$ rpki-client -vvvf rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft File: A8f_7gyvSSWEnihuwO-7DIsqjk8.mft (raw, json) Hash identifier: 8G1WnzKkRofKTa9Mw3CPZ2Q27EXDXv2SSDtoM6o7qdY= Subject key identifier: 18:5A:DB:F6:A6:50:B2:5F:D7:DC:69:34:33:E8:A9:D1:51:E1:A9:DB Authority key identifier: 03:C7:FF:EE:0C:AF:49:25:84:9E:28:6E:C0:EF:BB:0C:8B:2A:8E:4F Certificate issuer: /CN=A9156CFE/serialNumber=03C7FFEE0CAF4925849E286EC0EFBB0C8B2A8E4F Certificate serial: 0AC8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft Manifest number: 0AA9 Signing time: Tue 22 Sep 2026 19:23:30 +0000 Manifest this update: Tue 22 Sep 2026 19:23:29 +0000 Manifest next update: Tue 29 Sep 2026 19:23:29 +0000 Files and hashes: 1: A8f_7gyvSSWEnihuwO-7DIsqjk8.crl (hash: MH5oNLVQbmCtO9NX8P6hSTD8dDXt/vKWcgv2cck667Y=) 2: E00620C0267C11EE803B2155C4F9AE02.roa (hash: FjoaYasaX35xO0OxM5ZHWyDBaB3m3PCkgBiPkzevM+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.crl rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 19:23:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2760 (0xac8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156CFE, serialNumber=03C7FFEE0CAF4925849E286EC0EFBB0C8B2A8E4F Validity Not Before: Sep 22 19:23:29 2026 GMT Not After : Sep 29 19:23:29 2026 GMT Subject: CN=6ab2d5b2-4977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:56:9d:59:18:31:ca:e5:71:a2:b5:34:ab:04: 84:59:4e:89:2c:e0:f6:9c:8b:f7:a8:a0:82:eb:4e: 9c:aa:c9:7c:44:e2:45:13:3e:1f:e0:38:71:8a:2e: bb:fa:f6:4a:20:d0:80:4e:bb:4b:91:55:57:05:6e: 1e:e5:5d:15:07:80:76:f0:67:72:8b:3e:06:ec:a5: 86:4e:f9:8e:a5:d5:50:bd:c4:11:9d:92:a3:26:16: 7b:64:bf:52:ad:b7:a3:89:13:d5:07:2f:11:37:ca: 1b:0a:aa:b1:de:82:59:5f:11:44:92:ff:a4:3d:a4: 9f:dd:24:cb:d3:6e:10:56:70:2b:6a:ee:13:9d:c7: c5:d1:d4:2c:2d:ca:46:ef:d7:92:78:2e:76:ef:20: 2b:4a:8d:e5:ee:45:91:0f:da:6b:aa:b9:44:78:b3: 2f:be:a2:bd:c5:af:84:e9:e0:5d:11:7b:66:1a:aa: 73:e0:e5:93:9c:97:42:0f:7b:ad:73:c5:d5:7f:af: 62:0f:73:82:f8:02:11:82:ab:c2:8e:05:6c:a6:f1: b8:e3:54:6d:e8:26:6f:47:5d:5b:32:f0:8b:8d:8a: c1:c0:a2:0b:b4:17:c0:c8:cf:f0:61:e6:7f:33:9f: cb:a4:51:92:97:7e:3f:b3:71:a4:2d:96:d3:68:44: 39:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:5A:DB:F6:A6:50:B2:5F:D7:DC:69:34:33:E8:A9:D1:51:E1:A9:DB X509v3 Authority Key Identifier: keyid:03:C7:FF:EE:0C:AF:49:25:84:9E:28:6E:C0:EF:BB:0C:8B:2A:8E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:29:8f:c6:56:ab:c4:84:d7:21:6d:9b:de:76:7a:aa:de:65: 