$ rpki-client -vvvf rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft File: gCx1H6mENH35yTztuX7ZUalSgoY.mft (raw, json) Hash identifier: O4tPNODlI3kLkIm4zO8Aley0zSTpwj+RYik2VoVV3OQ= Subject key identifier: BC:E7:EA:2C:40:87:0C:F2:0C:D2:BF:81:0A:E4:56:D1:48:51:0E:09 Authority key identifier: 80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86 Certificate issuer: /CN=A911AE8B/serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286 Certificate serial: 0E33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft Manifest number: 0E0A Signing time: Sat 26 Sep 2026 17:54:22 +0000 Manifest this update: Sat 26 Sep 2026 17:54:21 +0000 Manifest next update: Sat 03 Oct 2026 17:54:21 +0000 Files and hashes: 1: gCx1H6mENH35yTztuX7ZUalSgoY.crl (hash: 5WpRcvD7426otA6hQsZqAmCYFXl12H+nx6gm4F2y36k=) 2: 677F3316E02711E9AB669750C4F9AE02.roa (hash: Rx39rgdKBA7zdcc962yiNhgXGCpK5LRJSU4D4pU54RA=) 3: AF2CB5CE101E11ED9FA78415C4F9AE02.roa (hash: c6Bxsf4/9YtF+57E7R8e7VzwUukKAS9p7Ji/ny3xUY8=) 4: C64AB888F28211F0B78FCAB4696F56BC.roa (hash: 2Wh9GEwPkIT3ersV2cUdA77BiYM2ozOHXH7e19XrJGE=) 5: AD727D903F8111F1AAE343DCAF833773.roa (hash: 6/Bw7aE+CShp5tga2BPNlQn9ZAcE3QdhOoOj6cEOvU8=) 6: 9A735F54EBE611EC82C08A11C4F9AE02.roa (hash: B3wAK97jhUd9WZXrgCNdwLjXUkDVCtHuNCOpZHTWsx4=) 7: C5C152D2F28211F0B78FCAB4696F56BC.roa (hash: BXi41BPmYbwmPR7CH8efyQzZoCZh4MQESuU5TAzEzUA=) 8: 6FA8105A9B0311F1985317765C11F970.roa (hash: 1xRUftsJnRh7sCTB/2X4ITyJ8kMgTy2wBDyMf3YpsK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 17:54:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3635 (0xe33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE8B, serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286 Validity Not Before: Sep 26 17:54:21 2026 GMT Not After : Oct 3 17:54:21 2026 GMT Subject: CN=6ab806ce-8e96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:20:6e:d7:60:e5:4f:0e:11:ff:32:3b:2e:e0: df:bd:35:e6:ac:63:15:3b:e9:17:8d:c8:95:5c:60: 60:ae:70:59:b2:8a:a9:07:0c:d1:c6:25:93:59:4b: 24:ef:2c:e0:85:50:b3:68:71:4c:e2:71:ed:af:c2: 52:be:55:08:82:7e:a9:aa:9b:02:d4:3d:1e:19:8b: 05:e7:89:38:cf:ba:2a:aa:89:50:3c:ff:5e:3f:30: a3:c3:2a:01:1d:f7:c9:46:ee:0d:e6:df:3c:d7:9a: d9:a5:55:5f:78:bb:34:f3:cb:dc:eb:15:d8:0f:31: 64:57:69:85:b4:17:10:fa:66:70:de:4b:5e:c2:08: b8:72:d7:e0:4a:0f:b5:72:09:1e:77:9e:59:3b:83: 29:7e:88:01:fc:d6:c4:74:ce:aa:a0:50:77:73:3c: 71:b2:59:27:7a:59:e8:0a:c4:14:d5:ae:bc:98:64: 7c:25:07:1b:c3:63:2e:82:af:04:e2:95:cf:1c:6f: 85:b7:b5:50:09:85:2b:f8:e6:7b:b6:b5:0f:91:56: 5c:28:72:8f:15:ef:04:c3:3e:7e:3a:6c:b1:8d:5f: b7:8f:9e:67:ef:74:cd:24:30:e3:44:bb:31:42:d3: 