$ rpki-client -vvvf rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft File: 5o7RJO9le2eb0SpY-gNQFODf6Cc.mft (raw, json) Hash identifier: j0zXSPZVsIuMn6WXcE/6SS2CNnBqa9ag4FqV2QWlGm4= Subject key identifier: 77:35:1B:26:51:16:2A:BE:C9:F3:3E:94:43:1A:2B:DE:1A:80:79:E6 Authority key identifier: E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27 Certificate issuer: /CN=A9191A09/serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827 Certificate serial: 0EC1 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft Manifest number: 0EAA Signing time: Fri 04 Sep 2026 14:40:33 +0000 Manifest this update: Fri 04 Sep 2026 14:40:33 +0000 Manifest next update: Fri 11 Sep 2026 14:40:33 +0000 Files and hashes: 1: 5o7RJO9le2eb0SpY-gNQFODf6Cc.crl (hash: 8nzMY1DGlc16xoTg75fhTe11Kh0OR4ST1jtXP9/u28Y=) 2: 9C06E51EE37A11EA84A20810C4F9AE02.roa (hash: VGb7fQ4+XdUAVdKkbAj+FraUZZtrQ9DDCForGAVJX7M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 14:40:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3777 (0xec1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191A09, serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827 Validity Not Before: Sep 4 14:40:33 2026 GMT Not After : Sep 11 14:40:33 2026 GMT Subject: CN=6a9ad861-d613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:67:9a:16:2d:66:eb:ed:5d:f9:cd:f9:45:ef: b0:72:7b:45:15:de:8c:02:be:e9:5d:23:0b:1f:50: 93:18:bf:98:b3:41:cc:e2:99:29:d7:e2:45:62:d6: 58:6d:fd:b5:3b:bc:2b:7e:1a:c1:67:b9:cb:6a:e4: f4:52:59:f5:30:dd:ed:0d:63:8c:97:59:e9:d6:b9: 78:9d:82:e1:c7:01:3f:be:3a:19:6a:ad:86:ce:2b: ec:e6:1a:9e:54:4f:b3:66:b4:4b:43:22:09:f6:72: 6e:1a:ef:bc:17:d3:4c:27:86:d0:db:9f:f1:00:88: b4:08:59:6d:ec:6d:a0:b8:8c:51:54:b3:f2:f0:b5: c9:c7:f7:10:a0:dd:83:e2:1a:35:77:96:f9:a4:aa: a5:b4:da:8b:f2:bd:7f:fc:ab:74:95:05:84:83:e1: 45:96:86:e7:3f:a1:af:bf:dc:36:65:16:7f:56:6c: 72:69:f6:5d:f6:4f:97:88:fa:51:7a:f8:58:4a:a4: 34:83:de:5a:f7:9b:3e:8f:41:48:e5:04:e6:15:f2: 3c:aa:46:6f:ad:13:24:f4:11:b6:c7:b7:71:77:f4: 35:67:df:b8:c4:54:1d:5d:cf:58:f4:fa:7d:c0:86: 1f:14:c5:ff:16:53:68:00:a6:05:43:7b:c0:e6:f4: 60:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:35:1B:26:51:16:2A:BE:C9:F3:3E:94:43:1A:2B:DE:1A:80:79:E6 X509v3 Authority Key Identifier: keyid:E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:e6:40:b1:7f:2f:e2:57:59:16:bf:b7:ae:e0:8c:5a:ff:6c: 