$ rpki-client -vvvf rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft File: a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft (raw, json) Hash identifier: aAGXP4jxapQ2T9/tDUC5FUdEj2YCq4yJ0ZA9IAx5a1w= Subject key identifier: 45:51:5D:C1:C3:50:34:5C:56:4F:8B:29:98:F2:6F:BA:C5:69:86:E2 Authority key identifier: 6B:49:57:66:2A:D4:C2:1B:D4:22:A8:7D:B4:1B:8B:CF:C9:D6:DD:8E Certificate issuer: /CN=A9165BD7/serialNumber=6B4957662AD4C21BD422A87DB41B8BCFC9D6DD8E Certificate serial: 029F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0lXZirUwhvUIqh9tBuLz8nW3Y4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft Manifest number: 0297 Signing time: Mon 21 Sep 2026 01:46:29 +0000 Manifest this update: Mon 21 Sep 2026 01:46:29 +0000 Manifest next update: Mon 28 Sep 2026 01:46:29 +0000 Files and hashes: 1: a0lXZirUwhvUIqh9tBuLz8nW3Y4.crl (hash: gMbTXKM32s/p6qoX8tnMSa3uS3FPnu2n/XI7ipGBkl0=) 2: A21C38148A7711F1AB794FA34311F970.roa (hash: MgmaY4WXVm0HStO9rP6clArnD5jB26XfguusZC63Eq0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.crl rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0lXZirUwhvUIqh9tBuLz8nW3Y4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 01:46:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 671 (0x29f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165BD7, serialNumber=6B4957662AD4C21BD422A87DB41B8BCFC9D6DD8E Validity Not Before: Sep 21 01:46:29 2026 GMT Not After : Sep 28 01:46:29 2026 GMT Subject: CN=6ab08c75-abc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:65:4e:a3:13:7f:b1:3b:7d:ab:46:67:9b:b3: d5:db:5b:bf:f2:fe:2e:b6:b4:29:da:60:4d:09:9f: e9:91:99:f8:5d:86:f4:bf:a0:a9:6a:4d:50:e4:4f: 4a:67:ab:a9:92:5a:3a:d6:79:00:8a:e4:bc:a8:6a: d8:da:43:e8:84:35:a7:5e:e3:0e:38:bc:d9:9e:44: 91:46:cf:4c:6d:31:e5:91:12:b8:49:20:cd:fb:8a: 07:94:e5:44:d6:8d:92:b1:97:15:fb:40:b3:fd:d6: 37:4c:09:59:ed:78:e5:f8:4a:d1:0a:ae:ba:fc:85: c0:cb:12:6c:59:fc:8c:4f:df:e0:4d:64:f7:be:50: 40:87:1c:cd:2a:35:da:6e:97:3a:bf:93:f5:2f:9f: 3b:49:44:bf:bc:e4:8b:cc:06:d9:66:e8:b3:5d:7e: a7:e0:e8:84:1b:84:6d:08:da:e2:da:6f:38:93:5f: ec:b7:7b:0e:3d:a3:f1:e2:f0:07:06:39:c4:1a:1f: fb:05:27:0a:fe:67:a4:d5:a4:d8:2b:87:0f:eb:8e: aa:92:c6:12:c2:bc:c3:22:4b:ab:41:25:28:29:36: 66:30:fa:2f:59:dc:13:d6:bc:3e:78:92:f6:95:9f: e5:ca:39:08:bc:57:81:01:29:91:7f:69:17:2c:68: 4a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:51:5D:C1:C3:50:34:5C:56:4F:8B:29:98:F2:6F:BA:C5:69:86:E2 X509v3 Authority Key Identifier: keyid:6B:49:57:66:2A:D4:C2:1B:D4:22:A8:7D:B4:1B:8B:CF:C9:D6:DD:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0lXZirUwhvUIqh9tBuLz8nW3Y4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:07:b8:71:cf:b8:0c:00:03:08:8e:65:e4:51:c5:31:af:ee: 7f:4e:6a:79:b6:f3:ad:e1:ef:f5:41:7c:47:03:f3:56:b3:51: 1a:e1:09:0a:6d:3a:89:ca:9d:4b:57:35:bf:46:ae:a8:bd:75: 74:a4:20:29:41:a1:3c:ef:0d:4a:de:7c:c9:97:74:ae:1f:0a: 66:fa:f8:c4:88:68:10:76:13:a7:78:84:01:54:9d:9d:d5:01: ae:97:23:76:e0:eb:ce:e9:69:17:18:bf:01:8f:39:1e:6b:26: 75:fe:f6:32:c9:db:fb:02:63:11:9d:d3:ae:3c:11:d4:eb:96: cd:51:97:27:d3:20:33:b1:aa:7f:c1:09:d0:9a:16:f2:26:cc: 75:26:45:75:ca:86:67:76:51:a8:10:c1:0f:16:70:26:10:ff: 18:00:5a:43:9e:eb:44:f7:f4:46:d6:43:5c:6c:fc:36:76:e9: 4f:b7:1c:8c:05:b8:17:8a:25:c4:a6:18:33:ac:36:3c:3d:e8: a1:bf:7a:95:1b:cb:ac:85:01:a6:c3:ac:cd:ce:d2:95:cb:d9: 20:07:71:68:e5:cb:ad:98:f5:38:51:59:d5:7e:e0:d4:05:6e: de:77:4b:d5:cf:68:fe:31:ad:b6:16:80:e5:99:a1:9a:4f:33: ac:8b:ab:57 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAp8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVCRDcxMTAvBgNVBAUTKDZCNDk1NzY2MkFENEMyMUJENDIyQTg3REI0MUI4QkNG QzlENkREOEUwHhcNMjYwOTIxMDE0NjI5WhcNMjYwOTI4MDE0NjI5WjAYMRYwFAYD VQQDEw02YWIwOGM3NS1hYmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuGVOoxN/sTt9q0Znm7PV21u/8v4utrQp2mBNCZ/pkZn4XYb0v6Cpak1Q5E9K Z6upklo61nkAiuS8qGrY2kPohDWnXuMOOLzZnkSRRs9MbTHlkRK4SSDN+4oHlOVE 1o2SsZcV+0Cz/dY3TAlZ7Xjl+ErRCq66/IXAyxJsWfyMT9/gTWT3vlBAhxzNKjXa bpc6v5P1L587SUS/vOSLzAbZZuizXX6n4OiEG4RtCNri2m84k1/st3sOPaPx4vAH BjnEGh/7BScK/mek1aTYK4cP646qksYSwrzDIkurQSUoKTZmMPovWdwT1rw+eJL2 lZ/lyjkIvFeBASmRf2kXLGhKqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEVRXcHD UDRcVk+LKZjyb7rFaYbiMB8GA1UdIwQYMBaAFGtJV2Yq1MIb1CKofbQbi8/J1t2O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUJENy84QTYyQzgyQUM5 NTgxMUVEOTE4RThDMzRDNEY5QUUwMi9hMGxYWmlyVXdodlVJcWg5dEJ1THo4blcz WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2EwbFhaaXJVd2h2VUlxaDl0QnVMejhuVzNZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUJENy84QTYyQzgyQUM5NTgxMUVEOTE4RThDMzRDNEY5QUUwMi9hMGxYWmlyVXdo dlVJcWg5dEJ1THo4blczWTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFAe4cc+4DAADCI5l5FHFMa/uf05qebbzreHv9UF8RwPzVrNRGuEJCm06icqd S1c1v0auqL11dKQgKUGhPO8NSt58yZd0rh8KZvr4xIhoEHYTp3iEAVSdndUBrpcj duDrzulpFxi/AY85Hmsmdf72Msnb+wJjEZ3TrjwR1OuWzVGXJ9MgM7Gqf8EJ0JoW 8ibMdSZFdcqGZ3ZRqBDBDxZwJhD/GABaQ57rRPf0RtZDXGz8NnbpT7ccjAW4F4ol xKYYM6w2PD3oob96lRvLrIUBpsOszc7SlcvZIAdxaOXLrZj1OFFZ1X7g1AVu3ndL 1c9o/jGtthaA5Zmhmk8zrIurVw== -----END CERTIFICATE-----Generated at Tue Sep 22 22:05:31 2026 by rpki-client