$ rpki-client -vvvf rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft File: B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft (raw, json) Hash identifier: gopOavx+pRnASn+mYw2kEUuKLD/8xUg+yx3qBRtVQhM= Subject key identifier: 85:44:F6:28:8B:2A:7F:97:11:B0:57:79:13:F7:52:05:18:27:10:3D Authority key identifier: 07:E0:51:B4:1E:D8:2E:3F:53:BF:59:AA:84:DD:9A:CA:20:CF:B5:4C Certificate issuer: /CN=A9166C39/serialNumber=07E051B41ED82E3F53BF59AA84DD9ACA20CFB54C Certificate serial: 09CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft Manifest number: 09A3 Signing time: Fri 04 Sep 2026 19:54:03 +0000 Manifest this update: Fri 04 Sep 2026 19:54:02 +0000 Manifest next update: Fri 11 Sep 2026 19:54:02 +0000 Files and hashes: 1: B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl (hash: Tjv0r9mKHba9hXrUFtmmA9IxrUVjLbpeL2UO8ZnG0jQ=) 2: DF8D07E8FB7E11EFA25DF775C4F9AE02.roa (hash: 5HVDJMdFAEWbpwDpLRs7BIeQXFMh3hWjQmOdlBm6OLk=) 3: E02718B0FB7E11EFA25DF775C4F9AE02.roa (hash: rkKHQ4zATeIPJVHKT4PvdBFCee667A0ZXYdEoUP6VTg=) 4: 16079DB83C1D11EBA532C076C4F9AE02.roa (hash: XCLp6kuCEEGIzjY9y50IALXt6fllir5uxJ9NE8PRlSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 19:54:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2509 (0x9cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166C39, serialNumber=07E051B41ED82E3F53BF59AA84DD9ACA20CFB54C Validity Not Before: Sep 4 19:54:02 2026 GMT Not After : Sep 11 19:54:02 2026 GMT Subject: CN=6a9b21db-3423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1e:10:24:45:15:d2:6c:8e:ed:16:0a:7c:47: 6e:f6:cc:36:94:a7:ab:0d:01:e3:f7:6d:c1:31:6e: f4:0f:88:50:96:17:89:d9:50:ff:3b:17:17:fd:34: 37:b1:15:c8:c6:7e:ce:98:ab:81:12:0d:91:ba:2f: e6:36:d6:06:e7:52:75:2a:ff:5f:cb:3b:e3:dd:1f: f5:e4:ba:b5:85:05:e9:0b:76:96:ad:6f:ba:bb:64: 82:bb:eb:49:1c:9d:a3:06:08:88:32:fb:6d:ac:dd: d0:85:55:a7:8d:49:c3:f5:9c:aa:dd:7f:0e:ac:5e: a3:ea:89:0b:42:cd:5a:2a:b1:00:fa:ea:3d:e4:7d: a6:6d:b1:db:2a:93:85:9e:fa:ee:a2:81:51:1e:5b: 93:16:e0:53:32:51:40:e9:1d:dd:b0:d8:b5:30:e9: 56:71:8e:a6:89:0d:65:a9:7f:8d:d4:81:7a:8c:7c: 38:f9:57:f7:d0:01:51:3b:dd:f1:60:e1:19:4c:68: 0e:b8:5a:a9:1f:85:46:7e:48:90:bd:f5:39:fc:79: cd:05:50:16:00:32:d4:16:f2:5f:ce:60:b5:2b:de: 14:73:4e:d1:8a:c2:29:65:b7:20:82:ea:ff:d1:de: af:ce:54:ec:0f:a0:64:18:a8:23:31:bb:67:a2:d4: 68:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:44:F6:28:8B:2A:7F:97:11:B0:57:79:13:F7:52:05:18:27:10:3D X509v3 Authority Key Identifier: keyid:07:E0:51:B4:1E:D8:2E:3F:53:BF:59:AA:84:DD:9A:CA:20:CF:B5:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:6d:da:60:7b:6a:70:54:ca:8f:34:86:45:99:eb:c1:f1:6d: 40:7e:a0:02:25:bc:d2:04:8f:6e:b7:a1:dd:d1:cd:d4:92:e1: e4:37:38:25:36:93:f6:f1:d6:a8:fc:b8:2d:43:74:a6:ba:50: c5:64:b8:17:2e:a6:43:3e:dd:ef:4e:ca:4b:22:21:9f:1f:c2: 64:15:2d:45:c0:95:c9:85:4e:44:e6:25:df:54:b6:1d:e3:1b: b9:d9:af:36:92:76:b1:f8:6c:e5:ef:22:a3:c7:99:c9:94:fb: 6f:5e:64:ae:dd:5a:ab:50:a2:ef:c5:ce:b6:08:97:fc:c3:a5: bd:e5:e3:d8:82:7d:44:cf:43:31:de:e9:52:66:66:8c:cf:da: fd:12:dc:93:cf:73:67:d8:d9:82:b7:fa:f0:2e:9d:53:ba:79: c6:5c:4e:9d:22:fb:75:57:f5:17:72:09:0d:1f:d5:2f:b7:44: c3:fe:9f:c4:50:34:05:e5:b1:ce:0b:4d:25:55:c3:38:fb:93: 5e:c6:eb:d3:86:86:3a:0a:36:54:b1:d8:b0:bb:7e:48:20:10: bc:50:e2:67:17:0e:d6:f8:ce:83:33:8d:c6:70:ac:b5:f3:f3: c8:fa:b7:e7:7c:8a:84:91:e4:e4:83:8e:13:ba:40:63:95:0d: 46:9c:12:c1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjZDMzkxMTAvBgNVBAUTKDA3RTA1MUI0MUVEODJFM0Y1M0JGNTlBQTg0REQ5QUNB MjBDRkI1NEMwHhcNMjYwOTA0MTk1NDAyWhcNMjYwOTExMTk1NDAyWjAYMRYwFAYD VQQDEw02YTliMjFkYi0zNDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwh4QJEUV0myO7RYKfEdu9sw2lKerDQHj923BMW70D4hQlheJ2VD/OxcX/TQ3 sRXIxn7OmKuBEg2Rui/mNtYG51J1Kv9fyzvj3R/15Lq1hQXpC3aWrW+6u2SCu+tJ HJ2jBgiIMvttrN3QhVWnjUnD9Zyq3X8OrF6j6okLQs1aKrEA+uo95H2mbbHbKpOF nvruooFRHluTFuBTMlFA6R3dsNi1MOlWcY6miQ1lqX+N1IF6jHw4+Vf30AFRO93x YOEZTGgOuFqpH4VGfkiQvfU5/HnNBVAWADLUFvJfzmC1K94Uc07RisIpZbcggur/ 0d6vzlTsD6BkGKgjMbtnotRoBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIVE9iiL Kn+XEbBXeRP3UgUYJxA9MB8GA1UdIwQYMBaAFAfgUbQe2C4/U79ZqoTdmsogz7VM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NkMzOS8yN0VFQ0ZEMEJC OTcxMUVBQTFBNjZDNTNDNEY5QUUwMi9CLUJSdEI3WUxqOVR2MW1xaE4yYXlpRFB0 VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ItQlJ0QjdZTGo5VHYxbXFoTjJheWlEUHRVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NkMzOS8yN0VFQ0ZEMEJCOTcxMUVBQTFBNjZDNTNDNEY5QUUwMi9CLUJSdEI3WUxq OVR2MW1xaE4yYXlpRFB0VXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAe23aYHtqcFTKjzSGRZnrwfFtQH6gAiW80gSPbreh3dHN1JLh5Dc4JTaT9vHW qPy4LUN0prpQxWS4Fy6mQz7d707KSyIhnx/CZBUtRcCVyYVOROYl31S2HeMbudmv NpJ2sfhs5e8io8eZyZT7b15krt1aq1Ci78XOtgiX/MOlveXj2IJ9RM9DMd7pUmZm jM/a/RLck89zZ9jZgrf68C6dU7p5xlxOnSL7dVf1F3IJDR/VL7dEw/6fxFA0BeWx zgtNJVXDOPuTXsbr04aGOgo2VLHYsLt+SCAQvFDiZxcO1vjOgzONxnCstfPzyPq3 53yKhJHk5IOOE7pAY5UNRpwSwQ== -----END CERTIFICATE-----Generated at Sat Sep 5 07:35:26 2026 by rpki-client