$ rpki-client -vvvf rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft File: sD57-ytL2vouqlCreZD3T_y8rdc.mft (raw, json) Hash identifier: S5avBMf9JiRooV1EfDe31a+XKWO32mMjbNDXkjTdX4U= Subject key identifier: 81:2B:48:87:07:CE:9C:01:DC:B8:7E:A7:D0:A6:67:D4:3E:E8:1C:72 Authority key identifier: B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7 Certificate issuer: /CN=A9150CF2/serialNumber=B03E7BFB2B4BDAFA2EAA50AB7990F74FFCBCADD7 Certificate serial: 0DC7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft Manifest number: 0DA6 Signing time: Thu 24 Sep 2026 17:54:28 +0000 Manifest this update: Thu 24 Sep 2026 17:54:28 +0000 Manifest next update: Thu 01 Oct 2026 17:54:28 +0000 Files and hashes: 1: sD57-ytL2vouqlCreZD3T_y8rdc.crl (hash: azFQbjJD+Tso8W+SQh8m3vr1yQoDyETo79gTixi8n9Q=) 2: 34060B22C2B311EE97B0B776C4F9AE02.roa (hash: Z+WXuAeNXEm2DshVUamhEUi82/2PD1ZlUuuRrwwUJi4=) 3: 029E3ED44ADF11EEB17F2D4CC4F9AE02.roa (hash: CausEKBJvcLCY2g+bHYlOvrLzaOZNNslUPs7u8h+azo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.crl rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 17:54:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3527 (0xdc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150CF2, serialNumber=B03E7BFB2B4BDAFA2EAA50AB7990F74FFCBCADD7 Validity Not Before: Sep 24 17:54:28 2026 GMT Not After : Oct 1 17:54:28 2026 GMT Subject: CN=6ab563d4-a30e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:57:59:2c:b5:9b:4a:ef:6f:83:89:db:8f:1e: 26:59:4d:90:24:2b:b3:68:26:0a:4e:03:96:33:f2: 85:7d:ce:90:c0:d0:a5:4c:ed:01:4d:cd:87:9e:88: 7e:74:a6:5f:af:14:8e:4c:d1:da:88:26:93:0d:d4: a6:58:ca:30:8d:1c:48:43:88:e1:e9:db:db:b3:99: 76:b3:1b:75:31:22:14:59:b6:a0:14:f4:a5:77:5e: fe:df:c2:91:dd:49:53:02:6e:28:1c:94:a0:b1:51: 22:ba:a8:91:27:85:15:a9:40:d5:2d:2e:1e:59:0a: f0:fe:2f:28:8a:b4:9c:6f:c5:81:bd:aa:93:7c:14: a3:b6:46:a7:c0:a8:cf:02:92:78:85:55:1a:66:de: 55:66:08:16:32:b0:65:d6:bc:d6:f5:2b:cc:e2:9e: da:f5:77:61:12:e9:0b:7f:72:15:25:4b:c0:e3:eb: 54:77:99:18:63:e4:0a:0c:b6:fb:39:73:7b:d8:ed: d2:97:85:6c:fb:30:57:9a:5b:2e:1c:2d:b1:03:17: c2:fb:f7:d3:f3:79:0b:05:ec:a0:e4:13:a6:56:5a: 60:30:1a:53:42:13:a6:ae:33:c7:9a:83:f5:da:90: 26:ff:38:42:de:6d:7e:e0:d6:fe:c5:26:76:ce:21: 2f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:2B:48:87:07:CE:9C:01:DC:B8:7E:A7:D0:A6:67:D4:3E:E8:1C:72 X509v3 Authority Key Identifier: keyid:B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:5f:f9:3d:e0:56:19:63:c9:0f:6f:4a:ae:89:56:26:e9:9f: ad:60:1d:57:7e:32:b5:f9:11:4e:87:b3:b8:24:a1:d5:b2:32: 51:5b:68:5f:60:46:8a:9b:6f:25:ad:82:cc:be:62:13:ab:4b: fb:e4:a9:ce:c0:f7:60:e2:a4:bb:11:10:7a:cf:7a:e0:57:f9: fb:d7:28:cb:e7:dd:4d:c6:9e:5a:da:15:a5:52:c3:80:c4:6a: 2e:09:ab:0d:f5:41:b1:b7:ea:c2:63:46:77:ac:05:95:ad:44: 54:10:38:9a:1d:ea:17:5e:4b:c6:78:9d:bf:c5:d9:1b:46:a8: a3:16:2b:6c:91:e2:fc:a4:76:5a:a1:b9:1e:db:70:38:61:14: 61:f2:33:ee:6b:a6:70:41:18:0d:87:87:7d:e2:78:c2:41:16: f3:9c:ef:34:f6:80:79:cf:5e:ed:d2:86:48:4b:f7:b1:1c:bb: 94:40:bb:5d:8b:12:f5:0a:cf:bd:ea:4a:49:d4:58:d0:08:e5: 7c:98:43:3d:fd:60:cf:b7:a1:e9:cd:5d:54:8c:cf:5c:3f:84: 39:5d:00:86:ce:b3:dc:a4:17:3b:80:4c:1c:f5:cd:83:c0:3e: 4c:fb:42:17:d3:5d:a7:0a:8a:a4:5f:bb:c6:69:ae:57:cb:18: 95:ae:c2:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBDRjIxMTAvBgNVBAUTKEIwM0U3QkZCMkI0QkRBRkEyRUFBNTBBQjc5OTBGNzRG RkNCQ0FERDcwHhcNMjYwOTI0MTc1NDI4WhcNMjYxMDAxMTc1NDI4WjAYMRYwFAYD VQQDEw02YWI1NjNkNC1hMzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1dZLLWbSu9vg4nbjx4mWU2QJCuzaCYKTgOWM/KFfc6QwNClTO0BTc2Hnoh+ dKZfrxSOTNHaiCaTDdSmWMowjRxIQ4jh6dvbs5l2sxt1MSIUWbagFPSld17+38KR 3UlTAm4oHJSgsVEiuqiRJ4UVqUDVLS4eWQrw/i8oirScb8WBvaqTfBSjtkanwKjP ApJ4hVUaZt5VZggWMrBl1rzW9SvM4p7a9XdhEukLf3IVJUvA4+tUd5kYY+QKDLb7 OXN72O3Sl4Vs+zBXmlsuHC2xAxfC+/fT83kLBeyg5BOmVlpgMBpTQhOmrjPHmoP1 2pAm/zhC3m1+4Nb+xSZ2ziEvuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIErSIcH zpwB3Lh+p9CmZ9Q+6BxyMB8GA1UdIwQYMBaAFLA+e/srS9r6LqpQq3mQ90/8vK3X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MENGMi9EMDBEQjc2RUY0 RUUxMUU5QUVGRUE4MTlDNEY5QUUwMi9zRDU3LXl0TDJ2b3VxbENyZVpEM1RfeThy ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NENTcteXRMMnZvdXFsQ3JlWkQzVF95OHJkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MENGMi9EMDBEQjc2RUY0RUUxMUU5QUVGRUE4MTlDNEY5QUUwMi9zRDU3LXl0TDJ2 b3VxbENyZVpEM1RfeThyZGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAq1/5PeBWGWPJD29KrolWJumfrWAdV34ytfkRToezuCSh1bIyUVtoX2BGiptv Ja2CzL5iE6tL++SpzsD3YOKkuxEQes964Ff5+9coy+fdTcaeWtoVpVLDgMRqLgmr DfVBsbfqwmNGd6wFla1EVBA4mh3qF15Lxnidv8XZG0aooxYrbJHi/KR2WqG5Httw OGEUYfIz7mumcEEYDYeHfeJ4wkEW85zvNPaAec9e7dKGSEv3sRy7lEC7XYsS9QrP vepKSdRY0AjlfJhDPf1gz7eh6c1dVIzPXD+EOV0Ahs6z3KQXO4BMHPXNg8A+TPtC F9NdpwqKpF+7xmmuV8sYla7CRA== -----END CERTIFICATE-----Generated at Sat Sep 26 04:09:20 2026 by rpki-client