$ rpki-client -vvvf rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.mft File: D9l6GEHJl08fSQQu2j5yhCGq5f4.mft (raw, json) Hash identifier: bdVTOejxq8UibAWtIwMWglzDESHwFivBF1934aosYs4= Subject key identifier: 62:48:A0:19:29:17:30:1A:F2:7B:63:D4:47:08:76:86:35:56:3D:F0 Authority key identifier: 0F:D9:7A:18:41:C9:97:4F:1F:49:04:2E:DA:3E:72:84:21:AA:E5:FE Certificate issuer: /CN=A914ED2B/serialNumber=0FD97A1841C9974F1F49042EDA3E728421AAE5FE Certificate serial: 08D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9l6GEHJl08fSQQu2j5yhCGq5f4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.mft Manifest number: 08C1 Signing time: Thu 10 Sep 2026 20:26:41 +0000 Manifest this update: Thu 10 Sep 2026 20:26:40 +0000 Manifest next update: Thu 17 Sep 2026 20:26:40 +0000 Files and hashes: 1: D9l6GEHJl08fSQQu2j5yhCGq5f4.crl (hash: 8YmwB4IsvrKgqEo6EhOKh6vlNo8WqmNB4va66M7JlsI=) 2: D31B3092F40911EA8A5C9E70C4F9AE02.roa (hash: xE0G8jy0x1aFTqJiiedpm0HY07HDA+9aAMGkr13aJlo=) 3: D25A6970F40911EA8A5C9E70C4F9AE02.roa (hash: X+7xi8ucS3fgs8IMY8mWHVyiqI68xFhirEd+62e8Rek=) 4: CD0710DA3F3511ED84AFEA5BC4F9AE02.roa (hash: yYK7V7dW/D0eC17jG/LycZEBlM7X3W0O8v5bUzFm2dA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.crl rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9l6GEHJl08fSQQu2j5yhCGq5f4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 20:26:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2264 (0x8d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914ED2B, serialNumber=0FD97A1841C9974F1F49042EDA3E728421AAE5FE Validity Not Before: Sep 10 20:26:40 2026 GMT Not After : Sep 17 20:26:40 2026 GMT Subject: CN=6aa31280-268e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b5:19:04:bf:4f:03:5c:8d:a3:bb:d4:37:08: 65:e2:6e:79:ea:a8:db:3b:6f:47:e1:e0:19:89:e8: 1c:e7:e8:25:f6:1e:e9:2f:6c:f5:b0:ff:e4:1d:33: 94:1b:3d:72:d0:93:a3:15:26:cb:ad:ba:16:ea:8b: 5e:29:02:cb:a2:9b:e7:b0:77:1e:45:20:2c:5c:ac: 5f:b1:89:76:b7:0d:b8:25:09:34:bb:34:ec:73:4c: 43:d1:26:d4:3b:a1:2d:00:5e:e3:b3:25:f7:b4:07: 8c:29:78:8b:9c:0c:aa:08:2f:4a:44:f7:93:fb:fd: 6d:82:99:7d:be:9f:c3:bc:50:2c:66:a7:88:b9:20: be:37:d2:41:f1:90:16:bc:05:ba:f9:a7:9c:a3:41: 35:79:0f:f9:c0:34:71:d5:39:fb:6a:45:e0:84:06: bf:0f:25:57:cf:19:a9:03:f5:b0:8f:7c:65:9f:13: 6b:25:b5:65:a3:b2:6e:61:8b:35:aa:93:5c:2e:b4: 9c:3f:d3:f3:5b:cf:24:b1:69:f3:4b:2f:0f:f8:3a: 36:1c:3d:28:f2:39:6c:9a:1f:3a:9e:c0:58:9c:ee: 31:91:6a:18:a8:2f:0d:88:ea:cd:b1:2e:af:25:8b: ae:3c:8c:5c:7c:bc:80:5e:b5:4d:35:fe:2e:61:3c: 23:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:48:A0:19:29:17:30:1A:F2:7B:63:D4:47:08:76:86:35:56:3D:F0 