$ rpki-client -vvvf rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft File: rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft (raw, json) Hash identifier: JVygJk0B/7S/SFqoCUpdJ79pKhGTK5Qm90mSHk0+q64= Subject key identifier: 39:89:36:91:67:1D:FD:13:36:2D:09:4C:7E:04:C2:7D:FA:D5:56:E2 Authority key identifier: AC:D4:F8:32:F6:D8:39:78:BE:69:59:D6:98:3F:E3:58:F3:B7:A9:25 Certificate issuer: /CN=A9152C89/serialNumber=ACD4F832F6D83978BE6959D6983FE358F3B7A925 Certificate serial: 0583 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft Manifest number: 0575 Signing time: Sat 26 Sep 2026 23:22:54 +0000 Manifest this update: Sat 26 Sep 2026 23:22:53 +0000 Manifest next update: Sat 03 Oct 2026 23:22:53 +0000 Files and hashes: 1: rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl (hash: 4OKv2kh0L0CqQMDjv1OO5jfeqrBoU5FZKfOfwWKfoHA=) 2: 1291593861AC11ED9EFE1B4DC4F9AE02.roa (hash: JfzH8J7I3Xe9UEf/VNBPygrk3zbv7cEsEtGZ7BOGvr8=) 3: 33DAC0AE640211EDA193F079C4F9AE02.roa (hash: ybViUyQ0AAqzvnSq9WOp3P59LX2uT96EcoWguD8yea0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 23:22:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1411 (0x583) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152C89, serialNumber=ACD4F832F6D83978BE6959D6983FE358F3B7A925 Validity Not Before: Sep 26 23:22:53 2026 GMT Not After : Oct 3 23:22:53 2026 GMT Subject: CN=6ab853ce-2618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b4:14:2c:bd:04:13:1b:77:2a:7e:e7:e4:ea: a9:31:53:ab:d1:b2:d5:fb:d2:2e:56:6f:84:1a:66: fd:94:aa:bf:2d:28:5e:80:08:54:28:8a:2a:81:54: 78:65:c5:a2:05:26:f0:02:e3:02:e4:f7:cf:c0:8b: d3:bd:b2:06:bd:23:fe:64:9a:d8:1d:a9:c8:94:ac: e9:14:33:10:d2:96:d3:70:5c:e5:e7:7a:96:28:9a: f8:63:2b:fa:a9:a5:8b:2f:bb:55:e3:e4:ac:0c:f3: 30:16:2c:c9:c5:42:09:ef:ad:bd:2b:12:3b:7d:bd: 11:34:0c:0a:ea:4a:cd:16:08:73:56:16:1d:d0:de: 66:b2:80:5b:ef:94:34:b9:c8:4d:90:c3:a3:2f:2c: 8a:8e:b4:93:0f:d2:31:a8:77:26:2e:5d:ce:54:2c: 3f:dd:ba:10:24:99:a7:1a:4a:01:a9:09:f4:89:56: 11:11:8a:71:ca:4e:b8:89:7c:71:87:ff:71:ae:b6: 2c:0f:de:aa:d9:92:04:4a:aa:9d:29:03:f6:4e:19: 14:56:95:e9:7f:7b:03:6c:43:a8:b4:d4:51:be:31: 0a:eb:ab:c9:cd:ca:32:87:3c:08:46:15:75:3e:6e: ba:b9:b8:cb:37:9d:a0:b7:f4:92:d7:25:6f:1e:47: b2:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:89:36:91:67:1D:FD:13:36:2D:09:4C:7E:04:C2:7D:FA:D5:56:E2 X509v3 Authority Key Identifier: