$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E84C/64267EE6ACC011F1BDA75F776511F970/rYRGnC7Pu9ySonyb88f3Ok2lMHI.mft File: rYRGnC7Pu9ySonyb88f3Ok2lMHI.mft (raw, json) Hash identifier: CSr7Q5SMuTeDTlIFwUpxvVtonmdhlhWTOC2xJ7KzSAo= Subject key identifier: 2F:C1:56:B2:4B:95:56:D2:BC:F2:9C:54:73:CF:D7:4A:8C:EC:B3:15 Authority key identifier: AD:84:46:9C:2E:CF:BB:DC:92:A2:7C:9B:F3:C7:F7:3A:4D:A5:30:72 Certificate issuer: /CN=A918E84C/serialNumber=AD84469C2ECFBBDC92A27C9BF3C7F73A4DA53072 Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rYRGnC7Pu9ySonyb88f3Ok2lMHI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E84C/64267EE6ACC011F1BDA75F776511F970/rYRGnC7Pu9ySonyb88f3Ok2lMHI.mft Manifest number: 09 Signing time: Wed 23 Sep 2026 08:57:25 +0000 Manifest this update: Wed 23 Sep 2026 08:57:25 +0000 Manifest next update: Wed 30 Sep 2026 08:57:25 +0000 Files and hashes: 1: rYRGnC7Pu9ySonyb88f3Ok2lMHI.crl (hash: ByklC3987Bn8Ob5Wjd6JX2ZAJSy86D/gxxld+AdvhGg=) 2: D6B9385EACC011F19308CC8D6511F970.roa (hash: u+DXYVjLCll7ilsoFengKrajZwvFgK6HVRL/3pZYwJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E84C/64267EE6ACC011F1BDA75F776511F970/rYRGnC7Pu9ySonyb88f3Ok2lMHI.crl rsync://rpki.apnic.net/member_repository/A918E84C/64267EE6ACC011F1BDA75F776511F970/rYRGnC7Pu9ySonyb88f3Ok2lMHI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rYRGnC7Pu9ySonyb88f3Ok2lMHI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:57:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E84C, serialNumber=AD84469C2ECFBBDC92A27C9BF3C7F73A4DA53072 Validity Not Before: Sep 23 08:57:25 2026 GMT Not After : Sep 30 08:57:25 2026 GMT Subject: CN=6ab39475-419b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c2:7c:db:b1:d5:4b:b7:20:ac:50:7a:52:e9: 47:c2:ed:41:55:e4:fc:b9:5a:59:1b:20:d8:6a:f0: 18:cb:09:db:52:23:3d:f2:02:ed:57:49:f3:a6:84: 6d:93:4d:8b:27:7e:6a:ce:d5:70:8d:88:f7:0a:d1: e8:2f:59:d0:37:96:17:92:a3:ea:cf:34:4a:a1:4e: 91:55:9c:b6:fb:53:d3:9d:f5:21:d4:c6:8c:f1:05: 4d:a8:af:14:21:3d:4c:e9:79:e6:e7:e9:33:a7:a0: 56:36:de:e6:81:7a:1e:b9:ba:d7:70:17:19:b8:53: 05:ec:7c:4b:d9:be:1e:80:a7:89:0d:5e:91:42:c4: a7:1f:39:b5:7e:bb:dc:9f:fe:ce:b2:9f:bd:fb:c6: 36:a0:5f:14:89:73:2c:96:77:eb:08:71:ac:b2:21: 0b:7c:37:e2:b1:ab:91:5e:a7:af:4a:6d:85:38:d3: 9e:89:ff:72:d1:c6:47:e8:52:2a:6b:10:bf:2e:6b: b5:c5:c1:41:88:87:68:8d:f0:b5:32:ba:33:69:15: fa:ea:66:b5:0f:b1:b8:cd:89:a1:76:7b:59:da:9d: 34:7f:38:24:de:20:7e:b6:af:71:cb:1b:48:cc:40: e6:d1:b3:a4:7c:bb:af:b9:ab:74:28:bf:d2:cd:6e: b3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:C1:56:B2:4B:95:56:D2:BC:F2:9C:54:73:CF:D7:4A:8C:EC:B3:15 X509v3 Authority Key Identifier: