$ rpki-client -vvvf rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/V0mF4m2MdxawntUDGbTOZJYd5w0.mft File: V0mF4m2MdxawntUDGbTOZJYd5w0.mft (raw, json) Hash identifier: JaS7EPx53S3hru8uYve/lsINqAoLEZGsOXcjmBJfKsM= Subject key identifier: 7A:58:4E:1D:EB:C2:C5:79:0D:70:1C:8B:55:C7:D4:21:5C:F1:81:64 Authority key identifier: 57:49:85:E2:6D:8C:77:16:B0:9E:D5:03:19:B4:CE:64:96:1D:E7:0D Certificate issuer: /CN=A9146ABC/serialNumber=574985E26D8C7716B09ED50319B4CE64961DE70D Certificate serial: 0261 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V0mF4m2MdxawntUDGbTOZJYd5w0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/V0mF4m2MdxawntUDGbTOZJYd5w0.mft Manifest number: 024F Signing time: Wed 23 Sep 2026 02:11:43 +0000 Manifest this update: Wed 23 Sep 2026 02:11:43 +0000 Manifest next update: Wed 30 Sep 2026 02:11:43 +0000 Files and hashes: 1: V0mF4m2MdxawntUDGbTOZJYd5w0.crl (hash: LnY5Nhf5S3nUruVCdu8ZODZot6ML6SpaXEBD2R5tuI8=) 2: 67CDF190321211EEA6FE6D43C4F9AE02.roa (hash: IPJpEJ2b1P619Sycsmd/PwlrksD/ztfD2mrryV7B1ps=) 3: 5D4D209030ED11EE9A24D25BC4F9AE02.roa (hash: 6eIJZK0oiLd0UznYNIj37wg5WuQq/dk6pLPO3ugwOzA=) 4: 5DC923B630ED11EE9A24D25BC4F9AE02.roa (hash: mldR1c5S1yIfEmhTTVAPWz7vwYz+ft3qmT964ffqtmQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/V0mF4m2MdxawntUDGbTOZJYd5w0.crl rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/V0mF4m2MdxawntUDGbTOZJYd5w0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V0mF4m2MdxawntUDGbTOZJYd5w0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 02:11:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 609 (0x261) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146ABC, serialNumber=574985E26D8C7716B09ED50319B4CE64961DE70D Validity Not Before: Sep 23 02:11:43 2026 GMT Not After : Sep 30 02:11:43 2026 GMT Subject: CN=6ab3355f-58a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:57:0f:f7:b6:fe:30:cb:82:f6:ab:d7:83:a8: d6:b4:3c:3d:1b:b3:87:e7:92:5c:f2:29:78:62:33: 79:43:24:63:cd:c7:26:61:8c:f3:8b:e3:e3:3f:f4: cc:33:33:d0:3c:aa:57:da:43:1e:b4:6a:8c:74:b8: b1:b2:00:9b:2d:06:26:70:fc:1f:f1:5c:85:39:8d: eb:a3:1d:5a:09:f0:ed:5e:bb:23:a1:9b:74:99:21: 46:e5:1b:5d:7f:1d:fd:e1:e9:5e:0d:97:18:5d:16: d6:58:f5:1f:f9:54:a5:23:d9:94:d8:63:f1:aa:39: 6c:d1:e9:f2:dd:8c:8a:1a:e5:b4:b7:cb:52:8a:29: 08:ea:d1:9d:c1:fa:f1:91:f5:a0:ca:0d:56:d9:e6: da:10:94:d3:63:8c:d8:d5:6b:09:81:2a:a2:5e:ef: aa:5b:ed:d2:e3:b6:50:82:bb:fe:a7:d0:2c:6b:3f: 34:76:3c:83:db:39:88:a8:21:04:56:75:d9:9d:7b: 92:eb:dc:f1:42:7a:e2:bd:86:fa:f8:1d:d8:2c:a1: dc:6d:36:e9:a6:a9:05:a4:5f:25:f7:ee:a6:a0:82: 6e:31:d9:cf:a2:b1:38:00:8c:99:87:34:fd:4b:e0: e0:ca:5a:49:94:c5:c7:7f:bc:e9:b2:4b:b6:e5:4d: 69:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:58:4E:1D:EB:C2:C5:79:0D:70:1C:8B:55:C7:D4:21:5C:F1:81:64 