$ rpki-client -vvf rpki.apnic.net/member_repository/A9155C10/61792E6290D411F18C5E543F4211F970/CCkOnu8DM9Lkv1zue8DiOZgeNU8.mft File: CCkOnu8DM9Lkv1zue8DiOZgeNU8.mft (raw, json) Hash identifier: WLNmdRpiLNioXwFTrymYjrZrhb/27RBt3XmgOPmIN1Y= Subject key identifier: 0D:E3:8D:7B:CE:FA:06:7A:FB:40:7E:F0:A0:67:68:B4:23:07:6E:AA Authority key identifier: 08:29:0E:9E:EF:03:33:D2:E4:BF:5C:EE:7B:C0:E2:39:98:1E:35:4F Certificate issuer: /CN=A9155C10/serialNumber=08290E9EEF0333D2E4BF5CEE7BC0E239981E354F Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CCkOnu8DM9Lkv1zue8DiOZgeNU8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155C10/61792E6290D411F18C5E543F4211F970/CCkOnu8DM9Lkv1zue8DiOZgeNU8.mft Manifest number: 09 Signing time: Wed 19 Aug 2026 09:54:32 +0000 Manifest this update: Wed 19 Aug 2026 09:54:31 +0000 Manifest next update: Wed 26 Aug 2026 09:54:31 +0000 Files and hashes: 1: CCkOnu8DM9Lkv1zue8DiOZgeNU8.crl (hash: juK0c2wn/mMR28mvE0bdqK69kzPbwGvjZQuJZRsUvlc=) 2: BBCDD19C90D411F1867D676D4211F970.roa (hash: lDAfYAyrz14mqZWGqatOmeRWP2NtYAeHAWJKTwXbB8I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155C10/61792E6290D411F18C5E543F4211F970/CCkOnu8DM9Lkv1zue8DiOZgeNU8.crl rsync://rpki.apnic.net/member_repository/A9155C10/61792E6290D411F18C5E543F4211F970/CCkOnu8DM9Lkv1zue8DiOZgeNU8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CCkOnu8DM9Lkv1zue8DiOZgeNU8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 09:54:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155C10, serialNumber=08290E9EEF0333D2E4BF5CEE7BC0E239981E354F Validity Not Before: Aug 19 09:54:31 2026 GMT Not After : Aug 26 09:54:31 2026 GMT Subject: CN=6a857d57-d886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f0:c3:f8:8b:6e:e9:8b:30:b1:73:5b:f1:ab: bc:ee:3d:60:12:e6:9e:50:f8:d7:cf:ea:37:27:5b: 54:ba:3d:df:2b:c4:cd:02:7f:6e:d0:72:52:e5:aa: 16:d7:88:3d:8c:54:bd:57:55:e8:6c:3a:24:84:7d: ce:08:2b:0e:89:2f:01:dc:f5:76:2a:a0:e4:c2:ea: 57:c5:bf:a1:70:87:fc:7e:2d:a4:4a:3c:b6:9e:a0: 1a:0f:68:c7:43:4b:1f:03:86:cf:90:36:a7:12:0e: 27:5b:cf:7d:85:83:9b:57:81:46:f3:98:67:86:c3: c3:71:ab:57:d9:9c:9a:15:f9:61:a4:4d:cf:e4:4a: e8:df:17:d1:06:3e:65:de:34:96:9a:57:63:7f:c1: 17:6a:1c:b7:d3:84:55:42:44:c9:dc:52:83:38:68: da:ee:61:55:73:b3:1a:a5:e2:82:d3:37:b2:53:2b: 4b:48:c9:c6:2d:ea:34:99:be:b7:9f:6b:09:2d:50: 36:53:33:b6:f5:b0:49:5d:b1:df:53:a5:b4:a3:9b: 37:76:14:ca:8d:a7:c7:3c:fe:9b:8f:e4:19:ca:95: 45:5e:cd:65:5f:d8:79:9d:1d:9e:50:c8:82:ac:e9: e2:24:2e:4d:df:ef:e1:1f:00:ad:8d:44:7f:36:e3: 26:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:E3:8D:7B:CE:FA:06:7A:FB:40:7E:F0:A0:67:68:B4:23:07:6E:AA X509v3 Authority Key Identifier: