$ rpki-client -vvf rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft File: ao09a_bbD13jJOQgxXOwqRhDx5Q.mft (raw, json) Hash identifier: mrzz/wrbGW1atYXN3sxs0XyhHyrLzofr64duxCJSpz4= Subject key identifier: 93:71:3F:61:AF:D4:25:8B:2E:C4:8F:E1:0A:3F:EE:DC:0E:F5:8C:1F Authority key identifier: 6A:8D:3D:6B:F6:DB:0F:5D:E3:24:E4:20:C5:73:B0:A9:18:43:C7:94 Certificate issuer: /CN=A911A108/serialNumber=6A8D3D6BF6DB0F5DE324E420C573B0A91843C794 Certificate serial: 020E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft Manifest number: 0208 Signing time: Tue 21 Jul 2026 04:21:37 +0000 Manifest this update: Tue 21 Jul 2026 04:21:36 +0000 Manifest next update: Tue 28 Jul 2026 04:21:36 +0000 Files and hashes: 1: ao09a_bbD13jJOQgxXOwqRhDx5Q.crl (hash: QD2XUQFd9e7X0BR+Fjt9HhYn+mqhvymAvj1BN+1UGSM=) 2: 2152B7B06C0411EEBC1AA814C4F9AE02.roa (hash: hDaWJ1MPMK/kTcYrElHYKR5D6BKNhIGyYI8+GpXOoQk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.crl rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 04:21:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 526 (0x20e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A108, serialNumber=6A8D3D6BF6DB0F5DE324E420C573B0A91843C794 Validity Not Before: Jul 21 04:21:36 2026 GMT Not After : Jul 28 04:21:36 2026 GMT Subject: CN=6a5ef3d1-5a11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:15:8b:54:64:23:23:c7:28:ad:3e:d3:d5:49: 38:5c:5a:0c:02:c4:28:69:fd:22:4b:57:4a:3e:a6: 78:38:e8:38:3f:13:d9:30:01:9f:18:f3:df:b9:10: 40:a0:6b:2d:e6:03:b5:56:d1:46:51:75:cf:8f:64: 41:4a:bb:b4:fd:93:b4:74:47:49:ff:fc:3b:09:8a: 22:3d:ee:bc:be:86:21:5d:17:a6:45:51:31:e2:7f: 34:87:ec:58:9a:04:10:98:d7:7c:0a:8c:a0:f8:e0: 68:f4:e1:df:07:fe:04:bf:cb:f0:aa:18:69:e0:14: ec:2f:3a:97:ec:29:cf:ff:b9:03:fc:0b:eb:b4:29: df:ae:a2:41:f4:bb:01:00:6b:04:4e:8a:90:9a:aa: dc:f6:74:48:84:6e:8a:a3:14:9a:86:a9:20:04:da: dd:dd:6b:b2:02:07:6f:1f:57:a4:61:6e:1f:51:5e: dd:d3:8d:cf:25:37:56:65:e4:95:17:ce:4c:da:a3: ba:bb:31:c9:79:a9:df:7d:91:59:71:e2:a8:a7:0f: 67:3e:77:c4:8c:45:75:f5:13:37:d9:2c:fd:cc:46: 32:ee:4f:d7:fe:ae:6f:39:43:56:fd:69:bf:b5:81: 79:6d:04:3a:51:be:4d:b1:bf:ba:96:ae:00:9a:db: d5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:71:3F:61:AF:D4:25:8B:2E:C4:8F:E1:0A:3F:EE:DC:0E:F5:8C:1F X509v3 Authority Key Identifier: keyid:6A:8D:3D:6B:F6:DB:0F:5D:E3:24:E4:20:C5:73:B0:A9:18:43:C7:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:c9:28:e0:fc:81:c4:06:4a:99:04:dc:87:c9:5b:16:6f:25: dc:de:4e:20:69:74:de:bd:f6:14:56:0f:03:7a:9d:e5:83:2f: 79:45:fa:b4:1b:b3:41:d2:93:13:9a:28:c2:db:a6:4e:26:53: 16:03:65:ba:87:a6:3d:35:be:e5:4f:d9:78:db:9c:e5:5b:cb: e9:7e:cc:ad:6b:58:1a:07:89:0f:ea:a8:1b:41:22:40:b9:b1: 73:b7:e9:a4:98:bd:c5:51:cb:98:dc:c9:79:dd:db:3a:be:eb: 2f:d9:0d:0a:9d:75:e1:83:ef:e6:28:47:16:34:31:54:a5:92: 87:5c:c9:39:09:f0:bd:62:95:b3:b8:46:23:9e:8e:dd:ff:c7: 29:93:33:a9:05:8b:1f:43:49:cf:67:9f:fb:03:ae:6e:ba:bf: 17:36:45:af:94:1b:cf:de:34:1a:17:ce:de:87:58:f7:72:e3: 6b:ee:8a:ad:f6:7b:42:0e:3f:57:13:37:ce:c9:0a:25:ff:e5: 1b:f6:32:ba:c2:3d:8c:6e:94:b0:6b:2a:2a:c6:79:f9:43:0f: 9e:70:8e:6c:66:9a:5d:ce:1a:c8:ba:e3:96:ca:85:ef:22:60: dc:05:b5:58:1b:0a:51:47:90:bc:1e:c7:ed:9f:3c:64:4e:ba: 33:7f:23:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUExMDgxMTAvBgNVBAUTKDZBOEQzRDZCRjZEQjBGNURFMzI0RTQyMEM1NzNCMEE5 MTg0M0M3OTQwHhcNMjYwNzIxMDQyMTM2WhcNMjYwNzI4MDQyMTM2WjAYMRYwFAYD VQQDEw02YTVlZjNkMS01YTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2RWLVGQjI8corT7T1Uk4XFoMAsQoaf0iS1dKPqZ4OOg4PxPZMAGfGPPfuRBA oGst5gO1VtFGUXXPj2RBSru0/ZO0dEdJ//w7CYoiPe68voYhXRemRVEx4n80h+xY mgQQmNd8Coyg+OBo9OHfB/4Ev8vwqhhp4BTsLzqX7CnP/7kD/AvrtCnfrqJB9LsB AGsEToqQmqrc9nRIhG6KoxSahqkgBNrd3WuyAgdvH1ekYW4fUV7d043PJTdWZeSV F85M2qO6uzHJeanffZFZceKopw9nPnfEjEV19RM32Sz9zEYy7k/X/q5vOUNW/Wm/ tYF5bQQ6Ub5Nsb+6lq4AmtvV8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJNxP2Gv 1CWLLsSP4Qo/7twO9YwfMB8GA1UdIwQYMBaAFGqNPWv22w9d4yTkIMVzsKkYQ8eU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTEwOC9GOTU4RkM0QTZD MDAxMUVFQjk4QjQzMEVDNEY5QUUwMi9hbzA5YV9iYkQxM2pKT1FneFhPd3FSaER4 NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FvMDlhX2JiRDEzakpPUWd4WE93cVJoRHg1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTEwOC9GOTU4RkM0QTZDMDAxMUVFQjk4QjQzMEVDNEY5QUUwMi9hbzA5YV9iYkQx M2pKT1FneFhPd3FSaER4NVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfcko4PyBxAZKmQTch8lbFm8l3N5OIGl03r32FFYPA3qd5YMveUX6tBuzQdKT E5oowtumTiZTFgNluoemPTW+5U/ZeNuc5VvL6X7MrWtYGgeJD+qoG0EiQLmxc7fp pJi9xVHLmNzJed3bOr7rL9kNCp114YPv5ihHFjQxVKWSh1zJOQnwvWKVs7hGI56O 3f/HKZMzqQWLH0NJz2ef+wOubrq/FzZFr5Qbz940GhfO3odY93Lja+6KrfZ7Qg4/ VxM3zskKJf/lG/YyusI9jG6UsGsqKsZ5+UMPnnCObGaaXc4ayLrjlsqF7yJg3AW1 WBsKUUeQvB7H7Z88ZE66M38jAg== -----END CERTIFICATE-----Generated at Tue Jul 21 20:35:07 2026 by rpki-client