$ rpki-client -vvvf rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft File: l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft (raw, json) Hash identifier: dzbkLcOq/A0+bnSfSQy8EU/59p6Pi8uvY9VCvQxTv40= Subject key identifier: D9:46:64:83:F6:F1:F1:24:C3:82:96:57:3F:D3:77:5E:3D:75:4A:60 Authority key identifier: 97:49:58:16:D6:DB:49:DF:ED:EA:C4:C1:74:29:12:6F:E3:DF:97:FB Certificate issuer: /CN=A9169E9B/serialNumber=97495816D6DB49DFEDEAC4C17429126FE3DF97FB Certificate serial: 0CBA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft Manifest number: 0C93 Signing time: Thu 10 Sep 2026 18:35:34 +0000 Manifest this update: Thu 10 Sep 2026 18:35:33 +0000 Manifest next update: Thu 17 Sep 2026 18:35:33 +0000 Files and hashes: 1: l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl (hash: 5VFp2mq8NguYpDZbJRVnRQs2bi7/Yq2hoxGmXJuE2Io=) 2: A807146437E411EC9BA3E20AC4F9AE02.roa (hash: yzY+pKYkZw0uNGaXwIqrPcHyCwkxCWHWqVxFG+uHRA0=) 3: A6EF086637E411EC9BA3E20AC4F9AE02.roa (hash: 2kn/q1hOME//Yhn7qkH4G8jggbyrCgjoL4hoHZXGsZM=) 4: A64A2A9437E411EC9BA3E20AC4F9AE02.roa (hash: ouH4abzFqla8RyorGFEh8tsKVYnL5dBI2TdSDocSzXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 18:35:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3258 (0xcba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169E9B, serialNumber=97495816D6DB49DFEDEAC4C17429126FE3DF97FB Validity Not Before: Sep 10 18:35:33 2026 GMT Not After : Sep 17 18:35:33 2026 GMT Subject: CN=6aa2f876-fb9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fb:11:d3:d3:c3:65:95:db:c6:55:de:f6:12: 89:a2:af:d1:35:e3:02:14:1d:6f:7e:04:29:23:2b: e4:07:3d:b9:30:d1:0a:c9:e8:dc:23:39:f4:dc:af: 36:00:e2:8c:fb:07:7f:25:ac:0b:8e:6f:80:da:12: e6:8e:04:f9:8f:dd:d8:55:8a:f3:48:77:34:d1:70: 3f:5b:22:19:3a:ad:d4:aa:de:63:cb:be:a5:73:55: 30:1d:26:82:47:49:c6:3a:ad:26:71:5b:27:84:5f: 3b:98:54:49:7b:a0:ed:69:da:25:40:ce:cd:88:1f: fc:ba:a1:2f:7f:b3:9f:b8:ba:c1:18:c6:b5:4c:33: dd:9c:11:a2:5e:c4:c0:7e:ff:48:3f:7c:fa:96:be: e5:13:a0:71:ee:43:cf:f9:8b:38:e0:b5:ea:a2:7b: 9d:f8:d1:39:22:37:e1:52:bf:20:82:ae:f0:29:9e: 03:f6:94:88:ef:9d:50:52:12:69:0f:37:16:98:c9: d5:ea:2c:54:8b:0f:0f:78:65:b1:a4:48:b2:e9:9e: 4a:d0:44:2b:25:23:a2:ef:72:3e:96:f3:3a:0a:35: 85:15:b5:b6:a8:f7:f0:f6:a2:a1:ee:ce:8e:48:ea: 80:c5:29:9a:2f:24:89:cb:9b:4c:ad:40:54:e2:29: ee:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:46:64:83:F6:F1:F1:24:C3:82:96:57:3F:D3:77:5E:3D:75:4A:60 X509v3 Authority Key Identifier: keyid:97:49:58:16:D6:DB:49:DF:ED:EA:C4:C1:74:29:12:6F:E3:DF:97:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:8b:9e:bb:1d:0e:b4:6b:08:4d:ce:8a:f7:dd:5e:44:ca:2a: 15:05:11:40:66:d1:61:cb:3a:e2:94:07:17:85:76:37:1b:b2: 98:02:2e:1a:53:b3:02:6f:cd:99:de:d8:4a:a0:0e:2c:98:99: b4:e2:11:65:dc:14:ba:c7:41:71:68:0f:da:a0:3f:78:15:8d: 36:ca:6e:61:e1:00:a2:84:0a:dd:a2:b5:48:da:c6:30:77:22: 31:35:09:aa:72:92:dd:b7:26:4a:ca:36:8a:3c:9b:4a:fa:9d: b5:49:fe:b6:0c:15:dd:9f:c3:8a:82:69:72:16:67:7e:ac:e7: 4f:88:74:e7:d7:09:2b:96:e1:00:e2:00:47:b6:88:a9:e7:83: 41:2d:22:db:0a:26:b9:84:d4:ba:3a:e6:2d:38:bd:3b:03:05: 1f:ca:87:95:0c:b6:da:16:50:c4:a8:5d:18:36:ee:b6:1d:f5: f5:7f:6b:f0:3c:4d:e1:4a:2d:a7:42:c2:5b:05:50:0e:7c:59: ea:ed:42:84:ca:a8:65:f1:b1:83:ea:43:3a:3a:47:72:1f:cc: 8b:14:8c:7d:98:dd:67:0a:87:e3:3d:e6:6b:3d:67:ff:e9:0a: 7e:80:21:5b:24:a1:15:d3:8e:98:4e:f2:b0:ff:40:e3:76:a1: be:5e:11:ad -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlFOUIxMTAvBgNVBAUTKDk3NDk1ODE2RDZEQjQ5REZFREVBQzRDMTc0MjkxMjZG RTNERjk3RkIwHhcNMjYwOTEwMTgzNTMzWhcNMjYwOTE3MTgzNTMzWjAYMRYwFAYD VQQDEw02YWEyZjg3Ni1mYjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/sR09PDZZXbxlXe9hKJoq/RNeMCFB1vfgQpIyvkBz25MNEKyejcIzn03K82 AOKM+wd/JawLjm+A2hLmjgT5j93YVYrzSHc00XA/WyIZOq3Uqt5jy76lc1UwHSaC R0nGOq0mcVsnhF87mFRJe6DtadolQM7NiB/8uqEvf7OfuLrBGMa1TDPdnBGiXsTA fv9IP3z6lr7lE6Bx7kPP+Ys44LXqonud+NE5IjfhUr8ggq7wKZ4D9pSI751QUhJp DzcWmMnV6ixUiw8PeGWxpEiy6Z5K0EQrJSOi73I+lvM6CjWFFbW2qPfw9qKh7s6O SOqAxSmaLySJy5tMrUBU4inuvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNlGZIP2 8fEkw4KWVz/Td149dUpgMB8GA1UdIwQYMBaAFJdJWBbW20nf7erEwXQpEm/j35f7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUU5Qi83QTUzQTYxODI1 QTMxMUVBQTQ3RjA1MjdDNEY5QUUwMi9sMGxZRnRiYlNkX3Q2c1RCZENrU2ItUGZs X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wwbFlGdGJiU2RfdDZzVEJkQ2tTYi1QZmxfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUU5Qi83QTUzQTYxODI1QTMxMUVBQTQ3RjA1MjdDNEY5QUUwMi9sMGxZRnRiYlNk X3Q2c1RCZENrU2ItUGZsX3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADoueux0OtGsITc6K991eRMoqFQURQGbRYcs64pQHF4V2NxuymAIuGlOzAm/N md7YSqAOLJiZtOIRZdwUusdBcWgP2qA/eBWNNspuYeEAooQK3aK1SNrGMHciMTUJ qnKS3bcmSso2ijybSvqdtUn+tgwV3Z/DioJpchZnfqznT4h059cJK5bhAOIAR7aI qeeDQS0i2womuYTUujrmLTi9OwMFH8qHlQy22hZQxKhdGDbuth319X9r8DxN4Uot p0LCWwVQDnxZ6u1ChMqoZfGxg+pDOjpHch/MixSMfZjdZwqH4z3maz1n/+kKfoAh WyShFdOOmE7ysP9A43ahvl4RrQ== -----END CERTIFICATE-----Generated at Fri Sep 11 15:35:38 2026 by rpki-client