$ rpki-client -vvvf rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft File: aZoPjRWjT1mVbLSADGxEBNwOvV0.mft (raw, json) Hash identifier: Tb3RM8KFN/VeVyYpXD78VZla1FjNWm/Tn31GqqtM9Ow= Subject key identifier: 58:3C:BB:4F:91:AE:5B:AE:5B:D1:8C:39:12:F6:7D:58:AD:33:8D:90 Authority key identifier: 69:9A:0F:8D:15:A3:4F:59:95:6C:B4:80:0C:6C:44:04:DC:0E:BD:5D Certificate issuer: /CN=A915C1FE/serialNumber=699A0F8D15A34F59956CB4800C6C4404DC0EBD5D Certificate serial: 35B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft Manifest number: 358F Signing time: Thu 24 Sep 2026 15:15:00 +0000 Manifest this update: Thu 24 Sep 2026 15:14:59 +0000 Manifest next update: Thu 01 Oct 2026 15:14:59 +0000 Files and hashes: 1: aZoPjRWjT1mVbLSADGxEBNwOvV0.crl (hash: WKNTitio94oz+2PTxar47IAjizZuZqz4VFv3YoKfccs=) 2: 6A9E6940B10511E591A3E484C4F9AE02.roa (hash: RQy3CULDGNVnkWRkKUELBca0bv/+qjtto2dvJUv9MVk=) 3: 6BC5DC4AB10511E591A3E484C4F9AE02.roa (hash: FGtCl+rkKsPwQBZaBP2SI6ZyzxIcUGM879HPiMEoLJQ=) 4: Gbm9aJwn4Grd0bUlvCyB3YP5o-E.asa (hash: GfzS/0sFUcU3nk0Xd84HKIBNrFFblmJGFMfuUp5nQmE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.crl rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 15:14:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13749 (0x35b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C1FE, serialNumber=699A0F8D15A34F59956CB4800C6C4404DC0EBD5D Validity Not Before: Sep 24 15:14:59 2026 GMT Not After : Oct 1 15:14:59 2026 GMT Subject: CN=6ab53e73-0a35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:92:d4:b1:91:a3:dc:ec:8c:c2:dd:40:5c:05: 20:d5:7b:87:6c:87:29:62:8d:e6:2d:ca:70:1e:d6: 63:13:10:1b:a9:2f:7e:50:12:f9:8f:9b:38:2d:43: 65:da:47:4f:46:b2:fe:88:38:43:96:f5:9f:44:c6: 99:c3:06:6b:d1:8f:4b:61:5c:fc:94:fb:86:88:ff: c2:1c:d5:04:48:c5:86:b6:c5:76:55:f1:1c:ff:4a: 9c:23:e5:e2:ce:63:b1:68:7a:8e:5a:fa:49:b3:2f: 3c:84:f7:c9:44:f5:99:8b:4a:50:04:b8:c7:c5:08: 36:d8:bd:a8:1b:cf:db:52:f0:73:7f:bb:95:98:31: 9d:1d:05:b2:37:34:f4:01:ee:ca:20:da:d0:23:05: d1:7b:06:cc:e2:62:32:d4:d8:f5:2e:67:f8:10:9b: c0:31:d4:ec:dc:4f:c2:93:fc:69:ed:43:9a:f1:c2: 1d:f5:69:82:5f:53:f6:0a:c9:42:a3:ca:94:ab:af: a1:c0:77:71:a5:cf:dc:e1:c3:be:b8:de:70:e3:d9: 47:64:58:32:fd:d2:17:46:79:1a:09:4b:5a:8f:c7: 7f:45:23:db:7b:74:c0:75:d1:00:18:fd:9e:53:ea: d1:00:1f:17:0e:1c:00:fc:e0:94:84:dd:6f:92:6f: 91:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:3C:BB:4F:91:AE:5B:AE:5B:D1:8C:39:12:F6:7D:58:AD:33:8D:90 X509v3 Authority Key Identifier: keyid:69:9A:0F:8D:15:A3:4F:59:95:6C:B4:80:0C:6C:44:04:DC:0E:BD:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:66:c5:1f:a6:6a:fa:38:a1:a7:c1:77:95:63:52:3d:93:a8: a1:b5:31:1e:d7:5d:0d:bf:dd:6b:a2:a4:4e:f2:5d:ff:94:e0: fd:1b:36:f3:c6:41:d4:02:ba:bc:40:ec:0e:23:67:2c:e2:5f: 64:84:5b:23:92:1b:f0:3c:20:ed:25:db:ef:e5:d6:ae:04:70: 8e:b9:cf:eb:05:65:3f:c1:a4:25:2f:49:62:ee:d6:bd:b9:13: 83:d4:5c:85:14:98:e7:f2:df:48:1a:10:98:0e:42:33:c4:cb: 27:6f:45:10:bd:81:c2:ac:e8:99:ea:e5:53:0a:08:91:e0:3d: a3:9c:39:4e:39:a6:a6:9c:b4:24:dc:ec:ed:b0:f6:fd:9f:b7: 8e:17:a7:61:03:36:f7:55:ff:cb:b8:18:ae:1a:f0:f3:17:4f: 73:ec:39:1c:e5:f7:92:cb:3a:b4:05:df:9e:88:fc:bb:cb:8f: 9f:7e:6f:f1:2b:68:52:eb:31:e0:12:9c:17:93:e7:9e:af:96: 2d:db:15:65:05:55:42:df:61:1c:a9:e6:a9:42:53:9e:61:02: 0f:01:e0:ed:3a:9c:20:57:44:08:a5:ac:ec:74:ca:58:ae:e7: 9f:a2:e5:10:de:bf:70:00:c6:af:9a:ea:13:42:15:89:f5:0e: dd:0e:e6:13 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUMxRkUxMTAvBgNVBAUTKDY5OUEwRjhEMTVBMzRGNTk5NTZDQjQ4MDBDNkM0NDA0 REMwRUJENUQwHhcNMjYwOTI0MTUxNDU5WhcNMjYxMDAxMTUxNDU5WjAYMRYwFAYD VQQDEw02YWI1M2U3My0wYTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxJLUsZGj3OyMwt1AXAUg1XuHbIcpYo3mLcpwHtZjExAbqS9+UBL5j5s4LUNl 2kdPRrL+iDhDlvWfRMaZwwZr0Y9LYVz8lPuGiP/CHNUESMWGtsV2VfEc/0qcI+Xi zmOxaHqOWvpJsy88hPfJRPWZi0pQBLjHxQg22L2oG8/bUvBzf7uVmDGdHQWyNzT0 Ae7KINrQIwXRewbM4mIy1Nj1Lmf4EJvAMdTs3E/Ck/xp7UOa8cId9WmCX1P2CslC o8qUq6+hwHdxpc/c4cO+uN5w49lHZFgy/dIXRnkaCUtaj8d/RSPbe3TAddEAGP2e U+rRAB8XDhwA/OCUhN1vkm+RZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFg8u0+R rluuW9GMORL2fVitM42QMB8GA1UdIwQYMBaAFGmaD40Vo09ZlWy0gAxsRATcDr1d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzFGRS9EMTE4QUFCQTFE QUExMUUyQTJFQ0NBQTYwOEIwMkNEMi9hWm9QalJXalQxbVZiTFNBREd4RUJOd092 VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Fab1BqUldqVDFtVmJMU0FER3hFQk53T3ZWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzFGRS9EMTE4QUFCQTFEQUExMUUyQTJFQ0NBQTYwOEIwMkNEMi9hWm9QalJXalQx bVZiTFNBREd4RUJOd092VjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeWbFH6Zq+jihp8F3lWNSPZOoobUxHtddDb/da6KkTvJd/5Tg/Rs288ZB1AK6 vEDsDiNnLOJfZIRbI5Ib8Dwg7SXb7+XWrgRwjrnP6wVlP8GkJS9JYu7WvbkTg9Rc hRSY5/LfSBoQmA5CM8TLJ29FEL2BwqzomerlUwoIkeA9o5w5Tjmmppy0JNzs7bD2 /Z+3jhenYQM291X/y7gYrhrw8xdPc+w5HOX3kss6tAXfnoj8u8uPn35v8StoUusx 4BKcF5Pnnq+WLdsVZQVVQt9hHKnmqUJTnmECDwHg7TqcIFdECKWs7HTKWK7nn6Ll EN6/cADGr5rqE0IVifUO3Q7mEw== -----END CERTIFICATE-----Generated at Fri Sep 25 19:53:31 2026 by rpki-client