keyid:08:29:0E:9E:EF:03:33:D2:E4:BF:5C:EE:7B:C0:E2:39:98:1E:35:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155C10/61792E6290D411F18C5E543F4211F970/CCkOnu8DM9Lkv1zue8DiOZgeNU8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CCkOnu8DM9Lkv1zue8DiOZgeNU8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155C10/61792E6290D411F18C5E543F4211F970/CCkOnu8DM9Lkv1zue8DiOZgeNU8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:8e:4d:a0:df:51:f8:a4:45:f4:42:47:d1:91:bd:17:bb:8c: c0:c3:14:14:04:6a:d8:2b:b2:0f:a0:2b:31:8b:03:c6:3f:28: cb:b5:95:61:24:bf:6d:09:d8:d0:2a:8f:e9:e0:eb:b8:55:02: 33:c5:cb:4e:57:98:f2:10:d1:e5:ab:1b:dd:91:ef:e9:2f:bf: e6:61:92:cd:ee:ad:50:29:9c:77:b2:81:21:fe:4b:88:18:44: f9:c1:af:ad:a3:ce:46:08:74:bb:c1:0c:0e:f6:dd:01:ec:78: 67:2b:b8:40:72:a6:73:41:bd:64:8b:6c:25:96:eb:64:0b:87: 83:8c:b1:c0:71:71:2b:79:bc:08:b4:1a:4d:27:3f:35:90:eb: 7d:06:67:0a:bf:e4:8b:2a:77:dd:d2:d3:b3:16:1f:3f:1d:c8: c0:50:06:25:2a:8f:40:38:f2:0a:80:03:99:bd:48:18:25:b7: 5b:ae:7d:d1:cb:01:3f:c7:bf:e6:d8:51:23:0f:e6:89:92:50: 17:b5:d1:21:81:cc:4b:ec:74:0f:77:f9:af:67:89:cb:3f:5e: c3:07:13:d9:16:70:b6:fc:f3:7a:3a:92:7e:42:6c:0b:83:82: ca:01:02:73:95:b6:4c:20:35:43:b6:f3:c5:41:ea:25:87:f9: d6:25:23:eb -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NUMxMDExMC8GA1UEBRMoMDgyOTBFOUVFRjAzMzNEMkU0QkY1Q0VFN0JDMEUyMzk5 ODFFMzU0RjAeFw0yNjA4MTkwOTU0MzFaFw0yNjA4MjYwOTU0MzFaMBgxFjAUBgNV BAMTDTZhODU3ZDU3LWQ4ODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCc8MP4i27pizCxc1vxq7zuPWAS5p5Q+NfP6jcnW1S6Pd8rxM0Cf27QclLlqhbX iD2MVL1XVehsOiSEfc4IKw6JLwHc9XYqoOTC6lfFv6Fwh/x+LaRKPLaeoBoPaMdD Sx8Dhs+QNqcSDidbz32Fg5tXgUbzmGeGw8Nxq1fZnJoV+WGkTc/kSujfF9EGPmXe NJaaV2N/wRdqHLfThFVCRMncUoM4aNruYVVzsxql4oLTN7JTK0tIycYt6jSZvref awktUDZTM7b1sEldsd9TpbSjmzd2FMqNp8c8/puP5BnKlUVezWVf2HmdHZ5QyIKs 6eIkLk3f7+EfAK2NRH824yafAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUDeONe876 Bnr7QH7woGdotCMHbqowHwYDVR0jBBgwFoAUCCkOnu8DM9Lkv1zue8DiOZgeNU8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1QzEwLzYxNzkyRTYyOTBE NDExRjE4QzVFNTQzRjQyMTFGOTcwL0NDa09udThETTlMa3YxenVlOERpT1pnZU5V OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQ0NrT251OERNOUxrdjF6dWU4RGlPWmdlTlU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1 QzEwLzYxNzkyRTYyOTBENDExRjE4QzVFNTQzRjQyMTFGOTcwL0NDa09udThETTlM a3YxenVlOERpT1pnZU5VOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQC+jk2g31H4pEX0QkfRkb0Xu4zAwxQUBGrYK7IPoCsxiwPGPyjLtZVhJL9tCdjQ Ko/p4Ou4VQIzxctOV5jyENHlqxvdke/pL7/mYZLN7q1QKZx3soEh/kuIGET5wa+t o85GCHS7wQwO9t0B7HhnK7hAcqZzQb1ki2wllutkC4eDjLHAcXErebwItBpNJz81 kOt9BmcKv+SLKnfd0tOzFh8/HcjAUAYlKo9AOPIKgAOZvUgYJbdbrn3RywE/x7/m 2FEjD+aJklAXtdEhgcxL7HQPd/mvZ4nLP17DBxPZFnC2/PN6OpJ+QmwLg4LKAQJz lbZMIDVDtvPFQeolh/nWJSPr -----END CERTIFICATE-----Generated at Wed Aug 19 15:59:42 2026 by rpki-client