$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft File: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft (raw, json) Hash identifier: t3mJsG3sW1tvVGbRukqEQ0evEu2Mw08auQbtQMoq5kA= Subject key identifier: 69:DD:5F:28:03:23:B0:04:56:71:09:42:72:22:32:3E:3C:35:46:68 Authority key identifier: BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F Certificate issuer: /CN=A9149F3E/serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F Certificate serial: 364E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft Manifest number: 35EE Signing time: Tue 22 Sep 2026 14:22:11 +0000 Manifest this update: Tue 22 Sep 2026 14:22:10 +0000 Manifest next update: Tue 29 Sep 2026 14:22:10 +0000 Files and hashes: 1: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl (hash: kuO3TcPqQ/u7f1M8rsGPJva8lRzkKjevT93DEdwYs5s=) 2: 8064BD9A531811F19CFFFF86C0833773.roa (hash: zSJ6qgvJW4YfFqxprlmttvge2oBgvp5fBh5eAOZUFpw=) 3: AC0031765B6E11EF997EC429C4F9AE02.roa (hash: tb4d2WGXbPvyRotaqWLKmyeyfbjygOlLQLA75/yIS44=) 4: 6D188172BF5C11F098B79354C4F9AE02.roa (hash: bnNYNW5woRijMAziiX+GdjxArSN9zPt7BYM1OrTOpgU=) 5: 34013D1A69E911F18D43391FA247A888.roa (hash: B5hqzXpedqgnZtGOdEIoJ/WqxIH1YMp8ISvKWijhIAE=) 6: 783697D2107A11F1854A0E192E3D8C67.roa (hash: +OAeGwPI3EPeO4SeSL4WG+KcFLm2kg/q6A7zTPgsK3U=) 7: 66EFC4305B7211EF8C1A8E4EC4F9AE02.roa (hash: Pb/eLHkERr63KOIiKN491GilAbuAMZ4Dkw6lIR/9gwg=) 8: 583C86380BB211ED8F05E427C4F9AE02.roa (hash: zOvHuNJfy1g+VIIU05MR/IwrnELnixR7jdUcwFZKVV0=) 9: 666EE7025B7211EF8C1A8E4EC4F9AE02.roa (hash: 44+Ej6Drcby9zo63RA/x3RlFQ8dLgOq2yjB6zWmXKWk=) 10: 0C79C6F678D811F192CB568F96A30FBC.roa (hash: kU7keJ3x9xRJ8liHmf1Z7GOvHcN9zrhffJ5NaB0tInI=) 11: 6193036675CA11F1B93BCE9E67A30FBC.roa (hash: v1F73588I5TIbxHibltwszQp+2stCp9gQQEXZntRoSg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:22:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13902 (0x364e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F Validity Not Before: Sep 22 14:22:10 2026 GMT Not After : Sep 29 14:22:10 2026 GMT Subject: CN=6ab28f12-f907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e1:5f:84:0f:ea:77:f2:4c:76:00:46:b5:6b: e2:10:e1:fe:58:22:fd:87:0f:91:51:04:70:bb:1f: 36:b2:a5:3f:b7:e2:0d:b1:8b:ff:e7:49:a3:54:3b: ca:01:0b:b0:a7:d8:1f:fc:4c:2f:40:62:20:e6:53: 8f:de:5d:e4:4c:08:9f:89:61:a9:f9:89:46:d7:c2: f6:a2:5c:0d:ad:71:6f:9b:74:ee:3e:9b:6b:26:cc: ee:9d:c8:86:3b:62:6f:cd:78:fb:d1:c8:2e:bd:d7: 88:d9:4f:02:a4:3a:ec:8a:fb:6c:74:76:de:c9:b9: 8c:59:24:a2:02:da:f3:da:e0:1e:4b:04:aa:f6:7e: 92:86:11:ce:55:ea:84:40:53:7b:2b:d5:77:8a:f2: eb:37:81:cd:e2:80:28:03:e3:1c:1e:b3:29:93:d5: 8a:42:32:11:90:41:29:4b:8b:91:1c:51:d6:73:2a: af:73:65:55:b6:c6:68:3e:c2:4e:f6:0d:43:4d:50: 61:59:d0:3c:6a:e2:53:4a:ed:ef:a7:05:03:3c:ff: 