$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft File: S9mZS8XP-ey2aDyU3G7s1e7uDng.mft (raw, json) Hash identifier: 7ZyeajNLIWmUXl2c9TLPl9qetJqkyWfeax7AFjPaBK4= Subject key identifier: 41:85:B8:99:7E:00:D3:D1:4A:66:56:5B:CC:73:97:E6:D7:3D:60:C3 Authority key identifier: 4B:D9:99:4B:C5:CF:F9:EC:B6:68:3C:94:DC:6E:EC:D5:EE:EE:0E:78 Certificate issuer: /CN=A91E00FC/serialNumber=4BD9994BC5CFF9ECB6683C94DC6EECD5EEEE0E78 Certificate serial: 0AEF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft Manifest number: 0AE0 Signing time: Mon 28 Sep 2026 19:33:31 +0000 Manifest this update: Mon 28 Sep 2026 19:33:31 +0000 Manifest next update: Mon 05 Oct 2026 19:33:31 +0000 Files and hashes: 1: S9mZS8XP-ey2aDyU3G7s1e7uDng.crl (hash: dr35vP4ecweAJX8hmmon6IxZ9Bf9AveUCUXLodEQ0vA=) 2: CD26CAC0431611EE80B53A75C4F9AE02.roa (hash: vPWknUKvmhzNYKbXzeUeTtIU2gsg4u0/mGjZtAQaw4o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.crl rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 19:33:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2799 (0xaef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E00FC, serialNumber=4BD9994BC5CFF9ECB6683C94DC6EECD5EEEE0E78 Validity Not Before: Sep 28 19:33:31 2026 GMT Not After : Oct 5 19:33:31 2026 GMT Subject: CN=6abac10b-221f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a8:5c:66:84:6b:d6:18:dd:cf:48:1f:7d:b3: 83:da:ae:68:d7:30:d8:ee:25:77:10:b3:00:ab:e7: 7f:61:a8:61:cb:78:28:af:0a:9e:87:d5:f4:f3:4c: f1:f6:97:fe:a0:8f:17:5a:89:ea:1b:9d:6f:90:ca: 6b:78:b2:92:40:c1:97:32:b3:b8:c4:ff:4e:3a:aa: 1e:f2:03:d3:2f:e2:e5:c2:ab:c2:39:30:48:6b:4c: 32:36:b3:36:73:26:7d:16:6e:a8:3f:45:91:40:50: 69:7e:4a:71:ca:12:a0:72:91:ac:9c:c3:eb:e5:bf: a8:fd:46:cf:06:35:69:c8:92:42:08:c4:df:bd:f7: 35:22:a3:b1:e6:94:17:0f:5f:65:12:be:7a:a4:17: f9:c1:aa:10:10:10:83:2c:59:ca:3b:f7:02:13:68: 39:ce:64:db:82:6a:3a:6e:1f:59:4a:0e:1d:37:ee: 6b:d3:df:6f:02:f0:5a:e7:f9:83:47:b7:6b:20:9d: 8c:26:7f:ad:32:98:a2:a5:14:fe:04:ce:76:22:fd: 80:f8:d7:51:e9:a4:19:67:5f:3e:6e:f3:89:cd:ae: 26:a6:3f:69:75:e7:d9:a7:f7:fd:5e:17:11:e3:d3: 32:a4:7c:5e:da:fc:cb:68:a2:41:27:84:12:05:56: 8d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:85:B8:99:7E:00:D3:D1:4A:66:56:5B:CC:73:97:E6:D7:3D:60:C3 X509v3 Authority Key Identifier: keyid:4B:D9:99:4B:C5:CF:F9:EC:B6:68:3C:94:DC:6E:EC:D5:EE:EE:0E:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:ef:bb:a6:90:0a:37:c1:b5:02:41:17:be:c3:a5:68:78:3f: 