$ rpki-client -vvvf rpki.apnic.net/member_repository/A9139ECA/A06FF2A4744B11F1A715B8456CA30FBC/rLt_9DfbXs46q3oR0szOQb_IQJ8.mft File: rLt_9DfbXs46q3oR0szOQb_IQJ8.mft (raw, json) Hash identifier: 1toigUaRhafzea4M/Xd0TaT8TjciFM8aNQfrHhJwAsA= Subject key identifier: 9A:8E:70:45:AE:05:33:C2:71:50:D3:F0:0C:84:44:50:A3:B4:4A:20 Authority key identifier: AC:BB:7F:F4:37:DB:5E:CE:3A:AB:7A:11:D2:CC:CE:41:BF:C8:40:9F Certificate issuer: /CN=A9139ECA/serialNumber=ACBB7FF437DB5ECE3AAB7A11D2CCCE41BFC8409F Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLt_9DfbXs46q3oR0szOQb_IQJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139ECA/A06FF2A4744B11F1A715B8456CA30FBC/rLt_9DfbXs46q3oR0szOQb_IQJ8.mft Manifest number: 2C Signing time: Mon 21 Sep 2026 08:42:22 +0000 Manifest this update: Mon 21 Sep 2026 08:42:21 +0000 Manifest next update: Mon 28 Sep 2026 08:42:21 +0000 Files and hashes: 1: rLt_9DfbXs46q3oR0szOQb_IQJ8.crl (hash: G49BxI+ea2e0of/C2EX8CqHC9JuUPJ/8Sy3Iq2x6MqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139ECA/A06FF2A4744B11F1A715B8456CA30FBC/rLt_9DfbXs46q3oR0szOQb_IQJ8.crl rsync://rpki.apnic.net/member_repository/A9139ECA/A06FF2A4744B11F1A715B8456CA30FBC/rLt_9DfbXs46q3oR0szOQb_IQJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLt_9DfbXs46q3oR0szOQb_IQJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:42:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139ECA, serialNumber=ACBB7FF437DB5ECE3AAB7A11D2CCCE41BFC8409F Validity Not Before: Sep 21 08:42:21 2026 GMT Not After : Sep 28 08:42:21 2026 GMT Subject: CN=6ab0edee-1757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:77:0e:13:fa:c9:37:5e:14:16:39:1a:a0:b1: d2:bb:10:2a:24:e7:4a:11:f1:04:bf:92:c4:79:9d: 15:86:bf:96:e1:d3:bd:41:4e:26:55:6a:f7:d3:68: f9:7c:0a:ae:b9:0e:b8:44:6e:0d:13:2d:23:c9:f3: 89:93:f2:d8:d3:7a:d6:a0:10:90:e7:73:74:94:3a: a0:66:2a:66:fc:e8:f4:41:83:9d:db:72:bb:cf:c1: a6:a4:8b:fa:a5:42:54:3e:09:d1:62:db:4b:74:6c: ae:a9:0b:71:07:73:76:e3:a7:27:f2:bc:ed:c7:96: 4a:5f:7b:c7:c5:4a:dd:32:89:4a:d8:0d:8e:4a:44: 72:be:79:43:d9:d9:7e:67:3d:ad:8c:ab:2f:70:fe: 7d:c8:a0:9a:f3:14:5b:fe:4b:59:13:c5:ac:9a:2e: b0:4f:e6:5e:cc:e0:7e:84:57:26:09:07:e1:8b:e6: 36:d8:f4:22:6b:ec:5d:fb:76:80:c8:86:15:8a:54: ae:bd:b1:e7:ce:c9:81:7f:3f:58:6a:9b:c9:6d:4f: cd:c8:ff:a0:fe:bd:d5:bc:ee:9f:3d:41:96:7a:ab: e8:54:4a:12:a1:a3:46:a1:33:17:83:2f:d4:76:8c: 74:b3:51:53:cf:5d:75:52:23:c9:4a:b2:f0:a7:93: 66:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:8E:70:45:AE:05:33:C2:71:50:D3:F0:0C:84:44:50:A3:B4:4A:20 X509v3 Authority Key Identifier: keyid:AC:BB:7F:F4:37:DB:5E:CE:3A:AB:7A:11:D2:CC:CE:41:BF:C8:40:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139ECA/A06FF2A4744B11F1A715B8456CA30FBC/rLt_9DfbXs46q3oR0szOQb_IQJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLt_9DfbXs46q3oR0szOQb_IQJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139ECA/A06FF2A4744B11F1A715B8456CA30FBC/rLt_9DfbXs46q3oR0szOQb_IQJ8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:f2:83:ce:87:f6:ce:4b:d4:84:a7:e8:f5:ee:0f:ca:36:49: bb:f2:c3:17:13:3f:ae:d5:4f:27:5b:2d:2c:b8:96:be:7b:e1: ed:57:2f:47:10:e8:23:5a:f5:ae:66:f6:e2:b1:d8:da:0d:2b: 8d:7b:1f:09:a4:55:ec:d9:b8:2c:aa:93:24:22:cf:1f:d6:52: bb:7e:20:6b:3c:a9:8a:38:71:da:55:06:73:de:01:c9:5d:20: e3:80:5c:6d:03:57:6f:7e:1c:66:71:81:0f:92:19:72:88:cc: a3:dc:b2:44:82:9c:e5:ff:f8:22:43:da:47:04:dd:50:8b:1a: fe:4f:9a:10:01:20:14:dd:d7:a2:a2:86:e1:a7:4a:43:28:67: 53:15:a7:72:48:3c:ee:76:df:fe:cd:5f:59:76:ca:d4:a9:23: ab:b6:72:a8:d9:11:21:59:bf:10:aa:30:92:a0:86:29:e8:4f: 12:a8:a9:e5:eb:4a:11:11:a5:01:bf:39:e5:79:57:cf:7f:22: be:23:07:2e:8f:12:9b:7b:e0:de:cf:68:64:17:56:e8:0e:46: e0:6e:72:06:f8:d9:c2:90:41:29:bc:96:3a:a2:92:f3:aa:d4: 3f:dc:3c:49:a9:eb:4f:06:12:45:76:52:af:5a:98:80:f2:7d: 2e:78:3f:a8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz OUVDQTExMC8GA1UEBRMoQUNCQjdGRjQzN0RCNUVDRTNBQUI3QTExRDJDQ0NFNDFC RkM4NDA5RjAeFw0yNjA5MjEwODQyMjFaFw0yNjA5MjgwODQyMjFaMBgxFjAUBgNV BAMTDTZhYjBlZGVlLTE3NTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCJdw4T+sk3XhQWORqgsdK7ECok50oR8QS/ksR5nRWGv5bh071BTiZVavfTaPl8 Cq65DrhEbg0TLSPJ84mT8tjTetagEJDnc3SUOqBmKmb86PRBg53bcrvPwaaki/ql QlQ+CdFi20t0bK6pC3EHc3bjpyfyvO3Hlkpfe8fFSt0yiUrYDY5KRHK+eUPZ2X5n Pa2Mqy9w/n3IoJrzFFv+S1kTxayaLrBP5l7M4H6EVyYJB+GL5jbY9CJr7F37doDI hhWKVK69sefOyYF/P1hqm8ltT83I/6D+vdW87p89QZZ6q+hUShKho0ahMxeDL9R2 jHSzUVPPXXVSI8lKsvCnk2aBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUmo5wRa4F M8JxUNPwDIREUKO0SiAwHwYDVR0jBBgwFoAUrLt/9DfbXs46q3oR0szOQb/IQJ8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5RUNBL0EwNkZGMkE0NzQ0 QjExRjFBNzE1Qjg0NTZDQTMwRkJDL3JMdF85RGZiWHM0NnEzb1Iwc3pPUWJfSVFK OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvckx0XzlEZmJYczQ2cTNvUjBzek9RYl9JUUo4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5 RUNBL0EwNkZGMkE0NzQ0QjExRjFBNzE1Qjg0NTZDQTMwRkJDL3JMdF85RGZiWHM0 NnEzb1Iwc3pPUWJfSVFKOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA88oPOh/bOS9SEp+j17g/KNkm78sMXEz+u1U8nWy0suJa+e+HtVy9HEOgjWvWu ZvbisdjaDSuNex8JpFXs2bgsqpMkIs8f1lK7fiBrPKmKOHHaVQZz3gHJXSDjgFxt A1dvfhxmcYEPkhlyiMyj3LJEgpzl//giQ9pHBN1Qixr+T5oQASAU3deioobhp0pD KGdTFadySDzudt/+zV9ZdsrUqSOrtnKo2REhWb8QqjCSoIYp6E8SqKnl60oREaUB vznleVfPfyK+IwcujxKbe+Dez2hkF1boDkbgbnIG+NnCkEEpvJY6opLzqtQ/3DxJ qetPBhJFdlKvWpiA8n0ueD+o -----END CERTIFICATE-----Generated at Tue Sep 22 21:26:21 2026 by rpki-client