$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.mft File: ShUjM8QF9WZCwv0DscDx5R97ZNY.mft (raw, json) Hash identifier: +boyQ1uOSKJce3V7g9OyN5NVwuDbADe3fUQeLkhaVj4= Subject key identifier: 5B:7C:74:DF:7E:F9:46:5E:78:96:0B:93:9B:9F:D3:04:30:B3:B2:F9 Authority key identifier: 4A:15:23:33:C4:05:F5:66:42:C2:FD:03:B1:C0:F1:E5:1F:7B:64:D6 Certificate issuer: /CN=A9173BC9/serialNumber=4A152333C405F56642C2FD03B1C0F1E51F7B64D6 Certificate serial: 0D2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShUjM8QF9WZCwv0DscDx5R97ZNY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.mft Manifest number: 0D05 Signing time: Thu 24 Sep 2026 18:22:12 +0000 Manifest this update: Thu 24 Sep 2026 18:22:12 +0000 Manifest next update: Thu 01 Oct 2026 18:22:12 +0000 Files and hashes: 1: ShUjM8QF9WZCwv0DscDx5R97ZNY.crl (hash: xsUbIZHdmegJkNwjFEAD6Yiug/JqWl8Mn96hBqFbeHw=) 2: EF14DD34B6E211EAB3BA9536C4F9AE02.roa (hash: 3bDomSWxzZmFd9K4NUh5rneQ95kaPkOYk8YbxDfqyvk=) 3: 2A9AFB320BC911EBBA11562FC4F9AE02.roa (hash: IYK0qSzEebuE0KBmbImZms3PEASi26kf8B/z+PvBOXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.crl rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShUjM8QF9WZCwv0DscDx5R97ZNY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 18:22:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3374 (0xd2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173BC9, serialNumber=4A152333C405F56642C2FD03B1C0F1E51F7B64D6 Validity Not Before: Sep 24 18:22:12 2026 GMT Not After : Oct 1 18:22:12 2026 GMT Subject: CN=6ab56a54-a92b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e7:d6:77:ab:f5:4a:e9:27:7e:cd:39:26:c3: 60:d1:9a:67:b8:f0:34:30:49:95:77:55:2c:9e:d7: bf:7d:0e:ea:d7:97:19:a5:14:2c:10:94:d9:d1:53: b2:67:3c:17:48:c3:9d:4b:16:df:c4:02:b3:4d:7e: 15:9a:69:22:fe:51:95:ff:fc:82:8a:45:f2:10:3c: 86:43:46:10:0e:1d:3a:a6:cc:f1:2a:52:59:44:60: 05:16:79:e9:02:cd:b5:bb:c4:8c:8b:56:d7:3b:7a: d1:a2:4d:7a:5e:c0:3b:7b:8f:5b:a1:ab:d4:bb:7d: 89:f3:c3:16:7a:42:c5:4e:b4:eb:da:7e:48:61:18: 63:bc:33:11:8a:fd:ba:52:69:c5:49:07:68:79:a2: d9:c1:4c:22:69:35:0e:32:cc:4e:99:3f:7a:fd:8d: c7:02:ca:81:37:82:3e:8d:cc:25:90:b2:46:2a:3e: 8d:1f:0a:4d:1a:fd:de:1d:e6:72:a0:2f:ef:f0:57: 68:48:bd:20:34:17:24:68:57:e6:be:d0:99:77:0e: 11:69:c1:2a:eb:b4:a7:f1:2f:e4:0b:16:82:62:e2: c2:0d:df:74:15:e9:e8:35:3a:b1:ea:dd:2b:b0:8c: dd:f4:65:0e:fd:92:5e:32:dd:79:f6:05:c6:1f:e8: c5:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:7C:74:DF:7E:F9:46:5E:78:96:0B:93:9B:9F:D3:04:30:B3:B2:F9 X509v3 Authority Key Identifier: keyid:4A:15:23:33:C4:05:F5:66:42:C2:FD:03:B1:C0:F1:E5:1F:7B:64:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShUjM8QF9WZCwv0DscDx5R97ZNY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:f5:d2:90:a9:6c:b1:d1:de:1a:3b:c0:33:26:50:df:7b:1a: 55:c5:96:43:20:d5:92:c6:aa:1e:ee:91:83:b2:19:8b:2f:92: 61:8a:e3:2f:55:0f:07:10:fa:8c:29:8c:6f:ca:77:d7:70:9f: 64:fe:f9:50:bc:9f:41:aa:a1:99:5c:e6:65:c3:5a:d3:c2:fe: 0b:99:3c:42:b7:cc:86:d3:4b:96:b5:95:f8:18:f0:ae:b9:2c: 34:55:7b:16:b8:da:7e:a5:5a:26:5f:7e:d1:96:ff:ed:0e:7b: f1:f9:5b:7f:34:00:c1:bc:a5:0f:ea:07:1b:37:d8:bf:80:c3: 96:71:08:7f:97:b0:4e:78:b1:be:73:b7:1b:a6:b9:4a:a1:7c: 84:e0:cd:b4:cd:f1:18:5b:51:0b:ed:f7:73:17:05:af:9b:b0: 5e:a6:31:4d:9e:4a:3a:35:73:a1:a8:01:cc:0f:20:2a:99:6d: 1c:c4:44:c0:bb:40:d9:49:e9:66:36:51:95:05:17:12:60:d7: ea:35:92:26:e4:9e:a9:d3:a3:c5:1e:3c:3b:c8:2c:19:a7:05: 1e:8f:d7:74:2e:2d:c0:b2:dd:69:c4:d5:66:fc:52:62:a7:8b: 47:19:c8:c1:8a:40:0d:e7:ad:ba:65:9c:f0:ac:b7:ce:f9:eb: b7:22:70:56 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNCQzkxMTAvBgNVBAUTKDRBMTUyMzMzQzQwNUY1NjY0MkMyRkQwM0IxQzBGMUU1 MUY3QjY0RDYwHhcNMjYwOTI0MTgyMjEyWhcNMjYxMDAxMTgyMjEyWjAYMRYwFAYD VQQDEw02YWI1NmE1NC1hOTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+fWd6v1Suknfs05JsNg0ZpnuPA0MEmVd1Usnte/fQ7q15cZpRQsEJTZ0VOy ZzwXSMOdSxbfxAKzTX4Vmmki/lGV//yCikXyEDyGQ0YQDh06pszxKlJZRGAFFnnp As21u8SMi1bXO3rRok16XsA7e49boavUu32J88MWekLFTrTr2n5IYRhjvDMRiv26 UmnFSQdoeaLZwUwiaTUOMsxOmT96/Y3HAsqBN4I+jcwlkLJGKj6NHwpNGv3eHeZy oC/v8FdoSL0gNBckaFfmvtCZdw4RacEq67Sn8S/kCxaCYuLCDd90FenoNTqx6t0r sIzd9GUO/ZJeMt159gXGH+jFeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFt8dN9+ +UZeeJYLk5uf0wQws7L5MB8GA1UdIwQYMBaAFEoVIzPEBfVmQsL9A7HA8eUfe2TW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0JDOS9DNUM4M0NBRTEz QTAxMUVBOTNFRUVGNjVDNEY5QUUwMi9TaFVqTThRRjlXWkN3djBEc2NEeDVSOTda TlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NoVWpNOFFGOVdaQ3d2MERzY0R4NVI5N1pOWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0JDOS9DNUM4M0NBRTEzQTAxMUVBOTNFRUVGNjVDNEY5QUUwMi9TaFVqTThRRjlX WkN3djBEc2NEeDVSOTdaTlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnvXSkKlssdHeGjvAMyZQ33saVcWWQyDVksaqHu6Rg7IZiy+SYYrjL1UPBxD6 jCmMb8p313CfZP75ULyfQaqhmVzmZcNa08L+C5k8QrfMhtNLlrWV+BjwrrksNFV7 FrjafqVaJl9+0Zb/7Q578flbfzQAwbylD+oHGzfYv4DDlnEIf5ewTnixvnO3G6a5 SqF8hODNtM3xGFtRC+33cxcFr5uwXqYxTZ5KOjVzoagBzA8gKpltHMREwLtA2Unp ZjZRlQUXEmDX6jWSJuSeqdOjxR48O8gsGacFHo/XdC4twLLdacTVZvxSYqeLRxnI wYpADeetumWc8Ky3zvnrtyJwVg== -----END CERTIFICATE-----Generated at Fri Sep 25 07:24:26 2026 by rpki-client