$ rpki-client -vvvf rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft File: 6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft (raw, json) Hash identifier: GaKPVQ7lj/CsOf4jzyrlZ9YO55YxFSIa9cm/5Q38JTA= Subject key identifier: 4B:83:0D:59:74:A3:94:D7:CF:02:67:4C:78:66:CF:53:1E:FB:46:DE Authority key identifier: EA:F1:52:BD:1D:D4:70:EF:73:A5:1D:4B:95:1D:4F:A0:AA:4C:CD:8E Certificate issuer: /CN=A9154B7E/serialNumber=EAF152BD1DD470EF73A51D4B951D4FA0AA4CCD8E Certificate serial: 0BAD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft Manifest number: 0B92 Signing time: Tue 22 Sep 2026 18:58:39 +0000 Manifest this update: Tue 22 Sep 2026 18:58:39 +0000 Manifest next update: Tue 29 Sep 2026 18:58:39 +0000 Files and hashes: 1: 6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl (hash: 7p1tr+kd6bVE9P3bDd+n8pXT5Vc2N7WI2dGvf0V7de4=) 2: 2996029C591611EA86D2A42DC4F9AE02.roa (hash: YoQLzF1Lm5yCnjPw539aGKaVVb5igGFfhZc6/2536gM=) 3: 144D1F865F7F11EBB5C08239C4F9AE02.roa (hash: a98jB4MSjv/smFnJ8Lz82VIPKbQpi9CPszl7PwTNJ3k=) 4: 45A83CC809EE11EBAD92B66BC4F9AE02.roa (hash: zxbNBeuYEf6c+f0pWWpGgn67zb1hnSTjyBGEz1Av9Hk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 15:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2989 (0xbad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154B7E, serialNumber=EAF152BD1DD470EF73A51D4B951D4FA0AA4CCD8E Validity Not Before: Sep 22 18:58:39 2026 GMT Not After : Sep 29 18:58:39 2026 GMT Subject: CN=6ab2cfdf-142f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:0a:74:2b:da:d9:11:59:a8:1e:5f:b3:94:d0: 34:b9:e1:f1:99:eb:1d:48:bd:5e:cd:e1:d0:7e:0d: 7e:ce:de:c2:f1:ab:07:2d:4a:bf:dd:ea:07:f9:5f: 01:0a:62:04:b9:07:ba:21:77:64:bc:d7:67:f6:6c: b8:0f:7a:d2:a3:99:42:67:86:3b:86:5e:bd:81:80: af:31:14:a9:a1:0f:81:92:83:d5:0b:ae:8c:1a:e9: fa:15:e7:0e:2b:73:4f:fe:f5:eb:ae:38:1a:db:f9: 3c:27:0b:47:63:21:90:ec:1a:5e:73:e1:a8:8b:fd: 27:e9:5c:1d:23:3c:9c:c3:23:6e:79:01:6e:1a:c8: 05:45:db:b9:f3:d1:52:a8:07:e3:b7:bb:22:88:b2: 55:84:26:ab:2c:bd:e7:7c:24:32:fa:94:dd:85:f2: 2b:63:06:06:d3:7f:f2:cd:63:1a:e4:b9:ea:4e:90: 81:1d:8d:7f:41:c3:0f:5e:f1:70:87:70:4c:95:7b: 0a:5a:5a:5e:a6:74:08:e2:df:9f:6a:82:da:cf:0d: 2a:04:58:9f:1a:33:41:44:1b:4e:30:83:38:7d:b9: 98:b5:82:b7:6f:3e:ab:8d:a1:e2:39:4f:53:35:1f: f8:98:93:50:47:c6:8c:fe:02:a3:98:c5:b6:e5:57: 3a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:83:0D:59:74:A3:94:D7:CF:02:67:4C:78:66:CF:53:1E:FB:46:DE X509v3 Authority Key Identifier: keyid:EA:F1:52:BD:1D:D4:70:EF:73:A5:1D:4B:95:1D:4F:A0:AA:4C:CD:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:53:43:e8:ba:f5:0e:9b:90:85:66:bf:4f:67:65:76:aa:cf: 42:55:da:92:e9:5b:fe:72:70:0c:a0:03:1b:34:be:ac:03:ae: aa:02:d0:42:b9:88:f3:38:81:54:68:d5:5c:40:a2:44:48:f1: 0e:e2:f9:4c:84:0d:71:ce:5f:ae:20:28:98:0e:aa:45:fe:c5: c5:81:ca:e0:9e:34:28:f7:2f:40:e1:15:ff:05:57:9a:58:0d: d7:5e:87:03:61:af:80:9e:d4:0c:c6:21:bb:92:f2:62:79:65: a4:a5:04:21:e5:14:1b:65:fe:cb:28:56:a3:b1:04:62:f0:93: 23:82:e5:78:3a:f8:97:c6:d7:8c:25:73:02:a5:a1:4c:b3:33: e5:90:2d:11:fd:c9:73:a1:20:31:0d:d6:b6:b0:45:0a:87:67: 75:18:cb:fa:32:4f:ec:42:a1:38:61:2e:24:dc:b3:31:2f:47: dd:12:68:4e:60:a9:02:ca:0e:48:4f:6f:c0:23:ae:ce:1c:a7: ba:2c:b8:02:13:96:b5:45:f9:8f:3a:11:8c:3d:34:83:99:e6: de:4f:24:59:29:40:ef:24:6e:82:ad:f7:86:36:c4:e8:a0:bd: 38:73:c3:58:86:0e:02:61:4b:88:57:5d:91:f8:3b:fc:b2:cb: 55:2a:69:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC60wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTRCN0UxMTAvBgNVBAUTKEVBRjE1MkJEMURENDcwRUY3M0E1MUQ0Qjk1MUQ0RkEw QUE0Q0NEOEUwHhcNMjYwOTIyMTg1ODM5WhcNMjYwOTI5MTg1ODM5WjAYMRYwFAYD VQQDEw02YWIyY2ZkZi0xNDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6gp0K9rZEVmoHl+zlNA0ueHxmesdSL1ezeHQfg1+zt7C8asHLUq/3eoH+V8B CmIEuQe6IXdkvNdn9my4D3rSo5lCZ4Y7hl69gYCvMRSpoQ+BkoPVC66MGun6FecO K3NP/vXrrjga2/k8JwtHYyGQ7Bpec+Goi/0n6VwdIzycwyNueQFuGsgFRdu589FS qAfjt7siiLJVhCarLL3nfCQy+pTdhfIrYwYG03/yzWMa5LnqTpCBHY1/QcMPXvFw h3BMlXsKWlpepnQI4t+faoLazw0qBFifGjNBRBtOMIM4fbmYtYK3bz6rjaHiOU9T NR/4mJNQR8aM/gKjmMW25Vc6ywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEuDDVl0 o5TXzwJnTHhmz1Me+0beMB8GA1UdIwQYMBaAFOrxUr0d1HDvc6UdS5UdT6CqTM2O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEI3RS8zRjM1QzA4NDU5 MTUxMUVBQjNGMkExMkNDNEY5QUUwMi82dkZTdlIzVWNPOXpwUjFMbFIxUG9LcE16 WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ2RlN2UjNVY085enBSMUxsUjFQb0twTXpZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NEI3RS8zRjM1QzA4NDU5MTUxMUVBQjNGMkExMkNDNEY5QUUwMi82dkZTdlIzVWNP OXpwUjFMbFIxUG9LcE16WTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARFND6Lr1DpuQhWa/T2dldqrPQlXakulb/nJwDKADGzS+rAOuqgLQQrmI8ziB VGjVXECiREjxDuL5TIQNcc5friAomA6qRf7FxYHK4J40KPcvQOEV/wVXmlgN116H A2GvgJ7UDMYhu5LyYnllpKUEIeUUG2X+yyhWo7EEYvCTI4LleDr4l8bXjCVzAqWh TLMz5ZAtEf3Jc6EgMQ3WtrBFCodndRjL+jJP7EKhOGEuJNyzMS9H3RJoTmCpAsoO SE9vwCOuzhynuiy4AhOWtUX5jzoRjD00g5nm3k8kWSlA7yRugq33hjbE6KC9OHPD WIYOAmFLiFddkfg7/LLLVSpp1w== -----END CERTIFICATE-----Generated at Tue Sep 22 21:43:16 2026 by rpki-client