$ rpki-client -vvvf rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft File: ao09a_bbD13jJOQgxXOwqRhDx5Q.mft (raw, json) Hash identifier: lWi57eVbaejly9ufulYqoL4KQP6ifyc1NiinYxNh4fY= Subject key identifier: 04:F0:AB:38:4A:3C:42:56:45:CB:1F:DD:7F:A8:31:7C:95:D0:53:6D Authority key identifier: 6A:8D:3D:6B:F6:DB:0F:5D:E3:24:E4:20:C5:73:B0:A9:18:43:C7:94 Certificate issuer: /CN=A911A108/serialNumber=6A8D3D6BF6DB0F5DE324E420C573B0A91843C794 Certificate serial: 0226 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft Manifest number: 0220 Signing time: Sat 05 Sep 2026 02:40:14 +0000 Manifest this update: Sat 05 Sep 2026 02:40:14 +0000 Manifest next update: Sat 12 Sep 2026 02:40:14 +0000 Files and hashes: 1: ao09a_bbD13jJOQgxXOwqRhDx5Q.crl (hash: ATjZ05qWPZnEskN/uQPjOvg/eWtNFXa+z4GBqtg852Q=) 2: 2152B7B06C0411EEBC1AA814C4F9AE02.roa (hash: hDaWJ1MPMK/kTcYrElHYKR5D6BKNhIGyYI8+GpXOoQk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.crl rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 02:40:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 550 (0x226) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A108, serialNumber=6A8D3D6BF6DB0F5DE324E420C573B0A91843C794 Validity Not Before: Sep 5 02:40:14 2026 GMT Not After : Sep 12 02:40:14 2026 GMT Subject: CN=6a9b810e-0ffb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ee:44:00:69:99:4e:6a:7e:ac:70:79:3b:50: 63:cb:81:1c:64:73:b5:4d:27:65:c2:3a:44:a3:82: 15:fe:9c:f4:13:e6:ce:c6:17:a8:d8:5f:5d:87:d3: ee:06:c3:a3:32:17:d7:81:0b:00:ae:b8:d6:2a:30: 06:27:e9:c7:ba:75:4c:5f:c0:46:a8:bf:3c:3d:0b: 2a:13:ce:9a:dd:95:46:8f:c3:77:e0:17:43:3b:84: ec:88:5c:5b:06:1b:8f:9b:3c:36:98:a2:32:d5:35: 59:48:4e:2e:17:74:a2:e1:d1:04:b4:7c:c5:8d:4b: 10:8e:db:d6:fe:03:37:56:39:41:43:55:b4:f3:71: 83:be:1f:c2:77:df:6b:f2:6e:f2:53:b0:41:69:52: 0c:f2:79:e7:db:0e:af:d2:99:63:9e:bd:cb:96:82: a1:de:08:75:c5:b6:4d:77:20:aa:66:58:0a:b9:65: 31:be:35:62:bb:50:19:6f:f5:91:c7:9c:95:39:2f: 59:dd:03:95:80:84:48:01:6c:29:81:b4:e3:0b:ee: 53:9a:7d:14:60:a2:db:80:fa:d1:0f:e6:eb:82:30: c3:57:84:fb:d2:6d:61:21:32:c8:b7:15:73:e7:9c: b1:96:11:11:09:04:89:f1:30:27:e8:00:42:35:02: dc:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:F0:AB:38:4A:3C:42:56:45:CB:1F:DD:7F:A8:31:7C:95:D0:53:6D X509v3 Authority Key Identifier: keyid:6A:8D:3D:6B:F6:DB:0F:5D:E3:24:E4:20:C5:73:B0:A9:18:43:C7:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:5d:81:85:77:b4:15:f2:c5:e2:32:ae:09:29:37:65:ba:3d: 