$ rpki-client -vvvf rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft File: -fNN9--KMQSq91p3EaUvfbGlDaQ.mft (raw, json) Hash identifier: 9tS/UyQnErO2/laPtYaEJMx7ZZUfJbvJ2USlqRt1UOo= Subject key identifier: CD:D6:2E:11:DD:E6:1E:AA:E6:C2:63:5A:96:BF:70:D7:FD:B2:96:BB Authority key identifier: F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 Certificate issuer: /CN=A9188A06/serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4 Certificate serial: 0DC7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft Manifest number: 0D9D Signing time: Thu 24 Sep 2026 17:55:47 +0000 Manifest this update: Thu 24 Sep 2026 17:55:46 +0000 Manifest next update: Thu 01 Oct 2026 17:55:46 +0000 Files and hashes: 1: -fNN9--KMQSq91p3EaUvfbGlDaQ.crl (hash: V0+nPk9RqUTgJ1DwV2s+fzgFHVYFch7j+GfkP9VPrhw=) 2: 23B27B60F68011E982571C3EC4F9AE02.roa (hash: N2B1v1fBFFC6RS5aVDBb3xQJP9X9cFqqHR04heiWGTU=) 3: 0D7B74CACE1111ED8BDB217CC4F9AE02.roa (hash: pMlh6GaUpQCHOF5jp4VeA1i4PMVxZyqL5Xz+a1jzwLQ=) 4: 4AD97410632C11EE96048122C4F9AE02.roa (hash: mpeuILXtK20evHO15vrz42Wl9KtS1A8R8Bhu34AGTf0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 17:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3527 (0xdc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188A06, serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4 Validity Not Before: Sep 24 17:55:46 2026 GMT Not After : Oct 1 17:55:46 2026 GMT Subject: CN=6ab56422-cf93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:76:e3:37:a0:32:f3:a1:dc:3f:3f:2a:aa:f6: 12:d9:84:ea:ff:9c:0e:f3:b3:06:e8:ce:b1:44:11: d0:6e:b8:e1:ae:a3:5a:b4:da:af:12:8e:8b:25:dc: cb:47:6a:3c:af:5b:d9:96:29:8f:59:92:6d:9c:f4: c3:15:f2:2b:be:2f:ce:2c:cd:8b:6f:fd:23:03:d6: 56:55:c9:a8:c3:3b:19:f6:43:8c:62:28:aa:0a:e5: 63:3f:bd:5b:2e:b1:86:f6:ad:7b:48:9b:75:1e:7f: f0:d6:c3:38:5e:ef:c1:c3:29:c3:09:b8:4f:34:3d: 46:08:21:e7:63:d3:c0:b0:5d:91:2f:d5:57:87:a5: 3a:c8:fd:2b:d3:fc:7f:90:d7:15:0d:34:3c:3e:f6: ee:27:75:e0:af:d4:06:4e:eb:bb:f3:0d:a5:9a:75: d5:29:f8:dc:a5:96:82:88:0d:2b:4b:e1:18:fc:3c: c4:2b:79:88:6f:04:1a:08:14:e8:e5:7c:ca:e9:9e: e1:4a:74:59:8c:19:0d:41:94:25:e0:9c:76:02:a0: c6:13:b1:ed:58:10:5f:24:98:82:ca:59:85:b2:cf: a7:25:a4:a3:28:32:be:c6:f2:22:b8:b6:b9:16:78: b7:06:cb:ff:c6:0a:97:ef:ed:d8:e2:62:68:3c:03: f0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:D6:2E:11:DD:E6:1E:AA:E6:C2:63:5A:96:BF:70:D7:FD:B2:96:BB X509v3 Authority Key Identifier: