$ rpki-client -vvvf rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/d9okgAToxYcr33K6wSIsfMtujjc.mft File: d9okgAToxYcr33K6wSIsfMtujjc.mft (raw, json) Hash identifier: qn5GrZtnBWkPx97qFKhuLjhJNLqk/TjOrvzJ0q8mRIY= Subject key identifier: 3E:CC:6C:F3:D9:96:1E:80:B2:3A:C9:DB:82:25:77:4F:B8:08:9E:62 Authority key identifier: 77:DA:24:80:04:E8:C5:87:2B:DF:72:BA:C1:22:2C:7C:CB:6E:8E:37 Certificate issuer: /CN=A9156342/serialNumber=77DA248004E8C5872BDF72BAC1222C7CCB6E8E37 Certificate serial: 0A7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d9okgAToxYcr33K6wSIsfMtujjc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/d9okgAToxYcr33K6wSIsfMtujjc.mft Manifest number: 0A57 Signing time: Sat 26 Sep 2026 19:46:54 +0000 Manifest this update: Sat 26 Sep 2026 19:46:54 +0000 Manifest next update: Sat 03 Oct 2026 19:46:54 +0000 Files and hashes: 1: d9okgAToxYcr33K6wSIsfMtujjc.crl (hash: VL5EGIBcci7vr/UYCkPhnX4MFReJxGjC7UGT3/8Bx5c=) 2: 3A58D9F499E611EAB3C00943C4F9AE02.roa (hash: Ix/A1HAv4E1o+T96OwAx6diCaMu8Un7l8lL1cR9lZ0I=) 3: 3BABBD7699E611EAB3C00943C4F9AE02.roa (hash: goeW12JBA3cKKGwjatqM92u32XRcfD8Zb78gB6ELWSk=) 4: 3AFD491C99E611EAB3C00943C4F9AE02.roa (hash: hAA41RG01uNOAJq/J2qFIRJdJvtjuAyTCQh8VD7YTr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/d9okgAToxYcr33K6wSIsfMtujjc.crl rsync://rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/d9okgAToxYcr33K6wSIsfMtujjc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d9okgAToxYcr33K6wSIsfMtujjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 19:46:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2686 (0xa7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156342, serialNumber=77DA248004E8C5872BDF72BAC1222C7CCB6E8E37 Validity Not Before: Sep 26 19:46:54 2026 GMT Not After : Oct 3 19:46:54 2026 GMT Subject: CN=6ab8212e-fb67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0d:7f:34:57:f5:16:a2:c8:e0:a2:e2:00:0d: 3a:5c:10:be:30:2e:43:d5:fa:10:7b:bd:06:e5:37: 9b:52:36:66:3d:ca:5b:4f:34:56:67:44:ec:13:a2: d5:32:39:ef:44:f8:f4:3c:fa:95:99:d0:dc:c8:bb: 14:10:a0:9e:97:ea:96:55:49:57:74:ae:60:ed:f5: 3b:2a:23:0f:04:a8:44:c4:bb:8c:84:77:78:b7:23: 06:01:f2:8b:a2:63:b8:31:6e:da:ca:b7:3d:5b:14: f7:db:42:cd:a0:13:96:a9:4e:0f:30:f9:ff:0f:d4: d2:99:15:a7:24:27:21:cf:07:72:93:ce:75:86:34: bd:0c:70:ff:30:03:0c:d7:d6:d0:5d:77:ba:05:cf: 7e:96:68:21:0b:d7:cc:26:12:6f:8e:67:e2:4e:62: d0:59:ff:d9:06:38:f3:77:c0:79:f9:9c:7b:e6:fe: 1d:64:9a:6d:af:f0:05:8b:e8:6e:2c:a9:be:b3:5f: 5c:33:08:cf:77:58:fb:50:ce:bb:2d:ce:80:07:0c: b6:04:24:87:f8:d1:bb:05:25:68:b2:5d:ed:9e:3d: 0b:81:a9:37:31:1e:b1:22:12:09:69:9b:53:70:db: a7:73:52:23:0b:ed:d6:5d:00:b9:99:72:ec:d3:fb: 78:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:CC:6C:F3:D9:96:1E:80:B2:3A:C9:DB:82:25:77:4F:B8:08:9E:62 X509v3 Authority