9d:3d:45:d9:c3:70:03:1b:1c:06:2d:b4:36:33:4c:98:c4:88: b2:f9:62:0f:bd:39:96:e7:7f:4a:47:5d:d3:58:c8:d2:63:03: 0a:94:d3:ce:00:c4:10:e0:55:d0:74:fb:c2:c9:8d:a4:dd:04: 1b:47:9a:bf:e6:a2:26:69:b9:b9:21:d1:1a:ff:c4:3b:04:24: 9d:2e:9e:16:d2:af:51:78:14:d8:14:10:71:6c:16:d5:a2:8b: 1a:df:b5:bc:43:8d:1b:7f:6d:48:16:b9:0e:f6:fa:a0:09:bb: d7:c4:a8:4f:03:82:7d:b6:36:f6:38:85:4b:3a:60:f1:6b:e7: e6:3b:de:3f:fc:aa:f0:bc:8a:b1:78:c8:57:7f:21:29:7f:01: a4:58:5b:bf:50:21:b0:35:26:d3:55:9d:30:7e:05:76:6b:2f: b5:76:fe:fc:62:a8:fa:a7:2a:b5:f1:51:a2:a1:31:22:1d:4f: 8f:ac:30:ed:e1:01:d9:06:06:68:c4:a9:c8:67:ef:5a:cf:99: 16:e9:eb:1f:87:c4:93:a4:58:64:b2:43:30:ee:8c:01:b5:12: c6:40:02:52:12:9c:d3:4c:da:6a:2d:71:4f:76:2d:0a:6e:12: d3:16:72:b9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAwRkMxMTAvBgNVBAUTKDRCRDk5OTRCQzVDRkY5RUNCNjY4M0M5NERDNkVFQ0Q1 RUVFRTBFNzgwHhcNMjYwOTI4MTkzMzMxWhcNMjYxMDA1MTkzMzMxWjAYMRYwFAYD VQQDEw02YWJhYzEwYi0yMjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyahcZoRr1hjdz0gffbOD2q5o1zDY7iV3ELMAq+d/Yahhy3gorwqeh9X080zx 9pf+oI8XWonqG51vkMpreLKSQMGXMrO4xP9OOqoe8gPTL+LlwqvCOTBIa0wyNrM2 cyZ9Fm6oP0WRQFBpfkpxyhKgcpGsnMPr5b+o/UbPBjVpyJJCCMTfvfc1IqOx5pQX D19lEr56pBf5waoQEBCDLFnKO/cCE2g5zmTbgmo6bh9ZSg4dN+5r099vAvBa5/mD R7drIJ2MJn+tMpiipRT+BM52Iv2A+NdR6aQZZ18+bvOJza4mpj9pdefZp/f9XhcR 49MypHxe2vzLaKJBJ4QSBVaNswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEGFuJl+ ANPRSmZWW8xzl+bXPWDDMB8GA1UdIwQYMBaAFEvZmUvFz/nstmg8lNxu7NXu7g54 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDBGQy81NUYyQzRDNjdG MkYxMUVBQURGNEJGNkFDNEY5QUUwMi9TOW1aUzhYUC1leTJhRHlVM0c3czFlN3VE bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1M5bVpTOFhQLWV5MmFEeVUzRzdzMWU3dURuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDBGQy81NUYyQzRDNjdGMkYxMUVBQURGNEJGNkFDNEY5QUUwMi9TOW1aUzhYUC1l eTJhRHlVM0c3czFlN3VEbmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcO+7ppAKN8G1AkEXvsOlaHg/nT1F2cNwAxscBi20NjNMmMSIsvliD705lud/ Skdd01jI0mMDCpTTzgDEEOBV0HT7wsmNpN0EG0eav+aiJmm5uSHRGv/EOwQknS6e FtKvUXgU2BQQcWwW1aKLGt+1vEONG39tSBa5Dvb6oAm718SoTwOCfbY29jiFSzpg 8Wvn5jveP/yq8LyKsXjIV38hKX8BpFhbv1AhsDUm01WdMH4FdmsvtXb+/GKo+qcq tfFRoqExIh1Pj6ww7eEB2QYGaMSpyGfvWs+ZFunrH4fEk6RYZLJDMO6MAbUSxkAC UhKc00zaai1xT3YtCm4S0xZyuQ== -----END CERTIFICATE-----Generated at Tue Sep 29 15:26:13 2026 by rpki-client