$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.mft File: UT8gd9itkRrHe1tcWbPiFMeLAjs.mft (raw, json) Hash identifier: BveIGU6iz6Wj9eCG1PXRyRznUaXCelCKK0zPCoOM+Js= Subject key identifier: 82:20:26:55:39:35:90:A5:42:01:61:87:3C:97:75:22:BB:51:CC:0D Authority key identifier: 51:3F:20:77:D8:AD:91:1A:C7:7B:5B:5C:59:B3:E2:14:C7:8B:02:3B Certificate issuer: /CN=A917E1B9/serialNumber=513F2077D8AD911AC77B5B5C59B3E214C78B023B Certificate serial: 06B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT8gd9itkRrHe1tcWbPiFMeLAjs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.mft Manifest number: 06AA Signing time: Tue 22 Sep 2026 22:07:31 +0000 Manifest this update: Tue 22 Sep 2026 22:07:31 +0000 Manifest next update: Tue 29 Sep 2026 22:07:31 +0000 Files and hashes: 1: UT8gd9itkRrHe1tcWbPiFMeLAjs.crl (hash: GI0vM1HGp4SdL0JN6omurhGcFcesbSCC7hx0gygtqJc=) 2: 7F27A9D6C88211EBB7A6F948C4F9AE02.roa (hash: 0DdKz2dwlNQQLlFEjcuZMVHNGtOylU4qbdsXKkCH924=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.crl rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT8gd9itkRrHe1tcWbPiFMeLAjs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 22:07:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1714 (0x6b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E1B9, serialNumber=513F2077D8AD911AC77B5B5C59B3E214C78B023B Validity Not Before: Sep 22 22:07:31 2026 GMT Not After : Sep 29 22:07:31 2026 GMT Subject: CN=6ab2fc23-e517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0d:8e:5a:ff:39:f7:72:0f:2f:80:a3:49:7f: bd:55:26:17:e7:d1:b7:16:1f:20:b8:bb:b0:69:0c: 2c:bc:fc:2d:ac:57:20:d5:43:e9:78:5d:29:a7:ea: 09:9b:da:0b:dd:8b:6f:cf:1e:e1:93:07:58:af:7a: 15:e4:0e:80:c2:47:79:76:55:2d:a2:0d:2f:40:12: 5c:b5:24:b0:a7:53:2b:c3:80:a1:5a:1a:c8:31:96: 03:33:1e:f4:87:f7:da:a2:ad:c6:3b:f7:3b:ea:e7: 55:1a:32:11:54:e3:36:d8:59:79:a3:9e:97:89:93: f7:ce:6d:1a:63:33:38:3d:c4:ff:a3:ba:c5:61:a6: b8:2b:83:7c:48:b1:3c:e2:d3:dc:2f:4f:c7:59:d9: 05:a4:97:3a:f0:91:cf:52:6b:d0:3d:60:9e:a1:12: f7:b1:76:59:e3:e8:54:1a:a1:a7:da:cb:36:08:6f: 63:e1:af:d1:10:5c:85:2b:34:2c:d2:7f:30:60:92: 66:b4:de:ce:7d:ed:81:52:11:5b:08:0b:ac:ff:c8: 3a:28:e9:28:31:f2:52:2c:40:21:79:e0:f9:6e:54: 22:d1:75:2c:0e:56:6f:41:87:c3:87:ff:43:4e:ef: b6:b6:1e:ca:b2:ec:2b:29:ce:e8:20:05:70:15:31: 99:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:20:26:55:39:35:90:A5:42:01:61:87:3C:97:75:22:BB:51:CC:0D X509v3 Authority Key Identifier: keyid:51:3F:20:77:D8:AD:91:1A:C7:7B:5B:5C:59:B3:E2:14:C7:8B:02:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT8gd9itkRrHe1tcWbPiFMeLAjs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:7e:d2:41:87:98:44:e6:94:ff:b7:ec:26:ad:1e:40:27:04: 7a:ac:7a:9d:68:38:da:db:e8:c3:c8:ee:fe:11:ad:d0:ae:fd: 5f:f8:01:49:f0:d8:aa:ad:2d:bf:6e:a7:dd:1f:2a:eb:f7:36: 21:51:58:35:8f:89:a6:9b:94:42:a1:43:e3:f0:fc:55:9d:f4: bd:bc:fc:7c:dd:fb:f0:d1:a4:5d:4a:21:98:55:87:45:3c:6f: 52:08:1d:56:0a:e9:d6:65:07:fa:20:4e:33:64:3f:5b:b7:fa: e8:1b:5d:f4:82:66:b7:7e:4a:25:39:0d:1a:f6:72:74:cc:f7: a4:82:c7:9b:7e:8a:99:f6:f3:a7:b4:d9:c8:91:06:92:37:f7: 64:87:30:d8:c6:74:90:f6:ff:9e:5f:dd:b1:4d:54:eb:f8:3c: b4:85:a1:8a:e3:56:a5:1e:0e:ae:59:e5:46:96:37:47:ae:3f: 85:39:ac:bc:37:51:4b:fd:f5:d1:8a:31:b1:9e:36:b1:5c:bb: 9b:ab:b7:e9:ec:d0:99:6e:0d:d3:cf:2a:01:f9:eb:f6:e0:93: 80:70:c1:a8:11:0d:18:1f:b0:fa:8d:dc:69:e4:42:fb:7b:a4: fa:c9:07:00:cc:d6:47:c6:ee:91:0a:42:d1:15:de:d4:85:da: f7:4c:64:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBrIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UxQjkxMTAvBgNVBAUTKDUxM0YyMDc3RDhBRDkxMUFDNzdCNUI1QzU5QjNFMjE0 Qzc4QjAyM0IwHhcNMjYwOTIyMjIwNzMxWhcNMjYwOTI5MjIwNzMxWjAYMRYwFAYD VQQDEw02YWIyZmMyMy1lNTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2A2OWv8593IPL4CjSX+9VSYX59G3Fh8guLuwaQwsvPwtrFcg1UPpeF0pp+oJ m9oL3Ytvzx7hkwdYr3oV5A6Awkd5dlUtog0vQBJctSSwp1Mrw4ChWhrIMZYDMx70 h/faoq3GO/c76udVGjIRVOM22Fl5o56XiZP3zm0aYzM4PcT/o7rFYaa4K4N8SLE8 4tPcL0/HWdkFpJc68JHPUmvQPWCeoRL3sXZZ4+hUGqGn2ss2CG9j4a/REFyFKzQs 0n8wYJJmtN7Ofe2BUhFbCAus/8g6KOkoMfJSLEAheeD5blQi0XUsDlZvQYfDh/9D Tu+2th7KsuwrKc7oIAVwFTGZuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIIgJlU5 NZClQgFhhzyXdSK7UcwNMB8GA1UdIwQYMBaAFFE/IHfYrZEax3tbXFmz4hTHiwI7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTFCOS9DREI3MDJGNkM4 N0IxMUVCQUZBNjk1M0JDNEY5QUUwMi9VVDhnZDlpdGtSckhlMXRjV2JQaUZNZUxB anMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VUOGdkOWl0a1JySGUxdGNXYlBpRk1lTEFqcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTFCOS9DREI3MDJGNkM4N0IxMUVCQUZBNjk1M0JDNEY5QUUwMi9VVDhnZDlpdGtS ckhlMXRjV2JQaUZNZUxBanMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApX7SQYeYROaU/7fsJq0eQCcEeqx6nWg42tvow8ju/hGt0K79X/gBSfDYqq0t v26n3R8q6/c2IVFYNY+JppuUQqFD4/D8VZ30vbz8fN378NGkXUohmFWHRTxvUggd Vgrp1mUH+iBOM2Q/W7f66Btd9IJmt35KJTkNGvZydMz3pILHm36Kmfbzp7TZyJEG kjf3ZIcw2MZ0kPb/nl/dsU1U6/g8tIWhiuNWpR4OrlnlRpY3R64/hTmsvDdRS/31 0YoxsZ42sVy7m6u36ezQmW4N088qAfnr9uCTgHDBqBENGB+w+o3caeRC+3uk+skH AMzWR8bukQpC0RXe1IXa90xkUg== -----END CERTIFICATE-----Generated at Wed Sep 23 23:48:19 2026 by rpki-client