$ rpki-client -vvvf rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft File: sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft (raw, json) Hash identifier: OOcA5XEKbVKSITeVnDkWrXRGqViqYIEOT5Z3tStprcM= Subject key identifier: 99:F1:8A:27:B7:C8:10:67:CC:D0:B5:E1:47:D7:25:75:FF:84:90:75 Authority key identifier: B0:D5:25:EA:99:D4:C8:EC:75:60:71:26:A4:9E:F6:70:7B:D6:F4:AD Certificate issuer: /CN=A91144C9/serialNumber=B0D525EA99D4C8EC75607126A49EF6707BD6F4AD Certificate serial: 0117 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sNUl6pnUyOx1YHEmpJ72cHvW9K0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft Manifest number: 0112 Signing time: Wed 09 Sep 2026 06:26:24 +0000 Manifest this update: Wed 09 Sep 2026 06:26:23 +0000 Manifest next update: Wed 16 Sep 2026 06:26:23 +0000 Files and hashes: 1: sNUl6pnUyOx1YHEmpJ72cHvW9K0.crl (hash: 4t6dv99qkO9fNMxbla3yk13hCPYY1ClbZMI7P3JAiY0=) 2: 9F25E6340ECA11F0BAAE344AC4F9AE02.roa (hash: oZt0DncXTvvxAu6W6XuMxsXB6h7QjU6a+ul8Hylf5MI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.crl rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sNUl6pnUyOx1YHEmpJ72cHvW9K0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Sep 2026 06:26:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91144C9, serialNumber=B0D525EA99D4C8EC75607126A49EF6707BD6F4AD Validity Not Before: Sep 9 06:26:23 2026 GMT Not After : Sep 16 06:26:23 2026 GMT Subject: CN=6aa0fc10-a3c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:94:b0:42:bc:9a:df:e8:2c:ce:a4:a5:2a:47: d5:39:a8:8a:c7:73:0a:b9:80:4b:30:71:cc:76:5c: 61:8e:52:16:17:41:d3:28:e0:7a:95:c6:ab:2f:f8: 94:d9:b2:cc:2a:38:c1:39:f4:76:67:a4:7a:a2:8b: dd:ec:51:dd:7f:4a:e9:ed:c4:90:90:f1:18:60:0a: 86:2e:7f:47:ed:25:b6:4e:c4:ef:38:43:4c:95:d6: c6:11:d5:d4:bf:c4:ee:09:65:31:7f:b9:7b:e5:7b: a7:27:7e:90:42:21:ec:d7:e1:a3:dc:62:54:4c:4b: c4:9a:bc:d9:e7:8c:2e:e8:6f:18:35:9f:bc:56:9b: 92:0c:8f:6b:b5:14:88:de:cb:2b:9a:f6:b5:e4:f1: 25:3f:fc:7d:fa:bd:07:16:87:39:e3:c4:31:3b:38: da:29:aa:26:72:c9:a2:0d:0b:1a:3a:ef:b9:55:84: 3c:6e:26:a3:6c:28:a0:7f:1c:8e:13:e5:3d:77:81: c0:c9:7a:6f:65:31:52:0c:50:85:8f:53:01:61:70: fe:28:da:bf:c8:e0:bf:67:57:42:77:c7:d1:21:94: 83:6b:41:9b:9c:fd:4f:fc:48:77:c2:4b:6d:7f:fc: a7:34:f1:98:11:19:45:d9:a6:23:7f:5b:e4:79:31: 16:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:F1:8A:27:B7:C8:10:67:CC:D0:B5:E1:47:D7:25:75:FF:84:90:75 X509v3 Authority Key Identifier: keyid:B0:D5:25:EA:99:D4:C8:EC:75:60:71:26:A4:9E:F6:70:7B:D6:F4:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sNUl6pnUyOx1YHEmpJ72cHvW9K0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:f1:13:06:8f:a2:f7:bb:fd:9f:b5:7e:a0:44:0c:da:12:e6: 55:8a:95:ed:0c:9b:50:a7:0e:0b:97:47:17:ad:75:22:07:eb: 51:a9:74:53:5f:24:2a:ef:74:4d:45:01:fc:d7:43:cc:1d:a2: d5:6c:e2:5f:f7:e4:00:eb:b5:fe:f1:0d:44:50:e4:14:e1:ad: 03:db:16:7c:9b:b1:81:f9:c5:6e:70:e2:f6:23:b9:f5:44:da: 50:c6:dc:c2:f8:08:fe:e5:0a:61:0b:a7:9e:ec:ee:fe:17:82: 77:ee:4e:90:7c:f2:5a:1a:19:16:3a:46:c8:f4:33:cb:c3:70: d4:6d:8f:0d:df:22:aa:df:ec:f7:23:d1:8a:63:59:e8:7f:90: 5d:a5:bd:4c:e3:49:dc:27:1e:be:65:eb:6c:f1:1b:49:b4:5f: 54:d4:8c:3c:22:91:49:19:f0:0f:f4:91:b8:7e:c8:5c:30:49: 91:b2:0a:f0:39:a3:c5:52:71:5b:5b:67:db:50:07:61:f6:60: 7d:b2:20:95:40:0d:69:75:94:38:dc:9e:d9:a4:b8:a6:14:1d: 88:4d:8c:05:1a:a5:71:bb:a1:e7:ef:94:ab:82:28:5e:5f:7e: 58:61:4e:eb:d0:6b:17:01:b7:c3:a1:1d:af:72:51:11:c8:4e: 3e:83:ef:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ0QzkxMTAvBgNVBAUTKEIwRDUyNUVBOTlENEM4RUM3NTYwNzEyNkE0OUVGNjcw N0JENkY0QUQwHhcNMjYwOTA5MDYyNjIzWhcNMjYwOTE2MDYyNjIzWjAYMRYwFAYD VQQDEw02YWEwZmMxMC1hM2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj5SwQrya3+gszqSlKkfVOaiKx3MKuYBLMHHMdlxhjlIWF0HTKOB6lcarL/iU 2bLMKjjBOfR2Z6R6oovd7FHdf0rp7cSQkPEYYAqGLn9H7SW2TsTvOENMldbGEdXU v8TuCWUxf7l75XunJ36QQiHs1+Gj3GJUTEvEmrzZ54wu6G8YNZ+8VpuSDI9rtRSI 3ssrmva15PElP/x9+r0HFoc548QxOzjaKaomcsmiDQsaOu+5VYQ8biajbCigfxyO E+U9d4HAyXpvZTFSDFCFj1MBYXD+KNq/yOC/Z1dCd8fRIZSDa0GbnP1P/Eh3wktt f/ynNPGYERlF2aYjf1vkeTEWYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJnxiie3 yBBnzNC14UfXJXX/hJB1MB8GA1UdIwQYMBaAFLDVJeqZ1MjsdWBxJqSe9nB71vSt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDRDOS83QkEzRTcwQzBF QzkxMUYwQTI2RkYxNDRDNEY5QUUwMi9zTlVsNnBuVXlPeDFZSEVtcEo3MmNIdlc5 SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3NOVWw2cG5VeU94MVlIRW1wSjcyY0h2VzlLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDRDOS83QkEzRTcwQzBFQzkxMUYwQTI2RkYxNDRDNEY5QUUwMi9zTlVsNnBuVXlP eDFZSEVtcEo3MmNIdlc5SzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaPETBo+i97v9n7V+oEQM2hLmVYqV7QybUKcOC5dHF611IgfrUal0U18kKu90 TUUB/NdDzB2i1WziX/fkAOu1/vENRFDkFOGtA9sWfJuxgfnFbnDi9iO59UTaUMbc wvgI/uUKYQunnuzu/heCd+5OkHzyWhoZFjpGyPQzy8Nw1G2PDd8iqt/s9yPRimNZ 6H+QXaW9TONJ3CcevmXrbPEbSbRfVNSMPCKRSRnwD/SRuH7IXDBJkbIK8DmjxVJx W1tn21AHYfZgfbIglUANaXWUONye2aS4phQdiE2MBRqlcbuh5++Uq4IoXl9+WGFO 69BrFwG3w6Edr3JREchOPoPvBw== -----END CERTIFICATE-----Generated at Thu Sep 10 22:46:09 2026 by rpki-client