$ rpki-client -vvvf rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft File: gAcXZemLOWEliNN4VyFDLDJgf-4.mft (raw, json) Hash identifier: kaDhLvQyTHexka4LWmDDa7SxAxK4I1i/Fd/h5DXaNUU= Subject key identifier: 8F:19:E8:9F:80:51:E8:00:F2:49:78:E4:BB:E9:7B:BF:26:D3:9D:DC Authority key identifier: 80:07:17:65:E9:8B:39:61:25:88:D3:78:57:21:43:2C:32:60:7F:EE Certificate issuer: /CN=A911F584/serialNumber=80071765E98B39612588D3785721432C32607FEE Certificate serial: BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft Manifest number: BA Signing time: Mon 21 Sep 2026 06:56:15 +0000 Manifest this update: Mon 21 Sep 2026 06:56:15 +0000 Manifest next update: Mon 28 Sep 2026 06:56:15 +0000 Files and hashes: 1: gAcXZemLOWEliNN4VyFDLDJgf-4.crl (hash: 3il+iMrr7oh3Copw3eMveFdMf9W6yls4gYHk/SwEXKo=) 2: D7E9A8C49DAA11F0A24E4963C4F9AE02.roa (hash: axY0t/wfGcS0SqKBr/2f2eZYye9v2/DiDSRsHzKpfyQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.crl rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:56:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F584, serialNumber=80071765E98B39612588D3785721432C32607FEE Validity Not Before: Sep 21 06:56:15 2026 GMT Not After : Sep 28 06:56:15 2026 GMT Subject: CN=6ab0d50f-bb9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:70:b6:6b:30:9a:58:3e:05:ce:82:20:78:08: 4d:32:51:cb:ac:71:a3:d7:d9:61:20:e3:c1:ed:11: f1:b1:66:7c:ee:a2:d4:16:da:03:bf:bb:5d:1e:b6: 24:69:00:aa:ab:94:99:fe:0f:29:5a:ee:6f:39:30: 1c:20:99:ff:33:21:80:60:8f:8d:76:c6:05:5f:af: c1:2b:41:aa:af:19:c6:7e:b1:dd:8d:34:5c:15:2b: ae:53:23:3b:e5:4f:2a:8f:af:c3:15:10:01:20:2d: 31:f6:a9:6d:eb:a2:ff:6b:c0:b1:a3:3c:ef:11:3e: 4c:d9:fd:bc:b9:81:a7:5a:62:43:78:8d:b4:9f:ce: 4a:9f:9c:b8:67:60:0a:c7:bf:50:b2:24:d0:ef:9d: aa:c4:46:4a:62:18:36:ff:62:6a:53:35:41:e8:ed: 51:8f:02:dd:e5:af:51:fc:bd:c6:d8:22:ea:d3:cb: 97:7f:b8:36:3e:1a:24:a0:88:e9:9b:79:95:23:aa: 06:46:9f:f2:7e:9a:36:31:e3:43:bb:5c:1b:9c:c4: 2c:69:5e:78:83:1f:2f:f0:6c:ad:c2:37:f6:bf:54: df:14:29:ea:ba:08:cb:e4:4a:cf:1b:62:71:e5:65: dd:51:f4:36:13:20:63:93:e9:a3:1d:13:e3:7b:c3: 6d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:19:E8:9F:80:51:E8:00:F2:49:78:E4:BB:E9:7B:BF:26:D3:9D:DC X509v3 Authority Key Identifier: keyid:80:07:17:65:E9:8B:39:61:25:88:D3:78:57:21:43:2C:32:60:7F:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:ed:4f:1a:5c:1c:a5:87:96:6f:e9:3d:f3:bf:18:d1:be:65: d4:a7:49:c5:48:f9:66:f9:dc:99:52:bf:08:17:0f:62:f5:0c: 74:bc:25:07:7f:06:96:d6:19:b0:a3:8b:e2:89:21:c4:33:1c: c8:c3:ad:31:c5:c0:a4:a0:57:76:c6:ff:4c:74:d7:13:49:53: 3d:ba:51:4f:71:14:59:ca:01:a0:a5:01:4b:06:92:5c:ee:81: 9a:a7:82:ae:9f:f2:0c:4b:66:23:f3:e6:1e:04:e8:51:bc:a3: 6e:34:85:20:85:6f:17:b2:4d:21:15:67:5b:85:d9:b3:35:b9: 15:01:dc:29:63:91:ce:db:63:cc:99:91:35:93:3a:02:59:83: 2c:58:69:ac:64:71:d3:d3:dd:a5:22:98:5b:2d:79:de:66:92: 4c:b7:a7:3b:85:21:d7:24:d1:10:99:2b:de:7d:ae:db:93:dd: 57:64:b7:7a:ba:1c:2a:03:ae:fd:a6:ed:f6:c0:c6:b4:47:6d: 91:c5:26:52:bd:81:89:39:6f:7c:f8:d4:34:34:62:10:d2:e6: ce:0a:e2:a6:c0:e1:53:47:71:67:a6:43:cd:cf:48:2b:45:f9: 1d:dd:58:b6:aa:59:af:a5:bf:23:a1:b0:ec:dd:0f:0c:ab:57: d9:3c:4d:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY1ODQxMTAvBgNVBAUTKDgwMDcxNzY1RTk4QjM5NjEyNTg4RDM3ODU3MjE0MzJD MzI2MDdGRUUwHhcNMjYwOTIxMDY1NjE1WhcNMjYwOTI4MDY1NjE1WjAYMRYwFAYD VQQDEw02YWIwZDUwZi1iYjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA13C2azCaWD4FzoIgeAhNMlHLrHGj19lhIOPB7RHxsWZ87qLUFtoDv7tdHrYk aQCqq5SZ/g8pWu5vOTAcIJn/MyGAYI+NdsYFX6/BK0GqrxnGfrHdjTRcFSuuUyM7 5U8qj6/DFRABIC0x9qlt66L/a8CxozzvET5M2f28uYGnWmJDeI20n85Kn5y4Z2AK x79QsiTQ752qxEZKYhg2/2JqUzVB6O1RjwLd5a9R/L3G2CLq08uXf7g2PhokoIjp m3mVI6oGRp/yfpo2MeNDu1wbnMQsaV54gx8v8Gytwjf2v1TfFCnqugjL5ErPG2Jx 5WXdUfQ2EyBjk+mjHRPje8NtBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI8Z6J+A UegA8kl45Lvpe78m053cMB8GA1UdIwQYMBaAFIAHF2XpizlhJYjTeFchQywyYH/u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjU4NC9GRkY4MDIxODlE QTgxMUYwQUVEQTNGM0FDNEY5QUUwMi9nQWNYWmVtTE9XRWxpTk40VnlGRExESmdm LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dBY1haZW1MT1dFbGlOTjRWeUZETERKZ2YtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjU4NC9GRkY4MDIxODlEQTgxMUYwQUVEQTNGM0FDNEY5QUUwMi9nQWNYWmVtTE9X RWxpTk40VnlGRExESmdmLTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnu1PGlwcpYeWb+k9878Y0b5l1KdJxUj5ZvncmVK/CBcPYvUMdLwlB38GltYZ sKOL4okhxDMcyMOtMcXApKBXdsb/THTXE0lTPbpRT3EUWcoBoKUBSwaSXO6BmqeC rp/yDEtmI/PmHgToUbyjbjSFIIVvF7JNIRVnW4XZszW5FQHcKWORzttjzJmRNZM6 AlmDLFhprGRx09PdpSKYWy153maSTLenO4Uh1yTREJkr3n2u25PdV2S3erocKgOu /abt9sDGtEdtkcUmUr2BiTlvfPjUNDRiENLmzgripsDhU0dxZ6ZDzc9IK0X5Hd1Y tqpZr6W/I6Gw7N0PDKtX2TxNug== -----END CERTIFICATE-----Generated at Mon Sep 21 16:33:00 2026 by rpki-client