$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft File: 0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft (raw, json) Hash identifier: kl4rAobhkWPKy3w3BNxO4uv3BhauHEMxHfJT3YjWLdw= Subject key identifier: 3D:30:DA:0E:47:7C:7F:57:E6:F2:62:87:8B:BD:21:C2:08:FB:2C:7D Authority key identifier: D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0 Certificate issuer: /CN=A91C8F27/serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0 Certificate serial: 0A6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft Manifest number: 0A12 Signing time: Tue 08 Sep 2026 19:58:51 +0000 Manifest this update: Tue 08 Sep 2026 19:58:50 +0000 Manifest next update: Tue 15 Sep 2026 19:58:50 +0000 Files and hashes: 1: 0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl (hash: EZi7uLT8O4TbQfpffWda55iU7du7nXE/+fyy1lv0t8k=) 2: 51B031C80E8D11EE89A0B128C4F9AE02.roa (hash: /AqzGVP/RU7VivZQf679uLu1hQ4PEwap68JYs68UOUA=) 3: DF72CB82640811F1A119CBC19847A888.roa (hash: cEvyr/Gl0yrys7VxpYexlrU+a3/SL1hP/5swCnKr6iM=) 4: 5B0320A08B4411F1945A06324611F970.roa (hash: Da4zwaxvzw5gNNRbJ84b/uhlFao3ehlVxBi7a6sytcM=) 5: 6B7D02AEB4A111F08515F713C4F9AE02.roa (hash: KSjOH0qSpAK/DBNETg1G0TL4OaIKzJinGTqF6Z++SO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Sep 2026 19:58:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2669 (0xa6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8F27, serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0 Validity Not Before: Sep 8 19:58:50 2026 GMT Not After : Sep 15 19:58:50 2026 GMT Subject: CN=6aa068fb-9b1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ff:ab:ef:ab:fd:99:65:6a:14:cc:a3:51:f7: c8:0b:f1:0d:77:b8:e3:5f:19:42:82:d5:08:48:df: af:da:a4:06:16:a6:07:d4:b4:1d:25:be:61:29:de: 6a:2e:20:39:be:75:e6:1f:65:a5:88:22:90:04:31: b8:1e:56:8e:ef:44:ad:33:10:5f:71:93:32:37:37: d4:43:bc:9d:75:42:91:fe:0d:d4:e0:23:37:22:6b: a0:81:fc:ff:bb:b9:c0:94:92:92:37:de:c2:13:91: 1d:33:b8:31:73:eb:ec:4f:bc:16:36:ed:04:af:a5: 9a:66:63:69:eb:39:c9:ac:e9:6c:31:3e:05:68:4c: f4:58:d5:d5:da:d4:40:a5:b9:42:da:63:ce:a4:c8: af:ed:a1:ba:15:87:a4:24:96:31:c8:89:e3:c1:a5: 12:6b:f7:df:14:30:f0:84:bd:6c:87:24:a5:c6:52: 03:9d:ad:b3:14:97:b5:08:26:15:4b:32:bf:e8:92: 55:96:f2:bb:ac:8a:09:6b:86:01:dd:09:8d:d3:4d: db:cb:a9:11:c5:a4:84:0a:d1:67:46:3f:aa:48:5f: 78:46:da:74:c9:9e:08:69:5c:c7:89:0c:77:e6:11: 3d:c8:b0:e5:38:c5:d8:9b:77:90:3e:4c:b4:b1:e0: 0e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:30:DA:0E:47:7C:7F:57:E6:F2:62:87:8B:BD:21:C2:08:FB:2C:7D