$ rpki-client -vvvf rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft File: aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft (raw, json) Hash identifier: iFL/GVSYgi7Ng3cHXaVpfnnU80Qv2noHxzxUCvmsFk8= Subject key identifier: D2:9B:AC:C1:34:87:5D:C0:F8:A3:3C:13:01:50:22:68:1E:E0:0E:50 Authority key identifier: 69:9E:67:42:56:7B:E7:32:9C:C3:A7:86:DE:B7:85:7E:2C:24:20:F9 Certificate issuer: /CN=A9119333/serialNumber=699E6742567BE7329CC3A786DEB7857E2C2420F9 Certificate serial: 23B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft Manifest number: 236D Signing time: Fri 04 Sep 2026 15:47:34 +0000 Manifest this update: Fri 04 Sep 2026 15:47:33 +0000 Manifest next update: Fri 11 Sep 2026 15:47:33 +0000 Files and hashes: 1: aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl (hash: suoS8zBdA/29EbDMk4qJMOU50DQLIjFOjdSu7x/NNa4=) 2: DD73806ED3C811EF9D76942FC4F9AE02.roa (hash: EwnErXsu5NYk/vKrNa7Bl73VtntPwcy5vYXbhPAWFt0=) 3: 1AC9199AD3CB11EF84052053C4F9AE02.roa (hash: plwWFq4k0Hgx6vP8bTzqJt9GJIcOt71z9VOfufJhc6Q=) 4: 443C3AF2D3F611EFB03C5C14C4F9AE02.roa (hash: kvJG9W7BesVloRiSNTznQQ2Vu/TG695dXNyQ/qNO4G8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 15:47:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9144 (0x23b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119333, serialNumber=699E6742567BE7329CC3A786DEB7857E2C2420F9 Validity Not Before: Sep 4 15:47:33 2026 GMT Not After : Sep 11 15:47:33 2026 GMT Subject: CN=6a9ae815-ed98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e7:94:e1:86:7e:23:77:6a:6e:9a:c9:88:25: f0:a5:09:39:16:11:68:7a:e5:55:81:de:3f:16:a6: a8:c7:b2:b0:a8:f9:25:fa:e2:75:c6:b9:62:19:22: 55:12:8b:ff:ac:2e:b5:77:bc:8e:89:e7:8c:55:b3: 47:5c:32:14:33:c2:f8:ee:e6:ab:bf:d3:3a:90:ef: 8e:ee:aa:c7:f9:df:bf:c9:4f:b4:68:81:81:2c:97: c2:27:99:14:af:e7:d5:ee:20:86:3e:9c:65:21:d8: b5:fe:55:dc:08:e6:1e:a7:bf:da:7a:ea:23:66:dc: 45:2d:44:57:82:0f:3a:94:81:8d:31:a6:64:93:62: 34:7c:c0:0c:2f:95:ac:12:f4:e2:4e:3d:9f:84:cc: c9:53:91:cc:0c:ac:e3:2e:8f:1b:5d:4d:65:ac:8d: 06:6a:52:b2:b6:60:6d:30:6a:fe:48:2d:de:7e:3c: 2f:c2:ef:24:c5:d2:66:1f:e5:ec:27:07:5d:cb:22: 7e:16:e4:c8:5b:23:3f:73:52:c8:5a:da:50:fc:61: 5d:70:09:37:59:08:b7:e0:01:d7:76:ff:2c:ae:17: b0:a3:6b:d3:f7:8e:31:f9:15:43:04:ed:ad:44:75: 44:7d:e7:c5:8d:63:ac:7f:63:1d:93:9c:fd:ff:f7: 7c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:9B:AC:C1:34:87:5D:C0:F8:A3:3C:13:01:50:22:68:1E:E0:0E:50 X509v3 Authority Key Identifier: