$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170C53/DB63C9A2117611EE9C559A3EC4F9AE02/-UBKpSTUNX4MzGnH1A0-ZqLk5t8.mft File: -UBKpSTUNX4MzGnH1A0-ZqLk5t8.mft (raw, json) Hash identifier: kcukC2EmFxWuuDJE8VA00XXUr9kZCBKb9nLTbEWZl6s= Subject key identifier: 45:F9:44:61:07:35:9C:0B:15:72:A9:3E:22:FD:BB:32:78:40:2D:40 Authority key identifier: F9:40:4A:A5:24:D4:35:7E:0C:CC:69:C7:D4:0D:3E:66:A2:E4:E6:DF Certificate issuer: /CN=A9170C53/serialNumber=F9404AA524D4357E0CCC69C7D40D3E66A2E4E6DF Certificate serial: 0268 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-UBKpSTUNX4MzGnH1A0-ZqLk5t8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170C53/DB63C9A2117611EE9C559A3EC4F9AE02/-UBKpSTUNX4MzGnH1A0-ZqLk5t8.mft Manifest number: 0264 Signing time: Sun 27 Sep 2026 02:09:04 +0000 Manifest this update: Sun 27 Sep 2026 02:09:03 +0000 Manifest next update: Sun 04 Oct 2026 02:09:03 +0000 Files and hashes: 1: -UBKpSTUNX4MzGnH1A0-ZqLk5t8.crl (hash: G72sZOtusm70v4Gs66l3g5TR41UOPETKVhNEYHM/s6A=) 2: C3BB51160DAC11EFB00E6B16C4F9AE02.roa (hash: +cbg7WTVhCN77TjlGhzVzZ8b4DdK8TdFQRR1HQcoMJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170C53/DB63C9A2117611EE9C559A3EC4F9AE02/-UBKpSTUNX4MzGnH1A0-ZqLk5t8.crl rsync://rpki.apnic.net/member_repository/A9170C53/DB63C9A2117611EE9C559A3EC4F9AE02/-UBKpSTUNX4MzGnH1A0-ZqLk5t8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-UBKpSTUNX4MzGnH1A0-ZqLk5t8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 02:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 616 (0x268) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170C53, serialNumber=F9404AA524D4357E0CCC69C7D40D3E66A2E4E6DF Validity Not Before: Sep 27 02:09:03 2026 GMT Not After : Oct 4 02:09:03 2026 GMT Subject: CN=6ab87ac0-1cff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a6:83:75:e4:a9:da:12:85:e1:73:e4:1d:86: d4:64:2a:82:c4:66:6d:3a:6f:75:3c:84:27:bc:f3: e6:ce:35:be:07:7e:98:57:20:33:71:20:95:7a:1e: 48:70:8c:b0:06:03:37:2c:d2:1c:64:a9:6d:2c:e7: f0:2a:2b:d1:0b:cd:c6:ac:6f:a3:d2:7b:e9:17:9d: ed:08:7b:1c:7e:62:bb:b8:a7:20:f6:fc:f8:3d:d2: cb:4d:b5:65:d4:ba:6f:8f:f3:51:20:55:5c:1c:80: 17:0b:d0:49:47:09:03:eb:fa:cf:f6:b1:e0:4d:47: 96:10:f8:2d:6f:9c:6f:a9:8b:51:84:71:1a:77:e0: 9a:52:95:da:77:bb:8e:ff:d2:7e:2d:07:87:28:da: 74:4b:6e:9b:ac:7e:6b:3a:77:c9:f5:0f:87:96:64: ca:6b:a1:ea:f5:11:60:e1:ac:4f:27:a3:ff:2e:95: 11:36:43:b9:11:f0:2d:77:69:2d:e9:c6:26:3b:58: 7e:75:86:57:13:3c:7a:4d:2b:7c:1e:3d:75:ce:94: f9:a1:24:55:f1:89:53:0d:6f:13:09:69:70:f5:58: 89:46:e7:9a:a4:3c:30:38:3d:5a:38:84:2a:4d:92: ad:1f:83:68:c3:af:ac:be:87:a4:92:20:21:fd:12: b2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:F9:44:61:07:35:9C:0B:15:72:A9:3E:22:FD:BB:32:78:40:2D:40 X509v3 Authority Key Identifier: keyid:F9:40:4A:A5:24:D4:35:7E:0C:CC:69:C7:D4:0D:3E:66:A2:E4:E6:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170C53/DB63C9A2117611EE9C559A3EC4F9AE02/-UBKpSTUNX4MzGnH1A0-ZqLk5t8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-UBKpSTUNX4MzGnH1A0-ZqLk5t8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170C53/DB63C9A2117611EE9C559A3EC4F9AE02/-UBKpSTUNX4MzGnH1A0-ZqLk5t8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:9a:d5:f6:2d:e0:b5:e5:23:1b:91:a7:aa:f2:9d:e7:9c:b2: 93:7f:9f:7e:f8:c5:08:1a:c2:a0:45:26:43:d7:af:d8:7b:16: 47:37:0e:d6:09:b8:70:04:af:8e:b1:3e:f6:ac:1b:65:d3:53: 13:00:71:e3:86:13:6f:72:8d:9e:0e:5d:aa:db:8e:7d:14:f6: b7:b2:c0:f3:de:95:79:f4:e5:33:8a:74:82:3a:e3:16:81:93: 92:d9:1e:bc:08:30:8b:a5:9d:58:cc:7c:08:a7:30:74:4c:73: 1b:7d:e3:97:a5:ad:27:11:6d:9f:4c:d5:ca:66:d0:de:56:16: 8f:93:bd:32:76:24:24:3a:14:23:1c:8c:8e:97:9b:86:42:30: af:f1:6d:04:32:48:fc:5a:a7:c4:4c:8c:97:f8:0e:94:58:33: cf:a2:ab:b0:96:78:bf:a8:bf:3c:04:8f:09:08:aa:f5:48:b6: 09:57:6a:a7:53:3c:72:ad:f5:f9:ee:88:a1:a1:b4:71:f2:af: 07:d1:36:59:56:29:6a:c6:f1:d8:fd:44:0c:aa:30:bd:37:33: 32:65:8b:b5:e4:ef:9c:7a:8e:7d:72:9a:84:df:63:c4:a6:43: 68:7b:07:8f:fa:1a:a2:20:a8:21:1d:06:ba:a6:23:95:8b:74: ca:c7:9d:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBDNTMxMTAvBgNVBAUTKEY5NDA0QUE1MjRENDM1N0UwQ0NDNjlDN0Q0MEQzRTY2 QTJFNEU2REYwHhcNMjYwOTI3MDIwOTAzWhcNMjYxMDA0MDIwOTAzWjAYMRYwFAYD VQQDEw02YWI4N2FjMC0xY2ZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0qaDdeSp2hKF4XPkHYbUZCqCxGZtOm91PIQnvPPmzjW+B36YVyAzcSCVeh5I cIywBgM3LNIcZKltLOfwKivRC83GrG+j0nvpF53tCHscfmK7uKcg9vz4PdLLTbVl 1Lpvj/NRIFVcHIAXC9BJRwkD6/rP9rHgTUeWEPgtb5xvqYtRhHEad+CaUpXad7uO /9J+LQeHKNp0S26brH5rOnfJ9Q+HlmTKa6Hq9RFg4axPJ6P/LpURNkO5EfAtd2kt 6cYmO1h+dYZXEzx6TSt8Hj11zpT5oSRV8YlTDW8TCWlw9ViJRueapDwwOD1aOIQq TZKtH4Now6+svoekkiAh/RKyvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEX5RGEH NZwLFXKpPiL9uzJ4QC1AMB8GA1UdIwQYMBaAFPlASqUk1DV+DMxpx9QNPmai5Obf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEM1My9EQjYzQzlBMjEx NzYxMUVFOUM1NTlBM0VDNEY5QUUwMi8tVUJLcFNUVU5YNE16R25IMUEwLVpxTGs1 dDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1VQktwU1RVTlg0TXpHbkgxQTAtWnFMazV0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEM1My9EQjYzQzlBMjExNzYxMUVFOUM1NTlBM0VDNEY5QUUwMi8tVUJLcFNUVU5Y NE16R25IMUEwLVpxTGs1dDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJprV9i3gteUjG5GnqvKd55yyk3+ffvjFCBrCoEUmQ9ev2HsWRzcO1gm4cASv jrE+9qwbZdNTEwBx44YTb3KNng5dqtuOfRT2t7LA896VefTlM4p0gjrjFoGTktke vAgwi6WdWMx8CKcwdExzG33jl6WtJxFtn0zVymbQ3lYWj5O9MnYkJDoUIxyMjpeb hkIwr/FtBDJI/FqnxEyMl/gOlFgzz6KrsJZ4v6i/PASPCQiq9Ui2CVdqp1M8cq31 +e6IoaG0cfKvB9E2WVYpasbx2P1EDKowvTczMmWLteTvnHqOfXKahN9jxKZDaHsH j/oaoiCoIR0GuqYjlYt0yseddw== -----END CERTIFICATE-----Generated at Sun Sep 27 09:56:05 2026 by rpki-client