$ rpki-client -vvvf rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/d9okgAToxYcr33K6wSIsfMtujjc.mft File: d9okgAToxYcr33K6wSIsfMtujjc.mft (raw, json) Hash identifier: LN/sTV410TUKBigVyNMbjHsteJBhXYZ4bk6d24aNRic= Subject key identifier: E3:59:BC:D4:8D:9B:C0:61:3F:96:FA:4F:19:10:7A:B1:15:A9:12:3E Authority key identifier: 77:DA:24:80:04:E8:C5:87:2B:DF:72:BA:C1:22:2C:7C:CB:6E:8E:37 Certificate issuer: /CN=A9156342/serialNumber=77DA248004E8C5872BDF72BAC1222C7CCB6E8E37 Certificate serial: 0A7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d9okgAToxYcr33K6wSIsfMtujjc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/d9okgAToxYcr33K6wSIsfMtujjc.mft Manifest number: 0A53 Signing time: Fri 18 Sep 2026 19:40:02 +0000 Manifest this update: Fri 18 Sep 2026 19:40:01 +0000 Manifest next update: Fri 25 Sep 2026 19:40:01 +0000 Files and hashes: 1: d9okgAToxYcr33K6wSIsfMtujjc.crl (hash: THjxQySuVh90g4n/3A1rmKysFC6BBGvTl4KomVnaNqo=) 2: 3A58D9F499E611EAB3C00943C4F9AE02.roa (hash: Ix/A1HAv4E1o+T96OwAx6diCaMu8Un7l8lL1cR9lZ0I=) 3: 3AFD491C99E611EAB3C00943C4F9AE02.roa (hash: hAA41RG01uNOAJq/J2qFIRJdJvtjuAyTCQh8VD7YTr4=) 4: 3BABBD7699E611EAB3C00943C4F9AE02.roa (hash: goeW12JBA3cKKGwjatqM92u32XRcfD8Zb78gB6ELWSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/d9okgAToxYcr33K6wSIsfMtujjc.crl rsync://rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/d9okgAToxYcr33K6wSIsfMtujjc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d9okgAToxYcr33K6wSIsfMtujjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2682 (0xa7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156342, serialNumber=77DA248004E8C5872BDF72BAC1222C7CCB6E8E37 Validity Not Before: Sep 18 19:40:01 2026 GMT Not After : Sep 25 19:40:01 2026 GMT Subject: CN=6aad9391-531e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d1:3c:a7:04:43:e0:a3:d2:60:24:f7:86:4a: 46:4f:bf:d6:7d:7d:12:04:98:80:24:5a:80:03:8c: 1b:e6:6f:0e:8d:27:c9:05:b3:31:0c:d3:c6:dc:35: 34:2f:b6:d7:4c:1d:95:80:6d:fe:4e:3a:53:9e:9c: 5a:b5:8e:50:67:fd:f5:36:67:45:4e:b8:74:2e:3b: 64:a7:38:e7:66:f1:e2:5d:12:b5:6c:55:6e:b0:d6: 1b:4f:ad:f9:48:90:1c:ba:37:05:7c:5b:b8:a5:bd: 7b:4a:9b:7e:54:52:7e:ea:7a:79:dd:51:da:34:5f: 75:46:bf:90:80:c5:9d:05:93:0a:a7:05:a7:2a:e7: df:f9:2a:60:a9:f7:0d:3f:8f:6e:40:cd:b8:cf:1a: 6a:39:0a:89:61:34:c9:9a:8e:3e:53:42:34:50:15: 77:2b:0a:bf:d6:91:c9:bf:ab:88:2b:c2:c2:c4:ed: 2e:27:ca:5f:6e:f2:53:65:e2:53:34:76:fd:bd:d6: 57:d2:6e:ce:00:a1:1c:ae:f9:94:56:c0:fb:a0:e3: c3:bf:03:73:90:1e:4a:30:d1:8e:d9:36:bd:b3:b4: c8:62:c2:cc:19:9e:a5:b8:0d:0b:92:04:0a:a4:f2: f9:f4:a7:82:dd:55:29:20:f9:e1:18:d8:a1:64:0f: 7c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:59:BC:D4:8D:9B:C0:61:3F:96:FA:4F:19:10:7A:B1:15:A9:12:3E X509v3 Authority Key