X509v3 Authority Key Identifier: keyid:0F:D9:7A:18:41:C9:97:4F:1F:49:04:2E:DA:3E:72:84:21:AA:E5:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9l6GEHJl08fSQQu2j5yhCGq5f4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:3f:b7:82:f6:b3:bd:39:3a:24:8e:eb:2b:0f:42:e8:41:2e: 13:84:c7:22:f5:4f:9f:96:50:aa:6f:a6:b7:11:d4:12:14:ae: 06:f5:b1:18:e2:0e:7d:96:91:38:74:13:2d:03:e2:22:0c:d0: ef:91:93:81:64:98:04:ff:dd:16:2b:b6:df:ed:59:44:7b:03: 80:ba:55:34:e3:44:1e:ee:f2:c4:24:3f:84:35:cb:4c:b8:89: a1:41:1a:1b:58:97:47:eb:90:07:ac:78:72:42:ae:9d:f6:e9: a9:89:0e:22:2b:47:9a:3a:96:61:2d:16:73:f8:61:5c:29:56: a9:7b:03:ec:b4:8d:76:8b:23:da:73:68:1b:a0:02:79:e8:8f: b5:24:74:d6:59:58:b3:67:ba:80:7d:d5:eb:11:f8:4f:5f:ce: e0:d9:65:0f:a6:c6:17:e8:6b:98:08:83:ef:c2:5d:ab:30:fd: 5f:49:7b:d6:c0:e3:f8:2b:c7:6b:95:7c:55:19:10:35:09:6f: 77:50:c4:32:69:8a:32:e8:cf:2f:ac:16:8e:76:fa:63:0f:c9: c5:2c:d1:e3:f6:35:21:57:a9:6e:ea:f9:c7:5d:51:f6:34:3c: 96:c5:a9:36:0b:f7:46:ed:af:95:20:39:8b:6b:22:6b:5b:53: c5:39:bf:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVEMkIxMTAvBgNVBAUTKDBGRDk3QTE4NDFDOTk3NEYxRjQ5MDQyRURBM0U3Mjg0 MjFBQUU1RkUwHhcNMjYwOTEwMjAyNjQwWhcNMjYwOTE3MjAyNjQwWjAYMRYwFAYD VQQDEw02YWEzMTI4MC0yNjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0bUZBL9PA1yNo7vUNwhl4m556qjbO29H4eAZiegc5+gl9h7pL2z1sP/kHTOU Gz1y0JOjFSbLrboW6oteKQLLopvnsHceRSAsXKxfsYl2tw24JQk0uzTsc0xD0SbU O6EtAF7jsyX3tAeMKXiLnAyqCC9KRPeT+/1tgpl9vp/DvFAsZqeIuSC+N9JB8ZAW vAW6+aeco0E1eQ/5wDRx1Tn7akXghAa/DyVXzxmpA/Wwj3xlnxNrJbVlo7JuYYs1 qpNcLrScP9PzW88ksWnzSy8P+Do2HD0o8jlsmh86nsBYnO4xkWoYqC8NiOrNsS6v JYuuPIxcfLyAXrVNNf4uYTwjrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGJIoBkp FzAa8ntj1EcIdoY1Vj3wMB8GA1UdIwQYMBaAFA/ZehhByZdPH0kELto+coQhquX+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUQyQi84QjY3MDBBNkY0 MDgxMUVBOTBBQzU2NkZDNEY5QUUwMi9EOWw2R0VISmwwOGZTUVF1Mmo1eWhDR3E1 ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q5bDZHRUhKbDA4ZlNRUXUyajV5aENHcTVmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUQyQi84QjY3MDBBNkY0MDgxMUVBOTBBQzU2NkZDNEY5QUUwMi9EOWw2R0VISmww OGZTUVF1Mmo1eWhDR3E1ZjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABD+3gvazvTk6JI7rKw9C6EEuE4THIvVPn5ZQqm+mtxHUEhSuBvWxGOIOfZaR OHQTLQPiIgzQ75GTgWSYBP/dFiu23+1ZRHsDgLpVNONEHu7yxCQ/hDXLTLiJoUEa G1iXR+uQB6x4ckKunfbpqYkOIitHmjqWYS0Wc/hhXClWqXsD7LSNdosj2nNoG6AC eeiPtSR01llYs2e6gH3V6xH4T1/O4NllD6bGF+hrmAiD78JdqzD9X0l71sDj+CvH a5V8VRkQNQlvd1DEMmmKMujPL6wWjnb6Yw/JxSzR4/Y1IVepbur5x11R9jQ8lsWp Ngv3Ru2vlSA5i2sia1tTxTm/pQ== -----END CERTIFICATE-----Generated at Fri Sep 11 14:53:13 2026 by rpki-client