57:50:5b:cf:2d:97:e8:fa:2b:a8:08:e5:10:7e:2c:20:f6:3b: f0:bc:a3:04:60:9f:39:1d:bb:a2:7a:f2:30:5c:a3:ca:53:54: a3:0f:60:ab:f6:dd:fc:9c:6f:97:48:1c:e2:ef:ee:d5:0c:34: fd:69:e1:d2:a3:72:36:31:43:6b:c3:71:42:a2:fb:75:69:ed: 2a:d7:19:5c:3e:9d:b3:ee:b3:3a:67:e4:3d:da:ac:bd:cc:39: e8:1d:33:f1:85:23:9c:ee:d8:07:31:39:34:59:ab:c8:b9:fc: cc:61:38:f4:31:3d:3f:3e:7c:d7:d9:36:78:7c:30:94:50:13: a5:d0:ea:cb:5d:c5:40:8d:ff:9b:32:04:cc:8f:64:3d:28:53: 0c:96:9a:a6:2f:fd:8f:01:b3:36:e3:8c:e1:5b:4f:d6:9a:28: 22:e5:3d:37:78:f3:bc:3a:97:26:dd:88:e2:02:39:52:d3:b4: a6:ca:fc:d5:10:3b:54:8f:6b:94:a3:c0:24:ed:45:19:5c:1e: 5e:64:4f:b2:f8:77:0f:47:69:b8:1c:dc:04:13:ff:83:50:3d: 57:c6:1e:d3:d9:3e:03:a5:80:55:a5:78:a9:3d:a9:1d:c4:2c: 0d:58:09:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUExMDgxMTAvBgNVBAUTKDZBOEQzRDZCRjZEQjBGNURFMzI0RTQyMEM1NzNCMEE5 MTg0M0M3OTQwHhcNMjYwOTA1MDI0MDE0WhcNMjYwOTEyMDI0MDE0WjAYMRYwFAYD VQQDEw02YTliODEwZS0wZmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+5EAGmZTmp+rHB5O1Bjy4EcZHO1TSdlwjpEo4IV/pz0E+bOxheo2F9dh9Pu BsOjMhfXgQsArrjWKjAGJ+nHunVMX8BGqL88PQsqE86a3ZVGj8N34BdDO4TsiFxb BhuPmzw2mKIy1TVZSE4uF3Si4dEEtHzFjUsQjtvW/gM3VjlBQ1W083GDvh/Cd99r 8m7yU7BBaVIM8nnn2w6v0pljnr3LloKh3gh1xbZNdyCqZlgKuWUxvjViu1AZb/WR x5yVOS9Z3QOVgIRIAWwpgbTjC+5Tmn0UYKLbgPrRD+brgjDDV4T70m1hITLItxVz 55yxlhERCQSJ8TAn6ABCNQLcHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFATwqzhK PEJWRcsf3X+oMXyV0FNtMB8GA1UdIwQYMBaAFGqNPWv22w9d4yTkIMVzsKkYQ8eU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTEwOC9GOTU4RkM0QTZD MDAxMUVFQjk4QjQzMEVDNEY5QUUwMi9hbzA5YV9iYkQxM2pKT1FneFhPd3FSaER4 NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FvMDlhX2JiRDEzakpPUWd4WE93cVJoRHg1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTEwOC9GOTU4RkM0QTZDMDAxMUVFQjk4QjQzMEVDNEY5QUUwMi9hbzA5YV9iYkQx M2pKT1FneFhPd3FSaER4NVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARl2BhXe0FfLF4jKuCSk3Zbo9V1Bbzy2X6PorqAjlEH4sIPY78LyjBGCfOR27 onryMFyjylNUow9gq/bd/Jxvl0gc4u/u1Qw0/Wnh0qNyNjFDa8NxQqL7dWntKtcZ XD6ds+6zOmfkPdqsvcw56B0z8YUjnO7YBzE5NFmryLn8zGE49DE9Pz5819k2eHww lFATpdDqy13FQI3/mzIEzI9kPShTDJaapi/9jwGzNuOM4VtP1pooIuU9N3jzvDqX Jt2I4gI5UtO0psr81RA7VI9rlKPAJO1FGVweXmRPsvh3D0dpuBzcBBP/g1A9V8Ye 09k+A6WAVaV4qT2pHcQsDVgJjw== -----END CERTIFICATE-----Generated at Sat Sep 5 10:14:47 2026 by rpki-client