$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft File: DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft (raw, json) Hash identifier: t9HqIubnmZFk0fbaoPnm64XhHt0wFacPnbe3UvBI/2g= Subject key identifier: EB:B1:5D:05:6A:D9:5F:3E:73:B6:EB:93:6E:14:38:F9:2E:DC:B3:2C Authority key identifier: 0C:4C:17:22:9C:6A:B6:7F:54:3F:EC:9C:4D:03:E5:FE:E4:ED:2F:F6 Certificate issuer: /CN=A9157ADC/serialNumber=0C4C17229C6AB67F543FEC9C4D03E5FEE4ED2FF6 Certificate serial: 0323 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft Manifest number: 031C Signing time: Wed 09 Sep 2026 01:07:04 +0000 Manifest this update: Wed 09 Sep 2026 01:07:04 +0000 Manifest next update: Wed 16 Sep 2026 01:07:04 +0000 Files and hashes: 1: DEwXIpxqtn9UP-ycTQPl_uTtL_Y.crl (hash: 4LfgelXBzsgCy5Y770s5f9PkNmtacJqXll9dq1rh/pc=) 2: 88FCD2C62DBA11ED94AFED62C4F9AE02.roa (hash: /6WdSynf7V0vN/nZ8NChu2HHIyeykBoMxKn2RuUgb30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.crl rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Sep 2026 01:07:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 803 (0x323) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157ADC, serialNumber=0C4C17229C6AB67F543FEC9C4D03E5FEE4ED2FF6 Validity Not Before: Sep 9 01:07:04 2026 GMT Not After : Sep 16 01:07:04 2026 GMT Subject: CN=6aa0b138-2570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:06:3d:31:9c:fe:29:cc:81:87:2e:c6:f0:74: 78:45:1a:96:e4:39:f0:7b:3f:bb:af:25:9f:9b:be: a3:21:09:b8:7d:65:48:58:a5:d2:4e:14:7b:00:cc: d0:e3:44:c1:2c:eb:3a:20:e3:92:a2:3a:06:f8:29: 62:82:58:5c:4e:c5:95:07:d2:4d:a7:ce:8c:6f:b3: 22:10:7a:27:47:eb:7d:6e:3e:1f:23:60:7e:90:70: 75:f1:49:16:9e:62:b9:a7:dc:1f:0c:54:7d:1d:5d: 4e:a2:a3:67:b6:ef:0e:3a:ae:51:c3:66:b2:5e:dd: bc:6b:ad:b9:3d:11:0a:d3:db:8a:d6:52:2a:53:df: 8e:11:c7:09:e9:ff:5b:c1:fb:06:8f:cd:90:29:0e: fb:9c:68:94:6b:08:a3:08:74:f9:eb:23:42:26:d9: 83:d8:8c:9a:28:e4:cd:09:6e:ce:84:0f:3e:61:07: ea:29:7f:06:c2:95:a7:ad:bb:2d:30:7c:69:cf:e6: bf:87:0e:35:32:f1:41:10:e3:5c:29:f7:33:2c:e3: 83:7c:0c:ae:b2:80:34:da:4a:2a:9f:54:41:7a:9e: 41:f2:27:66:18:c7:31:c0:b5:4e:70:85:ac:42:1b: f6:e4:90:52:9a:93:e2:89:0d:9f:9e:5b:64:ed:f1: 88:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:B1:5D:05:6A:D9:5F:3E:73:B6:EB:93:6E:14:38:F9:2E:DC:B3:2C X509v3 Authority Key Identifier: keyid:0C:4C:17:22:9C:6A:B6:7F:54:3F:EC:9C:4D:03:E5:FE:E4:ED:2F:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:98:e7:84:90:8c:99:95:34:3a:c9:1a:aa:7d:57:65:f6:2b: 