Key Identifier: keyid:77:DA:24:80:04:E8:C5:87:2B:DF:72:BA:C1:22:2C:7C:CB:6E:8E:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/d9okgAToxYcr33K6wSIsfMtujjc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d9okgAToxYcr33K6wSIsfMtujjc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/d9okgAToxYcr33K6wSIsfMtujjc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:85:1b:04:94:d4:08:34:2f:e6:7d:4a:f6:97:6e:2a:19:12: be:94:3f:b6:5d:6e:75:7a:bf:c3:a5:35:fc:c3:63:fb:b4:6e: 88:71:57:4a:b2:4c:ef:3c:ac:25:31:99:c0:bb:90:96:6c:f0: 4d:9d:e1:d2:98:8c:e5:4e:d8:a2:25:9e:1d:ff:9a:e9:0b:7c: af:0b:2f:68:d8:20:1c:51:76:17:0e:ce:e4:46:aa:90:6f:b1: c1:5e:dd:cb:90:7f:c4:73:31:8b:47:c6:a6:99:b3:cf:b8:11: f4:39:4d:08:04:54:6b:5c:b7:86:0c:a8:42:a2:5c:c6:75:0a: 74:e8:e7:48:79:a5:d8:64:fa:02:8f:f6:ed:69:24:1d:d0:94: 40:26:80:ac:35:95:1e:d2:17:2f:45:2e:07:67:50:8f:83:98: 21:9f:0c:40:4e:01:52:3e:0a:df:c9:3c:ad:55:5e:06:60:2c: e3:6d:ab:27:2e:5e:41:f5:40:a9:50:78:9e:5d:f7:9f:ce:7c: 41:f1:71:07:ca:90:71:af:7b:3c:81:cf:d6:3f:af:09:a6:c3: 65:6d:1e:8b:55:bf:9c:6c:65:2e:b7:ed:4c:5b:9b:97:b2:60: b0:e1:0f:ec:0f:18:aa:d5:31:85:8c:4e:92:61:45:2b:98:31: 9f:75:3f:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCn4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYzNDIxMTAvBgNVBAUTKDc3REEyNDgwMDRFOEM1ODcyQkRGNzJCQUMxMjIyQzdD Q0I2RThFMzcwHhcNMjYwOTI2MTk0NjU0WhcNMjYxMDAzMTk0NjU0WjAYMRYwFAYD VQQDEw02YWI4MjEyZS1mYjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsA1/NFf1FqLI4KLiAA06XBC+MC5D1foQe70G5TebUjZmPcpbTzRWZ0TsE6LV MjnvRPj0PPqVmdDcyLsUEKCel+qWVUlXdK5g7fU7KiMPBKhExLuMhHd4tyMGAfKL omO4MW7ayrc9WxT320LNoBOWqU4PMPn/D9TSmRWnJCchzwdyk851hjS9DHD/MAMM 19bQXXe6Bc9+lmghC9fMJhJvjmfiTmLQWf/ZBjjzd8B5+Zx75v4dZJptr/AFi+hu LKm+s19cMwjPd1j7UM67Lc6ABwy2BCSH+NG7BSVosl3tnj0Lgak3MR6xIhIJaZtT cNunc1IjC+3WXQC5mXLs0/t4OwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD7MbPPZ lh6AsjrJ24Ild0+4CJ5iMB8GA1UdIwQYMBaAFHfaJIAE6MWHK99yusEiLHzLbo43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjM0Mi9CREY4OTA4MDk5 RTQxMUVBODlBNEMyNDBDNEY5QUUwMi9kOW9rZ0FUb3hZY3IzM0s2d1NJc2ZNdHVq amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q5b2tnQVRveFljcjMzSzZ3U0lzZk10dWpqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjM0Mi9CREY4OTA4MDk5RTQxMUVBODlBNEMyNDBDNEY5QUUwMi9kOW9rZ0FUb3hZ Y3IzM0s2d1NJc2ZNdHVqamMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkYUbBJTUCDQv5n1K9pduKhkSvpQ/tl1udXq/w6U1/MNj+7RuiHFXSrJM7zys JTGZwLuQlmzwTZ3h0piM5U7YoiWeHf+a6Qt8rwsvaNggHFF2Fw7O5EaqkG+xwV7d y5B/xHMxi0fGppmzz7gR9DlNCARUa1y3hgyoQqJcxnUKdOjnSHml2GT6Ao/27Wkk HdCUQCaArDWVHtIXL0UuB2dQj4OYIZ8MQE4BUj4K38k8rVVeBmAs422rJy5eQfVA qVB4nl33n858QfFxB8qQca97PIHP1j+vCabDZW0ei1W/nGxlLrftTFubl7JgsOEP 7A8YqtUxhYxOkmFFK5gxn3U/EA== -----END CERTIFICATE-----Generated at Sun Sep 27 06:22:38 2026 by rpki-client