53:62:fc:d0:8f:c3:c9:d2:5e:0b:db:42:8b:63:6d:37:74:47: 75:6e:83:75:57:7d:b0:e7:61:9b:21:81:80:be:eb:e4:00:6f: 76:ab:b8:7d:eb:1d:d0:0b:8c:6c:d2:dd:e6:d1:d1:0c:2b:11: 81:b4:06:d8:95:41:5b:1c:e5:6f:00:df:3e:56:9b:3d:6b:2f: 5b:a4:b9:1d:db:cf:00:95:e2:22:52:94:32:d3:8f:70:b6:a0: 09:de:ee:0e:b6:53:66:bf:7e:54:7e:e6:40:6d:e2:e5:ae:89: 45:74:2c:6d:84:90:53:de:e6:00:9a:74:db:d9:82:e9:6a:ef: 31:fb:f0:5f:fc:65:6b:e0:7b:51:f3:98:2a:70:2f:f8:5d:ba: f6:ff:d6:6e:9d:1e:0f:f7:4a:ff:fc:6a:7b:e7:70:d7:a3:c6: e6:a9:aa:0d:75:1f:89:46:9a:ed:04:25:5b:04:8d:c0:e2:2a: b9:c1:eb:d5:63:dc:c4:5c:91:e6:00:df:fc:dd:38:63:e9:2a: 73:ce:9f:4e:c4:ed:3f:9d:a3:39:0e:d5:52:70:65:de:a3:7f: 7e:ce:94:a6:60:62:42:7e:3d:e7:af:46:91:d0:ce:e0:4e:5b: 09:76:5f:35 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZDRkUxMTAvBgNVBAUTKDAzQzdGRkVFMENBRjQ5MjU4NDlFMjg2RUMwRUZCQjBD OEIyQThFNEYwHhcNMjYwOTIyMTkyMzI5WhcNMjYwOTI5MTkyMzI5WjAYMRYwFAYD VQQDEw02YWIyZDViMi00OTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlVadWRgxyuVxorU0qwSEWU6JLOD2nIv3qKCC606cqsl8ROJFEz4f4Dhxii67 +vZKINCATrtLkVVXBW4e5V0VB4B28Gdyiz4G7KWGTvmOpdVQvcQRnZKjJhZ7ZL9S rbejiRPVBy8RN8obCqqx3oJZXxFEkv+kPaSf3STL024QVnArau4TncfF0dQsLcpG 79eSeC527yArSo3l7kWRD9prqrlEeLMvvqK9xa+E6eBdEXtmGqpz4OWTnJdCD3ut c8XVf69iD3OC+AIRgqvCjgVspvG441Rt6CZvR11bMvCLjYrBwKILtBfAyM/wYeZ/ M5/LpFGSl34/s3GkLZbTaEQ5MQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBha2/am ULJf19xpNDPoqdFR4anbMB8GA1UdIwQYMBaAFAPH/+4Mr0klhJ4obsDvuwyLKo5P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkNGRS9CMzkwMzE3MDhB QjIxMUVBQjAyMjE5M0NDNEY5QUUwMi9BOGZfN2d5dlNTV0VuaWh1d08tN0RJc3Fq azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E4Zl83Z3l2U1NXRW5paHV3Ty03RElzcWprOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkNGRS9CMzkwMzE3MDhBQjIxMUVBQjAyMjE5M0NDNEY5QUUwMi9BOGZfN2d5dlNT V0VuaWh1d08tN0RJc3FqazgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJymPxlarxITXIW2b3nZ6qt5lU2L80I/DydJeC9tCi2NtN3RHdW6DdVd9sOdh myGBgL7r5ABvdqu4fesd0AuMbNLd5tHRDCsRgbQG2JVBWxzlbwDfPlabPWsvW6S5 HdvPAJXiIlKUMtOPcLagCd7uDrZTZr9+VH7mQG3i5a6JRXQsbYSQU97mAJp029mC 6WrvMfvwX/xla+B7UfOYKnAv+F269v/Wbp0eD/dK//xqe+dw16PG5qmqDXUfiUaa 7QQlWwSNwOIqucHr1WPcxFyR5gDf/N04Y+kqc86fTsTtP52jOQ7VUnBl3qN/fs6U pmBiQn49569GkdDO4E5bCXZfNQ== -----END CERTIFICATE-----Generated at Wed Sep 23 01:32:52 2026 by rpki-client