$ rpki-client -vvvf rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft File: ao09a_bbD13jJOQgxXOwqRhDx5Q.mft (raw, json) Hash identifier: zkp1NCGrrL8rEG1mnk+MS2wzAVFvn36+70wysk4ZPeM= Subject key identifier: D8:C8:3B:2B:7D:F1:A2:9C:5B:36:B0:CD:F5:E1:DB:4A:57:AE:65:63 Authority key identifier: 6A:8D:3D:6B:F6:DB:0F:5D:E3:24:E4:20:C5:73:B0:A9:18:43:C7:94 Certificate issuer: /CN=A911A108/serialNumber=6A8D3D6BF6DB0F5DE324E420C573B0A91843C794 Certificate serial: 0240 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft Manifest number: 023A Signing time: Tue 27 Oct 2026 02:47:38 +0000 Manifest this update: Tue 27 Oct 2026 02:47:38 +0000 Manifest next update: Tue 03 Nov 2026 02:47:38 +0000 Files and hashes: 1: ao09a_bbD13jJOQgxXOwqRhDx5Q.crl (hash: 3Eq6KF2I4Xj3x10RG+SsI9B0xrldET8nR0yD3AuMPbY=) 2: 2152B7B06C0411EEBC1AA814C4F9AE02.roa (hash: hDaWJ1MPMK/kTcYrElHYKR5D6BKNhIGyYI8+GpXOoQk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.crl rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 02:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 576 (0x240) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A108, serialNumber=6A8D3D6BF6DB0F5DE324E420C573B0A91843C794 Validity Not Before: Oct 27 02:47:38 2026 GMT Not After : Nov 3 02:47:38 2026 GMT Subject: CN=6ae010ca-b221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:95:27:08:f5:3a:45:0b:09:c6:13:af:ea:a6: 00:6b:e3:49:46:68:1a:78:69:a8:e1:53:82:0b:e8: 92:43:53:bf:8a:d2:9e:c2:15:fe:72:05:78:93:00: 63:96:65:0b:71:6f:06:91:81:51:08:18:f2:69:e5: da:ba:75:5d:20:24:a0:f0:40:a4:d2:4a:a0:2b:bd: 5e:91:6a:09:e3:83:20:0a:76:85:40:8d:12:ee:2f: 52:ed:26:9c:40:f9:f3:18:1b:a5:df:66:2f:b3:f7: b4:9c:12:85:ae:76:17:e4:c9:14:30:b8:17:af:09: 96:6f:66:45:c5:c2:18:12:ec:a4:cd:78:b5:88:2e: 9a:96:23:e3:89:98:07:a7:f5:b0:d1:6b:58:1c:ae: 02:70:c5:78:f6:27:5a:90:fd:7f:49:53:87:0f:a0: 7d:60:d3:97:32:e3:6d:d2:8f:d5:8a:52:b1:35:eb: d7:f6:da:63:dd:0f:c5:a7:d4:40:9c:d3:e8:55:b7: 1b:5a:03:fd:41:a8:d5:a9:7b:3a:6d:ac:3a:87:3b: 68:d3:62:19:74:bd:bd:0a:30:d7:8a:16:7c:0d:36: f4:6a:08:0a:dd:62:8e:9c:15:bb:d4:b3:e1:f3:22: 7e:90:b1:4e:c4:cc:12:64:a5:f2:e6:cc:5f:d3:99: cf:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C8:3B:2B:7D:F1:A2:9C:5B:36:B0:CD:F5:E1:DB:4A:57:AE:65:63 X509v3 Authority Key Identifier: keyid:6A:8D:3D:6B:F6:DB:0F:5D:E3:24:E4:20:C5:73:B0:A9:18:43:C7:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:99:21:d8:ec:3c:15:2a:5c:79:29:5e:31:d4:47:27:4c:a1: 