$ rpki-client -vvvf rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft File: gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft (raw, json) Hash identifier: fNtm3/z8i43kHaTRUBznTdHyBZgmXOMBwoIajyqR0H8= Subject key identifier: CA:03:36:57:CD:71:BA:09:E5:80:06:F5:16:3C:20:45:7F:DB:B4:15 Authority key identifier: 81:97:66:3A:7F:63:47:D5:91:B6:B2:B9:AD:D5:A2:D5:74:E9:11:24 Certificate issuer: /CN=A912096C/serialNumber=8197663A7F6347D591B6B2B9ADD5A2D574E91124 Certificate serial: 0854 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft Manifest number: 0849 Signing time: Sun 20 Sep 2026 20:56:14 +0000 Manifest this update: Sun 20 Sep 2026 20:56:14 +0000 Manifest next update: Sun 27 Sep 2026 20:56:14 +0000 Files and hashes: 1: gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl (hash: d7oX4ewuY9LVIMrEcyzidmjV9dCyisbdpp1L1t5baOA=) 2: 7D7B467CE06011EDBB10FD53C4F9AE02.roa (hash: tFjfeFvirq4K21vPq+LIVuacIhGqj3/ek6525SEORBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 20:56:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2132 (0x854) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912096C, serialNumber=8197663A7F6347D591B6B2B9ADD5A2D574E91124 Validity Not Before: Sep 20 20:56:14 2026 GMT Not After : Sep 27 20:56:14 2026 GMT Subject: CN=6ab0486e-26c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:75:3b:24:64:7d:85:82:cd:c2:be:eb:2a:7b: 53:98:1b:b0:d3:42:13:b3:18:62:f6:ac:e9:ec:f0: c2:45:7d:9c:e7:3d:48:12:2c:cf:c7:c5:9d:b4:e7: 55:49:cb:e8:08:bf:75:7d:e6:c0:10:e1:7d:9d:6a: 18:6f:42:4d:92:4e:d1:b9:1d:1d:44:e4:2f:e2:9c: ea:92:52:48:ed:fb:1c:4d:f1:ba:90:96:e7:32:10: e0:e2:3c:2c:76:8b:ee:81:c6:86:47:9a:6b:51:8c: 33:e7:11:fc:b3:aa:1f:32:43:49:46:e5:fb:13:ba: 12:8e:7d:a2:7d:e3:fa:f4:a7:a6:4b:ff:3a:85:4e: f4:3b:dc:87:dd:f0:02:07:76:d4:3e:71:89:66:bc: f4:16:51:7e:6b:86:e0:10:65:a6:0a:13:1b:4c:08: 4b:af:9d:e7:07:0e:ca:da:b1:e1:a5:fe:fe:90:bc: c3:65:c3:6e:ae:c2:93:0e:7b:22:a0:4a:a1:6a:5f: f4:27:e8:14:2e:c0:b6:11:ee:31:03:71:9c:98:97: 90:c2:c1:15:06:30:d3:96:80:a7:13:f3:21:03:86: 1d:15:4a:4a:f7:93:80:9b:df:57:08:c2:a9:ad:2c: 6e:5f:ee:b0:99:98:47:bb:b2:92:78:ad:06:b4:8e: 75:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:03:36:57:CD:71:BA:09:E5:80:06:F5:16:3C:20:45:7F:DB:B4:15 X509v3 Authority Key Identifier: keyid:81:97:66:3A:7F:63:47:D5:91:B6:B2:B9:AD:D5:A2:D5:74:E9:11:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:ad:ff:0d:a0:0e:9c:c0:d6:24:3a:35:5e:7d:19:c2:d1:ab: c1:36:b1:30:7f:9c:27:7e:28:05:b0:9f:0a:07:95:05:c9:f8: 73:6b:cb:e3:cb:32:9f:de:a7:e2:ed:9b:8d:24:75:c7:84:bc: 7d:17:5b:45:58:8f:85:b8:bd:b0:bb:cc:4c:a5:9f:b0:3b:56: 99:a7:3a:1b:54:45:37:d5:22:ee:bb:c7:f6:a7:d1:f4:86:29: 8e:99:8b:02:a3:6b:83:6a:e9:58:9e:42:d1:2d:5d:fd:97:ce: 8e:0b:bb:86:97:31:99:1f:4c:e6:4a:a2:8c:24:f2:01:37:71: ba:c1:08:44:15:47:51:fc:30:73:79:2c:ef:1d:94:a6:f9:5d: 70:6a:0d:bc:a4:fa:04:d8:a8:e7:18:49:41:9e:6b:34:5f:b5: 0b:d1:cd:7e:96:c7:28:0b:53:0a:68:40:38:28:b4:92:d7:00: 5a:93:8c:7c:37:22:78:7b:c7:b3:fc:f2:4a:53:2a:73:20:f7: 7d:dd:84:b3:fd:48:0d:18:bb:ce:11:13:34:2b:27:88:43:0d: 5b:85:9c:39:96:4a:42:2d:73:36:95:31:1a:24:b4:2f:30:53: c0:99:31:54:4f:98:53:05:a6:20:45:5c:06:02:24:e9:14:25: ee:8f:3a:c0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NkMxMTAvBgNVBAUTKDgxOTc2NjNBN0Y2MzQ3RDU5MUI2QjJCOUFERDVBMkQ1 NzRFOTExMjQwHhcNMjYwOTIwMjA1NjE0WhcNMjYwOTI3MjA1NjE0WjAYMRYwFAYD VQQDEw02YWIwNDg2ZS0yNmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA83U7JGR9hYLNwr7rKntTmBuw00ITsxhi9qzp7PDCRX2c5z1IEizPx8WdtOdV ScvoCL91febAEOF9nWoYb0JNkk7RuR0dROQv4pzqklJI7fscTfG6kJbnMhDg4jws dovugcaGR5prUYwz5xH8s6ofMkNJRuX7E7oSjn2ifeP69KemS/86hU70O9yH3fAC B3bUPnGJZrz0FlF+a4bgEGWmChMbTAhLr53nBw7K2rHhpf7+kLzDZcNursKTDnsi oEqhal/0J+gULsC2Ee4xA3GcmJeQwsEVBjDTloCnE/MhA4YdFUpK95OAm99XCMKp rSxuX+6wmZhHu7KSeK0GtI51jQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMoDNlfN cboJ5YAG9RY8IEV/27QVMB8GA1UdIwQYMBaAFIGXZjp/Y0fVkbayua3VotV06REk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk2Qy8xRDMxQzE4NDI4 OTIxMUVCQUM4Q0NFMTNDNEY5QUUwMi9nWmRtT245alI5V1J0cks1cmRXaTFYVHBF U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2daZG1PbjlqUjlXUnRySzVyZFdpMVhUcEVTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk2Qy8xRDMxQzE4NDI4OTIxMUVCQUM4Q0NFMTNDNEY5QUUwMi9nWmRtT245alI5 V1J0cks1cmRXaTFYVHBFU1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoq3/DaAOnMDWJDo1Xn0ZwtGrwTaxMH+cJ34oBbCfCgeVBcn4c2vL48syn96n 4u2bjSR1x4S8fRdbRViPhbi9sLvMTKWfsDtWmac6G1RFN9Ui7rvH9qfR9IYpjpmL AqNrg2rpWJ5C0S1d/ZfOjgu7hpcxmR9M5kqijCTyATdxusEIRBVHUfwwc3ks7x2U pvldcGoNvKT6BNio5xhJQZ5rNF+1C9HNfpbHKAtTCmhAOCi0ktcAWpOMfDcieHvH s/zySlMqcyD3fd2Es/1IDRi7zhETNCsniEMNW4WcOZZKQi1zNpUxGiS0LzBTwJkx VE+YUwWmIEVcBgIk6RQl7o86wA== -----END CERTIFICATE-----Generated at Mon Sep 21 20:07:43 2026 by rpki-client