X509v3 Authority Key Identifier: keyid:D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:3b:71:2c:cf:d2:d1:b5:ee:d8:47:c2:71:a9:c4:44:af:e8: 01:74:0e:98:9e:80:e0:73:31:35:a9:59:18:90:1d:3a:f3:0a: 77:c7:dc:b8:eb:94:e6:b1:51:af:d5:40:b4:7d:59:e7:b1:df: 9f:e6:d6:ce:45:4a:b7:cd:ac:41:cc:d5:25:47:9e:13:4b:ca: d5:9d:a9:df:34:b3:14:92:97:75:36:a6:3a:9a:a4:6d:30:3d: c1:4c:d0:97:8d:e6:ca:d8:b7:60:b6:98:80:66:dd:7f:85:44: 50:36:63:f3:ad:5e:76:84:42:8d:fb:0a:d5:22:7e:99:4f:02: 29:27:37:a1:35:d9:b0:11:bf:ab:73:3e:b0:6f:0a:58:11:37: 66:46:83:69:5e:ec:fb:b4:9b:fc:c0:f2:53:d3:ba:2e:c4:44: a4:cb:c8:0f:a4:1a:c2:8f:25:18:6d:e4:33:fc:8e:b1:c9:12: dd:a9:22:f0:8c:d2:11:fb:91:d7:a7:66:df:a6:a2:67:81:85: 97:e1:80:72:48:b2:e1:62:13:da:fc:86:6e:cd:9c:4c:98:40: 6d:73:ca:70:51:21:f0:c8:a9:05:77:b3:c9:43:5d:a2:91:62: 74:e7:fd:fa:ca:26:5f:32:af:3b:bf:c6:e1:02:9e:9f:21:1f: ff:ac:6d:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhGMjcxMTAvBgNVBAUTKEQxQTM2Q0Q4RUQyMzU1MDgyNzYxQTNEQjEzRUREMzBE RkRBMkNGRDAwHhcNMjYwOTA4MTk1ODUwWhcNMjYwOTE1MTk1ODUwWjAYMRYwFAYD VQQDEw02YWEwNjhmYi05YjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqv+r76v9mWVqFMyjUffIC/ENd7jjXxlCgtUISN+v2qQGFqYH1LQdJb5hKd5q LiA5vnXmH2WliCKQBDG4HlaO70StMxBfcZMyNzfUQ7yddUKR/g3U4CM3Imuggfz/ u7nAlJKSN97CE5EdM7gxc+vsT7wWNu0Er6WaZmNp6znJrOlsMT4FaEz0WNXV2tRA pblC2mPOpMiv7aG6FYekJJYxyInjwaUSa/ffFDDwhL1shySlxlIDna2zFJe1CCYV SzK/6JJVlvK7rIoJa4YB3QmN003by6kRxaSECtFnRj+qSF94Rtp0yZ4IaVzHiQx3 5hE9yLDlOMXYm3eQPky0seAOXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD0w2g5H fH9X5vJih4u9IcII+yx9MB8GA1UdIwQYMBaAFNGjbNjtI1UIJ2Gj2xPt0w39os/Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEYyNy83RjUyMjlBOEIw OTIxMUVBQjVEQkVDNThDNEY5QUUwMi8wYU5zMk8walZRZ25ZYVBiRS0zVERmMml6 OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBhTnMyTzBqVlFnbllhUGJFLTNURGYyaXo5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEYyNy83RjUyMjlBOEIwOTIxMUVBQjVEQkVDNThDNEY5QUUwMi8wYU5zMk8walZR Z25ZYVBiRS0zVERmMml6OUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsDtxLM/S0bXu2EfCcanERK/oAXQOmJ6A4HMxNalZGJAdOvMKd8fcuOuU5rFR r9VAtH1Z57Hfn+bWzkVKt82sQczVJUeeE0vK1Z2p3zSzFJKXdTamOpqkbTA9wUzQ l43myti3YLaYgGbdf4VEUDZj861edoRCjfsK1SJ+mU8CKSc3oTXZsBG/q3M+sG8K WBE3ZkaDaV7s+7Sb/MDyU9O6LsREpMvID6Qawo8lGG3kM/yOsckS3aki8IzSEfuR 16dm36aiZ4GFl+GAckiy4WIT2vyGbs2cTJhAbXPKcFEh8MipBXezyUNdopFidOf9 +somXzKvO7/G4QKenyEf/6xtjw== -----END CERTIFICATE-----Generated at Wed Sep 9 04:04:27 2026 by rpki-client