67:65:5c:b8:ca:7b:a2:3f:f0:8e:7b:c3:8c:46:bd:c8:65:67: ce:4d:fb:55:3b:4e:2e:44:19:86:b6:8f:77:62:43:66:40:b7: 9e:f4:5f:bd:72:0e:1d:85:94:28:a6:13:04:90:00:37:e1:d6: dc:66:53:9b:4b:b1:ba:a8:fa:eb:ff:86:ab:2e:4e:a2:79:ca: ac:75:1a:4c:b5:1e:9e:21:60:83:31:63:cb:1d:29:4a:27:53: e6:51:c1:1d:60:45:af:93:a8:79:3b:d6:19:08:8e:7e:e2:36: 48:b0:8f:b6:83:af:3a:e3:1b:86:5a:80:68:79:85:0e:28:12: 5a:55:cb:a9:d1:0e:a2:0e:c4:b7:29:c6:eb:47:3e:48:e0:38: 4a:45:a9:56:8c:b9:0f:97:93:17:96:16:77:8c:bc:37:6c:77: dd:06:f4:ba:df:39:74:49:ef:14:6d:9b:1e:a9:87:67:84:34: fa:1b:f0:5e:21:45:78:ba:dc:da:c1:ea:8e:70:a2:8d:ff:86: e9:8b:4d:4d:80:e2:0e:03:39:7a:8e:b4:47:10:c8:87:b9:4e: 19:a2:74:38:e5:42:a0:b6:df:9f:63:0a:88:4a:be:d0:56:e0: 3b:69:24:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUExMDgxMTAvBgNVBAUTKDZBOEQzRDZCRjZEQjBGNURFMzI0RTQyMEM1NzNCMEE5 MTg0M0M3OTQwHhcNMjYxMDI3MDI0NzM4WhcNMjYxMTAzMDI0NzM4WjAYMRYwFAYD VQQDEw02YWUwMTBjYS1iMjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlZUnCPU6RQsJxhOv6qYAa+NJRmgaeGmo4VOCC+iSQ1O/itKewhX+cgV4kwBj lmULcW8GkYFRCBjyaeXaunVdICSg8ECk0kqgK71ekWoJ44MgCnaFQI0S7i9S7Sac QPnzGBul32Yvs/e0nBKFrnYX5MkUMLgXrwmWb2ZFxcIYEuykzXi1iC6aliPjiZgH p/Ww0WtYHK4CcMV49idakP1/SVOHD6B9YNOXMuNt0o/VilKxNevX9tpj3Q/Fp9RA nNPoVbcbWgP9QajVqXs6baw6hzto02IZdL29CjDXihZ8DTb0aggK3WKOnBW71LPh 8yJ+kLFOxMwSZKXy5sxf05nPOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNjIOyt9 8aKcWzawzfXh20pXrmVjMB8GA1UdIwQYMBaAFGqNPWv22w9d4yTkIMVzsKkYQ8eU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTEwOC9GOTU4RkM0QTZD MDAxMUVFQjk4QjQzMEVDNEY5QUUwMi9hbzA5YV9iYkQxM2pKT1FneFhPd3FSaER4 NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FvMDlhX2JiRDEzakpPUWd4WE93cVJoRHg1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTEwOC9GOTU4RkM0QTZDMDAxMUVFQjk4QjQzMEVDNEY5QUUwMi9hbzA5YV9iYkQx M2pKT1FneFhPd3FSaER4NVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATpkh2Ow8FSpceSleMdRHJ0yhZ2VcuMp7oj/wjnvDjEa9yGVnzk37VTtOLkQZ hraPd2JDZkC3nvRfvXIOHYWUKKYTBJAAN+HW3GZTm0uxuqj66/+Gqy5OonnKrHUa TLUeniFggzFjyx0pSidT5lHBHWBFr5OoeTvWGQiOfuI2SLCPtoOvOuMbhlqAaHmF DigSWlXLqdEOog7EtynG60c+SOA4SkWpVoy5D5eTF5YWd4y8N2x33Qb0ut85dEnv FG2bHqmHZ4Q0+hvwXiFFeLrc2sHqjnCijf+G6YtNTYDiDgM5eo60RxDIh7lOGaJ0 OOVCoLbfn2MKiEq+0FbgO2kkvg== -----END CERTIFICATE-----Generated at Wed Oct 28 10:28:56 2026 by rpki-client