keyid:AD:84:46:9C:2E:CF:BB:DC:92:A2:7C:9B:F3:C7:F7:3A:4D:A5:30:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E84C/64267EE6ACC011F1BDA75F776511F970/rYRGnC7Pu9ySonyb88f3Ok2lMHI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rYRGnC7Pu9ySonyb88f3Ok2lMHI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E84C/64267EE6ACC011F1BDA75F776511F970/rYRGnC7Pu9ySonyb88f3Ok2lMHI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:1e:5b:10:0e:90:26:36:e3:99:c7:58:ce:f9:88:83:47:e6: 39:a7:8d:57:33:d1:4a:86:7f:9f:dc:2e:65:02:f4:59:f3:fe: fa:73:bd:05:fb:ab:c7:0c:ae:c7:a1:db:ad:5f:57:3c:9c:56: 50:28:d5:cb:63:82:28:a3:5a:2f:40:fd:76:0e:fc:68:c4:01: 0c:54:ee:7d:b2:e3:91:87:1c:07:48:ca:b0:89:d7:4c:09:2d: 48:c3:80:b8:83:ce:2f:e4:de:66:81:78:61:0b:db:7f:d6:45: 9e:7c:ea:6b:ee:60:9b:50:fe:c4:db:6c:cd:6c:39:12:ec:3e: c9:07:f5:7a:cb:3b:bc:c7:4c:8d:8d:89:a6:8a:15:f6:a0:24: b5:b1:5d:99:5b:76:59:27:fd:b4:d6:3b:8c:88:11:2b:c0:df: 8f:d0:6d:b3:2d:b8:d3:3c:01:01:eb:98:6b:22:83:ae:70:a7: cc:a0:07:a5:f3:fa:a4:51:31:c2:b1:f4:e8:57:e8:da:fb:6a: 17:c6:50:bc:2a:98:b2:5e:c7:2e:2d:68:77:09:82:07:b0:9a: 77:be:7b:47:d5:9c:43:49:51:07:dc:c3:cf:74:32:44:c9:ef: 9d:ea:3d:c3:54:af:08:91:7e:f3:39:5c:29:c9:5a:ce:57:18: e4:e0:e0:26 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RTg0QzExMC8GA1UEBRMoQUQ4NDQ2OUMyRUNGQkJEQzkyQTI3QzlCRjNDN0Y3M0E0 REE1MzA3MjAeFw0yNjA5MjMwODU3MjVaFw0yNjA5MzAwODU3MjVaMBgxFjAUBgNV BAMTDTZhYjM5NDc1LTQxOWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvwnzbsdVLtyCsUHpS6UfC7UFV5Py5WlkbINhq8BjLCdtSIz3yAu1XSfOmhG2T TYsnfmrO1XCNiPcK0egvWdA3lheSo+rPNEqhTpFVnLb7U9Od9SHUxozxBU2orxQh PUzpeebn6TOnoFY23uaBeh65utdwFxm4UwXsfEvZvh6Ap4kNXpFCxKcfObV+u9yf /s6yn737xjagXxSJcyyWd+sIcayyIQt8N+Kxq5Fep69KbYU4056J/3LRxkfoUipr EL8ua7XFwUGIh2iN8LUyujNpFfrqZrUPsbjNiaF2e1nanTR/OCTeIH62r3HLG0jM QObRs6R8u6+5q3Qov9LNbrOVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUL8FWskuV VtK88pxUc8/XSozssxUwHwYDVR0jBBgwFoAUrYRGnC7Pu9ySonyb88f3Ok2lMHIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFODRDLzY0MjY3RUU2QUND MDExRjFCREE3NUY3NzY1MTFGOTcwL3JZUkduQzdQdTl5U29ueWI4OGYzT2sybE1I SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcllSR25DN1B1OXlTb255Yjg4ZjNPazJsTUhJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF ODRDLzY0MjY3RUU2QUNDMDExRjFCREE3NUY3NzY1MTFGOTcwL3JZUkduQzdQdTl5 U29ueWI4OGYzT2sybE1ISS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQALHlsQDpAmNuOZx1jO+YiDR+Y5p41XM9FKhn+f3C5lAvRZ8/76c70F+6vHDK7H odutX1c8nFZQKNXLY4Ioo1ovQP12DvxoxAEMVO59suORhxwHSMqwiddMCS1Iw4C4 g84v5N5mgXhhC9t/1kWefOpr7mCbUP7E22zNbDkS7D7JB/V6yzu8x0yNjYmmihX2 oCS1sV2ZW3ZZJ/201juMiBErwN+P0G2zLbjTPAEB65hrIoOucKfMoAel8/qkUTHC sfToV+ja+2oXxlC8KpiyXscuLWh3CYIHsJp3vntH1ZxDSVEH3MPPdDJEye+d6j3D VK8IkX7zOVwpyVrOVxjk4OAm -----END CERTIFICATE-----Generated at Thu Sep 24 17:45:33 2026 by rpki-client