X509v3 Authority Key Identifier: keyid:57:49:85:E2:6D:8C:77:16:B0:9E:D5:03:19:B4:CE:64:96:1D:E7:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/V0mF4m2MdxawntUDGbTOZJYd5w0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V0mF4m2MdxawntUDGbTOZJYd5w0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/V0mF4m2MdxawntUDGbTOZJYd5w0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:ef:6c:ea:0a:4b:52:5d:51:36:36:72:0d:66:65:68:bb:e1: d0:d8:43:a2:3f:be:f6:31:1d:f9:c7:e7:5c:09:cd:5a:b8:ad: 79:91:e6:84:62:44:0a:14:17:5d:87:3b:18:69:34:b0:08:14: d3:5e:a1:7c:43:e4:98:ed:c8:68:23:4a:00:d2:03:8a:79:30: 66:fc:97:b9:ba:5e:5a:c7:16:3c:1b:ab:b5:ff:00:4f:bd:ac: 22:bd:21:3c:89:a2:ce:b5:35:3b:46:4f:39:84:77:c6:16:1c: c5:d3:22:e5:ba:bc:40:25:2b:2d:74:74:ee:5b:22:33:a5:db: 03:97:86:ff:cd:4e:f2:d0:df:02:94:0b:4b:62:d1:2d:f5:39: 94:a0:0f:52:6f:8b:49:b2:4d:82:dc:07:8b:09:b9:9c:cf:f7: 44:70:20:48:ba:bf:ae:9b:bb:c3:40:c8:fc:43:f5:1c:0b:b4: 9a:9e:06:e5:28:ff:80:e4:e0:92:b5:4b:14:68:49:ec:bf:bf: 64:59:5e:b4:ad:ee:83:c8:bc:e8:ba:ab:75:96:1c:46:4c:eb: 4f:e5:12:bc:e3:46:e1:75:74:3d:7c:db:97:2b:4b:27:b2:85: 24:e3:ca:ac:34:c1:f5:0e:05:57:e0:5a:2f:e6:f8:5a:7b:23: 4f:81:1d:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBQkMxMTAvBgNVBAUTKDU3NDk4NUUyNkQ4Qzc3MTZCMDlFRDUwMzE5QjRDRTY0 OTYxREU3MEQwHhcNMjYwOTIzMDIxMTQzWhcNMjYwOTMwMDIxMTQzWjAYMRYwFAYD VQQDEw02YWIzMzU1Zi01OGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp1cP97b+MMuC9qvXg6jWtDw9G7OH55Jc8il4YjN5QyRjzccmYYzzi+PjP/TM MzPQPKpX2kMetGqMdLixsgCbLQYmcPwf8VyFOY3rox1aCfDtXrsjoZt0mSFG5Rtd fx394eleDZcYXRbWWPUf+VSlI9mU2GPxqjls0eny3YyKGuW0t8tSiikI6tGdwfrx kfWgyg1W2ebaEJTTY4zY1WsJgSqiXu+qW+3S47ZQgrv+p9Asaz80djyD2zmIqCEE VnXZnXuS69zxQnrivYb6+B3YLKHcbTbppqkFpF8l9+6moIJuMdnPorE4AIyZhzT9 S+DgylpJlMXHf7zpsku25U1phwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHpYTh3r wsV5DXAci1XH1CFc8YFkMB8GA1UdIwQYMBaAFFdJheJtjHcWsJ7VAxm0zmSWHecN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkFCQy9GMEU3OTg3QzMw RUMxMUVFOTgwRUIyNDdDNEY5QUUwMi9WMG1GNG0yTWR4YXdudFVER2JUT1pKWWQ1 dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1YwbUY0bTJNZHhhd250VURHYlRPWkpZZDV3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkFCQy9GMEU3OTg3QzMwRUMxMUVFOTgwRUIyNDdDNEY5QUUwMi9WMG1GNG0yTWR4 YXdudFVER2JUT1pKWWQ1dzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZO9s6gpLUl1RNjZyDWZlaLvh0NhDoj++9jEd+cfnXAnNWriteZHmhGJEChQX XYc7GGk0sAgU016hfEPkmO3IaCNKANIDinkwZvyXubpeWscWPBurtf8AT72sIr0h PImizrU1O0ZPOYR3xhYcxdMi5bq8QCUrLXR07lsiM6XbA5eG/81O8tDfApQLS2LR LfU5lKAPUm+LSbJNgtwHiwm5nM/3RHAgSLq/rpu7w0DI/EP1HAu0mp4G5Sj/gOTg krVLFGhJ7L+/ZFletK3ug8i86LqrdZYcRkzrT+USvONG4XV0PXzblytLJ7KFJOPK rDTB9Q4FV+BaL+b4WnsjT4Edwg== -----END CERTIFICATE-----Generated at Wed Sep 23 17:38:59 2026 by rpki-client