$ rpki-client -vvvf rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/gKMQDXuMTTM5AfsQQL4YZfr6NGA.mft File: gKMQDXuMTTM5AfsQQL4YZfr6NGA.mft (raw, json) Hash identifier: vYEfSX43gD0WSdeXEKNYThVlTGZnyWkVSZotI8CLvjw= Subject key identifier: 10:E3:0A:A4:F4:84:BD:02:44:C3:D2:04:8A:51:3E:04:BE:A8:32:E1 Authority key identifier: 80:A3:10:0D:7B:8C:4D:33:39:01:FB:10:40:BE:18:65:FA:FA:34:60 Certificate issuer: /CN=A911ABF4/serialNumber=80A3100D7B8C4D333901FB1040BE1865FAFA3460 Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gKMQDXuMTTM5AfsQQL4YZfr6NGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/gKMQDXuMTTM5AfsQQL4YZfr6NGA.mft Manifest number: 1B29 Signing time: Sun 20 Sep 2026 17:24:41 +0000 Manifest this update: Sun 20 Sep 2026 17:24:40 +0000 Manifest next update: Sun 27 Sep 2026 17:24:40 +0000 Files and hashes: 1: gKMQDXuMTTM5AfsQQL4YZfr6NGA.crl (hash: PQqIs27hGA+l88B1oARN9QH4GfasXKsVKksZZbVkt2A=) 2: C893B39E947411F1B0466A83A3EE528E.roa (hash: 0uSaktK4pCntcfFjzT2UBnBvc2jhKwlt40JEPITcSLc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/gKMQDXuMTTM5AfsQQL4YZfr6NGA.crl rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/gKMQDXuMTTM5AfsQQL4YZfr6NGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gKMQDXuMTTM5AfsQQL4YZfr6NGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ABF4, serialNumber=80A3100D7B8C4D333901FB1040BE1865FAFA3460 Validity Not Before: Sep 20 17:24:40 2026 GMT Not After : Sep 27 17:24:40 2026 GMT Subject: CN=6ab016d9-8590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:cf:48:cc:8a:36:f2:6f:d9:e1:bb:4f:47:0d: 65:ad:b9:9b:94:d4:ac:21:fa:0b:f7:e5:75:4c:bd: 40:52:b2:91:ee:f0:60:be:dd:f0:2e:65:a5:1f:83: da:ac:c7:05:3d:32:0c:4e:eb:0b:bd:41:7d:cc:a1: 4b:9d:b4:93:cf:35:ad:f6:e8:4d:c4:94:66:66:19: a1:34:fa:33:e3:22:c7:92:46:64:e7:45:6e:a2:46: 16:b1:71:72:85:1b:8f:d3:06:49:f8:f7:65:58:ea: e8:b2:fe:30:b3:f0:51:25:11:cc:1f:3b:50:09:5a: 91:9f:c7:63:a3:a8:71:61:19:bd:11:b5:b8:0b:77: e7:c4:3f:fe:7f:24:5c:f7:00:6f:b2:ea:70:36:ce: de:be:89:60:a6:32:12:57:20:0b:9e:c8:74:66:f7: 9e:64:d2:da:f4:45:8f:e5:86:4d:c5:9f:90:b4:8b: 0a:4c:29:12:6e:a5:c9:57:03:09:43:d2:94:fe:3f: d8:90:65:d5:5a:7a:cb:b4:78:ad:53:fd:b4:66:ae: 88:9d:5b:1a:36:3a:38:0e:b8:74:3e:ab:94:0d:1c: cd:d3:4f:2d:6d:47:f9:c9:36:84:bf:5a:0d:3b:52: f8:73:0f:85:1e:c0:cd:ee:0f:16:4f:c4:0c:e4:8b: 4b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:E3:0A:A4:F4:84:BD:02:44:C3:D2:04:8A:51:3E:04:BE:A8:32:E1 X509v3 Authority Key Identifier: keyid:80:A3:10:0D:7B:8C:4D:33:39:01:FB:10:40:BE:18:65:FA:FA:34:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/gKMQDXuMTTM5AfsQQL4YZfr6NGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gKMQDXuMTTM5AfsQQL4YZfr6NGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/gKMQDXuMTTM5AfsQQL4YZfr6NGA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:b3:dc:c4:72:c5:4b:9d:45:93:cb:a0:6e:b2:1e:6d:6a:d2: 54:58:a4:92:8a:e3:d1:82:e3:d0:2a:02:a0:ab:a0:26:bd:9a: 32:41:50:9d:14:c3:7a:85:ce:fc:86:40:04:6c:78:cd:66:a5: b9:d1:6f:87:0c:0d:e2:9c:26:56:ce:9d:f9:56:04:1d:fc:8b: ce:d2:1b:ef:17:cf:11:33:1f:ca:7b:7f:26:f8:85:91:8a:9d: b8:d6:a2:b8:d3:4e:2d:cf:ab:2f:3f:01:77:a8:27:84:53:d9: 5d:9f:55:0f:56:57:1a:ba:63:8d:91:68:85:97:0d:a3:03:73: e5:0b:c9:2e:0b:8e:bb:01:72:50:d8:bc:83:99:05:13:44:92: 74:a1:5a:8c:da:05:f5:68:d4:f9:80:7b:f6:35:e7:36:bd:c6: 92:4f:44:40:56:a0:78:10:cf:92:b2:25:98:29:c2:dc:e4:48: e6:a1:18:01:e3:a5:79:b2:58:a2:d7:5d:29:64:76:25:fd:8d: 8e:64:3d:49:58:c6:2a:ea:8f:cc:3f:d7:e2:08:1b:33:2f:0f: 52:4c:cd:17:eb:ba:f9:46:29:48:bc:89:14:74:ec:7b:56:10: e0:5a:5b:1f:3f:c8:86:96:25:8e:87:3e:da:ce:19:ef:78:da: 7d:4d:94:11 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QUJGNDExMC8GA1UEBRMoODBBMzEwMEQ3QjhDNEQzMzM5MDFGQjEwNDBCRTE4NjVG QUZBMzQ2MDAeFw0yNjA5MjAxNzI0NDBaFw0yNjA5MjcxNzI0NDBaMBgxFjAUBgNV BAMTDTZhYjAxNmQ5LTg1OTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJz0jMijbyb9nhu09HDWWtuZuU1Kwh+gv35XVMvUBSspHu8GC+3fAuZaUfg9qs xwU9MgxO6wu9QX3MoUudtJPPNa326E3ElGZmGaE0+jPjIseSRmTnRW6iRhaxcXKF G4/TBkn492VY6uiy/jCz8FElEcwfO1AJWpGfx2OjqHFhGb0RtbgLd+fEP/5/JFz3 AG+y6nA2zt6+iWCmMhJXIAueyHRm955k0tr0RY/lhk3Fn5C0iwpMKRJupclXAwlD 0pT+P9iQZdVaesu0eK1T/bRmroidWxo2OjgOuHQ+q5QNHM3TTy1tR/nJNoS/Wg07 UvhzD4UewM3uDxZPxAzki0vtAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUEOMKpPSE vQJEw9IEilE+BL6oMuEwHwYDVR0jBBgwFoAUgKMQDXuMTTM5AfsQQL4YZfr6NGAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBQkY0L0VBODcxODVDNzIx QjExRTlCQjc0ODE1MEM0RjlBRTAyL2dLTVFEWHVNVFRNNUFmc1FRTDRZWmZyNk5H QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ0tNUURYdU1UVE01QWZzUVFMNFlaZnI2TkdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFB QkY0L0VBODcxODVDNzIxQjExRTlCQjc0ODE1MEM0RjlBRTAyL2dLTVFEWHVNVFRN NUFmc1FRTDRZWmZyNk5HQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAYs9zEcsVLnUWTy6Bush5tatJUWKSSiuPRguPQKgKgq6AmvZoyQVCdFMN6hc78 hkAEbHjNZqW50W+HDA3inCZWzp35VgQd/IvO0hvvF88RMx/Ke38m+IWRip241qK4 004tz6svPwF3qCeEU9ldn1UPVlcaumONkWiFlw2jA3PlC8kuC467AXJQ2LyDmQUT RJJ0oVqM2gX1aNT5gHv2Nec2vcaST0RAVqB4EM+SsiWYKcLc5EjmoRgB46V5slii 110pZHYl/Y2OZD1JWMYq6o/MP9fiCBszLw9STM0X67r5RilIvIkUdOx7VhDgWlsf P8iGliWOhz7azhnveNp9TZQR -----END CERTIFICATE-----Generated at Sun Sep 20 22:21:15 2026 by rpki-client