$ rpki-client -vvvf rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft File: A8f_7gyvSSWEnihuwO-7DIsqjk8.mft (raw, json) Hash identifier: ghQgU4V7x1DPi1YHsN7PeKwGZ/CVZvQVV6YWCWZ8ZU8= Subject key identifier: 14:A9:BD:F6:72:8C:2C:93:CA:3E:A6:A7:97:03:66:F8:41:B6:30:11 Authority key identifier: 03:C7:FF:EE:0C:AF:49:25:84:9E:28:6E:C0:EF:BB:0C:8B:2A:8E:4F Certificate issuer: /CN=A9156CFE/serialNumber=03C7FFEE0CAF4925849E286EC0EFBB0C8B2A8E4F Certificate serial: 0AC2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft Manifest number: 0AA3 Signing time: Thu 10 Sep 2026 19:31:01 +0000 Manifest this update: Thu 10 Sep 2026 19:31:01 +0000 Manifest next update: Thu 17 Sep 2026 19:31:01 +0000 Files and hashes: 1: A8f_7gyvSSWEnihuwO-7DIsqjk8.crl (hash: CngcwsAV+an5iFvJYzT++cJF0Xge9SnoiM9cDNeVYC4=) 2: E00620C0267C11EE803B2155C4F9AE02.roa (hash: FjoaYasaX35xO0OxM5ZHWyDBaB3m3PCkgBiPkzevM+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.crl rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 19:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2754 (0xac2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156CFE, serialNumber=03C7FFEE0CAF4925849E286EC0EFBB0C8B2A8E4F Validity Not Before: Sep 10 19:31:01 2026 GMT Not After : Sep 17 19:31:01 2026 GMT Subject: CN=6aa30575-546b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ad:3e:50:9c:e1:da:1b:ed:5b:c1:23:85:cb: 89:e1:4b:84:a8:43:56:08:e9:f7:88:ba:5b:5c:2c: a2:ee:57:5f:8c:a6:82:98:e2:7f:8d:ae:ec:47:99: 5b:7b:42:3d:74:71:63:05:25:11:57:f6:8b:0a:08: 85:cf:36:4d:5e:2d:15:25:92:98:a7:01:46:3c:95: 08:27:82:2b:22:96:7d:04:cf:f4:48:69:a5:e5:1c: 37:b3:e3:ee:f1:57:26:ac:bd:10:94:2f:01:af:7c: 6f:ea:6f:72:82:79:45:62:6b:ab:df:08:52:79:d7: 42:2b:0d:c1:7c:31:89:35:81:f1:ba:cd:93:91:31: d7:69:b3:81:5e:8c:41:d9:0b:d9:0b:61:35:61:4a: ea:51:a2:b5:2d:c4:39:4c:31:98:16:9c:cc:06:66: 9c:91:49:a6:f2:b8:ca:06:3d:7d:ad:80:c2:98:e6: 3e:bd:83:3e:15:3a:cc:c9:9c:df:3b:76:50:0c:a5: 20:41:da:4f:bf:2a:1e:69:a4:11:9f:8b:60:0c:89: 44:f8:9a:f8:c6:32:8d:30:b2:8a:11:a9:a7:2f:a2: 34:f8:0f:cc:aa:f0:49:b5:17:ac:82:81:54:65:f3: 80:5d:5f:fa:d9:3b:76:fb:48:fd:01:b4:17:68:84: 83:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:A9:BD:F6:72:8C:2C:93:CA:3E:A6:A7:97:03:66:F8:41:B6:30:11 X509v3 Authority Key Identifier: keyid:03:C7:FF:EE:0C:AF:49:25:84:9E:28:6E:C0:EF:BB:0C:8B:2A:8E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:ef:dc:d3:d2:c8:43:5b:6e:eb:de:a0:1c:cf:58:d6:69:8c: f4:9d:68:70:68:47:cf:e3:1b:95:29:69:49:7e:d6:d4:d6:55: 74:72:66:cf:9b:ea:b3:4b:9f:22:db:8f:45:76:c4:90:b9:c4: 6d:ea:cc:07:49:db:b4:06:6c:09:2a:92:7f:46:12:e1:38:99: 91:48:93:62:dd:04:0c:71:e2:cd:f5:84:5d:8c:c4:79:56:55: f4:bb:a0:5e:d9:ad:52:f7:da:8d:e9:99:80:ca:a7:a8:6d:f5: f3:b7:f9:e6:3d:55:03:8f:78:4b:d1:cf:38:ad:30:fe:e8:fd: a9:3e:08:e1:79:7f:42:66:37:42:9f:bd:5e:c5:af:5b:d4:26: b8:37:71:cf:b7:3a:f6:6a:6f:92:78:f4:dd:5c:d6:8e:ad:1e: d2:6d:c8:b0:3b:50:e3:fb:2a:ff:44:46:35:37:8d:6e:20:0a: 0c:de:9a:7d:d4:08:38:93:eb:b4:9e:ad:7a:c2:41:ba:6b:87: 56:37:9b:64:a6:c6:69:00:60:b2:e0:27:51:8c:7f:48:6c:67: 90:09:72:8f:50:4d:80:c7:f0:33:ab:03:59:1f:38:43:d0:a1: 00:4f:35:91:05:aa:83:02:8d:df:01:ba:b6:ca:6e:56:00:f3: d7:c8:e0:11 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCsIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZDRkUxMTAvBgNVBAUTKDAzQzdGRkVFMENBRjQ5MjU4NDlFMjg2RUMwRUZCQjBD OEIyQThFNEYwHhcNMjYwOTEwMTkzMTAxWhcNMjYwOTE3MTkzMTAxWjAYMRYwFAYD VQQDEw02YWEzMDU3NS01NDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuq0+UJzh2hvtW8EjhcuJ4UuEqENWCOn3iLpbXCyi7ldfjKaCmOJ/ja7sR5lb e0I9dHFjBSURV/aLCgiFzzZNXi0VJZKYpwFGPJUIJ4IrIpZ9BM/0SGml5Rw3s+Pu 8VcmrL0QlC8Br3xv6m9ygnlFYmur3whSeddCKw3BfDGJNYHxus2TkTHXabOBXoxB 2QvZC2E1YUrqUaK1LcQ5TDGYFpzMBmackUmm8rjKBj19rYDCmOY+vYM+FTrMyZzf O3ZQDKUgQdpPvyoeaaQRn4tgDIlE+Jr4xjKNMLKKEamnL6I0+A/MqvBJtResgoFU ZfOAXV/62Tt2+0j9AbQXaISDPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBSpvfZy jCyTyj6mp5cDZvhBtjARMB8GA1UdIwQYMBaAFAPH/+4Mr0klhJ4obsDvuwyLKo5P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkNGRS9CMzkwMzE3MDhB QjIxMUVBQjAyMjE5M0NDNEY5QUUwMi9BOGZfN2d5dlNTV0VuaWh1d08tN0RJc3Fq azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E4Zl83Z3l2U1NXRW5paHV3Ty03RElzcWprOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkNGRS9CMzkwMzE3MDhBQjIxMUVBQjAyMjE5M0NDNEY5QUUwMi9BOGZfN2d5dlNT V0VuaWh1d08tN0RJc3FqazgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf+/c09LIQ1tu696gHM9Y1mmM9J1ocGhHz+MblSlpSX7W1NZVdHJmz5vqs0uf ItuPRXbEkLnEberMB0nbtAZsCSqSf0YS4TiZkUiTYt0EDHHizfWEXYzEeVZV9Lug XtmtUvfajemZgMqnqG3187f55j1VA494S9HPOK0w/uj9qT4I4Xl/QmY3Qp+9XsWv W9QmuDdxz7c69mpvknj03VzWjq0e0m3IsDtQ4/sq/0RGNTeNbiAKDN6afdQIOJPr tJ6tesJBumuHVjebZKbGaQBgsuAnUYx/SGxnkAlyj1BNgMfwM6sDWR84Q9ChAE81 kQWqgwKN3wG6tspuVgDz18jgEQ== -----END CERTIFICATE-----Generated at Fri Sep 11 11:08:26 2026 by rpki-client