85:bc:be:a4:fb:33:34:c2:65:76:39:52:7f:e5:45:a1:eb:4d: 2e:8f:1d:c6:95:b7:89:a1:64:14:3a:06:2d:47:3b:c8:3e:b7: ae:fb:41:46:11:e8:8f:6b:73:56:dd:54:7c:15:16:f1:e3:a5: 26:0d:35:08:ee:5b:4b:59:a5:eb:ee:fb:58:dc:51:81:bb:69: e6:2c:54:cc:a7:b6:cb:70:3f:ce:23:68:27:42:bb:b4:d5:6e: 14:71:ab:1b:a3:42:93:1f:28:ef:4a:65:6c:4a:53:1d:f4:02: d1:a3:e2:41:f8:32:df:dc:30:77:3c:1b:c9:83:c9:b6:9d:65: 9a:3a:77:3f:43:00:14:6d:b1:ae:d8:b2:0f:95:12:8e:ae:5f: 3f:45:af:3a:a8:17:36:b9:39:87:e1:f2:d1:26:ce:c7:2f:06: 2b:9c:2b:18:ab:4c:9e:58:9d:06:10:8c:36:dc:34:80:11:3e: 01:7c:17:6a:e8:1c:68:93:63:8d:c8:3f:4d:14:97:03:d9:0b: 71:ea:b9:be:44:fb:e6:50:c0:ce:4e:d1:c0:8f:26:3d:5d:4f: 5c:5f:9c:4b:d4:5e:2c:33:94:d2:02:be:ee:ad:d5:d2:f5:3e: a3:d0:5f:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFBMDkxMTAvBgNVBAUTKEU2OEVEMTI0RUY2NTdCNjc5QkQxMkE1OEZBMDM1MDE0 RTBERkU4MjcwHhcNMjYwOTA0MTQ0MDMzWhcNMjYwOTExMTQ0MDMzWjAYMRYwFAYD VQQDEw02YTlhZDg2MS1kNjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv2eaFi1m6+1d+c35Re+wcntFFd6MAr7pXSMLH1CTGL+Ys0HM4pkp1+JFYtZY bf21O7wrfhrBZ7nLauT0Uln1MN3tDWOMl1np1rl4nYLhxwE/vjoZaq2Gzivs5hqe VE+zZrRLQyIJ9nJuGu+8F9NMJ4bQ25/xAIi0CFlt7G2guIxRVLPy8LXJx/cQoN2D 4ho1d5b5pKqltNqL8r1//Kt0lQWEg+FFlobnP6Gvv9w2ZRZ/VmxyafZd9k+XiPpR evhYSqQ0g95a95s+j0FI5QTmFfI8qkZvrRMk9BG2x7dxd/Q1Z9+4xFQdXc9Y9Pp9 wIYfFMX/FlNoAKYFQ3vA5vRgIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHc1GyZR Fiq+yfM+lEMaK94agHnmMB8GA1UdIwQYMBaAFOaO0STvZXtnm9EqWPoDUBTg3+gn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUEwOS8zQzQxMkMzNkJG MzkxMUU5ODk3RDdDMkVDNEY5QUUwMi81bzdSSk85bGUyZWIwU3BZLWdOUUZPRGY2 Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzVvN1JKTzlsZTJlYjBTcFktZ05RRk9EZjZDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUEwOS8zQzQxMkMzNkJGMzkxMUU5ODk3RDdDMkVDNEY5QUUwMi81bzdSSk85bGUy ZWIwU3BZLWdOUUZPRGY2Q2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATuZAsX8v4ldZFr+3ruCMWv9shby+pPszNMJldjlSf+VFoetNLo8dxpW3iaFk FDoGLUc7yD63rvtBRhHoj2tzVt1UfBUW8eOlJg01CO5bS1ml6+77WNxRgbtp5ixU zKe2y3A/ziNoJ0K7tNVuFHGrG6NCkx8o70plbEpTHfQC0aPiQfgy39wwdzwbyYPJ tp1lmjp3P0MAFG2xrtiyD5USjq5fP0WvOqgXNrk5h+Hy0SbOxy8GK5wrGKtMnlid BhCMNtw0gBE+AXwXaugcaJNjjcg/TRSXA9kLceq5vkT75lDAzk7RwI8mPV1PXF+c S9ReLDOU0gK+7q3V0vU+o9Bf1A== -----END CERTIFICATE-----Generated at Sat Sep 5 00:50:36 2026 by rpki-client