$ rpki-client -vvvf rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft File: v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft (raw, json) Hash identifier: vAEU8Ab2tiBbfQQfmnGFdDlQOzvzT5FwXQMKXWb65XY= Subject key identifier: 08:87:F2:01:51:47:70:7E:C5:E7:F9:7C:12:49:D1:23:63:31:02:EA Authority key identifier: BF:AF:23:63:75:77:29:EE:05:AB:21:B7:1D:20:5A:B4:18:E1:B8:34 Certificate issuer: /CN=A9167FF5/serialNumber=BFAF2363757729EE05AB21B71D205AB418E1B834 Certificate serial: 0297 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v68jY3V3Ke4FqyG3HSBatBjhuDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft Manifest number: 0291 Signing time: Fri 11 Sep 2026 01:47:11 +0000 Manifest this update: Fri 11 Sep 2026 01:47:10 +0000 Manifest next update: Fri 18 Sep 2026 01:47:10 +0000 Files and hashes: 1: v68jY3V3Ke4FqyG3HSBatBjhuDQ.crl (hash: rZ4hzC+AOsVi/C2EO78aeckdViJVwkQN9fsLrM/FJY8=) 2: DCEA0362C17C11ED92AD7D85C4F9AE02.roa (hash: tbYd8JflLqAHQOW0BH5GJ8PqKcZMxydsXpsTFe7lGrM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.crl rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v68jY3V3Ke4FqyG3HSBatBjhuDQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 01:47:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 663 (0x297) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167FF5, serialNumber=BFAF2363757729EE05AB21B71D205AB418E1B834 Validity Not Before: Sep 11 01:47:10 2026 GMT Not After : Sep 18 01:47:10 2026 GMT Subject: CN=6aa35d9f-891f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f1:24:2f:59:6a:0c:63:16:06:b6:c8:b0:5b: e3:44:d2:2b:d7:1b:e9:4b:a7:90:50:d3:d5:1f:0c: 4d:94:85:dc:4a:36:fb:da:ad:42:12:c4:a8:77:cc: 84:56:86:9e:75:f6:22:2e:51:48:8e:f6:f3:1a:69: 53:84:8d:81:3f:a2:b7:82:b4:67:f7:05:5f:c6:16: f8:a9:de:e3:1a:18:c6:6a:f7:69:17:df:8a:11:38: 64:ed:a1:19:41:66:6d:4c:ec:9d:24:bd:24:bb:c0: c6:32:d7:0c:a7:66:59:c3:86:00:c3:ea:8f:62:27: 6b:e4:5b:c4:f5:35:51:21:66:7f:24:1f:51:ba:2f: d6:57:7d:cf:d1:30:9b:4a:f6:82:36:c2:cb:3f:34: 30:1a:41:4a:d8:a7:fc:33:4d:62:2c:63:41:40:8d: fd:d9:dc:36:33:ca:ac:f3:c6:21:5c:77:c6:4d:a1: 3f:04:c1:18:b2:c9:37:dc:d3:8c:fa:9f:63:75:16: 7f:ce:92:ba:e4:cd:fa:f8:f6:34:79:88:8f:ec:d5: 74:69:67:83:6b:45:1e:f8:1e:d8:de:72:50:f5:f3: a2:0b:0a:da:0d:8b:df:b7:0b:aa:c8:15:a4:0e:8a: 53:96:82:b3:9e:95:cf:ca:e7:19:9d:a2:2c:b1:8b: 03:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:87:F2:01:51:47:70:7E:C5:E7:F9:7C:12:49:D1:23:63:31:02:EA X509v3 Authority Key Identifier: keyid:BF:AF:23:63:75:77:29:EE:05:AB:21:B7:1D:20:5A:B4:18:E1:B8:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v68jY3V3Ke4FqyG3HSBatBjhuDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:c8:06:c3:45:fc:99:c4:a5:14:57:f6:b3:d4:b1:83:32:81: 8b:44:d6:fe:21:98:0b:bd:5f:48:fd:ec:32:a3:92:75:33:9d: 6f:1d:ce:b6:cc:83:1b:df:85:b3:e2:90:36:79:ea:d6:95:01: 1b:24:8f:df:4b:cc:0b:ee:b0:73:5b:a7:82:eb:13:bf:c3:a8: 46:0d:e9:c8:42:f8:b9:8c:05:3c:d1:bd:6e:cc:81:02:4d:ef: 64:c5:1d:59:5e:81:23:47:ed:36:5c:30:60:ff:b0:05:d6:78: ce:bf:22:0b:34:01:f5:3e:76:32:9a:b3:d0:a5:45:92:d2:55: ae:79:e4:e4:56:55:95:9c:3f:e3:df:6a:01:fc:d8:7c:b6:a7: 67:66:51:5a:e5:ff:7b:dc:2a:35:6f:a3:6a:a2:24:14:45:be: 9e:90:7e:7b:db:c6:b5:f5:71:28:38:62:0b:3c:5e:5a:37:31: de:3c:d8:e4:a1:78:ac:84:7e:b3:b6:f7:90:32:be:09:39:85: 17:63:38:29:21:05:af:4d:32:65:70:c9:1e:c5:8d:fc:16:64: 18:5a:d8:c0:8d:ca:cf:c1:aa:3b:51:28:d2:da:60:9f:6d:dc: d1:2a:ad:b7:88:76:01:3a:8f:e3:9c:d5:0c:f2:cd:d4:07:90: ad:d8:34:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdGRjUxMTAvBgNVBAUTKEJGQUYyMzYzNzU3NzI5RUUwNUFCMjFCNzFEMjA1QUI0 MThFMUI4MzQwHhcNMjYwOTExMDE0NzEwWhcNMjYwOTE4MDE0NzEwWjAYMRYwFAYD VQQDEw02YWEzNWQ5Zi04OTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt/EkL1lqDGMWBrbIsFvjRNIr1xvpS6eQUNPVHwxNlIXcSjb72q1CEsSod8yE VoaedfYiLlFIjvbzGmlThI2BP6K3grRn9wVfxhb4qd7jGhjGavdpF9+KEThk7aEZ QWZtTOydJL0ku8DGMtcMp2ZZw4YAw+qPYidr5FvE9TVRIWZ/JB9Rui/WV33P0TCb SvaCNsLLPzQwGkFK2Kf8M01iLGNBQI392dw2M8qs88YhXHfGTaE/BMEYssk33NOM +p9jdRZ/zpK65M36+PY0eYiP7NV0aWeDa0Ue+B7Y3nJQ9fOiCwraDYvftwuqyBWk DopTloKznpXPyucZnaIssYsD7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAiH8gFR R3B+xef5fBJJ0SNjMQLqMB8GA1UdIwQYMBaAFL+vI2N1dynuBashtx0gWrQY4bg0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0ZGNS8yNzIwNDM5MkMx NzgxMUVEQUY1NEE5NUZDNEY5QUUwMi92NjhqWTNWM0tlNEZxeUczSFNCYXRCamh1 RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Y2OGpZM1YzS2U0RnF5RzNIU0JhdEJqaHVEUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0ZGNS8yNzIwNDM5MkMxNzgxMUVEQUY1NEE5NUZDNEY5QUUwMi92NjhqWTNWM0tl NEZxeUczSFNCYXRCamh1RFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjcgGw0X8mcSlFFf2s9SxgzKBi0TW/iGYC71fSP3sMqOSdTOdbx3OtsyDG9+F s+KQNnnq1pUBGySP30vMC+6wc1ungusTv8OoRg3pyEL4uYwFPNG9bsyBAk3vZMUd WV6BI0ftNlwwYP+wBdZ4zr8iCzQB9T52Mpqz0KVFktJVrnnk5FZVlZw/499qAfzY fLanZ2ZRWuX/e9wqNW+jaqIkFEW+npB+e9vGtfVxKDhiCzxeWjcx3jzY5KF4rIR+ s7b3kDK+CTmFF2M4KSEFr00yZXDJHsWN/BZkGFrYwI3Kz8GqO1Eo0tpgn23c0Sqt t4h2ATqP45zVDPLN1AeQrdg0cA== -----END CERTIFICATE-----Generated at Fri Sep 11 14:40:48 2026 by rpki-client