rpki-client