Identifier: keyid:77:DA:24:80:04:E8:C5:87:2B:DF:72:BA:C1:22:2C:7C:CB:6E:8E:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/d9okgAToxYcr33K6wSIsfMtujjc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d9okgAToxYcr33K6wSIsfMtujjc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/d9okgAToxYcr33K6wSIsfMtujjc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:7e:14:5d:e1:9d:1e:60:06:85:ea:fe:cb:e0:d3:f7:65:2b: ac:f4:26:98:05:6c:71:bf:45:81:03:85:bd:05:22:71:42:97: 48:55:30:5c:14:b7:30:20:c9:36:6b:1c:19:97:c3:64:66:07: ff:4f:a8:82:dc:97:11:6d:0b:d7:c7:47:0a:35:df:33:20:d0: 08:de:4e:86:7c:2a:25:21:cc:7e:a8:91:89:34:eb:cb:1b:4b: 18:fd:4e:ca:b1:f2:5e:bd:8d:05:55:c8:d6:35:de:88:03:6b: 5e:40:13:75:51:a1:02:8c:aa:76:2a:34:a0:f2:fb:87:76:1d: bb:a6:94:75:dc:3d:72:94:5f:88:bb:db:b4:4b:0e:49:ab:1d: a6:ae:5d:25:06:2e:34:df:3e:05:a6:02:63:4c:05:c7:4f:1b: 11:05:a3:e5:28:51:ab:c1:83:37:b8:0b:39:c7:2d:36:40:9d: 96:41:2b:69:39:a7:05:01:b1:f3:fb:de:3b:c6:39:9d:f3:48: 3d:99:6a:4a:c5:b8:ca:6b:6e:fd:f5:dc:e2:09:e1:32:83:f9: bf:fa:1c:99:91:3e:5b:49:80:96:7b:5b:63:78:8a:35:7a:74: a2:2e:da:f0:92:1a:c8:b6:65:5e:50:20:19:52:0d:18:cc:1f: 3c:56:40:8d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYzNDIxMTAvBgNVBAUTKDc3REEyNDgwMDRFOEM1ODcyQkRGNzJCQUMxMjIyQzdD Q0I2RThFMzcwHhcNMjYwOTE4MTk0MDAxWhcNMjYwOTI1MTk0MDAxWjAYMRYwFAYD VQQDEw02YWFkOTM5MS01MzFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu9E8pwRD4KPSYCT3hkpGT7/WfX0SBJiAJFqAA4wb5m8OjSfJBbMxDNPG3DU0 L7bXTB2VgG3+TjpTnpxatY5QZ/31NmdFTrh0LjtkpzjnZvHiXRK1bFVusNYbT635 SJAcujcFfFu4pb17Spt+VFJ+6np53VHaNF91Rr+QgMWdBZMKpwWnKuff+SpgqfcN P49uQM24zxpqOQqJYTTJmo4+U0I0UBV3Kwq/1pHJv6uIK8LCxO0uJ8pfbvJTZeJT NHb9vdZX0m7OAKEcrvmUVsD7oOPDvwNzkB5KMNGO2Ta9s7TIYsLMGZ6luA0LkgQK pPL59KeC3VUpIPnhGNihZA980wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFONZvNSN m8BhP5b6TxkQerEVqRI+MB8GA1UdIwQYMBaAFHfaJIAE6MWHK99yusEiLHzLbo43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjM0Mi9CREY4OTA4MDk5 RTQxMUVBODlBNEMyNDBDNEY5QUUwMi9kOW9rZ0FUb3hZY3IzM0s2d1NJc2ZNdHVq amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q5b2tnQVRveFljcjMzSzZ3U0lzZk10dWpqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjM0Mi9CREY4OTA4MDk5RTQxMUVBODlBNEMyNDBDNEY5QUUwMi9kOW9rZ0FUb3hZ Y3IzM0s2d1NJc2ZNdHVqamMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEX4UXeGdHmAGher+y+DT92UrrPQmmAVscb9FgQOFvQUicUKXSFUwXBS3MCDJ NmscGZfDZGYH/0+ogtyXEW0L18dHCjXfMyDQCN5OhnwqJSHMfqiRiTTryxtLGP1O yrHyXr2NBVXI1jXeiANrXkATdVGhAoyqdio0oPL7h3Ydu6aUddw9cpRfiLvbtEsO Sasdpq5dJQYuNN8+BaYCY0wFx08bEQWj5ShRq8GDN7gLOcctNkCdlkEraTmnBQGx 8/veO8Y5nfNIPZlqSsW4ymtu/fXc4gnhMoP5v/ocmZE+W0mAlntbY3iKNXp0oi7a 8JIayLZlXlAgGVINGMwfPFZAjQ== -----END CERTIFICATE-----Generated at Sat Sep 19 05:40:20 2026 by rpki-client