$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft File: af9o05rBdz4oqFeFx5G0qNmzhIY.mft (raw, json) Hash identifier: S6S8Xjyu8niAuYMDLjE1yJv82xGzk9M7J2qAx8NQEaM= Subject key identifier: 8C:91:00:CE:3F:6A:F9:15:E5:2A:8B:F2:1A:3A:A0:FC:4C:FB:51:12 Authority key identifier: 69:FF:68:D3:9A:C1:77:3E:28:A8:57:85:C7:91:B4:A8:D9:B3:84:86 Certificate issuer: /CN=A9148D61/serialNumber=69FF68D39AC1773E28A85785C791B4A8D9B38486 Certificate serial: 02EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft Manifest number: 02D5 Signing time: Fri 11 Sep 2026 01:12:05 +0000 Manifest this update: Fri 11 Sep 2026 01:12:04 +0000 Manifest next update: Fri 18 Sep 2026 01:12:04 +0000 Files and hashes: 1: af9o05rBdz4oqFeFx5G0qNmzhIY.crl (hash: /L/mO7adDs9BEGr5TlkfGwD2aQpNuqIvfSYQZutXuUE=) 2: 35ADE898B90A11EF97D24653C4F9AE02.roa (hash: j4HW8v+J9rL2PkNopASjMuegUlrtdhRwhQv/dAW6LJM=) 3: 34386BAAB90A11EF97D24653C4F9AE02.roa (hash: 8a9pl0B9WRoV/I8zbYuLrKWiJVi0iu0Y5myQD63MtCk=) 4: 349D4A7AB90A11EF97D24653C4F9AE02.roa (hash: gj01DmJfEaGsSpp5tjGsusN7Thz10FKLT4wU37QzljM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.crl rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 01:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 748 (0x2ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148D61, serialNumber=69FF68D39AC1773E28A85785C791B4A8D9B38486 Validity Not Before: Sep 11 01:12:04 2026 GMT Not After : Sep 18 01:12:04 2026 GMT Subject: CN=6aa35564-03ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7c:3e:90:1e:1e:e6:6e:a4:67:b1:a4:53:cb: 44:bf:d3:c5:45:d2:8c:1b:96:f7:83:a6:04:b4:e9: 25:89:ca:50:f6:97:1c:75:fb:cb:ee:e1:3a:1f:f7: 02:0d:60:3d:9d:7f:a7:c5:da:7a:11:84:e9:0c:47: 99:8e:60:3e:a1:26:da:f9:2c:c2:f2:09:2f:a5:2c: 70:e0:e0:a4:20:d2:bc:04:37:ad:27:fb:92:0b:5d: 3b:12:50:35:1d:1b:fd:0d:08:71:92:f9:55:9e:17: 83:9e:84:8a:fe:21:8a:48:ac:d3:10:a8:bd:7f:9a: b0:a2:54:2e:33:54:8f:c8:a7:1d:3b:0d:db:ad:3e: 3f:cb:fb:d0:78:17:ec:36:c0:13:a8:34:1d:9a:90: 27:29:d0:cf:4d:2a:9a:f0:a5:dd:6d:70:bc:c3:83: 79:a1:b6:32:8c:a8:5c:48:ad:ca:2f:e4:9e:47:68: 92:66:20:44:9f:bd:83:37:ea:d6:0c:e2:7c:88:5b: bd:ee:87:db:6b:55:af:43:17:12:a1:1c:37:fb:53: 04:59:9b:8d:99:30:1a:1f:be:25:26:0b:16:2e:76: 26:ab:c5:c3:e7:63:3e:35:39:cb:54:b7:af:0d:4f: 81:64:4b:05:60:8b:fe:c6:f0:0d:70:e0:08:85:8f: 02:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:91:00:CE:3F:6A:F9:15:E5:2A:8B:F2:1A:3A:A0:FC:4C:FB:51:12 X509v3 Authority Key Identifier: keyid:69:FF:68:D3:9A:C1:77:3E:28:A8:57:85:C7:91:B4:A8:D9:B3:84:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:f9:cb:5f:03:a4:1a:7b:c1:09:3d:a3:51:8d:da:76:79:65: a0:6a:46:1c:0d:5c:6f:54:9e:86:8f:4b:c2:6f:e1:78:18:03: 2a:d1:3a:28:82:b5:47:24:57:80:05:c2:81:82:90:4a:34:d4: 2a:ba:c8:ef:3d:4e:08:f9:fc:2b:0e:3e:3d:e9:99:c7:f6:ae: b9:06:19:9b:8a:48:2d:97:4d:c0:41:c5:e5:0b:b0:34:14:27: 12:62:1e:84:cd:3a:37:bc:2c:36:a6:78:25:32:84:f9:51:49: 82:30:e8:68:b7:d5:07:36:65:58:bb:94:ba:2e:09:52:75:39: ed:50:0e:a2:61:5c:40:7a:53:fe:ee:03:a2:64:71:4f:df:ee: f0:04:23:0c:68:ac:3b:ad:60:32:cb:ea:bc:20:90:bb:a8:24: 7b:cd:68:b5:32:78:f8:10:d7:c1:f8:f3:b9:14:6e:09:6a:33: e8:ff:c7:7c:a9:c1:8b:bc:df:fd:ee:9f:0e:9d:bb:8b:17:cd: fd:d9:0e:d0:60:61:21:8c:66:03:e4:80:6c:07:60:a8:f3:eb: bd:2b:71:d7:31:ed:57:a5:96:35:26:49:e2:49:0b:07:33:0d: 43:29:de:fc:47:7f:ed:d2:63:5e:bb:37:2c:b8:db:9f:ce:40: 63:9d:c0:e3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAuwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhENjExMTAvBgNVBAUTKDY5RkY2OEQzOUFDMTc3M0UyOEE4NTc4NUM3OTFCNEE4 RDlCMzg0ODYwHhcNMjYwOTExMDExMjA0WhcNMjYwOTE4MDExMjA0WjAYMRYwFAYD VQQDEw02YWEzNTU2NC0wM2VhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn3w+kB4e5m6kZ7GkU8tEv9PFRdKMG5b3g6YEtOklicpQ9pccdfvL7uE6H/cC DWA9nX+nxdp6EYTpDEeZjmA+oSba+SzC8gkvpSxw4OCkINK8BDetJ/uSC107ElA1 HRv9DQhxkvlVnheDnoSK/iGKSKzTEKi9f5qwolQuM1SPyKcdOw3brT4/y/vQeBfs NsATqDQdmpAnKdDPTSqa8KXdbXC8w4N5obYyjKhcSK3KL+SeR2iSZiBEn72DN+rW DOJ8iFu97ofba1WvQxcSoRw3+1MEWZuNmTAaH74lJgsWLnYmq8XD52M+NTnLVLev DU+BZEsFYIv+xvANcOAIhY8CiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIyRAM4/ avkV5SqL8ho6oPxM+1ESMB8GA1UdIwQYMBaAFGn/aNOawXc+KKhXhceRtKjZs4SG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEQ2MS8yOTVFNEM3NjYw MUIxMUVEQTVDNzI3NkVDNEY5QUUwMi9hZjlvMDVyQmR6NG9xRmVGeDVHMHFObXpo SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FmOW8wNXJCZHo0b3FGZUZ4NUcwcU5temhJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEQ2MS8yOTVFNEM3NjYwMUIxMUVEQTVDNzI3NkVDNEY5QUUwMi9hZjlvMDVyQmR6 NG9xRmVGeDVHMHFObXpoSVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAevnLXwOkGnvBCT2jUY3adnlloGpGHA1cb1Seho9Lwm/heBgDKtE6KIK1RyRX gAXCgYKQSjTUKrrI7z1OCPn8Kw4+PemZx/auuQYZm4pILZdNwEHF5QuwNBQnEmIe hM06N7wsNqZ4JTKE+VFJgjDoaLfVBzZlWLuUui4JUnU57VAOomFcQHpT/u4DomRx T9/u8AQjDGisO61gMsvqvCCQu6gke81otTJ4+BDXwfjzuRRuCWoz6P/HfKnBi7zf /e6fDp27ixfN/dkO0GBhIYxmA+SAbAdgqPPrvStx1zHtV6WWNSZJ4kkLBzMNQyne /Ed/7dJjXrs3LLjbn85AY53A4w== -----END CERTIFICATE-----Generated at Fri Sep 11 14:20:56 2026 by rpki-client