$ rpki-client -vvvf rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft File: 09Fa7ppPiuXCgRCKfS062B1Oec0.mft (raw, json) Hash identifier: Gj2OfvNawZnOyg3lFcHaQJlQRdNh58zgibB6WPM/jOA= Subject key identifier: BA:24:F2:5C:28:14:35:7E:D5:56:BB:B2:6E:34:3B:29:C5:3B:4B:D8 Authority key identifier: D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD Certificate issuer: /CN=A91397C2/serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD Certificate serial: 0908 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft Manifest number: 08CF Signing time: Fri 04 Sep 2026 20:27:29 +0000 Manifest this update: Fri 04 Sep 2026 20:27:28 +0000 Manifest next update: Fri 11 Sep 2026 20:27:28 +0000 Files and hashes: 1: 09Fa7ppPiuXCgRCKfS062B1Oec0.crl (hash: OOYjAu0P/HaRDrHV3qCYQ6N51fFWPZwqxIOzkYxUwmQ=) 2: 29BC840E002711EB8FA6A142C4F9AE02.roa (hash: 1hK6aCJ+7Fb1oUPOZ4u6IyJKzDYRKvTsmB4Y2o3Noe8=) 3: 931A1664264611F1BB7525369F833773.roa (hash: O+dFRmqz0HLQWE2NlORO6GptWeFGJW4FEbE2GeFkulo=) 4: BE79CDCE16AF11F08B8C4061C4F9AE02.roa (hash: PXtviaHqQJLCMEu9tn+Fq2a2NfU37e2CJGxdPkOxh1g=) 5: 3AA556009A8411EFB791ED77C4F9AE02.roa (hash: 6t+wjHRQ/GqT5IcSFRj+6zc7NKRi89qTochP2LMsRS8=) 6: E4FA38362D2311F1A198B1F8B7833773.roa (hash: AxJKOqSnxksdZpHOPb0q92RjtR735qgr4EIIyE6SdIo=) 7: 7F9EB0A28CF111F09EC8727CC4F9AE02.roa (hash: gzcB5bzyDXKQ7TWulNDMH2WNKACJo+cBlc1OpEzaIqo=) 8: C3738F60A78511F0B1D3342CC4F9AE02.roa (hash: tB/DnIqV82CpIIhO+TP7hcH1C9TgViQTWGZ17z9LsKo=) 9: B7AD6F08264611F1A7E2573D9F833773.roa (hash: cAi1E/gIPdIvRZ5EylPtBXr5xfvPwzP6uzvwERgkasg=) 10: 0C64C6B2821011F0B329B866C4F9AE02.roa (hash: UuZBWjQy/vvCDj1GH11Ut9+9Pjsx/5KL/8Qu7tKsi7U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 20:14:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2312 (0x908) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91397C2, serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD Validity Not Before: Sep 4 20:27:28 2026 GMT Not After : Sep 11 20:27:28 2026 GMT Subject: CN=6a9b29b1-cb75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:48:22:16:44:3c:0c:74:47:08:82:84:46:f9: 81:60:e4:d8:f2:e7:62:b5:73:51:f8:ec:76:00:9f: cd:b7:78:3b:e4:8e:76:90:33:a7:5e:fd:1b:5e:5a: fa:bb:e0:37:62:7a:18:98:3a:b1:13:2a:63:11:bc: 27:71:fc:7e:33:3f:6f:36:a1:75:65:70:94:8d:26: 45:6a:b8:d5:cb:b2:32:a0:11:7d:4e:c0:79:9d:68: d1:01:44:ac:29:22:e3:58:9a:76:b2:c2:49:97:44: 79:4c:6d:55:86:ad:9c:8b:ee:83:04:98:0c:3a:77: 2a:cc:96:90:5b:ea:10:17:57:90:15:f2:66:86:81: 00:bc:97:4f:ad:62:ba:16:10:86:42:3b:4b:6e:3b: d6:e4:81:15:b6:4a:8a:d3:2c:63:fa:cf:ce:7d:5d: 6d:d7:6c:62:fa:af:d8:f8:1d:0e:a4:46:ee:16:1a: 02:76:ba:a3:ea:e7:12:60:f9:45:43:c3:34:b4:13: a2:bb:90:36:a7:36:23:a7:b3:4e:e0:e4:27:bf:65: 