$ rpki-client -vvvf rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft File: CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft (raw, json) Hash identifier: jV7NbpdPXUS09mwiIp/U16sWRbNPjW1jSqrmD6fN5iY= Subject key identifier: 41:32:C8:60:70:66:83:B4:58:41:71:95:A4:42:CA:CF:5D:F5:7B:91 Authority key identifier: 0A:45:C5:0E:37:23:5A:2A:A2:23:E9:F3:13:31:F6:94:28:E0:D9:46 Certificate issuer: /CN=A9128C53/serialNumber=0A45C50E37235A2AA223E9F31331F69428E0D946 Certificate serial: 0212 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft Manifest number: 020D Signing time: Thu 17 Sep 2026 03:15:59 +0000 Manifest this update: Thu 17 Sep 2026 03:15:59 +0000 Manifest next update: Thu 24 Sep 2026 03:15:59 +0000 Files and hashes: 1: CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl (hash: C+7SYsT4YdKwZrMWj1PY3y5i+jFsasty2kYOJO84cs8=) 2: 04A9BC6EDAC011EE94B8705AC4F9AE02.roa (hash: CCRIx6xx0eQTTafK35qMinnGOYOtSbUUlnFtAWNi/ek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 03:15:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 530 (0x212) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128C53, serialNumber=0A45C50E37235A2AA223E9F31331F69428E0D946 Validity Not Before: Sep 17 03:15:59 2026 GMT Not After : Sep 24 03:15:59 2026 GMT Subject: CN=6aab5b6f-d142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4c:9c:04:ad:a5:d9:ad:ae:be:f1:59:53:5b: 2c:3c:f3:58:2f:e1:94:f0:00:eb:54:fc:1c:6e:2e: 06:38:dd:36:c8:45:ca:90:5f:1a:2c:15:82:6c:66: ed:22:e1:2e:ee:45:22:23:20:0e:40:81:b2:53:1b: 97:2f:bb:36:ed:de:b6:09:b1:bb:e1:56:c6:99:12: 60:42:b9:89:25:b7:76:42:e1:d6:25:28:be:43:f1: 84:1b:72:bd:74:f8:a6:15:8b:8c:67:3c:90:54:b9: cc:dd:63:8c:b6:f9:a4:1e:d1:cb:2f:8c:69:5f:c4: bc:0a:4c:b7:99:85:2b:1a:7c:e1:83:84:6d:67:b6: 09:8b:63:24:d6:ba:c4:c8:59:57:b3:43:f8:89:ce: 99:3f:69:eb:c2:c5:e7:14:48:e4:85:10:a6:85:4e: f8:2f:c6:e5:a8:23:4d:9b:00:3a:f0:33:cb:de:4c: e1:50:eb:ed:16:ce:2a:d4:78:b5:86:1f:d4:ca:5d: 3e:a9:46:19:fe:d8:63:2d:d9:dd:08:ed:d6:46:28: 5d:54:01:4b:10:a6:c8:b1:e5:d4:d8:df:b2:74:a5: b6:66:3a:56:f7:23:b4:d3:1a:ba:7a:b3:57:c4:96: 80:ee:22:d8:35:23:7d:db:95:14:25:81:e3:4c:d8: 40:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:32:C8:60:70:66:83:B4:58:41:71:95:A4:42:CA:CF:5D:F5:7B:91 X509v3 Authority Key Identifier: keyid:0A:45:C5:0E:37:23:5A:2A:A2:23:E9:F3:13:31:F6:94:28:E0:D9:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:16:c8:ae:04:75:91:7b:88:f8:1a:02:fa:97:f0:25:07:a1: f8:69:f7:19:0f:11:cb:8b:8b:4a:9f:f2:7e:35:e5:88:57:5a: d6:e0:de:29:87:1a:d8:c3:a9:a5:e8:eb:48:67:60:3a:28:a9: d6:31:14:d3:61:33:b5:a9:5e:7f:38:76:d6:ad:b5:de:9d:29: b6:f6:69:8f:98:b8:b6:31:71:1b:bf:41:24:16:6b:51:ab:74: cb:fa:62:15:4a:a5:16:30:a5:b3:a0:f9:ea:d0:3e:8f:c9:c1: 21:44:e5:d9:94:a8:d7:6c:03:5e:1e:2f:0f:3f:10:0f:11:64: 18:0f:3a:42:d7:3b:2c:db:08:a6:92:75:c7:a9:7c:e0:3f:db: e4:d3:05:22:de:7e:14:09:82:9f:17:e6:28:fb:fd:69:1a:9e: 61:31:3e:cb:9f:72:f2:8e:63:7d:06:a6:44:69:d0:44:e1:f7: da:b3:7a:9b:73:ff:b3:a2:6d:2e:12:ac:d8:7c:b3:60:5a:a0: 0f:c4:e9:b8:ad:4a:38:37:f7:f7:58:a7:4f:b3:2f:1e:8e:10: ec:d4:ab:04:05:af:40:7a:69:17:1c:c2:04:01:f1:8e:af:3a: cb:17:4f:f7:3d:34:40:cc:a0:8f:1c:cd:01:40:5f:64:cb:10: 74:51:0f:6d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhDNTMxMTAvBgNVBAUTKDBBNDVDNTBFMzcyMzVBMkFBMjIzRTlGMzEzMzFGNjk0 MjhFMEQ5NDYwHhcNMjYwOTE3MDMxNTU5WhcNMjYwOTI0MDMxNTU5WjAYMRYwFAYD VQQDEw02YWFiNWI2Zi1kMTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0ycBK2l2a2uvvFZU1ssPPNYL+GU8ADrVPwcbi4GON02yEXKkF8aLBWCbGbt IuEu7kUiIyAOQIGyUxuXL7s27d62CbG74VbGmRJgQrmJJbd2QuHWJSi+Q/GEG3K9 dPimFYuMZzyQVLnM3WOMtvmkHtHLL4xpX8S8Cky3mYUrGnzhg4RtZ7YJi2Mk1rrE yFlXs0P4ic6ZP2nrwsXnFEjkhRCmhU74L8blqCNNmwA68DPL3kzhUOvtFs4q1Hi1 hh/Uyl0+qUYZ/thjLdndCO3WRihdVAFLEKbIseXU2N+ydKW2ZjpW9yO00xq6erNX xJaA7iLYNSN925UUJYHjTNhAAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEEyyGBw ZoO0WEFxlaRCys9d9XuRMB8GA1UdIwQYMBaAFApFxQ43I1oqoiPp8xMx9pQo4NlG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEM1My9FQTZFQ0UwQTkz ODExMUVFQkZDQkZGMjRDNEY5QUUwMi9Da1hGRGpjaldpcWlJLW56RXpIMmxDamcy VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NrWEZEamNqV2lxaUktbnpFekgybENqZzJVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEM1My9FQTZFQ0UwQTkzODExMUVFQkZDQkZGMjRDNEY5QUUwMi9Da1hGRGpjaldp cWlJLW56RXpIMmxDamcyVVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApxbIrgR1kXuI+BoC+pfwJQeh+Gn3GQ8Ry4uLSp/yfjXliFda1uDeKYca2MOp pejrSGdgOiip1jEU02Eztalefzh21q213p0ptvZpj5i4tjFxG79BJBZrUat0y/pi FUqlFjCls6D56tA+j8nBIUTl2ZSo12wDXh4vDz8QDxFkGA86Qtc7LNsIppJ1x6l8 4D/b5NMFIt5+FAmCnxfmKPv9aRqeYTE+y59y8o5jfQamRGnQROH32rN6m3P/s6Jt LhKs2HyzYFqgD8TpuK1KODf391inT7MvHo4Q7NSrBAWvQHppFxzCBAHxjq86yxdP 9z00QMygjxzNAUBfZMsQdFEPbQ== -----END CERTIFICATE-----Generated at Fri Sep 18 21:59:03 2026 by rpki-client