$ rpki-client -vvvf rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.mft File: U2uRsXtuG7FjjINYoPpepdDr77c.mft (raw, json) Hash identifier: Ey2h5mCoq4aVq0tIq1ytFze5C3SFBEP6zFVIH35b2g8= Subject key identifier: 94:CF:B1:1A:6F:A5:E1:72:99:16:9B:7B:8A:C0:C7:B8:3E:DB:1D:60 Authority key identifier: 53:6B:91:B1:7B:6E:1B:B1:63:8C:83:58:A0:FA:5E:A5:D0:EB:EF:B7 Certificate issuer: /CN=A9125C3D/serialNumber=536B91B17B6E1BB1638C8358A0FA5EA5D0EBEFB7 Certificate serial: 0284 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U2uRsXtuG7FjjINYoPpepdDr77c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.mft Manifest number: 027C Signing time: Sun 20 Sep 2026 23:53:55 +0000 Manifest this update: Sun 20 Sep 2026 23:53:55 +0000 Manifest next update: Sun 27 Sep 2026 23:53:55 +0000 Files and hashes: 1: U2uRsXtuG7FjjINYoPpepdDr77c.crl (hash: bAWQPEJ7NZLS+dqzFe8OtSiJbgPKlIEaZO3BvjzHT4Q=) 2: 234074FA00DD11EE95AF6F7CC4F9AE02.roa (hash: E/3+zHRb9cigB2So9gcmcEr9UWMt8OA7wew5j990xKY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.crl rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U2uRsXtuG7FjjINYoPpepdDr77c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 23:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 644 (0x284) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125C3D, serialNumber=536B91B17B6E1BB1638C8358A0FA5EA5D0EBEFB7 Validity Not Before: Sep 20 23:53:55 2026 GMT Not After : Sep 27 23:53:55 2026 GMT Subject: CN=6ab07213-005c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e3:84:55:7a:b2:47:f3:bf:3a:6d:65:7a:cf: b5:28:83:06:37:2b:05:35:35:cf:aa:36:97:a8:0f: 00:68:74:dc:00:fd:5f:f9:95:c2:68:12:1a:4f:d1: 13:7e:cc:e9:e1:c7:9b:23:cf:4f:7c:89:c1:0e:7c: 2e:2b:b2:23:1b:d1:d3:7f:5d:16:10:05:f3:45:9f: c2:b2:69:f6:4a:02:78:bf:dc:7f:d3:3a:49:4d:8e: e7:08:81:ca:c2:b3:47:be:33:1c:69:ad:14:35:9a: 69:08:14:c7:1e:ce:ef:86:ce:06:cd:2d:c9:70:a4: 44:6c:46:73:54:c1:0c:6a:53:0a:58:c5:5b:31:0d: ff:cc:a7:51:e4:14:b5:1b:cc:a5:19:08:f5:2d:03: 71:ae:c7:09:b0:e4:98:f2:91:67:a7:86:81:ca:b6: 08:26:70:c8:3c:64:d4:97:ee:b6:49:93:2f:75:a9: 38:2e:d4:1d:79:e6:4f:a1:62:fc:b4:d2:fc:1a:41: a9:f7:88:2c:fd:1f:4b:78:18:94:f8:8d:64:e0:c1: ee:cf:c3:57:2a:8b:1d:b0:66:e5:be:15:1b:4f:6f: db:6e:84:1d:8c:63:c3:51:d5:50:16:0a:db:3b:a7: 60:1f:aa:15:91:8e:05:67:27:c5:e6:b3:76:a2:db: 2c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:CF:B1:1A:6F:A5:E1:72:99:16:9B:7B:8A:C0:C7:B8:3E:DB:1D:60 X509v3 Authority Key Identifier: keyid:53:6B:91:B1:7B:6E:1B:B1:63:8C:83:58:A0:FA:5E:A5:D0:EB:EF:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U2uRsXtuG7FjjINYoPpepdDr77c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:84:74:90:50:90:ba:ae:26:ce:b0:eb:85:50:af:11:f1:a2: af:84:44:52:40:82:8a:9b:17:f2:7d:89:df:8d:62:ec:4a:da: 7e:28:d8:ed:d1:28:04:fc:b2:50:a9:72:27:ab:b8:de:a9:5e: e4:01:e6:95:49:20:46:66:77:e3:e8:f4:8c:37:2e:e9:53:27: 8a:5d:b8:a0:59:2d:b1:61:77:34:e9:09:35:cf:0e:2b:4a:a5: cb:04:d8:85:7d:8b:86:ce:ac:62:e4:b4:07:38:a7:78:f2:d7: 13:6d:49:33:fd:f7:22:9b:72:09:67:fc:95:ed:57:37:fb:03: 0a:af:d9:99:1f:e8:51:ad:d7:25:f7:69:a9:e7:70:34:ca:4e: 2d:86:a7:48:c3:76:63:a4:38:79:89:c4:a6:e9:5b:95:d1:65: ba:13:b2:4c:a2:96:10:d4:57:47:b5:68:57:be:98:23:30:c9: b7:55:7e:9d:59:33:03:2d:3b:43:d8:9b:b9:1b:fc:ab:2d:96: fe:35:d9:35:f8:b4:d8:3b:68:a0:b7:60:a3:a5:da:36:49:6c: d5:bb:6b:9a:8d:ab:79:e1:6b:2e:0e:61:8d:55:37:00:50:25: d0:82:97:77:6c:8a:41:a3:49:4f:cd:6e:29:cb:e4:58:f4:14: 71:d7:ec:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVDM0QxMTAvBgNVBAUTKDUzNkI5MUIxN0I2RTFCQjE2MzhDODM1OEEwRkE1RUE1 RDBFQkVGQjcwHhcNMjYwOTIwMjM1MzU1WhcNMjYwOTI3MjM1MzU1WjAYMRYwFAYD VQQDEw02YWIwNzIxMy0wMDVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1+OEVXqyR/O/Om1les+1KIMGNysFNTXPqjaXqA8AaHTcAP1f+ZXCaBIaT9ET fszp4cebI89PfInBDnwuK7IjG9HTf10WEAXzRZ/Csmn2SgJ4v9x/0zpJTY7nCIHK wrNHvjMcaa0UNZppCBTHHs7vhs4GzS3JcKREbEZzVMEMalMKWMVbMQ3/zKdR5BS1 G8ylGQj1LQNxrscJsOSY8pFnp4aByrYIJnDIPGTUl+62SZMvdak4LtQdeeZPoWL8 tNL8GkGp94gs/R9LeBiU+I1k4MHuz8NXKosdsGblvhUbT2/bboQdjGPDUdVQFgrb O6dgH6oVkY4FZyfF5rN2otssmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJTPsRpv peFymRabe4rAx7g+2x1gMB8GA1UdIwQYMBaAFFNrkbF7bhuxY4yDWKD6XqXQ6++3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUMzRC8yMzIzRkQ4MDAw RDcxMUVFOTNDQjBGN0VDNEY5QUUwMi9VMnVSc1h0dUc3RmpqSU5Zb1BwZXBkRHI3 N2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1UydVJzWHR1RzdGampJTllvUHBlcGREcjc3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUMzRC8yMzIzRkQ4MDAwRDcxMUVFOTNDQjBGN0VDNEY5QUUwMi9VMnVSc1h0dUc3 RmpqSU5Zb1BwZXBkRHI3N2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAb4R0kFCQuq4mzrDrhVCvEfGir4REUkCCipsX8n2J341i7ErafijY7dEoBPyy UKlyJ6u43qle5AHmlUkgRmZ34+j0jDcu6VMnil24oFktsWF3NOkJNc8OK0qlywTY hX2Lhs6sYuS0BzinePLXE21JM/33IptyCWf8le1XN/sDCq/ZmR/oUa3XJfdpqedw NMpOLYanSMN2Y6Q4eYnEpulbldFluhOyTKKWENRXR7VoV76YIzDJt1V+nVkzAy07 Q9ibuRv8qy2W/jXZNfi02DtooLdgo6XaNkls1btrmo2reeFrLg5hjVU3AFAl0IKX d2yKQaNJT81uKcvkWPQUcdfs6A== -----END CERTIFICATE-----Generated at Mon Sep 21 16:31:03 2026 by rpki-client