keyid:AC:D4:F8:32:F6:D8:39:78:BE:69:59:D6:98:3F:E3:58:F3:B7:A9:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:02:b0:35:70:1f:a2:5e:76:07:9b:f4:b0:be:e3:3b:a5:33: c0:ed:3e:fc:eb:9a:82:3f:b0:1e:3f:9d:99:f1:5c:91:43:50: 3f:a6:bf:08:fe:77:fc:21:49:80:41:bc:db:dd:5a:c8:dd:cb: 8d:40:fa:dd:53:8d:1a:f3:d5:e1:b9:a0:c6:77:1d:f1:a5:03: 83:a5:ac:a4:53:b4:28:2b:5b:9b:66:28:35:25:cc:a2:c5:c9: 2a:77:89:aa:34:0a:cf:e7:12:c8:a3:9c:a1:69:25:d9:94:ee: a2:94:59:62:27:47:8f:47:15:10:45:b1:d3:de:8d:7f:1b:e0: 85:ec:d9:06:0c:ff:05:12:e8:0e:cc:b4:f1:2c:c4:ed:8a:89: 03:81:7b:da:3a:cc:6b:1f:30:c8:49:9c:e2:c2:16:54:13:05: 35:4a:df:ac:c0:be:4e:69:f5:06:c3:b4:5b:81:c5:35:48:59: b4:fc:04:f3:31:fe:3a:ad:ae:2a:08:b3:93:7d:6b:86:ff:ef: b8:af:a1:ba:5c:14:81:d7:d7:ab:5e:81:a0:b9:29:4d:da:c8: 0c:6a:d6:a0:53:1a:40:aa:1a:ec:4b:58:6f:8b:96:6c:98:15: 60:29:cc:da:4d:c4:13:32:03:6a:e1:7b:8d:00:46:1c:75:ce: 8c:81:62:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJDODkxMTAvBgNVBAUTKEFDRDRGODMyRjZEODM5NzhCRTY5NTlENjk4M0ZFMzU4 RjNCN0E5MjUwHhcNMjYwOTI2MjMyMjUzWhcNMjYxMDAzMjMyMjUzWjAYMRYwFAYD VQQDEw02YWI4NTNjZS0yNjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtrQULL0EExt3Kn7n5OqpMVOr0bLV+9IuVm+EGmb9lKq/LShegAhUKIoqgVR4 ZcWiBSbwAuMC5PfPwIvTvbIGvSP+ZJrYHanIlKzpFDMQ0pbTcFzl53qWKJr4Yyv6 qaWLL7tV4+SsDPMwFizJxUIJ7629KxI7fb0RNAwK6krNFghzVhYd0N5msoBb75Q0 uchNkMOjLyyKjrSTD9IxqHcmLl3OVCw/3boQJJmnGkoBqQn0iVYREYpxyk64iXxx h/9xrrYsD96q2ZIESqqdKQP2ThkUVpXpf3sDbEOotNRRvjEK66vJzcoyhzwIRhV1 Pm66ubjLN52gt/SS1yVvHkeyeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDmJNpFn Hf0TNi0JTH4Ewn361VbiMB8GA1UdIwQYMBaAFKzU+DL22Dl4vmlZ1pg/41jzt6kl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkM4OS84RkE5N0FGRTQ1 MTAxMUVDOEM4NkVENDhDNEY5QUUwMi9yTlQ0TXZiWU9YaS1hVm5XbURfaldQTzNx U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JOVDRNdmJZT1hpLWFWbldtRF9qV1BPM3FTVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkM4OS84RkE5N0FGRTQ1MTAxMUVDOEM4NkVENDhDNEY5QUUwMi9yTlQ0TXZiWU9Y aS1hVm5XbURfaldQTzNxU1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkwKwNXAfol52B5v0sL7jO6UzwO0+/Ouagj+wHj+dmfFckUNQP6a/CP53/CFJ gEG8291ayN3LjUD63VONGvPV4bmgxncd8aUDg6WspFO0KCtbm2YoNSXMosXJKneJ qjQKz+cSyKOcoWkl2ZTuopRZYidHj0cVEEWx096NfxvghezZBgz/BRLoDsy08SzE 7YqJA4F72jrMax8wyEmc4sIWVBMFNUrfrMC+Tmn1BsO0W4HFNUhZtPwE8zH+Oq2u Kgizk31rhv/vuK+hulwUgdfXq16BoLkpTdrIDGrWoFMaQKoa7EtYb4uWbJgVYCnM 2k3EEzIDauF7jQBGHHXOjIFiIw== -----END CERTIFICATE-----Generated at Sun Sep 27 10:12:56 2026 by rpki-client