$ rpki-client -vvvf rpki.apnic.net/member_repository/A9155C10/61792E6290D411F18C5E543F4211F970/CCkOnu8DM9Lkv1zue8DiOZgeNU8.mft File: CCkOnu8DM9Lkv1zue8DiOZgeNU8.mft (raw, json) Hash identifier: eoxyX55JdbvKlT0bTNAPfRK2sttrMHGj8Wh4PXZpVQ0= Subject key identifier: 20:80:A1:60:DD:24:6B:59:75:4B:69:53:6D:9E:10:5E:B4:CF:71:D0 Authority key identifier: 08:29:0E:9E:EF:03:33:D2:E4:BF:5C:EE:7B:C0:E2:39:98:1E:35:4F Certificate issuer: /CN=A9155C10/serialNumber=08290E9EEF0333D2E4BF5CEE7BC0E239981E354F Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CCkOnu8DM9Lkv1zue8DiOZgeNU8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155C10/61792E6290D411F18C5E543F4211F970/CCkOnu8DM9Lkv1zue8DiOZgeNU8.mft Manifest number: 1B Signing time: Wed 23 Sep 2026 08:41:11 +0000 Manifest this update: Wed 23 Sep 2026 08:41:11 +0000 Manifest next update: Wed 30 Sep 2026 08:41:11 +0000 Files and hashes: 1: CCkOnu8DM9Lkv1zue8DiOZgeNU8.crl (hash: SU0cCtMm8eNQypvwLw6Cevn8LX35kpExLlTgCs5cEws=) 2: BBCDD19C90D411F1867D676D4211F970.roa (hash: lDAfYAyrz14mqZWGqatOmeRWP2NtYAeHAWJKTwXbB8I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155C10/61792E6290D411F18C5E543F4211F970/CCkOnu8DM9Lkv1zue8DiOZgeNU8.crl rsync://rpki.apnic.net/member_repository/A9155C10/61792E6290D411F18C5E543F4211F970/CCkOnu8DM9Lkv1zue8DiOZgeNU8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CCkOnu8DM9Lkv1zue8DiOZgeNU8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:41:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155C10, serialNumber=08290E9EEF0333D2E4BF5CEE7BC0E239981E354F Validity Not Before: Sep 23 08:41:11 2026 GMT Not After : Sep 30 08:41:11 2026 GMT Subject: CN=6ab390a7-c0c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c9:74:54:31:88:03:42:8e:40:df:ab:54:45: df:47:27:f7:fe:a0:e2:45:03:5c:05:b1:fe:e0:cb: 24:53:e0:f8:1e:18:77:e3:34:6e:4f:42:35:3f:c1: ce:0e:f3:43:9e:a5:13:06:04:e0:4b:6d:c3:32:77: f6:a2:ed:51:33:11:2b:0b:a7:ac:db:7f:41:6c:14: cf:cf:e8:80:93:2e:20:70:12:c0:bb:ef:5b:60:2e: 52:c8:74:2e:63:5a:85:b0:71:e2:96:1f:a1:5e:d0: 33:fe:01:e1:22:aa:bf:f7:39:04:16:ee:ef:1f:d7: 0d:32:3e:3e:71:2c:64:60:a0:9b:ce:63:68:9a:7e: 8c:eb:ae:aa:7b:a1:f0:98:a2:a5:cb:c8:48:25:44: 04:4a:08:10:75:37:02:22:45:82:8a:0a:8a:60:36: ae:25:cb:da:c0:9d:94:90:8c:28:14:5e:dc:c4:56: 5a:d8:2b:46:77:0e:40:5e:d6:ff:3f:26:ee:a3:d8: b5:f3:18:a7:22:ca:2d:9d:2b:1d:e9:9e:da:55:cb: f5:ee:c3:9b:77:a1:1b:ce:10:36:63:c7:90:e9:29: 5f:b2:69:38:fd:fe:2a:b8:e8:68:78:82:e7:f8:fd: a7:1b:5f:da:7d:3b:06:2b:a9:e8:3a:20:5b:74:3f: da:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:80:A1:60:DD:24:6B:59:75:4B:69:53:6D:9E:10:5E:B4:CF:71:D0 X509v3 Authority Key Identifier: keyid:08:29:0E:9E:EF:03:33:D2:E4:BF:5C:EE:7B:C0:E2:39:98:1E:35:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155C10/61792E6290D411F18C5E543F4211F970/CCkOnu8DM9Lkv1zue8DiOZgeNU8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CCkOnu8DM9Lkv1zue8DiOZgeNU8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155C10/61792E6290D411F18C5E543F4211F970/CCkOnu8DM9Lkv1zue8DiOZgeNU8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:b4:33:ac:b8:50:89:83:f4:35:23:b7:0d:67:26:37:5b:a6: 4f:02:97:88:b2:f5:f7:49:7d:4b:18:c0:7c:89:14:35:30:fb: c1:5c:bd:b7:74:77:76:67:e6:30:f7:6e:77:6a:0a:56:7d:8c: c0:f9:b9:0c:f8:14:75:a8:42:6f:bd:15:2d:e5:56:23:16:14: 71:87:99:a2:6a:4d:f9:6d:a4:81:83:4b:e2:1e:45:8a:40:cc: 7b:05:8b:b6:4a:8c:92:e0:69:7d:60:1b:58:02:76:c5:46:4b: 49:ac:5a:bd:b8:20:5d:67:62:17:05:cb:4d:37:83:da:af:ed: e4:e1:bc:83:bb:a0:a2:ac:a8:78:86:cd:f1:c6:22:4a:e6:39: af:09:c4:29:14:1d:3d:39:a3:02:d5:7c:b7:79:38:94:5e:6b: bd:34:2c:42:a9:0b:73:03:35:1c:a8:43:40:3e:d7:a9:bf:fd: f8:58:f5:f5:d1:49:7e:3a:ce:b3:d9:0d:17:10:27:ae:43:75: 2a:12:e9:64:7a:47:8e:b4:05:7c:b7:9f:74:88:1e:0f:8d:4b: 9d:e2:5b:a2:fc:17:e7:1e:8a:19:f9:60:45:99:90:04:85:b8: 67:d3:f7:98:ef:2c:56:a9:84:d4:d5:fe:81:96:66:bb:a1:90: a7:2b:72:5a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NUMxMDExMC8GA1UEBRMoMDgyOTBFOUVFRjAzMzNEMkU0QkY1Q0VFN0JDMEUyMzk5 ODFFMzU0RjAeFw0yNjA5MjMwODQxMTFaFw0yNjA5MzAwODQxMTFaMBgxFjAUBgNV BAMTDTZhYjM5MGE3LWMwYzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCTyXRUMYgDQo5A36tURd9HJ/f+oOJFA1wFsf7gyyRT4PgeGHfjNG5PQjU/wc4O 80OepRMGBOBLbcMyd/ai7VEzESsLp6zbf0FsFM/P6ICTLiBwEsC771tgLlLIdC5j WoWwceKWH6Fe0DP+AeEiqr/3OQQW7u8f1w0yPj5xLGRgoJvOY2iafozrrqp7ofCY oqXLyEglRARKCBB1NwIiRYKKCopgNq4ly9rAnZSQjCgUXtzEVlrYK0Z3DkBe1v8/ Ju6j2LXzGKciyi2dKx3pntpVy/Xuw5t3oRvOEDZjx5DpKV+yaTj9/iq46Gh4guf4 /acbX9p9OwYrqeg6IFt0P9pbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUIIChYN0k a1l1S2lTbZ4QXrTPcdAwHwYDVR0jBBgwFoAUCCkOnu8DM9Lkv1zue8DiOZgeNU8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1QzEwLzYxNzkyRTYyOTBE NDExRjE4QzVFNTQzRjQyMTFGOTcwL0NDa09udThETTlMa3YxenVlOERpT1pnZU5V OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQ0NrT251OERNOUxrdjF6dWU4RGlPWmdlTlU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1 QzEwLzYxNzkyRTYyOTBENDExRjE4QzVFNTQzRjQyMTFGOTcwL0NDa09udThETTlM a3YxenVlOERpT1pnZU5VOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCotDOsuFCJg/Q1I7cNZyY3W6ZPApeIsvX3SX1LGMB8iRQ1MPvBXL23dHd2Z+Yw 9253agpWfYzA+bkM+BR1qEJvvRUt5VYjFhRxh5miak35baSBg0viHkWKQMx7BYu2 SoyS4Gl9YBtYAnbFRktJrFq9uCBdZ2IXBctNN4Par+3k4byDu6CirKh4hs3xxiJK 5jmvCcQpFB09OaMC1Xy3eTiUXmu9NCxCqQtzAzUcqENAPtepv/34WPX10Ul+Os6z 2Q0XECeuQ3UqEulkekeOtAV8t590iB4PjUud4lui/BfnHooZ+WBFmZAEhbhn0/eY 7yxWqYTU1f6Blma7oZCnK3Ja -----END CERTIFICATE-----Generated at Thu Sep 24 01:36:52 2026 by rpki-client