$ rpki-client -vvf rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft File: cGWovjQWOF29AyJATk9jTG7-XYI.mft (raw, json) Hash identifier: E6NFg4p2QShDo57VjI8ipq4B+YTe7G0YgIn3qivorHg= Subject key identifier: 89:D2:D1:25:E9:9E:65:8F:44:A6:BE:7F:78:E7:4F:4C:F2:60:FE:50 Authority key identifier: 70:65:A8:BE:34:16:38:5D:BD:03:22:40:4E:4F:63:4C:6E:FE:5D:82 Certificate issuer: /CN=A9125AE9/serialNumber=7065A8BE3416385DBD0322404E4F634C6EFE5D82 Certificate serial: 0371 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft Manifest number: 0365 Signing time: Mon 27 Jul 2026 01:59:54 +0000 Manifest this update: Mon 27 Jul 2026 01:59:54 +0000 Manifest next update: Mon 03 Aug 2026 01:59:54 +0000 Files and hashes: 1: cGWovjQWOF29AyJATk9jTG7-XYI.crl (hash: JL+0FksGa6phNSPip5W0V8YypaxFE9OnlDYZ7ZrL8qk=) 2: 70BB6C14064A11EDA0A92068C4F9AE02.roa (hash: e6bCOgfRSemdp2rsVv83FamwpxN7KaZSE/x3Q3BUALg=) 3: 6FE0D496064A11EDA0A92068C4F9AE02.roa (hash: nSPvZX7KXzBzUT7OFwC/s1n132cCYNb3XtUKSB/sg50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.crl rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 01:59:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 881 (0x371) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125AE9, serialNumber=7065A8BE3416385DBD0322404E4F634C6EFE5D82 Validity Not Before: Jul 27 01:59:54 2026 GMT Not After : Aug 3 01:59:54 2026 GMT Subject: CN=6a66bb9a-5b1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e0:11:6d:0a:10:7f:34:75:50:50:3e:70:76: 44:1d:f3:3a:a2:d6:62:2b:14:93:91:ad:ff:04:1a: 9c:e5:49:6e:e7:31:b0:2e:30:7b:a1:ae:18:fa:17: e6:bb:c1:3e:1e:4b:e0:43:80:39:35:c4:db:ce:b0: 73:11:ce:f5:05:00:0b:2b:4f:75:f2:45:e2:4f:50: 56:be:d6:a6:64:fd:b8:4f:fc:20:ae:ce:64:2c:11: 69:66:c5:75:e6:36:83:2e:75:34:24:01:c8:a8:14: c5:b2:d7:de:d4:47:f9:dc:65:f3:a0:5c:c2:3a:74: 7a:7c:25:97:b6:d1:51:f3:f9:d3:f2:b2:58:2a:10: a6:68:5b:be:a6:a9:7e:34:99:1b:b2:46:8c:f1:b3: d3:48:79:03:46:fe:5c:93:c5:52:b1:f5:12:b7:06: 87:90:c6:f8:d3:24:84:ee:3a:30:d4:4c:92:fd:bb: a4:72:ff:79:10:98:4d:45:f5:13:b9:00:89:48:88: 86:1c:c8:0f:98:2b:4f:d0:eb:9d:ac:f7:f5:ce:1d: c2:5b:b6:9f:b7:ac:23:3c:6e:56:01:e9:29:1d:ef: 26:56:47:1c:b0:df:42:4d:70:6d:21:7d:cb:03:82: f9:56:7e:17:1c:7a:b1:b2:1d:73:8f:64:ec:fe:85: 77:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:D2:D1:25:E9:9E:65:8F:44:A6:BE:7F:78:E7:4F:4C:F2:60:FE:50 X509v3 Authority Key Identifier: