$ rpki-client -vvvf rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft File: 9lz9HPOxxajqYIcfo8NAYdtM84M.mft (raw, json) Hash identifier: WEAOOUvySPNILA4XUp02IMHV/nyXNVFSyK8oEFpNoBI= Subject key identifier: 6B:31:9E:0D:C7:77:49:90:8B:F7:0A:18:CD:96:8F:32:31:48:E6:73 Authority key identifier: F6:5C:FD:1C:F3:B1:C5:A8:EA:60:87:1F:A3:C3:40:61:DB:4C:F3:83 Certificate issuer: /CN=A9195BA9/serialNumber=F65CFD1CF3B1C5A8EA60871FA3C34061DB4CF383 Certificate serial: 0260 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lz9HPOxxajqYIcfo8NAYdtM84M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft Manifest number: 025A Signing time: Thu 08 Oct 2026 19:35:31 +0000 Manifest this update: Thu 08 Oct 2026 19:35:30 +0000 Manifest next update: Thu 15 Oct 2026 19:35:30 +0000 Files and hashes: 1: 9lz9HPOxxajqYIcfo8NAYdtM84M.crl (hash: pJIgnmWpd3kgJMB8WXmvFCziY6+xNLKCAUaEvp2enSc=) 2: 7A63013E3A4F11EEA10D3A7AC4F9AE02.roa (hash: hnwuStPXa2PnbC6upyuld+U4W5MZABYuzZ1Adf6fwaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.crl rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lz9HPOxxajqYIcfo8NAYdtM84M.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 19:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 608 (0x260) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195BA9, serialNumber=F65CFD1CF3B1C5A8EA60871FA3C34061DB4CF383 Validity Not Before: Oct 8 19:35:30 2026 GMT Not After : Oct 15 19:35:30 2026 GMT Subject: CN=6ac7f083-cf2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d1:ca:bc:a4:65:c3:a0:ea:b8:db:28:c8:c3: 7c:52:7d:81:14:7f:a1:6a:ae:da:15:ca:de:7f:23: ba:00:cd:c4:96:e9:6d:73:a0:95:7e:92:d1:6e:b9: 9b:f7:ce:eb:77:68:cf:ab:99:d4:d8:b6:57:53:42: 11:ae:96:b8:ec:56:c5:0a:64:2d:55:a8:11:af:9f: a2:94:52:e8:9a:38:51:c5:e8:6b:1a:57:b8:98:34: bf:ae:97:ec:6c:cf:79:56:53:f5:9a:b1:73:a4:d3: 90:a8:77:5a:dd:36:de:3d:c6:a2:13:41:98:75:b4: 89:b6:c5:94:fe:91:4a:74:2a:1e:b7:e9:26:7f:56: 36:0e:07:96:eb:c5:73:99:bf:43:8c:52:1f:81:9d: f3:e7:1b:21:35:1c:21:f9:aa:5a:d9:ef:be:d5:00: 18:9f:04:8f:ba:3f:19:b2:fa:7b:97:77:10:ee:f3: 3b:9b:89:c3:db:2f:f9:51:19:2a:1f:72:b6:c3:03: 66:66:2f:29:99:0a:50:39:47:d7:c7:5d:0e:8e:ac: 5b:da:32:d8:e4:1f:70:6b:02:6a:e2:be:b6:1d:cd: 9a:e0:d9:5a:c1:e6:10:34:a2:02:32:db:a5:fe:71: 5d:36:f9:08:1d:23:aa:87:18:e5:ce:65:98:54:17: d9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:31:9E:0D:C7:77:49:90:8B:F7:0A:18:CD:96:8F:32:31:48:E6:73 X509v3 Authority Key Identifier: keyid:F6:5C:FD:1C:F3:B1:C5:A8:EA:60:87:1F:A3:C3:40:61:DB:4C:F3:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lz9HPOxxajqYIcfo8NAYdtM84M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:7d:5d:d4:64:69:df:55:f6:8f:0e:24:ec:5e:20:01:08:7b: b0:8a:cc:66:21:ee:2e:bb:e7:46:e1:2e:fe:df:91:ef:bb:db: 19:39:8e:42:5b:a9:1a:21:55:82:18:a2:f7:24:3f:f9:22:67: 0e:88:74:4f:0d:97:bc:12:ac:cf:1a:2d:70:a3:02:f3:3b:a8: 88:9b:05:ca:40:4e:37:ec:8d:0f:a9:79:ff:f5:d2:8d:ed:01: 38:08:63:42:a6:cd:6f:c3:e6:aa:e7:44:52:82:4d:2a:ba:3b: b8:24:a4:f5:20:a8:9c:05:eb:dc:6d:17:6a:e7:3e:68:cc:74: 36:eb:e2:c2:1f:ea:44:e6:a6:3b:65:c5:ed:6c:8d:77:f3:1c: 4e:7d:c8:30:e9:5b:13:61:ad:75:f2:06:f8:bb:a9:84:48:0d: a2:9a:c5:7c:cd:c6:b5:00:71:87:ea:cf:64:b8:32:53:aa:96: 78:67:4d:33:4d:a6:7b:bd:24:1b:fc:19:b6:1b:4b:f0:d8:d9: 64:61:5a:60:80:0e:07:6e:14:1b:8c:05:f4:59:f4:c9:d0:b0: 51:a9:3e:a4:9e:95:8b:cc:66:5c:13:1b:55:6a:d7:ce:76:94: ac:f9:7d:38:b4:ea:3a:ac:e9:a7:8a:63:15:05:f2:26:ba:aa: c3:55:3d:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVCQTkxMTAvBgNVBAUTKEY2NUNGRDFDRjNCMUM1QThFQTYwODcxRkEzQzM0MDYx REI0Q0YzODMwHhcNMjYxMDA4MTkzNTMwWhcNMjYxMDE1MTkzNTMwWjAYMRYwFAYD VQQDEw02YWM3ZjA4My1jZjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAstHKvKRlw6DquNsoyMN8Un2BFH+haq7aFcrefyO6AM3Elultc6CVfpLRbrmb 987rd2jPq5nU2LZXU0IRrpa47FbFCmQtVagRr5+ilFLomjhRxehrGle4mDS/rpfs bM95VlP1mrFzpNOQqHda3TbePcaiE0GYdbSJtsWU/pFKdCoet+kmf1Y2DgeW68Vz mb9DjFIfgZ3z5xshNRwh+apa2e++1QAYnwSPuj8Zsvp7l3cQ7vM7m4nD2y/5URkq H3K2wwNmZi8pmQpQOUfXx10Ojqxb2jLY5B9wawJq4r62Hc2a4NlaweYQNKICMtul /nFdNvkIHSOqhxjlzmWYVBfZEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGsxng3H d0mQi/cKGM2WjzIxSOZzMB8GA1UdIwQYMBaAFPZc/RzzscWo6mCHH6PDQGHbTPOD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUJBOS9DRUU2ODgyMjM3 QkUxMUVFQTY0MEFCNTVDNEY5QUUwMi85bHo5SFBPeHhhanFZSWNmbzhOQVlkdE04 NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzlsejlIUE94eGFqcVlJY2ZvOE5BWWR0TTg0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUJBOS9DRUU2ODgyMjM3QkUxMUVFQTY0MEFCNTVDNEY5QUUwMi85bHo5SFBPeHhh anFZSWNmbzhOQVlkdE04NE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPH1d1GRp31X2jw4k7F4gAQh7sIrMZiHuLrvnRuEu/t+R77vbGTmOQlupGiFV ghii9yQ/+SJnDoh0Tw2XvBKszxotcKMC8zuoiJsFykBON+yND6l5//XSje0BOAhj QqbNb8PmqudEUoJNKro7uCSk9SConAXr3G0Xauc+aMx0Nuviwh/qROamO2XF7WyN d/McTn3IMOlbE2GtdfIG+LuphEgNoprFfM3GtQBxh+rPZLgyU6qWeGdNM02me70k G/wZthtL8NjZZGFaYIAOB24UG4wF9Fn0ydCwUak+pJ6Vi8xmXBMbVWrXznaUrPl9 OLTqOqzpp4pjFQXyJrqqw1U96g== -----END CERTIFICATE-----Generated at Sat Oct 10 11:02:44 2026 by rpki-client