$ rpki-client -vvvf rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft File: B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft (raw, json) Hash identifier: irvdFstNyE9Y8PhvN6z8t0O+Pxez+ZCJu46Gr4twTKc= Subject key identifier: 6E:FC:CE:19:44:42:EC:1C:F5:D2:25:54:4B:EF:FC:2C:B5:D8:60:F8 Authority key identifier: 07:E0:51:B4:1E:D8:2E:3F:53:BF:59:AA:84:DD:9A:CA:20:CF:B5:4C Certificate issuer: /CN=A9166C39/serialNumber=07E051B41ED82E3F53BF59AA84DD9ACA20CFB54C Certificate serial: 09DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft Manifest number: 09AE Signing time: Tue 22 Sep 2026 19:48:20 +0000 Manifest this update: Tue 22 Sep 2026 19:48:20 +0000 Manifest next update: Tue 29 Sep 2026 19:48:20 +0000 Files and hashes: 1: B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl (hash: Sz7qJ+iyQ5BJsSQgDY3jHEMY4CRwSYLoCVFutIySDX8=) 2: 16079DB83C1D11EBA532C076C4F9AE02.roa (hash: RSYSEY4QPK9Pk0sJgoW6ZjAn6458OKn6/pTCuVoX1jQ=) 3: DF8D07E8FB7E11EFA25DF775C4F9AE02.roa (hash: ZsEUMIVjzFVUMpYghqJxPHIHlWGqgjtA3XVgf6lM9TM=) 4: E02718B0FB7E11EFA25DF775C4F9AE02.roa (hash: 1pHFkOJed3VtmWC59K1xpUkWiecvPDVflXR3rxCu2Pw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 15:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2523 (0x9db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166C39, serialNumber=07E051B41ED82E3F53BF59AA84DD9ACA20CFB54C Validity Not Before: Sep 22 19:48:20 2026 GMT Not After : Sep 29 19:48:20 2026 GMT Subject: CN=6ab2db84-91bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d1:27:17:85:be:b8:ba:8c:b7:73:d4:e0:e7: b0:79:e9:44:2a:11:4c:cd:35:2c:fb:c2:25:1a:94: 72:5c:8e:56:36:59:36:00:54:15:9a:f3:5b:b9:44: 42:87:58:d5:15:2b:62:35:96:7e:a8:be:a6:56:51: cc:4a:eb:b5:58:3c:30:c9:9b:d6:4e:72:6c:d0:ed: 2b:44:e6:cf:2e:d8:7a:8b:7e:fa:6d:db:76:bf:a2: ac:d1:83:96:2b:73:74:e9:ad:93:c5:38:31:75:9b: 7e:85:b6:b1:a0:09:a9:27:55:78:8e:b0:ad:42:ff: 7a:b8:50:dc:83:3a:fc:5d:b1:c6:b4:40:c9:c6:f1: f0:44:22:aa:4b:71:65:96:33:97:25:49:58:47:a2: d9:52:94:40:cd:08:1f:1c:25:b9:a7:71:cf:c8:66: ba:de:93:2a:76:f6:51:c9:b5:74:85:f8:bd:9b:3f: 8b:0e:49:f2:48:7f:6b:46:50:ca:70:c5:8c:7b:24: b2:fa:43:0c:b2:5d:42:fb:97:ea:38:6f:c6:18:f5: fb:52:b0:f2:ea:41:7b:5c:ef:43:d0:77:fd:4c:2b: ab:60:6d:6b:51:aa:9f:61:92:5b:03:e6:cb:f0:59: e6:9a:64:7e:d6:c7:1c:00:9f:28:ca:4e:36:07:49: f1:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:FC:CE:19:44:42:EC:1C:F5:D2:25:54:4B:EF:FC:2C:B5:D8:60:F8 X509v3 Authority Key Identifier: keyid:07:E0:51:B4:1E:D8:2E:3F:53:BF:59:AA:84:DD:9A:CA:20:CF:B5:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:be:27:be:e1:c8:4a:05:31:79:65:7f:d5:12:19:f7:8b:09: c3:46:ee:b2:8c:ef:92:53:af:ee:c9:63:b7:61:f8:74:be:be: 94:83:e1:0a:88:fd:8d:7f:8b:8e:0e:78:01:d9:b1:c5:34:c6: 46:90:4e:a2:f5:4f:75:fa:b3:ba:81:01:3b:b8:b4:f6:64:c6: 4c:ae:6d:b6:d1:0a:e1:e1:21:56:3f:ed:fe:72:7e:40:dd:f4: 76:6a:b0:db:2c:bf:44:26:9e:3a:5a:1c:63:99:3b:c7:f7:1e: e4:f8:56:f9:8a:5e:f4:96:30:75:71:ac:f1:5a:68:46:8d:0f: d2:ba:1b:d9:47:28:61:ae:a0:6b:3c:7e:bc:07:66:f6:8d:ed: 95:d6:ab:25:26:28:02:3f:bf:0f:90:e1:52:48:d7:fb:df:d8: e4:58:6e:12:e6:1f:da:9d:df:5d:70:06:01:f9:11:63:fb:bd: 66:b8:e6:41:4d:7a:70:ec:71:7c:5f:e3:ad:28:c6:c0:4e:e1: 00:19:56:38:3e:45:b4:b4:a3:c8:09:5d:33:46:c7:cd:3e:b1: b6:c3:33:87:45:55:80:a6:e4:8b:30:32:59:02:43:6e:7b:7c: ca:3d:28:cf:d1:7e:29:8c:da:f3:3a:fe:a6:d6:74:05:d3:7a: ff:76:cc:0d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjZDMzkxMTAvBgNVBAUTKDA3RTA1MUI0MUVEODJFM0Y1M0JGNTlBQTg0REQ5QUNB MjBDRkI1NEMwHhcNMjYwOTIyMTk0ODIwWhcNMjYwOTI5MTk0ODIwWjAYMRYwFAYD VQQDEw02YWIyZGI4NC05MWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArNEnF4W+uLqMt3PU4OeweelEKhFMzTUs+8IlGpRyXI5WNlk2AFQVmvNbuURC h1jVFStiNZZ+qL6mVlHMSuu1WDwwyZvWTnJs0O0rRObPLth6i376bdt2v6Ks0YOW K3N06a2TxTgxdZt+hbaxoAmpJ1V4jrCtQv96uFDcgzr8XbHGtEDJxvHwRCKqS3Fl ljOXJUlYR6LZUpRAzQgfHCW5p3HPyGa63pMqdvZRybV0hfi9mz+LDknySH9rRlDK cMWMeySy+kMMsl1C+5fqOG/GGPX7UrDy6kF7XO9D0Hf9TCurYG1rUaqfYZJbA+bL 8FnmmmR+1sccAJ8oyk42B0nxGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG78zhlE Quwc9dIlVEvv/Cy12GD4MB8GA1UdIwQYMBaAFAfgUbQe2C4/U79ZqoTdmsogz7VM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NkMzOS8yN0VFQ0ZEMEJC OTcxMUVBQTFBNjZDNTNDNEY5QUUwMi9CLUJSdEI3WUxqOVR2MW1xaE4yYXlpRFB0 VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ItQlJ0QjdZTGo5VHYxbXFoTjJheWlEUHRVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NkMzOS8yN0VFQ0ZEMEJCOTcxMUVBQTFBNjZDNTNDNEY5QUUwMi9CLUJSdEI3WUxq OVR2MW1xaE4yYXlpRFB0VXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArb4nvuHISgUxeWV/1RIZ94sJw0busozvklOv7sljt2H4dL6+lIPhCoj9jX+L jg54AdmxxTTGRpBOovVPdfqzuoEBO7i09mTGTK5tttEK4eEhVj/t/nJ+QN30dmqw 2yy/RCaeOlocY5k7x/ce5PhW+Ype9JYwdXGs8VpoRo0P0rob2UcoYa6gazx+vAdm 9o3tldarJSYoAj+/D5DhUkjX+9/Y5FhuEuYf2p3fXXAGAfkRY/u9ZrjmQU16cOxx fF/jrSjGwE7hABlWOD5FtLSjyAldM0bHzT6xtsMzh0VVgKbkizAyWQJDbnt8yj0o z9F+KYza8zr+ptZ0BdN6/3bMDQ== -----END CERTIFICATE-----Generated at Tue Sep 22 22:43:14 2026 by rpki-client