keyid:70:65:A8:BE:34:16:38:5D:BD:03:22:40:4E:4F:63:4C:6E:FE:5D:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:6f:17:b5:85:96:23:05:c4:c4:d4:5c:89:e2:45:86:e5:40: 68:ee:4a:dc:e5:a5:83:f2:4f:b5:d6:5f:11:d4:d6:cf:34:f9: 41:8a:88:60:7d:91:a9:67:2e:46:1d:72:21:1c:ce:4c:8d:64: 4d:80:01:77:1d:ea:3c:65:18:a7:85:2d:8c:74:19:58:59:ab: 1b:64:9c:b7:21:40:9b:01:07:b4:60:a4:a2:2e:7f:c2:24:7d: 0c:8e:04:70:a7:2c:55:2f:52:8e:5f:03:08:87:e1:a4:ef:e0: c9:bb:85:d2:f1:7e:83:af:46:63:95:45:04:82:da:9c:a8:8d: 4d:ec:36:69:27:e4:53:38:87:25:51:23:58:a8:bd:00:9a:98: d5:75:2e:4d:ab:5b:bc:c4:cf:e9:5b:3c:40:c0:70:ce:d5:d1: 10:94:92:08:89:1d:04:e8:a4:1c:c5:3f:5b:c9:9e:38:9a:b4: 65:42:43:52:a2:0e:b0:26:8b:31:13:af:0c:32:fd:da:5a:ac: 9f:50:6d:97:dd:23:de:78:c6:48:6a:96:35:1f:94:30:66:94: 38:ca:ae:c3:5c:5d:55:d5:b4:23:57:ce:90:05:a1:73:1b:f9: 0f:d0:41:22:9f:1b:95:25:5a:ba:e9:7b:41:4b:10:e1:5d:6f: 99:ed:d2:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA3EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVBRTkxMTAvBgNVBAUTKDcwNjVBOEJFMzQxNjM4NURCRDAzMjI0MDRFNEY2MzRD NkVGRTVEODIwHhcNMjYwNzI3MDE1OTU0WhcNMjYwODAzMDE1OTU0WjAYMRYwFAYD VQQDEw02YTY2YmI5YS01YjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkuARbQoQfzR1UFA+cHZEHfM6otZiKxSTka3/BBqc5Ulu5zGwLjB7oa4Y+hfm u8E+HkvgQ4A5NcTbzrBzEc71BQALK0918kXiT1BWvtamZP24T/wgrs5kLBFpZsV1 5jaDLnU0JAHIqBTFstfe1Ef53GXzoFzCOnR6fCWXttFR8/nT8rJYKhCmaFu+pql+ NJkbskaM8bPTSHkDRv5ck8VSsfUStwaHkMb40ySE7jow1EyS/bukcv95EJhNRfUT uQCJSIiGHMgPmCtP0OudrPf1zh3CW7aft6wjPG5WAekpHe8mVkccsN9CTXBtIX3L A4L5Vn4XHHqxsh1zj2Ts/oV3NwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFInS0SXp nmWPRKa+f3jnT0zyYP5QMB8GA1UdIwQYMBaAFHBlqL40FjhdvQMiQE5PY0xu/l2C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUFFOS9GRkVCN0Y5QTA2 NDYxMUVEOUNCNzMxNjNDNEY5QUUwMi9jR1dvdmpRV09GMjlBeUpBVGs5alRHNy1Y WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NHV292alFXT0YyOUF5SkFUazlqVEc3LVhZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUFFOS9GRkVCN0Y5QTA2NDYxMUVEOUNCNzMxNjNDNEY5QUUwMi9jR1dvdmpRV09G MjlBeUpBVGs5alRHNy1YWUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABG8XtYWWIwXExNRcieJFhuVAaO5K3OWlg/JPtdZfEdTWzzT5QYqIYH2RqWcu Rh1yIRzOTI1kTYABdx3qPGUYp4UtjHQZWFmrG2SctyFAmwEHtGCkoi5/wiR9DI4E cKcsVS9Sjl8DCIfhpO/gybuF0vF+g69GY5VFBILanKiNTew2aSfkUziHJVEjWKi9 AJqY1XUuTatbvMTP6Vs8QMBwztXREJSSCIkdBOikHMU/W8meOJq0ZUJDUqIOsCaL MROvDDL92lqsn1Btl90j3njGSGqWNR+UMGaUOMquw1xdVdW0I1fOkAWhcxv5D9BB Ip8blSVauul7QUsQ4V1vme3Ssw== -----END CERTIFICATE-----Generated at Tue Jul 28 21:40:28 2026 by rpki-client