$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.mft File: d0DODmzQVMQy3kbUw-2hT2Qv2hQ.mft (raw, json) Hash identifier: kvOWhpKaY8xRc54L7h+rornDc602LBNaXuj0XYsjKYg= Subject key identifier: 8D:4E:4B:EA:7B:80:EE:A7:16:41:55:74:84:1D:74:72:9C:03:89:6A Authority key identifier: 77:40:CE:0E:6C:D0:54:C4:32:DE:46:D4:C3:ED:A1:4F:64:2F:DA:14 Certificate issuer: /CN=A9120AC1/serialNumber=7740CE0E6CD054C432DE46D4C3EDA14F642FDA14 Certificate serial: 05B4 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.mft Manifest number: 05A0 Signing time: Wed 02 Sep 2026 23:09:28 +0000 Manifest this update: Wed 02 Sep 2026 23:09:27 +0000 Manifest next update: Wed 09 Sep 2026 23:09:27 +0000 Files and hashes: 1: d0DODmzQVMQy3kbUw-2hT2Qv2hQ.crl (hash: h4M6utK7JdHGNsG68+tT9z1Ooht4sPWUxJwbzPJbPSY=) 2: B5AC177E3E0411ECABD9496CC4F9AE02.roa (hash: yeDD3azucqTXwa0Gdb8W5tD9O2qrp+zwpH6Y+zEBWbM=) 3: 9BBDF5DEFFD611EF9AE4D35EC4F9AE02.roa (hash: Z6zpJNeDiRoumvX5lCIDf2X6SZzpmpEYlhnAJ6yadjo=) 4: EBF4C0063C8811EC889B9D78C4F9AE02.roa (hash: xL18VcZ56ntQg06dxu8mPMsho0DT/fe8AiSvaUT/7NM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.crl rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Sep 2026 23:09:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1460 (0x5b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120AC1, serialNumber=7740CE0E6CD054C432DE46D4C3EDA14F642FDA14 Validity Not Before: Sep 2 23:09:27 2026 GMT Not After : Sep 9 23:09:27 2026 GMT Subject: CN=6a98aca8-45f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:24:c5:fe:db:d9:52:56:42:64:6d:07:b7:7a: 61:b8:a8:8b:54:a2:91:19:bc:6c:f9:3f:fb:84:f5: 26:3d:b0:ea:46:55:4e:9d:20:9b:c4:84:07:39:83: a5:30:72:76:a4:0e:6e:15:1d:82:02:df:d7:d4:79: 11:eb:09:ca:c5:c3:12:3d:15:bc:41:25:f1:9f:86: 24:24:e5:59:7c:a4:3c:25:b2:3a:dd:7e:e0:bd:c3: ec:8d:98:da:d3:62:2b:5c:97:8a:da:d7:a7:ef:15: e8:9b:5e:43:03:b7:9a:8e:a2:68:ba:23:50:96:3e: 07:a1:72:59:08:92:82:26:f7:b7:9d:5f:14:33:6c: 50:76:c9:44:51:e9:c0:72:cd:5e:0d:7f:cc:64:11: 0c:21:ee:46:bd:d6:bb:93:74:9c:3d:97:fd:cc:f8: 2d:cb:32:ad:5d:04:8a:12:ea:bc:ce:25:04:ae:68: c6:c4:e5:2d:ee:84:1a:9f:12:5a:d2:c6:c9:c9:b7: f9:b5:18:55:31:10:4f:c4:d9:b3:46:36:2c:3c:70: 8b:4d:54:68:4c:89:09:75:bb:ab:59:2e:01:55:47: 63:b3:d9:0f:46:3b:02:39:4f:15:61:fd:85:e5:d6: cc:fa:8b:b2:05:e2:34:16:2d:42:7e:b8:99:25:a3: b7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:4E:4B:EA:7B:80:EE:A7:16:41:55:74:84:1D:74:72:9C:03:89:6A X509v3 Authority Key Identifier: keyid:77:40:CE:0E:6C:D0:54:C4:32:DE:46:D4:C3:ED:A1:4F:64:2F:DA:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:b9:15:a5:db:42:51:e4:9c:01:f8:49:b6:69:5a:e1:e3:44: 8d:b3:2b:72:c5:f2:71:c5:e3:47:97:c7:4e:e2:b3:8f:8c:11: 7c:f7:ba:25:1e:41:d5:15:16:cf:db:42:42:ac:93:7c:43:cb: d4:f6:d9:13:00:b5:5e:6e:25:0c:b5:28:42:2b:f5:30:e2:59: 11:ec:37:b8:5a:1b:5f:f0:8c:8e:a1:73:1c:50:cc:ff:67:5a: 68:f6:5a:93:7a:af:7b:59:dc:7a:cc:cf:4a:94:7a:f5:8f:e0: 5d:cd:15:39:38:53:01:af:9a:a0:eb:b5:dc:01:d9:ea:9a:ea: cd:b7:12:59:1b:d5:24:b2:fb:92:12:57:9e:b3:42:32:19:11: c0:cd:18:5c:4f:89:9d:6b:73:eb:3a:9f:30:31:9a:68:f6:c0: 75:9c:f9:93:12:b1:3a:ad:e8:e6:61:2a:29:db:d0:7c:31:18: 57:43:f7:9a:16:bd:9e:3e:2d:5e:15:8d:5a:de:fa:be:e7:fc: 45:93:ce:32:ef:67:a1:fa:f0:46:aa:e0:84:58:f7:b9:86:b5: 3a:f1:39:a2:91:85:39:5e:0e:62:0c:45:0a:98:3f:e1:f3:87: 19:00:39:1a:ba:77:00:1f:3c:fb:13:2e:9e:68:e9:d9:41:6f: 3a:8f:a4:7f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBBQzExMTAvBgNVBAUTKDc3NDBDRTBFNkNEMDU0QzQzMkRFNDZENEMzRURBMTRG NjQyRkRBMTQwHhcNMjYwOTAyMjMwOTI3WhcNMjYwOTA5MjMwOTI3WjAYMRYwFAYD VQQDEw02YTk4YWNhOC00NWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtSTF/tvZUlZCZG0Ht3phuKiLVKKRGbxs+T/7hPUmPbDqRlVOnSCbxIQHOYOl MHJ2pA5uFR2CAt/X1HkR6wnKxcMSPRW8QSXxn4YkJOVZfKQ8JbI63X7gvcPsjZja 02IrXJeK2ten7xXom15DA7eajqJouiNQlj4HoXJZCJKCJve3nV8UM2xQdslEUenA cs1eDX/MZBEMIe5Gvda7k3ScPZf9zPgtyzKtXQSKEuq8ziUErmjGxOUt7oQanxJa 0sbJybf5tRhVMRBPxNmzRjYsPHCLTVRoTIkJdburWS4BVUdjs9kPRjsCOU8VYf2F 5dbM+ouyBeI0Fi1CfriZJaO3RwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI1OS+p7 gO6nFkFVdIQddHKcA4lqMB8GA1UdIwQYMBaAFHdAzg5s0FTEMt5G1MPtoU9kL9oU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEFDMS8zNTkwNjVBNjMw OTcxMUVDQjI4NUE2NEJDNEY5QUUwMi9kMERPRG16UVZNUXkza2JVdy0yaFQyUXYy aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2QwRE9EbXpRVk1ReTNrYlV3LTJoVDJRdjJoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEFDMS8zNTkwNjVBNjMwOTcxMUVDQjI4NUE2NEJDNEY5QUUwMi9kMERPRG16UVZN UXkza2JVdy0yaFQyUXYyaFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcrkVpdtCUeScAfhJtmla4eNEjbMrcsXyccXjR5fHTuKzj4wRfPe6JR5B1RUW z9tCQqyTfEPL1PbZEwC1Xm4lDLUoQiv1MOJZEew3uFobX/CMjqFzHFDM/2daaPZa k3qve1nceszPSpR69Y/gXc0VOThTAa+aoOu13AHZ6prqzbcSWRvVJLL7khJXnrNC MhkRwM0YXE+JnWtz6zqfMDGaaPbAdZz5kxKxOq3o5mEqKdvQfDEYV0P3mha9nj4t XhWNWt76vuf8RZPOMu9nofrwRqrghFj3uYa1OvE5opGFOV4OYgxFCpg/4fOHGQA5 Grp3AB88+xMunmjp2UFvOo+kfw== -----END CERTIFICATE-----Generated at Fri Sep 4 22:53:07 2026 by rpki-client