$ rpki-client -vvvf rpki.apnic.net/member_repository/A9122796/B4C8D8269E0111F1A1C9CC584811F970/c-CQ73mbZ1mwPSJR3ES3rANTpr0.mft File: c-CQ73mbZ1mwPSJR3ES3rANTpr0.mft (raw, json) Hash identifier: xS/2+zWDCHin2mGbsUatuKlqGGKxiicP46T6D8ZpaEw= Subject key identifier: E0:38:63:E8:A6:E5:13:1D:F2:86:17:0B:14:3A:DA:EA:40:62:95:B5 Authority key identifier: 73:E0:90:EF:79:9B:67:59:B0:3D:22:51:DC:44:B7:AC:03:53:A6:BD Certificate issuer: /CN=A9122796/serialNumber=73E090EF799B6759B03D2251DC44B7AC0353A6BD Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c-CQ73mbZ1mwPSJR3ES3rANTpr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122796/B4C8D8269E0111F1A1C9CC584811F970/c-CQ73mbZ1mwPSJR3ES3rANTpr0.mft Manifest number: 08 Signing time: Mon 31 Aug 2026 09:37:18 +0000 Manifest this update: Mon 31 Aug 2026 09:37:18 +0000 Manifest next update: Mon 07 Sep 2026 09:37:18 +0000 Files and hashes: 1: c-CQ73mbZ1mwPSJR3ES3rANTpr0.crl (hash: WXk2Y0lqydGP1ZAQBdVkvDbB1FXfAvY31ytXApjNlNI=) 2: 2AE7F0209E0A11F1A6A4064D4C11F970.roa (hash: Q55ns3qgHzfdd9tA6C9B2IGZDy2kja6eWDaQp3SdxZ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122796/B4C8D8269E0111F1A1C9CC584811F970/c-CQ73mbZ1mwPSJR3ES3rANTpr0.crl rsync://rpki.apnic.net/member_repository/A9122796/B4C8D8269E0111F1A1C9CC584811F970/c-CQ73mbZ1mwPSJR3ES3rANTpr0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c-CQ73mbZ1mwPSJR3ES3rANTpr0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Sep 2026 09:37:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122796, serialNumber=73E090EF799B6759B03D2251DC44B7AC0353A6BD Validity Not Before: Aug 31 09:37:18 2026 GMT Not After : Sep 7 09:37:18 2026 GMT Subject: CN=6a954b4e-8c7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:be:27:05:cc:82:9c:79:1d:25:19:7c:94:d6: 8f:76:43:24:84:4c:9c:92:7f:89:b5:cc:7c:c8:85: 43:f8:09:bb:47:59:ec:c3:88:59:3f:d3:7c:a8:57: c7:38:d6:9e:4a:4e:20:95:96:99:d6:81:c4:46:71: f8:d4:12:ab:02:3b:c0:96:96:a6:d4:ec:76:5f:dd: 54:3f:be:cf:f9:86:04:6d:55:b6:7d:ee:67:da:e4: 6c:61:0c:a7:87:ae:39:c1:ac:10:bc:09:4d:0e:6a: 16:0b:c3:5f:68:4d:65:aa:5e:a2:3b:df:c3:bd:2d: 78:77:0e:93:ca:55:fb:0a:f4:31:00:8e:52:8f:e9: f8:44:ed:12:35:a6:48:a1:44:ce:67:15:31:df:92: 4b:12:00:86:5d:e3:e0:f3:bf:f7:c7:fd:70:aa:44: 46:1f:f2:83:76:cc:ca:42:55:44:9a:22:72:37:69: e0:57:ff:6d:e2:2c:b8:9e:d5:a3:10:80:56:d0:fc: da:aa:16:81:12:0a:0f:3d:19:73:e2:93:d0:93:72: ac:d3:7d:e6:1c:f9:9e:a0:22:ed:35:08:f7:07:78: ca:48:d2:99:c4:df:67:99:74:26:1a:62:b1:25:02: ce:32:11:75:a2:c6:8d:83:1b:4b:50:dc:d1:6d:58: a8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:38:63:E8:A6:E5:13:1D:F2:86:17:0B:14:3A:DA:EA:40:62:95:B5 X509v3 Authority Key Identifier: keyid:73:E0:90:EF:79:9B:67:59:B0:3D:22:51:DC:44:B7:AC:03:53:A6:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122796/B4C8D8269E0111F1A1C9CC584811F970/c-CQ73mbZ1mwPSJR3ES3rANTpr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c-CQ73mbZ1mwPSJR3ES3rANTpr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122796/B4C8D8269E0111F1A1C9CC584811F970/c-CQ73mbZ1mwPSJR3ES3rANTpr0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dd:ce:91:36:5d:e4:f2:82:ec:b1:3d:69:da:ae:69:3d:39:05: 46:37:44:d4:06:25:07:44:83:ec:04:e6:62:5c:48:fb:d8:7b: c3:7f:81:3d:5c:06:50:2d:c5:96:40:e0:c0:63:63:fd:96:42: d4:e6:3b:29:6b:df:4f:af:18:67:d2:91:28:f7:83:4a:9d:94: 2a:41:f5:33:3d:30:9b:60:67:b5:e0:0c:c4:f4:68:00:fc:06: 2a:bc:0b:08:0a:67:34:e1:8a:e2:4a:c6:34:c1:ee:3a:31:08: c3:2f:2d:5e:04:20:26:d1:53:68:9f:08:e2:cf:a9:d5:0d:9b: 26:b6:ec:5d:36:8f:a7:cd:5a:4b:17:34:18:b0:92:1a:c7:c0: 92:e7:d7:2b:cf:75:9e:79:1f:91:9b:e1:bc:41:bc:0b:3c:a2: 35:a3:34:0e:d9:4a:a2:2f:93:69:b6:fe:f5:a3:33:48:f9:fa: 9a:50:7f:d4:a7:20:74:a5:bb:20:2d:08:cf:d6:85:d9:55:2b: 28:82:85:22:49:6c:5d:92:55:30:f7:f1:01:9c:55:ae:d5:9d: fa:28:a5:ff:5e:fa:b2:b7:b3:1a:2a:29:82:34:7d:20:c6:b2: 1a:b4:ec:56:a8:d5:b8:cc:d5:2b:9a:b5:94:97:34:01:c2:ee: f6:15:59:25 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy Mjc5NjExMC8GA1UEBRMoNzNFMDkwRUY3OTlCNjc1OUIwM0QyMjUxREM0NEI3QUMw MzUzQTZCRDAeFw0yNjA4MzEwOTM3MThaFw0yNjA5MDcwOTM3MThaMBgxFjAUBgNV BAMTDTZhOTU0YjRlLThjN2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCSvicFzIKceR0lGXyU1o92QySETJySf4m1zHzIhUP4CbtHWezDiFk/03yoV8c4 1p5KTiCVlpnWgcRGcfjUEqsCO8CWlqbU7HZf3VQ/vs/5hgRtVbZ97mfa5GxhDKeH rjnBrBC8CU0OahYLw19oTWWqXqI738O9LXh3DpPKVfsK9DEAjlKP6fhE7RI1pkih RM5nFTHfkksSAIZd4+Dzv/fH/XCqREYf8oN2zMpCVUSaInI3aeBX/23iLLie1aMQ gFbQ/NqqFoESCg89GXPik9CTcqzTfeYc+Z6gIu01CPcHeMpI0pnE32eZdCYaYrEl As4yEXWixo2DG0tQ3NFtWKjzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU4Dhj6Kbl Ex3yhhcLFDra6kBilbUwHwYDVR0jBBgwFoAUc+CQ73mbZ1mwPSJR3ES3rANTpr0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIyNzk2L0I0QzhEODI2OUUw MTExRjFBMUM5Q0M1ODQ4MTFGOTcwL2MtQ1E3M21iWjFtd1BTSlIzRVMzckFOVHBy MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYy1DUTczbWJaMW13UFNKUjNFUzNyQU5UcHIwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIy Nzk2L0I0QzhEODI2OUUwMTExRjFBMUM5Q0M1ODQ4MTFGOTcwL2MtQ1E3M21iWjFt d1BTSlIzRVMzckFOVHByMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDdzpE2XeTyguyxPWnarmk9OQVGN0TUBiUHRIPsBOZiXEj72HvDf4E9XAZQLcWW QODAY2P9lkLU5jspa99Prxhn0pEo94NKnZQqQfUzPTCbYGe14AzE9GgA/AYqvAsI Cmc04YriSsY0we46MQjDLy1eBCAm0VNonwjiz6nVDZsmtuxdNo+nzVpLFzQYsJIa x8CS59crz3WeeR+Rm+G8QbwLPKI1ozQO2UqiL5Nptv71ozNI+fqaUH/UpyB0pbsg LQjP1oXZVSsogoUiSWxdklUw9/EBnFWu1Z36KKX/Xvqyt7MaKimCNH0gxrIatOxW qNW4zNUrmrWUlzQBwu72FVkl -----END CERTIFICATE-----Generated at Tue Sep 1 02:29:12 2026 by rpki-client