35:e8:2b:c9:e5:62:f1:63:3a:1f:2a:f0:2d:70:81: f6:60:dc:ad:dc:8b:7d:ea:7e:25:3b:d5:3c:69:5a: b6:2c:fc:4d:0d:16:af:24:88:10:2e:82:34:23:59: e6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:24:F2:5C:28:14:35:7E:D5:56:BB:B2:6E:34:3B:29:C5:3B:4B:D8 X509v3 Authority Key Identifier: keyid:D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:99:4f:c5:14:dd:28:3b:31:0b:59:7a:5e:72:d4:5f:df:87: 98:4a:ef:46:6a:83:02:c6:37:42:25:38:46:9c:8d:cb:16:70: 06:a5:2a:a7:06:a0:ac:22:9d:c6:52:27:e4:27:24:f3:25:3e: 34:78:fb:14:25:5a:b6:4a:4d:31:b7:ca:37:8b:27:35:75:15: 41:ee:59:8b:da:19:4c:09:fd:95:fd:69:3d:13:4b:ab:a8:c4: 2a:ea:6e:38:26:84:33:9b:5c:54:41:cf:1f:8c:4a:d7:f8:f2: 0f:71:3c:ad:b6:be:5d:53:b6:7e:fc:7b:d7:cd:34:65:06:96: c5:e5:71:c1:9c:00:73:a6:da:cb:8c:f8:04:17:fe:85:64:73: 74:8f:53:7f:2b:7a:b0:67:1f:81:25:d5:db:fa:5b:b8:6f:36: 68:d1:69:9d:96:d1:47:46:d9:81:e5:fb:38:f6:98:62:8d:c7: 88:6f:34:5d:bb:d7:37:8c:bb:ab:32:0f:d7:b4:31:01:53:94: d6:bf:73:36:4f:7d:62:11:a3:08:26:37:8b:9b:e4:5f:57:c0: 59:c5:a2:c6:02:a5:1d:fc:c6:76:fa:2b:63:80:74:09:ce:2b: 9b:c5:88:df:ca:c2:07:1a:d3:7a:ce:39:7e:e2:43:ec:19:57: be:c6:17:6b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk3QzIxMTAvBgNVBAUTKEQzRDE1QUVFOUE0RjhBRTVDMjgxMTA4QTdEMkQzQUQ4 MUQ0RTc5Q0QwHhcNMjYwOTA0MjAyNzI4WhcNMjYwOTExMjAyNzI4WjAYMRYwFAYD VQQDEw02YTliMjliMS1jYjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm0giFkQ8DHRHCIKERvmBYOTY8uditXNR+Ox2AJ/Nt3g75I52kDOnXv0bXlr6 u+A3YnoYmDqxEypjEbwncfx+Mz9vNqF1ZXCUjSZFarjVy7IyoBF9TsB5nWjRAUSs KSLjWJp2ssJJl0R5TG1Vhq2ci+6DBJgMOncqzJaQW+oQF1eQFfJmhoEAvJdPrWK6 FhCGQjtLbjvW5IEVtkqK0yxj+s/OfV1t12xi+q/Y+B0OpEbuFhoCdrqj6ucSYPlF Q8M0tBOiu5A2pzYjp7NO4OQnv2U16CvJ5WLxYzofKvAtcIH2YNyt3It96n4lO9U8 aVq2LPxNDRavJIgQLoI0I1nmUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLok8lwo FDV+1Va7sm40OynFO0vYMB8GA1UdIwQYMBaAFNPRWu6aT4rlwoEQin0tOtgdTnnN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTdDMi80RTQyNkRFOEZC RUExMUVBOTQwQTFEMTlDNEY5QUUwMi8wOUZhN3BwUGl1WENnUkNLZlMwNjJCMU9l YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5RmE3cHBQaXVYQ2dSQ0tmUzA2MkIxT2VjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTdDMi80RTQyNkRFOEZCRUExMUVBOTQwQTFEMTlDNEY5QUUwMi8wOUZhN3BwUGl1 WENnUkNLZlMwNjJCMU9lYzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACplPxRTdKDsxC1l6XnLUX9+HmErvRmqDAsY3QiU4RpyNyxZwBqUqpwagrCKd xlIn5Cck8yU+NHj7FCVatkpNMbfKN4snNXUVQe5Zi9oZTAn9lf1pPRNLq6jEKupu OCaEM5tcVEHPH4xK1/jyD3E8rba+XVO2fvx71800ZQaWxeVxwZwAc6bay4z4BBf+ hWRzdI9Tfyt6sGcfgSXV2/pbuG82aNFpnZbRR0bZgeX7OPaYYo3HiG80XbvXN4y7 qzIP17QxAVOU1r9zNk99YhGjCCY3i5vkX1fAWcWixgKlHfzGdvorY4B0Cc4rm8WI 38rCBxrTes45fuJD7BlXvsYXaw== -----END CERTIFICATE-----Generated at Fri Sep 4 23:25:46 2026 by rpki-client