keyid:F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption eb:0c:bc:ab:f3:16:4c:d8:09:d2:5d:be:5a:7c:00:48:01:a2: bb:22:ac:c2:35:7d:84:56:ee:b3:36:34:83:49:05:f4:55:15: 14:30:be:83:2a:ac:11:e8:46:35:62:8b:1f:0c:63:fb:71:2f: 84:b7:10:d2:a0:f8:16:d5:15:4c:88:e5:28:21:60:0b:b9:89: 48:7a:7a:1a:fb:74:6c:23:e0:90:5a:9c:b1:38:6d:6a:53:3b: 58:63:08:64:e6:23:f3:2a:af:26:07:db:7d:5c:a7:2a:a6:02: fc:c0:a0:b8:78:25:e3:ae:a5:11:44:cf:7b:bd:a7:b7:0d:9c: 49:24:47:f6:10:01:79:bb:32:9e:af:d4:b7:b0:38:17:77:84: 22:7e:94:a1:31:0c:7d:84:a0:3c:51:aa:fc:37:04:5a:91:4b: 97:34:54:4a:f2:ee:28:f0:9c:e4:40:35:79:68:63:5b:43:6a: dd:b7:80:6d:99:3c:e2:8d:c6:fc:54:b8:67:de:fb:5f:ed:a2: d8:09:d5:bf:81:fd:ea:af:d3:58:52:b6:f5:b8:91:96:12:33: b3:1b:13:05:c9:48:03:23:45:4d:8b:6a:6b:73:f1:6f:ba:70: 0a:d5:55:c4:62:83:0a:f9:71:8c:93:4e:b9:4a:c9:6e:bf:36: 88:af:69:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhBMDYxMTAvBgNVBAUTKEY5RjM0REY3RUY4QTMxMDRBQUY3NUE3NzExQTUyRjdE QjFBNTBEQTQwHhcNMjYwOTI0MTc1NTQ2WhcNMjYxMDAxMTc1NTQ2WjAYMRYwFAYD VQQDEw02YWI1NjQyMi1jZjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsHbjN6Ay86HcPz8qqvYS2YTq/5wO87MG6M6xRBHQbrjhrqNatNqvEo6LJdzL R2o8r1vZlimPWZJtnPTDFfIrvi/OLM2Lb/0jA9ZWVcmowzsZ9kOMYiiqCuVjP71b LrGG9q17SJt1Hn/w1sM4Xu/BwynDCbhPND1GCCHnY9PAsF2RL9VXh6U6yP0r0/x/ kNcVDTQ8PvbuJ3Xgr9QGTuu78w2lmnXVKfjcpZaCiA0rS+EY/DzEK3mIbwQaCBTo 5XzK6Z7hSnRZjBkNQZQl4Jx2AqDGE7HtWBBfJJiCylmFss+nJaSjKDK+xvIiuLa5 Fni3Bsv/xgqX7+3Y4mJoPAPwgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM3WLhHd 5h6q5sJjWpa/cNf9spa7MB8GA1UdIwQYMBaAFPnzTffvijEEqvdadxGlL32xpQ2k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEEwNi84MDFDQTU4NEY2 N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01RU3E5MXAzRWFVdmZiR2xE YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1mTk45LS1LTVFTcTkxcDNFYVV2ZmJHbERhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEEwNi84MDFDQTU4NEY2N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01R U3E5MXAzRWFVdmZiR2xEYVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA6wy8q/MWTNgJ0l2+WnwASAGiuyKswjV9hFbuszY0g0kF9FUVFDC+gyqsEehG NWKLHwxj+3EvhLcQ0qD4FtUVTIjlKCFgC7mJSHp6Gvt0bCPgkFqcsThtalM7WGMI ZOYj8yqvJgfbfVynKqYC/MCguHgl466lEUTPe72ntw2cSSRH9hABebsynq/Ut7A4 F3eEIn6UoTEMfYSgPFGq/DcEWpFLlzRUSvLuKPCc5EA1eWhjW0Nq3beAbZk84o3G /FS4Z977X+2i2AnVv4H96q/TWFK29biRlhIzsxsTBclIAyNFTYtqa3Pxb7pwCtVV xGKDCvlxjJNOuUrJbr82iK9pIw== -----END CERTIFICATE-----Generated at Thu Sep 24 23:20:58 2026 by rpki-client