$ rpki-client -vvvf rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft File: cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft (raw, json) Hash identifier: ozvUh4K58jx5fmPXEDaLXgQ3bfHZKv2NoRJRp3rHLT0= Subject key identifier: FC:92:98:5A:C7:5D:4D:CB:6F:CD:F7:23:C4:90:23:0C:4F:51:31:0C Authority key identifier: 70:4C:39:E9:B2:30:2E:C9:7A:9C:AE:99:EC:E7:94:5B:81:F2:CB:ED Certificate issuer: /CN=A9171996/serialNumber=704C39E9B2302EC97A9CAE99ECE7945B81F2CBED Certificate serial: AA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft Manifest number: A8 Signing time: Fri 11 Sep 2026 07:11:22 +0000 Manifest this update: Fri 11 Sep 2026 07:11:22 +0000 Manifest next update: Fri 18 Sep 2026 07:11:22 +0000 Files and hashes: 1: cEw56bIwLsl6nK6Z7OeUW4Hyy-0.crl (hash: mv+sap78nfQGqg60eMb0Gm5TJwBPgD0Nan4gT+k9BBk=) 2: 125C30DAAE6811F09E31E129C4F9AE02.roa (hash: ZQnPx0Gfa+D/DsNGzSZbn0CDbcNNkPZZEr8XRi55tUI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.crl rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:11:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171996, serialNumber=704C39E9B2302EC97A9CAE99ECE7945B81F2CBED Validity Not Before: Sep 11 07:11:22 2026 GMT Not After : Sep 18 07:11:22 2026 GMT Subject: CN=6aa3a99a-87d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:92:e1:fd:5a:2d:e0:53:d9:23:8a:02:5a:51: ac:3d:81:20:7a:c9:9c:e2:fc:3c:bc:a0:85:38:a4: 04:21:8b:08:3a:f9:c6:87:45:de:29:b8:2e:4d:11: 7f:e8:88:45:40:64:f7:df:de:0e:7a:d1:35:57:45: 6e:14:c3:5a:d7:eb:34:95:33:4b:26:57:73:28:38: d8:e6:94:27:a4:c1:37:eb:11:9e:ce:90:80:c8:d0: e3:a8:0c:61:a6:aa:68:27:0b:ef:07:47:fc:86:b4: 58:0f:d3:1a:fd:a6:6d:d5:86:1a:36:eb:7c:38:0b: 1f:8d:20:12:d8:ac:57:42:d9:d9:b4:0c:90:54:77: 28:bd:48:84:d0:5e:71:c0:64:fb:68:dc:9c:66:87: cc:84:04:1f:18:4b:a8:f2:1b:3b:81:e0:09:38:5c: 5b:3f:82:83:15:4b:87:13:bd:1b:b6:2c:47:fa:6b: 8c:3f:e1:1b:be:c5:eb:06:4a:99:4a:b8:31:a6:62: 72:97:85:b6:07:21:8c:c6:28:3e:0d:7e:30:86:fd: 3c:e5:ae:a0:d6:27:e7:db:d9:36:e9:30:25:c3:ad: 62:e9:50:06:6d:13:86:de:c3:ff:91:a8:75:a1:34: 3d:13:fc:82:4d:dc:c8:ea:de:87:50:90:e6:e0:80: ef:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:92:98:5A:C7:5D:4D:CB:6F:CD:F7:23:C4:90:23:0C:4F:51:31:0C X509v3 Authority Key Identifier: keyid:70:4C:39:E9:B2:30:2E:C9:7A:9C:AE:99:EC:E7:94:5B:81:F2:CB:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:03:89:dc:c5:eb:53:38:1a:41:c0:24:79:25:ee:4c:b8:f2: ed:b5:d3:1a:59:55:47:f1:63:5a:f0:04:42:0e:e6:27:51:fc: 9a:da:bf:16:76:34:5f:60:85:01:56:bc:4a:32:00:d5:1c:90: 92:f1:4a:53:51:8b:9b:06:00:d8:a7:41:7e:9e:6d:18:4d:10: eb:ed:ce:14:9b:1a:d3:25:24:cc:67:06:94:30:f5:34:1a:60: 18:67:92:90:66:39:ce:3b:73:15:7c:cc:87:58:9c:2b:62:54: e1:4d:be:d5:07:f9:f9:53:26:a2:5a:c7:fd:07:e8:53:91:4b: c4:eb:06:6c:66:aa:65:dd:32:68:06:22:ee:54:ec:9f:76:a1: be:8a:46:95:3b:3b:d3:e9:4b:ff:3d:5e:c1:9f:6a:0b:97:d8: 97:1f:9c:cf:cc:2e:d3:21:f4:02:18:31:77:df:e0:cb:09:ca: a6:b9:c2:03:f5:bf:9f:64:1f:fe:9e:b4:40:c0:ec:f9:2a:70: e8:39:0e:43:1a:95:ca:79:53:9c:74:37:b5:b6:82:a5:21:94: 3b:c4:3c:17:3f:d8:2c:da:c3:ed:59:45:ae:6c:6d:64:92:71: d0:bd:10:ad:e4:89:4f:c5:76:f9:1e:af:2a:7e:09:a0:cf:a7: 9a:45:69:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE5OTYxMTAvBgNVBAUTKDcwNEMzOUU5QjIzMDJFQzk3QTlDQUU5OUVDRTc5NDVC ODFGMkNCRUQwHhcNMjYwOTExMDcxMTIyWhcNMjYwOTE4MDcxMTIyWjAYMRYwFAYD VQQDEw02YWEzYTk5YS04N2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzpLh/Vot4FPZI4oCWlGsPYEgesmc4vw8vKCFOKQEIYsIOvnGh0XeKbguTRF/ 6IhFQGT3394OetE1V0VuFMNa1+s0lTNLJldzKDjY5pQnpME36xGezpCAyNDjqAxh pqpoJwvvB0f8hrRYD9Ma/aZt1YYaNut8OAsfjSAS2KxXQtnZtAyQVHcovUiE0F5x wGT7aNycZofMhAQfGEuo8hs7geAJOFxbP4KDFUuHE70btixH+muMP+EbvsXrBkqZ SrgxpmJyl4W2ByGMxig+DX4whv085a6g1ifn29k26TAlw61i6VAGbROG3sP/kah1 oTQ9E/yCTdzI6t6HUJDm4IDv2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPySmFrH XU3Lb833I8SQIwxPUTEMMB8GA1UdIwQYMBaAFHBMOemyMC7JepyumeznlFuB8svt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTk5Ni9BRjdGNEQ2Q0FF NjcxMUYwQjUzNEY2MjZDNEY5QUUwMi9jRXc1NmJJd0xzbDZuSzZaN09lVVc0SHl5 LTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NFdzU2Ykl3THNsNm5LNlo3T2VVVzRIeXktMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTk5Ni9BRjdGNEQ2Q0FFNjcxMUYwQjUzNEY2MjZDNEY5QUUwMi9jRXc1NmJJd0xz bDZuSzZaN09lVVc0SHl5LTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwgOJ3MXrUzgaQcAkeSXuTLjy7bXTGllVR/FjWvAEQg7mJ1H8mtq/FnY0X2CF AVa8SjIA1RyQkvFKU1GLmwYA2KdBfp5tGE0Q6+3OFJsa0yUkzGcGlDD1NBpgGGeS kGY5zjtzFXzMh1icK2JU4U2+1Qf5+VMmolrH/QfoU5FLxOsGbGaqZd0yaAYi7lTs n3ahvopGlTs70+lL/z1ewZ9qC5fYlx+cz8wu0yH0Ahgxd9/gywnKprnCA/W/n2Qf /p60QMDs+Spw6DkOQxqVynlTnHQ3tbaCpSGUO8Q8Fz/YLNrD7VlFrmxtZJJx0L0Q reSJT8V2+R6vKn4JoM+nmkVpSw== -----END CERTIFICATE-----Generated at Fri Sep 11 18:37:54 2026 by rpki-client