$ rpki-client -vvvf rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft File: 09PYYPhoyT7RDi7VqXqHlFTITBY.mft (raw, json) Hash identifier: qAi22upa+wacBzUpqA/P6CkbBMOQ5dCVHX5cvym/Gdw= Subject key identifier: 48:15:C7:66:E8:3E:FC:5F:46:7A:3F:E1:C4:D3:68:ED:48:DE:9B:5D Authority key identifier: D3:D3:D8:60:F8:68:C9:3E:D1:0E:2E:D5:A9:7A:87:94:54:C8:4C:16 Certificate issuer: /CN=A912B017/serialNumber=D3D3D860F868C93ED10E2ED5A97A879454C84C16 Certificate serial: 026E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft Manifest number: 025A Signing time: Fri 11 Sep 2026 02:23:54 +0000 Manifest this update: Fri 11 Sep 2026 02:23:54 +0000 Manifest next update: Fri 18 Sep 2026 02:23:54 +0000 Files and hashes: 1: 09PYYPhoyT7RDi7VqXqHlFTITBY.crl (hash: t9wtsUOauoaNiEWrDMg7UW+E9aUXVwmHMTcw54UOZRc=) 2: F9A783F2352C11EEAD7A4625C4F9AE02.roa (hash: gICWDBNRkhIBX51TTa/2nd2iTKD3rPgiI0hCao1cXuE=) 3: 1D11FFD4352D11EE9543B52FC4F9AE02.roa (hash: H/+8cEiqjGBMXYBNFLkNc/yFQ5ggKQnuS/ChaNZWBS0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.crl rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 02:23:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 622 (0x26e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B017, serialNumber=D3D3D860F868C93ED10E2ED5A97A879454C84C16 Validity Not Before: Sep 11 02:23:54 2026 GMT Not After : Sep 18 02:23:54 2026 GMT Subject: CN=6aa3663a-db1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0e:64:26:b9:bc:0e:9e:89:ab:19:f8:c4:55: d1:e7:c3:fe:a7:28:a4:5c:5b:30:1c:49:8b:ab:e0: 6c:76:15:be:74:1d:57:9e:81:fc:07:34:57:2d:09: cc:b8:99:34:1e:e7:d5:41:00:50:7f:38:ea:dd:6f: 17:98:3c:3c:25:13:79:9b:30:e5:3e:3b:1d:8b:f6: 2a:65:b7:ae:59:60:04:a5:d7:9c:b9:cf:f8:e0:80: 7b:68:26:66:e4:87:a7:64:0f:be:c8:bb:99:67:52: 79:9e:79:fc:6d:65:12:a3:27:69:7a:f4:ca:bf:2c: 9c:55:c7:81:f8:7b:13:f8:66:ed:83:8a:9f:de:bc: 6d:05:4d:94:ee:f8:c6:d0:43:96:cb:23:03:fe:cc: 96:ff:e9:b7:78:ea:e8:df:02:f3:57:df:31:0b:bb: 9b:a4:b3:2f:1e:46:5b:85:ae:4e:92:e1:85:07:d1: 7d:a3:06:28:bc:fa:c1:9b:be:08:63:90:fb:4b:6a: 4f:96:e2:ac:ce:25:3a:5f:86:12:83:af:d7:10:87: 82:61:38:76:29:80:9c:82:2b:04:14:12:f3:7d:de: dd:b6:08:db:61:9d:3c:9d:ac:23:5e:62:cc:7b:ea: fd:e0:56:05:fd:33:4a:7d:83:9c:95:6f:c3:0a:15: 92:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:15:C7:66:E8:3E:FC:5F:46:7A:3F:E1:C4:D3:68:ED:48:DE:9B:5D X509v3 Authority Key Identifier: keyid:D3:D3:D8:60:F8:68:C9:3E:D1:0E:2E:D5:A9:7A:87:94:54:C8:4C:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:0d:3c:fa:75:1d:5b:2b:83:c1:32:e1:1d:ad:94:9f:57:98: 4b:c6:ae:e7:f8:d8:c1:49:df:1c:78:98:e9:d8:df:cb:d6:91: 27:82:a9:75:dd:5c:d7:19:9a:31:17:89:73:79:34:6b:60:aa: 17:e6:6a:f5:86:73:da:a9:db:72:87:16:dd:d9:fc:bc:80:f8: 83:1b:05:64:fe:55:12:d4:30:0c:45:72:bf:a7:d3:8c:b6:22: 73:3a:52:9d:fd:48:32:47:19:f1:12:8f:3a:b9:7d:63:fe:04: 4f:a4:86:59:28:5c:c4:73:af:2c:90:b5:28:87:53:6f:b7:92: d8:1e:f4:e2:d5:f5:fd:b3:6d:9a:63:d3:d5:37:6f:5e:f0:38: c3:09:c8:d1:78:8f:0a:48:ff:36:0c:0a:45:d1:96:ec:10:2a: 16:f6:60:46:7a:70:62:0b:66:a0:11:26:e0:79:1a:8d:a6:0e: 48:fe:17:54:0d:da:88:c1:7a:38:3b:35:ef:da:8a:47:20:74: 95:39:13:c7:e3:cb:f9:38:40:0c:64:8d:bc:36:e9:76:7c:37: a5:7b:8e:8e:9c:89:ac:d9:62:99:64:14:5b:63:08:a8:82:b5: 51:13:aa:24:3f:4c:2e:38:06:81:c1:32:a0:23:e5:fe:99:e8: ab:55:65:d8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIwMTcxMTAvBgNVBAUTKEQzRDNEODYwRjg2OEM5M0VEMTBFMkVENUE5N0E4Nzk0 NTRDODRDMTYwHhcNMjYwOTExMDIyMzU0WhcNMjYwOTE4MDIyMzU0WjAYMRYwFAYD VQQDEw02YWEzNjYzYS1kYjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvA5kJrm8Dp6Jqxn4xFXR58P+pyikXFswHEmLq+BsdhW+dB1XnoH8BzRXLQnM uJk0HufVQQBQfzjq3W8XmDw8JRN5mzDlPjsdi/YqZbeuWWAEpdecuc/44IB7aCZm 5IenZA++yLuZZ1J5nnn8bWUSoydpevTKvyycVceB+HsT+Gbtg4qf3rxtBU2U7vjG 0EOWyyMD/syW/+m3eOro3wLzV98xC7ubpLMvHkZbha5OkuGFB9F9owYovPrBm74I Y5D7S2pPluKsziU6X4YSg6/XEIeCYTh2KYCcgisEFBLzfd7dtgjbYZ08nawjXmLM e+r94FYF/TNKfYOclW/DChWSjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEgVx2bo PvxfRno/4cTTaO1I3ptdMB8GA1UdIwQYMBaAFNPT2GD4aMk+0Q4u1al6h5RUyEwW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjAxNy9ERTc1RjIyMjJB MTMxMUVFOTVENThBNjZDNEY5QUUwMi8wOVBZWVBob3lUN1JEaTdWcVhxSGxGVElU QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5UFlZUGhveVQ3UkRpN1ZxWHFIbEZUSVRCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjAxNy9ERTc1RjIyMjJBMTMxMUVFOTVENThBNjZDNEY5QUUwMi8wOVBZWVBob3lU N1JEaTdWcVhxSGxGVElUQlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALw08+nUdWyuDwTLhHa2Un1eYS8au5/jYwUnfHHiY6djfy9aRJ4Kpdd1c1xma MReJc3k0a2CqF+Zq9YZz2qnbcocW3dn8vID4gxsFZP5VEtQwDEVyv6fTjLYiczpS nf1IMkcZ8RKPOrl9Y/4ET6SGWShcxHOvLJC1KIdTb7eS2B704tX1/bNtmmPT1Tdv XvA4wwnI0XiPCkj/NgwKRdGW7BAqFvZgRnpwYgtmoBEm4HkajaYOSP4XVA3aiMF6 ODs179qKRyB0lTkTx+PL+ThADGSNvDbpdnw3pXuOjpyJrNlimWQUW2MIqIK1UROq JD9MLjgGgcEyoCPl/pnoq1Vl2A== -----END CERTIFICATE-----Generated at Fri Sep 11 15:35:40 2026 by rpki-client