$ rpki-client -vvvf rpki.apnic.net/member_repository/A9152C54/91741220A3D111F19D82FD635311F970/k8AGrOprUHWaPH3DPvhLR6cRfWg.mft File: k8AGrOprUHWaPH3DPvhLR6cRfWg.mft (raw, json) Hash identifier: v8sYK5wD2nYl09wiIqMUhNbeoM37Y9HSvjJVZ5e6s1w= Subject key identifier: 69:71:95:A1:44:A1:99:BD:56:6E:D6:EA:F9:D0:45:02:25:65:2D:D9 Authority key identifier: 93:C0:06:AC:EA:6B:50:75:9A:3C:7D:C3:3E:F8:4B:47:A7:11:7D:68 Certificate issuer: /CN=A9152C54/serialNumber=93C006ACEA6B50759A3C7DC33EF84B47A7117D68 Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8AGrOprUHWaPH3DPvhLR6cRfWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152C54/91741220A3D111F19D82FD635311F970/k8AGrOprUHWaPH3DPvhLR6cRfWg.mft Manifest number: 10 Signing time: Mon 21 Sep 2026 09:07:10 +0000 Manifest this update: Mon 21 Sep 2026 09:07:09 +0000 Manifest next update: Mon 28 Sep 2026 09:07:09 +0000 Files and hashes: 1: k8AGrOprUHWaPH3DPvhLR6cRfWg.crl (hash: 43B6sbEyeWBO7A4DneXfMLQUmp1M1xL1ZNv5/32cERI=) 2: AD1172A4A46511F1B6EFAD894111F970.roa (hash: 6pPAKpMW2YSgyhK4I4VmYUKOhtycLfIa7D8U9x/G/q4=) 3: EXC8be9JdyHppT7JxqzJe0TXCXw.asa (hash: 93itLPNDswBkIJ+WVnIMTMwxeZsWUrco8IhBc7A8oig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152C54/91741220A3D111F19D82FD635311F970/k8AGrOprUHWaPH3DPvhLR6cRfWg.crl rsync://rpki.apnic.net/member_repository/A9152C54/91741220A3D111F19D82FD635311F970/k8AGrOprUHWaPH3DPvhLR6cRfWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8AGrOprUHWaPH3DPvhLR6cRfWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 09:07:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152C54, serialNumber=93C006ACEA6B50759A3C7DC33EF84B47A7117D68 Validity Not Before: Sep 21 09:07:09 2026 GMT Not After : Sep 28 09:07:09 2026 GMT Subject: CN=6ab0f3be-04ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:fd:d5:7b:79:99:9d:b4:91:9e:28:80:92:6e: 78:a5:20:19:69:3b:23:2a:dd:ff:c3:d6:69:91:38: e2:b2:94:41:9b:1b:b0:55:0a:f4:3f:44:0d:3b:16: bb:11:8b:07:e1:3c:00:5a:b0:b5:1e:49:11:03:f8: 87:f8:65:ac:2b:a6:4a:c5:66:27:be:72:04:a6:27: 8c:2b:89:2f:25:60:e6:a3:de:29:2e:83:4d:d7:12: c4:29:c2:25:fd:21:ff:f6:c2:a4:38:92:4d:41:af: 93:9b:78:42:45:5d:ca:d8:e9:40:cd:e5:88:2e:ed: ad:0c:fe:ce:12:d5:65:3e:88:b6:3c:d9:31:f4:bb: a9:1a:1c:e8:f7:a9:bb:ea:ea:ac:5d:0f:b2:14:cc: 0c:20:71:9e:ae:ea:9d:ce:7c:dd:d1:f0:73:be:1e: 98:b0:1c:2f:bd:c7:3f:5c:df:b1:45:4f:78:a3:0b: dd:b9:6d:08:41:1c:e8:1f:d9:94:c2:4a:eb:f7:9d: 8a:18:e1:58:f5:8e:74:27:6e:62:05:88:8f:d6:56: d7:77:e1:69:04:11:aa:08:bc:5d:af:f7:a3:b2:ad: 97:d9:13:b2:ba:b9:ce:4e:23:b6:e7:5c:67:ca:23: 95:2b:3b:61:0f:08:51:a1:1f:f6:b3:8c:2a:38:09: af:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:71:95:A1:44:A1:99:BD:56:6E:D6:EA:F9:D0:45:02:25:65:2D:D9 X509v3 Authority Key Identifier: keyid:93:C0:06:AC:EA:6B:50:75:9A:3C:7D:C3:3E:F8:4B:47:A7:11:7D:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152C54/91741220A3D111F19D82FD635311F970/k8AGrOprUHWaPH3DPvhLR6cRfWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8AGrOprUHWaPH3DPvhLR6cRfWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152C54/91741220A3D111F19D82FD635311F970/k8AGrOprUHWaPH3DPvhLR6cRfWg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:ae:2a:72:f5:28:55:c0:fe:39:c1:60:07:39:13:57:8e:da: eb:2d:cb:1c:ea:9e:02:c7:40:64:24:e1:7f:c2:da:b7:6b:2d: d7:e3:4b:68:77:50:0a:a4:5f:7a:e8:63:30:a4:10:d2:07:55: 08:94:79:df:42:a9:ce:4f:4e:38:a1:f0:7d:50:e8:70:90:82: 68:84:43:77:4c:b4:31:de:12:e6:ff:37:db:d7:7b:74:6b:97: 11:2f:b1:d1:74:c9:fd:c7:43:75:97:73:a8:50:28:ff:88:6b: 8b:fa:48:fa:30:b9:24:77:c3:64:b0:60:c0:52:e7:3e:14:01: 3e:01:1e:bf:6d:06:26:6f:9d:96:2c:13:3b:73:c8:ff:65:8b: 4c:05:ed:24:d0:49:69:1b:34:1c:9e:23:34:49:27:5a:41:97: 9b:d9:cc:61:97:3e:ca:25:04:c6:c5:55:ab:c1:be:e0:9e:44: 6e:ea:c6:6f:ef:bf:21:07:d0:49:01:ab:1e:9e:4c:2b:d1:7d: 5e:7c:5e:71:67:eb:b3:f1:a8:2f:33:c4:ca:8f:b2:06:a4:8d: 42:48:e9:34:26:ca:d5:f3:09:27:5d:cf:5b:e5:a5:05:84:9c: 2f:49:31:22:84:86:98:fa:74:1e:5a:00:5e:9e:8b:71:e0:d3: e3:55:8e:f2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MkM1NDExMC8GA1UEBRMoOTNDMDA2QUNFQTZCNTA3NTlBM0M3REMzM0VGODRCNDdB NzExN0Q2ODAeFw0yNjA5MjEwOTA3MDlaFw0yNjA5MjgwOTA3MDlaMBgxFjAUBgNV BAMTDTZhYjBmM2JlLTA0ZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCN/dV7eZmdtJGeKICSbnilIBlpOyMq3f/D1mmROOKylEGbG7BVCvQ/RA07FrsR iwfhPABasLUeSRED+If4ZawrpkrFZie+cgSmJ4wriS8lYOaj3ikug03XEsQpwiX9 If/2wqQ4kk1Br5ObeEJFXcrY6UDN5Ygu7a0M/s4S1WU+iLY82TH0u6kaHOj3qbvq 6qxdD7IUzAwgcZ6u6p3OfN3R8HO+HpiwHC+9xz9c37FFT3ijC925bQhBHOgf2ZTC Suv3nYoY4Vj1jnQnbmIFiI/WVtd34WkEEaoIvF2v96OyrZfZE7K6uc5OI7bnXGfK I5UrO2EPCFGhH/azjCo4Ca8JAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUaXGVoUSh mb1Wbtbq+dBFAiVlLdkwHwYDVR0jBBgwFoAUk8AGrOprUHWaPH3DPvhLR6cRfWgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUyQzU0LzkxNzQxMjIwQTNE MTExRjE5RDgyRkQ2MzUzMTFGOTcwL2s4QUdyT3ByVUhXYVBIM0RQdmhMUjZjUmZX Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvazhBR3JPcHJVSFdhUEgzRFB2aExSNmNSZldnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUy QzU0LzkxNzQxMjIwQTNEMTExRjE5RDgyRkQ2MzUzMTFGOTcwL2s4QUdyT3ByVUhX YVBIM0RQdmhMUjZjUmZXZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCoripy9ShVwP45wWAHORNXjtrrLcsc6p4Cx0BkJOF/wtq3ay3X40tod1AKpF96 6GMwpBDSB1UIlHnfQqnOT044ofB9UOhwkIJohEN3TLQx3hLm/zfb13t0a5cRL7HR dMn9x0N1l3OoUCj/iGuL+kj6MLkkd8NksGDAUuc+FAE+AR6/bQYmb52WLBM7c8j/ ZYtMBe0k0ElpGzQcniM0SSdaQZeb2cxhlz7KJQTGxVWrwb7gnkRu6sZv778hB9BJ Aasenkwr0X1efF5xZ+uz8agvM8TKj7IGpI1CSOk0JsrV8wknXc9b5aUFhJwvSTEi hIaY+nQeWgBenotx4NPjVY7y -----END CERTIFICATE-----Generated at Wed Sep 23 00:52:34 2026 by rpki-client