keyid:69:9E:67:42:56:7B:E7:32:9C:C3:A7:86:DE:B7:85:7E:2C:24:20:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:92:58:3f:86:10:77:2f:67:b9:de:ba:fe:33:01:76:ee:5f: b2:b3:7a:13:15:69:d9:c7:6b:59:bf:0f:38:71:62:0a:ab:18: 07:2b:a8:d4:30:1a:70:c0:73:f9:ad:b5:27:a5:6b:70:de:db: 99:b9:f1:58:c3:77:53:4e:c6:92:21:e8:2b:62:a7:bb:3a:49: 29:25:42:23:3c:ab:d2:52:c5:cd:0b:52:95:0e:d8:21:9d:b4: 30:c1:f1:33:3e:3d:69:9b:98:c7:8d:00:f0:4b:cf:c8:04:4d: 2d:d7:54:c5:5f:60:35:86:e9:18:f7:d6:cb:6b:d2:d2:bb:51: 3b:92:a2:1c:f8:6d:61:d2:e6:f8:79:5f:57:54:4d:3e:0b:0c: c6:3a:a7:24:95:14:1a:92:a1:c9:9a:69:b5:35:b7:bd:38:77: ff:1e:64:a7:5c:37:d3:5f:4b:a7:f0:bf:d7:d9:2f:6f:50:92: d5:85:65:e6:a8:13:b7:81:af:ef:6a:e1:c2:0d:50:be:b0:36: ff:f2:c5:dc:a4:47:d6:e0:d5:cd:22:2e:62:cf:04:98:b5:8d: d2:74:e3:13:56:fa:d0:2f:00:a9:93:75:df:0f:24:00:57:0f: 61:ca:33:ee:13:05:c8:5d:8f:f6:37:2e:6b:9c:41:a9:fb:00: 40:e0:95:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICI7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkzMzMxMTAvBgNVBAUTKDY5OUU2NzQyNTY3QkU3MzI5Q0MzQTc4NkRFQjc4NTdF MkMyNDIwRjkwHhcNMjYwOTA0MTU0NzMzWhcNMjYwOTExMTU0NzMzWjAYMRYwFAYD VQQDEw02YTlhZTgxNS1lZDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApueU4YZ+I3dqbprJiCXwpQk5FhFoeuVVgd4/Fqaox7KwqPkl+uJ1xrliGSJV Eov/rC61d7yOieeMVbNHXDIUM8L47uarv9M6kO+O7qrH+d+/yU+0aIGBLJfCJ5kU r+fV7iCGPpxlIdi1/lXcCOYep7/aeuojZtxFLURXgg86lIGNMaZkk2I0fMAML5Ws EvTiTj2fhMzJU5HMDKzjLo8bXU1lrI0GalKytmBtMGr+SC3efjwvwu8kxdJmH+Xs JwddyyJ+FuTIWyM/c1LIWtpQ/GFdcAk3WQi34AHXdv8srhewo2vT944x+RVDBO2t RHVEfefFjWOsf2Mdk5z9//d8jQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNKbrME0 h13A+KM8EwFQImge4A5QMB8GA1UdIwQYMBaAFGmeZ0JWe+cynMOnht63hX4sJCD5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTMzMy8wNjVEQTNCQUI4 NDQxMUU1QjUzNTdCMkZDNEY5QUUwMi9hWjVuUWxaNzV6S2N3NmVHM3JlRmZpd2tJ UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FaNW5RbFo3NXpLY3c2ZUczcmVGZml3a0lQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTMzMy8wNjVEQTNCQUI4NDQxMUU1QjUzNTdCMkZDNEY5QUUwMi9hWjVuUWxaNzV6 S2N3NmVHM3JlRmZpd2tJUGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAe5JYP4YQdy9nud66/jMBdu5fsrN6ExVp2cdrWb8POHFiCqsYByuo1DAacMBz +a21J6VrcN7bmbnxWMN3U07GkiHoK2KnuzpJKSVCIzyr0lLFzQtSlQ7YIZ20MMHx Mz49aZuYx40A8EvPyARNLddUxV9gNYbpGPfWy2vS0rtRO5KiHPhtYdLm+HlfV1RN PgsMxjqnJJUUGpKhyZpptTW3vTh3/x5kp1w3019Lp/C/19kvb1CS1YVl5qgTt4Gv 72rhwg1QvrA2//LF3KRH1uDVzSIuYs8EmLWN0nTjE1b60C8AqZN13w8kAFcPYcoz 7hMFyF2P9jcua5xBqfsAQOCVyA== -----END CERTIFICATE-----Generated at Sat Sep 5 04:12:16 2026 by rpki-client