2c:66:54:56:5a:ab:28:92:43:9b:5e:2f:ef:85:b9:cf:71:70: 73:2e:8e:1a:50:0e:38:04:96:a9:58:53:1e:91:35:5b:a8:ab: 17:67:7d:8d:af:6e:7f:e5:7a:b7:9d:c9:b9:6c:86:f7:fc:d1: df:b6:e5:14:b4:c8:a5:0a:5a:52:18:49:28:77:9b:ba:b0:25: 0b:83:5c:bf:86:25:10:7c:8f:af:38:48:b5:94:ad:c7:3f:12: 6a:3a:c5:1f:8b:5a:e7:6d:e0:07:77:ab:f3:4b:93:56:dc:9f: 62:2f:64:2d:4e:dd:e1:35:86:c5:7d:9c:b0:a2:b7:48:f3:ba: ee:9a:9e:03:f0:f0:1c:22:0f:5d:44:03:dc:c8:43:1c:67:a9: bc:eb:c7:5f:5c:7f:18:e7:32:84:52:ac:a5:dc:e2:7a:68:50: d2:3b:c6:36:3d:75:c0:d8:dc:77:9e:e3:1e:b2:f1:39:96:71: e4:fe:ca:c1:64:e9:c3:73:82:6b:58:16:22:bb:62:0c:53:c6: 47:01:82:a1:41:8f:35:90:b8:62:ea:cd:6e:da:49:af:08:05: 7f:92:17:44:75:a3:a0:6c:e7:d5:17:33:64:e4:03:f9:23:bb: 31:bd:f9:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAyMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdBREMxMTAvBgNVBAUTKDBDNEMxNzIyOUM2QUI2N0Y1NDNGRUM5QzREMDNFNUZF RTRFRDJGRjYwHhcNMjYwOTA5MDEwNzA0WhcNMjYwOTE2MDEwNzA0WjAYMRYwFAYD VQQDEw02YWEwYjEzOC0yNTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkQY9MZz+KcyBhy7G8HR4RRqW5Dnwez+7ryWfm76jIQm4fWVIWKXSThR7AMzQ 40TBLOs6IOOSojoG+CliglhcTsWVB9JNp86Mb7MiEHonR+t9bj4fI2B+kHB18UkW nmK5p9wfDFR9HV1OoqNntu8OOq5Rw2ayXt28a625PREK09uK1lIqU9+OEccJ6f9b wfsGj82QKQ77nGiUawijCHT56yNCJtmD2IyaKOTNCW7OhA8+YQfqKX8GwpWnrbst MHxpz+a/hw41MvFBEONcKfczLOODfAyusoA02koqn1RBep5B8idmGMcxwLVOcIWs Qhv25JBSmpPiiQ2fnltk7fGIpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOuxXQVq 2V8+c7brk24UOPku3LMsMB8GA1UdIwQYMBaAFAxMFyKcarZ/VD/snE0D5f7k7S/2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0FEQy9GNTc1ODlFMjJE QjYxMUVEODIxNTlCNUVDNEY5QUUwMi9ERXdYSXB4cXRuOVVQLXljVFFQbF91VHRM X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RFd1hJcHhxdG45VVAteWNUUVBsX3VUdExfWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0FEQy9GNTc1ODlFMjJEQjYxMUVEODIxNTlCNUVDNEY5QUUwMi9ERXdYSXB4cXRu OVVQLXljVFFQbF91VHRMX1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeJjnhJCMmZU0Oskaqn1XZfYrLGZUVlqrKJJDm14v74W5z3Fwcy6OGlAOOASW qVhTHpE1W6irF2d9ja9uf+V6t53JuWyG9/zR37blFLTIpQpaUhhJKHeburAlC4Nc v4YlEHyPrzhItZStxz8SajrFH4ta523gB3er80uTVtyfYi9kLU7d4TWGxX2csKK3 SPO67pqeA/DwHCIPXUQD3MhDHGepvOvHX1x/GOcyhFKspdziemhQ0jvGNj11wNjc d57jHrLxOZZx5P7KwWTpw3OCa1gWIrtiDFPGRwGCoUGPNZC4YurNbtpJrwgFf5IX RHWjoGzn1RczZOQD+SO7Mb35fA== -----END CERTIFICATE-----Generated at Wed Sep 9 20:29:58 2026 by rpki-client