24:3c:10:e6:cd:99:1d:56:d6:a4:01:65:8d:a8:b9: 90:8d:07:6c:7c:06:9b:52:36:a1:88:c9:3e:88:81: 15:5f:ef:9e:b1:8e:45:23:7d:8b:15:ab:16:7a:12: 52:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:DD:5F:28:03:23:B0:04:56:71:09:42:72:22:32:3E:3C:35:46:68 X509v3 Authority Key Identifier: keyid:BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:9a:6e:bf:e7:c8:2f:36:13:c0:0b:c8:14:38:5e:f6:eb:bf: 89:92:e9:5f:d5:89:19:79:36:8c:9b:53:f6:94:67:ba:6f:b7: d0:53:1f:f2:20:f1:ce:77:4f:be:fa:32:c1:59:61:8c:89:af: d5:29:05:8a:bc:a8:9a:24:57:4d:24:f9:19:88:ea:5d:44:d6: db:13:0a:6a:3d:30:d8:f4:af:5c:1d:f3:1f:a3:b7:47:70:3a: 34:10:c0:0e:d5:e8:6c:b0:ba:7c:9f:0a:1d:0d:3c:5f:bd:92: 0b:e0:93:f5:09:54:19:5c:be:28:cd:34:fb:1a:cd:f6:32:a6: 3c:a9:bb:c7:bf:72:f7:07:b1:12:46:4c:9e:29:a9:ed:59:4f: 61:50:3f:c7:0e:46:db:fe:b6:fa:9d:9e:47:9d:27:1c:23:68: a3:66:05:d9:44:99:f3:5f:90:6b:e2:75:8e:11:16:59:a0:03: e1:30:81:fa:7d:30:6f:44:b4:e1:58:b5:d5:5a:fc:01:43:95: 72:c8:a1:d5:d1:87:df:5c:bc:f1:33:1a:0c:03:b4:0e:66:86: bb:bf:87:db:50:a5:a4:12:d3:a4:c3:a8:4d:05:70:bb:66:df: 8b:b7:05:16:45:8f:c8:26:7b:fd:df:20:76:76:48:66:b9:5c: 59:a6:a1:53 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEJGMEU2RjRFRTBFMTdEREU4QzRBMjRCRjg5N0QxOUI4 N0FBNTc1OUYwHhcNMjYwOTIyMTQyMjEwWhcNMjYwOTI5MTQyMjEwWjAYMRYwFAYD VQQDEw02YWIyOGYxMi1mOTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAueFfhA/qd/JMdgBGtWviEOH+WCL9hw+RUQRwux82sqU/t+INsYv/50mjVDvK AQuwp9gf/EwvQGIg5lOP3l3kTAifiWGp+YlG18L2olwNrXFvm3TuPptrJszunciG O2JvzXj70cguvdeI2U8CpDrsivtsdHbeybmMWSSiAtrz2uAeSwSq9n6ShhHOVeqE QFN7K9V3ivLrN4HN4oAoA+McHrMpk9WKQjIRkEEpS4uRHFHWcyqvc2VVtsZoPsJO 9g1DTVBhWdA8auJTSu3vpwUDPP8kPBDmzZkdVtakAWWNqLmQjQdsfAabUjahiMk+ iIEVX++esY5FI32LFasWehJS9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGndXygD I7AEVnEJQnIiMj48NUZoMB8GA1UdIwQYMBaAFL8Ob07g4X3ejEokv4l9Gbh6pXWf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS85QTg1QkI1MDFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi92dzV2VHVEaGZkNk1TaVNfaVgwWnVIcWxk WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3Z3NXZUdURoZmQ2TVNpU19pWDBadUhxbGRaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUYzRS85QTg1QkI1MDFEODIxMUUyQkM2NDE3RDcwOEIwMkNEMi92dzV2VHVEaGZk Nk1TaVNfaVgwWnVIcWxkWjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPJpuv+fILzYTwAvIFDhe9uu/iZLpX9WJGXk2jJtT9pRnum+30FMf8iDxzndP vvoywVlhjImv1SkFiryomiRXTST5GYjqXUTW2xMKaj0w2PSvXB3zH6O3R3A6NBDA DtXobLC6fJ8KHQ08X72SC+CT9QlUGVy+KM00+xrN9jKmPKm7x79y9wexEkZMnimp 7VlPYVA/xw5G2/62+p2eR50nHCNoo2YF2USZ81+Qa+J1jhEWWaAD4TCB+n0wb0S0 4Vi11Vr8AUOVcsih1dGH31y88TMaDAO0DmaGu7+H21ClpBLTpMOoTQVwu2bfi7cF FkWPyCZ7/d8gdnZIZrlcWaahUw== -----END CERTIFICATE-----Generated at Wed Sep 23 19:06:35 2026 by rpki-client