$ rpki-client -vvvf rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.mft File: 0AZhDr1oKXhFffitopEQATORAZI.mft (raw, json) Hash identifier: BC+cWPQI9q8gWCR3l4DMgSsF7w7WmcghCs0vvxrxMIU= Subject key identifier: 83:50:F5:48:DB:84:E2:41:94:EA:BB:EC:34:4B:E2:3F:23:BB:94:CE Authority key identifier: D0:06:61:0E:BD:68:29:78:45:7D:F8:AD:A2:91:10:01:33:91:01:92 Certificate issuer: /CN=A9153A6E/serialNumber=D006610EBD682978457DF8ADA291100133910192 Certificate serial: 0F85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AZhDr1oKXhFffitopEQATORAZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.mft Manifest number: 0F70 Signing time: Thu 24 Sep 2026 17:29:46 +0000 Manifest this update: Thu 24 Sep 2026 17:29:45 +0000 Manifest next update: Thu 01 Oct 2026 17:29:45 +0000 Files and hashes: 1: 0AZhDr1oKXhFffitopEQATORAZI.crl (hash: khSDnID6VY5ZyxWnwhgU+j3i0HsR9rcnnejH4KWEXTs=) 2: CBD704945F5F11EFB99ABA76C4F9AE02.roa (hash: +qoTLB4KGdOq7tBr+CT5TB+FxY8uAOKgWCjbTm8+jho=) 3: 42431FFC8FF711EEA0FC990FC4F9AE02.roa (hash: UTqTDw+6C0kCCjzWGb1ZXGyuDiWfWII0jQrmfbm2l34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.crl rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AZhDr1oKXhFffitopEQATORAZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 17:29:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3973 (0xf85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153A6E, serialNumber=D006610EBD682978457DF8ADA291100133910192 Validity Not Before: Sep 24 17:29:45 2026 GMT Not After : Oct 1 17:29:45 2026 GMT Subject: CN=6ab55e09-90af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:99:96:2b:96:48:51:c5:0f:36:12:fe:3b:02: f0:f6:8b:0c:0c:ac:4b:be:55:20:a1:f8:f9:07:c4: 98:82:e1:86:57:ba:75:ab:fd:1f:9b:41:12:dd:bd: db:4c:80:7f:a8:b3:9b:09:39:8b:80:2e:f6:12:88: 31:10:f0:dd:9e:ae:6a:b5:de:bb:68:10:e7:16:f5: 2c:e9:ba:64:8b:f8:e0:2f:5d:75:b0:07:d5:e1:7e: 10:b7:9c:9b:32:d7:9b:6b:15:a2:2a:61:93:54:4e: 1a:30:50:9f:fb:50:cc:9c:e0:e0:31:bb:b1:30:a7: 43:79:0d:48:17:b3:50:fb:77:ad:6f:d6:f7:20:57: bc:0c:e9:b9:d7:75:ee:69:e8:40:36:73:b5:a8:53: 95:95:62:be:ca:c5:53:81:3b:95:83:f8:48:ba:6a: a2:b1:f6:6f:5e:1e:1b:c0:45:d9:71:1e:c8:6d:05: 24:30:e1:97:4e:71:42:32:40:e7:7e:17:73:f1:09: 97:15:94:5f:bb:a5:07:c3:44:f1:c3:67:c6:17:35: 40:58:80:6d:7d:a7:37:f8:2b:2e:f7:b7:b7:f9:2e: 70:11:27:2d:c8:9c:57:8b:d2:a9:55:ee:f6:53:f6: a4:83:57:d1:97:28:ae:13:7a:35:91:71:cc:21:11: 9e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:50:F5:48:DB:84:E2:41:94:EA:BB:EC:34:4B:E2:3F:23:BB:94:CE X509v3 Authority Key Identifier: keyid:D0:06:61:0E:BD:68:29:78:45:7D:F8:AD:A2:91:10:01:33:91:01:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AZhDr1oKXhFffitopEQATORAZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:98:5e:b5:35:62:5a:bd:2b:f4:de:ae:a5:7c:50:e6:ba:a0: 92:e7:22:54:81:53:72:25:48:46:a2:cc:94:3c:10:cf:05:9f: 7e:17:f9:5d:c8:c4:23:e7:53:12:c4:37:61:2f:30:66:2c:3e: 84:ea:82:cf:47:79:93:f2:92:88:45:9e:f9:5d:7a:eb:93:ef: d4:ff:7c:91:b0:9e:0d:0e:d5:67:d9:2f:a2:3a:5e:d1:56:61: 1c:ec:2f:62:64:da:a8:8b:db:48:a5:13:36:cd:cc:be:6f:a7: 8a:30:f6:eb:5a:a1:71:3d:b9:02:b4:1d:5c:a8:74:9a:42:38: 9b:92:9c:e0:59:44:98:ae:f2:f5:0c:db:78:f1:d5:12:01:2b: 91:1b:20:ff:9c:13:24:7e:83:ab:1f:49:c3:ee:68:27:80:37: 96:17:35:a5:41:3f:5a:7f:6b:c3:b7:9a:8d:f2:1c:a4:6f:b0: bb:b5:a8:a1:ac:d5:74:0a:19:27:59:28:4f:24:3b:d1:84:c0: d8:4e:28:f9:62:4b:41:d4:bf:44:e0:24:3a:17:c1:45:b0:cb: 23:06:0f:fc:bd:bd:2b:22:4a:da:7e:7f:e1:93:ef:b0:69:02: e3:76:51:2b:c3:dd:a9:64:08:a1:7a:e9:ea:54:33:2f:31:17: f2:4a:54:e0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNBNkUxMTAvBgNVBAUTKEQwMDY2MTBFQkQ2ODI5Nzg0NTdERjhBREEyOTExMDAx MzM5MTAxOTIwHhcNMjYwOTI0MTcyOTQ1WhcNMjYxMDAxMTcyOTQ1WjAYMRYwFAYD VQQDEw02YWI1NWUwOS05MGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqpmWK5ZIUcUPNhL+OwLw9osMDKxLvlUgofj5B8SYguGGV7p1q/0fm0ES3b3b TIB/qLObCTmLgC72EogxEPDdnq5qtd67aBDnFvUs6bpki/jgL111sAfV4X4Qt5yb MtebaxWiKmGTVE4aMFCf+1DMnODgMbuxMKdDeQ1IF7NQ+3etb9b3IFe8DOm513Xu aehANnO1qFOVlWK+ysVTgTuVg/hIumqisfZvXh4bwEXZcR7IbQUkMOGXTnFCMkDn fhdz8QmXFZRfu6UHw0Txw2fGFzVAWIBtfac3+Csu97e3+S5wESctyJxXi9KpVe72 U/akg1fRlyiuE3o1kXHMIRGevwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFINQ9Ujb hOJBlOq77DRL4j8ju5TOMB8GA1UdIwQYMBaAFNAGYQ69aCl4RX34raKREAEzkQGS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0E2RS83OUVDRTgzODk4 QkQxMUU5QUM5OUU3NEVDNEY5QUUwMi8wQVpoRHIxb0tYaEZmZml0b3BFUUFUT1JB WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBBWmhEcjFvS1hoRmZmaXRvcEVRQVRPUkFaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0E2RS83OUVDRTgzODk4QkQxMUU5QUM5OUU3NEVDNEY5QUUwMi8wQVpoRHIxb0tY aEZmZml0b3BFUUFUT1JBWkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAa5hetTViWr0r9N6upXxQ5rqgkuciVIFTciVIRqLMlDwQzwWffhf5XcjEI+dT EsQ3YS8wZiw+hOqCz0d5k/KSiEWe+V1665Pv1P98kbCeDQ7VZ9kvojpe0VZhHOwv YmTaqIvbSKUTNs3Mvm+nijD261qhcT25ArQdXKh0mkI4m5Kc4FlEmK7y9QzbePHV EgErkRsg/5wTJH6Dqx9Jw+5oJ4A3lhc1pUE/Wn9rw7eajfIcpG+wu7WooazVdAoZ J1koTyQ70YTA2E4o+WJLQdS/ROAkOhfBRbDLIwYP/L29KyJK2n5/4ZPvsGkC43ZR K8PdqWQIoXrp6lQzLzEX8kpU4A== -----END CERTIFICATE-----Generated at Fri Sep 25 23:54:37 2026 by rpki-client