$ rpki-client -vvvf rpki.apnic.net/member_repository/A9151AA8/222C2094A26C11F18F29BA436411F970/1N9jCkQe3vrlPCXZ1mqrQ4IhbzQ.mft File: 1N9jCkQe3vrlPCXZ1mqrQ4IhbzQ.mft (raw, json) Hash identifier: XSkNcT8accpwzaDkTfpCSyQP1kXs5jiunlxjLTriMnQ= Subject key identifier: A6:96:40:DC:52:AC:BD:E6:53:5B:E1:84:D7:DA:91:9A:B8:C4:E6:E7 Authority key identifier: D4:DF:63:0A:44:1E:DE:FA:E5:3C:25:D9:D6:6A:AB:43:82:21:6F:34 Certificate issuer: /CN=A9151AA8/serialNumber=D4DF630A441EDEFAE53C25D9D66AAB4382216F34 Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1N9jCkQe3vrlPCXZ1mqrQ4IhbzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151AA8/222C2094A26C11F18F29BA436411F970/1N9jCkQe3vrlPCXZ1mqrQ4IhbzQ.mft Manifest number: 11 Signing time: Fri 25 Sep 2026 09:16:42 +0000 Manifest this update: Fri 25 Sep 2026 09:16:42 +0000 Manifest next update: Fri 02 Oct 2026 09:16:42 +0000 Files and hashes: 1: 1N9jCkQe3vrlPCXZ1mqrQ4IhbzQ.crl (hash: wNkdTRIONd8tB90FFwM+huKivRkR4GjhdFKe5g7cmJ0=) 2: B4BF1A1AA26C11F1A3A3B52B6511F970.roa (hash: UjcljmSpnML+q/8xs5PLqM53w0DosDMz4oMFTLvMaDM=) 3: B57A8048A26C11F1A3A3B52B6511F970.roa (hash: y2OHT/vLbiEsNPPOfmN97tHiYH0EfOmp/p0s1bJo294=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151AA8/222C2094A26C11F18F29BA436411F970/1N9jCkQe3vrlPCXZ1mqrQ4IhbzQ.crl rsync://rpki.apnic.net/member_repository/A9151AA8/222C2094A26C11F18F29BA436411F970/1N9jCkQe3vrlPCXZ1mqrQ4IhbzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1N9jCkQe3vrlPCXZ1mqrQ4IhbzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 09:16:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151AA8, serialNumber=D4DF630A441EDEFAE53C25D9D66AAB4382216F34 Validity Not Before: Sep 25 09:16:42 2026 GMT Not After : Oct 2 09:16:42 2026 GMT Subject: CN=6ab63bfa-1da4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:66:c7:19:75:8c:a1:80:9b:16:67:84:58:cd: 61:34:a8:00:75:54:de:11:a4:fa:45:f7:46:7d:c9: 46:c2:c0:97:a7:b1:76:3c:e0:03:b2:62:d6:4c:29: f3:44:f7:b3:77:b1:d7:e8:c4:8e:8d:f1:0f:7a:39: 8c:4a:93:7b:0f:7b:3d:0d:eb:ba:ed:64:f3:7c:13: 9a:a9:62:23:dc:27:d0:0c:5b:e4:92:12:9f:0b:8c: ff:90:21:7b:1e:aa:e7:d1:31:85:63:90:98:67:6e: 6a:dd:7e:b8:59:0e:5c:42:4e:7c:3c:5e:cd:30:73: 8c:d4:56:e7:e7:98:9f:69:98:22:f7:30:8b:fe:1a: 1b:21:77:ee:7d:36:dc:3c:12:25:c6:33:29:73:5f: 2a:f6:d7:a2:7c:de:e5:a4:d0:20:02:a6:b1:c2:8f: 5d:12:7a:42:e2:c7:d5:7c:41:0b:88:c2:5d:ce:fb: 29:f8:3e:a1:a3:f9:57:ac:6d:9e:56:36:89:7d:65: 93:5f:b0:5a:90:93:5e:a9:70:26:70:79:c1:6d:a2: cb:03:3d:5f:b0:5e:45:d8:a7:18:f4:ec:19:44:94: 96:98:32:fb:0a:00:d3:a2:22:48:3e:db:8a:ca:c6: 92:00:1e:31:58:24:48:e5:37:9b:80:d9:fe:6b:b0: 69:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:96:40:DC:52:AC:BD:E6:53:5B:E1:84:D7:DA:91:9A:B8:C4:E6:E7 X509v3 Authority Key Identifier: keyid:D4:DF:63:0A:44:1E:DE:FA:E5:3C:25:D9:D6:6A:AB:43:82:21:6F:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151AA8/222C2094A26C11F18F29BA436411F970/1N9jCkQe3vrlPCXZ1mqrQ4IhbzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1N9jCkQe3vrlPCXZ1mqrQ4IhbzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151AA8/222C2094A26C11F18F29BA436411F970/1N9jCkQe3vrlPCXZ1mqrQ4IhbzQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:f0:39:bc:77:8d:18:dc:a4:d7:6d:41:2b:5b:c2:7c:20:8d: 65:93:27:72:be:d0:15:f0:c8:fa:2b:c9:9f:d6:e9:66:66:59: d3:20:5c:00:75:10:47:12:8c:26:b0:41:a4:0e:35:cb:b2:6f: 9f:d0:28:6f:35:14:f4:5f:e7:06:2c:4b:17:6f:ed:04:88:fc: 63:61:2b:38:bb:8e:1e:69:c5:c8:bb:5f:18:0f:be:1c:98:2a: 9f:0e:de:e5:d1:1a:96:2e:a9:d7:92:63:e8:e2:62:06:14:9b: 4d:d3:69:66:02:fb:42:15:00:c0:b6:fd:70:32:69:18:ea:0c: 09:33:be:f4:f6:da:f2:29:b3:34:ab:b4:75:9a:47:6e:1d:9e: 93:28:45:f5:b8:14:37:b5:50:1c:2d:f6:69:ce:54:e4:ff:39: 3c:17:eb:95:ad:74:90:d8:a2:d1:03:76:cd:fb:2e:20:6c:65: ae:45:23:4a:a3:cc:32:80:32:1c:3a:ed:40:d4:61:a3:03:00: ba:59:bb:19:4a:e9:65:80:98:37:98:9f:e6:a3:f2:d2:9f:01: f3:5a:ba:f8:db:59:32:47:71:65:2f:76:77:48:48:19:11:b9: 56:dd:12:d5:9f:dc:66:29:fd:49:45:ef:fc:1d:16:6c:f4:76: d6:a5:55:1e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MUFBODExMC8GA1UEBRMoRDRERjYzMEE0NDFFREVGQUU1M0MyNUQ5RDY2QUFCNDM4 MjIxNkYzNDAeFw0yNjA5MjUwOTE2NDJaFw0yNjEwMDIwOTE2NDJaMBgxFjAUBgNV BAMTDTZhYjYzYmZhLTFkYTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcZscZdYyhgJsWZ4RYzWE0qAB1VN4RpPpF90Z9yUbCwJensXY84AOyYtZMKfNE 97N3sdfoxI6N8Q96OYxKk3sPez0N67rtZPN8E5qpYiPcJ9AMW+SSEp8LjP+QIXse qufRMYVjkJhnbmrdfrhZDlxCTnw8Xs0wc4zUVufnmJ9pmCL3MIv+Ghshd+59Ntw8 EiXGMylzXyr216J83uWk0CACprHCj10SekLix9V8QQuIwl3O+yn4PqGj+VesbZ5W Nol9ZZNfsFqQk16pcCZwecFtossDPV+wXkXYpxj07BlElJaYMvsKANOiIkg+24rK xpIAHjFYJEjlN5uA2f5rsGm5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUppZA3FKs veZTW+GE19qRmrjE5ucwHwYDVR0jBBgwFoAU1N9jCkQe3vrlPCXZ1mqrQ4IhbzQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUxQUE4LzIyMkMyMDk0QTI2 QzExRjE4RjI5QkE0MzY0MTFGOTcwLzFOOWpDa1FlM3ZybFBDWFoxbXFyUTRJaGJ6 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMU45akNrUWUzdnJsUENYWjFtcXJRNEloYnpRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUx QUE4LzIyMkMyMDk0QTI2QzExRjE4RjI5QkE0MzY0MTFGOTcwLzFOOWpDa1FlM3Zy bFBDWFoxbXFyUTRJaGJ6US5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAi8Dm8d40Y3KTXbUErW8J8II1lkydyvtAV8Mj6K8mf1ulmZlnTIFwAdRBHEowm sEGkDjXLsm+f0ChvNRT0X+cGLEsXb+0EiPxjYSs4u44eacXIu18YD74cmCqfDt7l 0RqWLqnXkmPo4mIGFJtN02lmAvtCFQDAtv1wMmkY6gwJM7709tryKbM0q7R1mkdu HZ6TKEX1uBQ3tVAcLfZpzlTk/zk8F+uVrXSQ2KLRA3bN+y4gbGWuRSNKo8wygDIc Ou1A1GGjAwC6WbsZSullgJg3mJ/mo/LSnwHzWrr421kyR3FlL3Z3SEgZEblW3RLV n9xmKf1JRe/8HRZs9HbWpVUe -----END CERTIFICATE-----Generated at Sat Sep 26 18:36:11 2026 by rpki-client