98:7f:43:fb:af:35:35:82:3f:3b:76:73:ea:68:28: a8:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E7:EA:2C:40:87:0C:F2:0C:D2:BF:81:0A:E4:56:D1:48:51:0E:09 X509v3 Authority Key Identifier: keyid:80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:39:f5:2f:34:45:3b:bf:3f:7d:2e:4b:33:fb:26:90:f1:e9: 35:b3:67:4d:11:47:2a:3c:2d:07:f1:e5:13:f7:a9:64:18:a6: 64:14:aa:03:a3:3d:57:b1:44:d2:b7:e2:c5:e6:cb:19:05:4d: 72:b2:95:e7:e6:c7:c5:ff:fd:de:5b:1d:b4:f2:43:3d:84:b1: f2:c3:d5:54:91:f4:b9:db:c1:77:8a:db:5e:e8:39:40:13:46: 4c:c0:5f:b1:90:ca:59:38:c7:c6:33:43:a0:df:c2:9f:9b:75: 79:f8:bc:78:39:95:b6:0c:4c:4c:d0:e3:91:ce:a3:4b:b4:ef: 59:25:ce:30:58:0c:d1:9f:f6:d9:d9:97:37:6e:a7:b7:87:af: be:87:a5:fd:05:11:f5:a3:94:1f:6a:7a:2f:52:0b:06:c7:ef: 91:aa:2b:70:e9:83:e4:40:a4:7b:dc:cc:c8:9a:eb:a3:34:2c: 71:e7:a6:2f:9e:ad:49:9a:29:10:71:f7:57:b4:a1:e4:de:ce: 85:38:e3:9b:c1:79:be:ad:03:4c:cb:9c:bd:bb:9a:ff:50:4c: 72:34:6f:fd:9e:84:21:45:1c:e2:6a:55:a4:00:2f:6e:87:3a: 03:8d:7c:7e:a0:5f:d2:da:f1:4a:31:85:70:8d:b0:40:ce:c7: ba:49:a5:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFOEIxMTAvBgNVBAUTKDgwMkM3NTFGQTk4NDM0N0RGOUM5M0NFREI5N0VEOTUx QTk1MjgyODYwHhcNMjYwOTI2MTc1NDIxWhcNMjYxMDAzMTc1NDIxWjAYMRYwFAYD VQQDEw02YWI4MDZjZS04ZTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoyBu12DlTw4R/zI7LuDfvTXmrGMVO+kXjciVXGBgrnBZsoqpBwzRxiWTWUsk 7yzghVCzaHFM4nHtr8JSvlUIgn6pqpsC1D0eGYsF54k4z7oqqolQPP9ePzCjwyoB HffJRu4N5t8815rZpVVfeLs088vc6xXYDzFkV2mFtBcQ+mZw3ktewgi4ctfgSg+1 cgked55ZO4MpfogB/NbEdM6qoFB3czxxslknelnoCsQU1a68mGR8JQcbw2Mugq8E 4pXPHG+Ft7VQCYUr+OZ7trUPkVZcKHKPFe8Ewz5+OmyxjV+3j55n73TNJDDjRLsx QtOYf0P7rzU1gj87dnPqaCio0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLzn6ixA hwzyDNK/gQrkVtFIUQ4JMB8GA1UdIwQYMBaAFIAsdR+phDR9+ck87bl+2VGpUoKG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU4Qi9FQzI1N0NDNkUw MjUxMUU5OTFBOTc3NERDNEY5QUUwMi9nQ3gxSDZtRU5IMzV5VHp0dVg3WlVhbFNn b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dDeDFINm1FTkgzNXlUenR1WDdaVWFsU2dvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUU4Qi9FQzI1N0NDNkUwMjUxMUU5OTFBOTc3NERDNEY5QUUwMi9nQ3gxSDZtRU5I MzV5VHp0dVg3WlVhbFNnb1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlzn1LzRFO78/fS5LM/smkPHpNbNnTRFHKjwtB/HlE/epZBimZBSqA6M9V7FE 0rfixebLGQVNcrKV5+bHxf/93lsdtPJDPYSx8sPVVJH0udvBd4rbXug5QBNGTMBf sZDKWTjHxjNDoN/Cn5t1efi8eDmVtgxMTNDjkc6jS7TvWSXOMFgM0Z/22dmXN26n t4evvoel/QUR9aOUH2p6L1ILBsfvkaorcOmD5ECke9zMyJrrozQsceemL56tSZop EHH3V7Sh5N7OhTjjm8F5vq0DTMucvbua/1BMcjRv/Z6EIUUc4mpVpAAvboc6A418 fqBf0trxSjGFcI2wQM7Hukml8g== -----END CERTIFICATE-----Generated at Mon Sep 28 08:20:40 2026 by rpki-client