$ rpki-client -vvvf rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft File: cGWovjQWOF29AyJATk9jTG7-XYI.mft (raw, json) Hash identifier: 9v2QKcUHvvbIris3lA3VHCpP9XVB1N35oDlwYrvx+FY= Subject key identifier: AA:F1:F2:A3:1A:1B:2E:9D:18:DD:A6:1D:DE:2E:DC:E7:FD:8D:2F:D4 Authority key identifier: 70:65:A8:BE:34:16:38:5D:BD:03:22:40:4E:4F:63:4C:6E:FE:5D:82 Certificate issuer: /CN=A9125AE9/serialNumber=7065A8BE3416385DBD0322404E4F634C6EFE5D82 Certificate serial: 0390 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft Manifest number: 0384 Signing time: Fri 25 Sep 2026 00:34:08 +0000 Manifest this update: Fri 25 Sep 2026 00:34:08 +0000 Manifest next update: Fri 02 Oct 2026 00:34:08 +0000 Files and hashes: 1: cGWovjQWOF29AyJATk9jTG7-XYI.crl (hash: XW9Wof8m56ApzEbEWbL+OGLn+dr1Hyb43J6Zvj/c8/I=) 2: 70BB6C14064A11EDA0A92068C4F9AE02.roa (hash: e6bCOgfRSemdp2rsVv83FamwpxN7KaZSE/x3Q3BUALg=) 3: 6FE0D496064A11EDA0A92068C4F9AE02.roa (hash: nSPvZX7KXzBzUT7OFwC/s1n132cCYNb3XtUKSB/sg50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.crl rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 00:34:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 912 (0x390) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125AE9, serialNumber=7065A8BE3416385DBD0322404E4F634C6EFE5D82 Validity Not Before: Sep 25 00:34:08 2026 GMT Not After : Oct 2 00:34:08 2026 GMT Subject: CN=6ab5c180-462f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c6:39:c2:69:2f:84:ad:57:41:b0:bb:2a:4d: eb:9c:59:3c:9c:df:da:0f:6f:2c:dd:0d:c8:05:a1: 1c:fa:c9:a3:0a:c7:81:e6:8c:73:7b:5e:90:8b:c9: 9e:f5:68:c5:e2:5a:e7:00:11:df:98:0c:1e:74:a4: 82:15:1f:12:74:19:3d:9b:80:bd:c9:c0:47:79:69: 34:b3:a9:fe:29:20:e8:3c:49:e0:7e:46:f9:49:e3: 8c:8f:3a:da:31:43:f4:f2:51:11:e4:55:12:41:a2: ab:42:15:ef:ad:c8:35:c8:0e:d9:1c:30:d3:79:ef: 7e:79:03:2b:77:f7:a2:2e:16:0a:34:d7:7f:43:d2: 29:51:5f:8d:7f:98:21:d8:ac:01:4f:c0:54:5e:14: d8:6c:15:cb:77:35:b5:c6:87:0e:ef:80:79:e0:a5: 1a:9b:97:3f:b0:5b:08:d3:07:46:3d:9e:52:10:48: ed:46:e6:b1:83:c1:34:da:88:fd:21:6d:8e:28:0f: 09:7e:b0:ec:f3:ac:f8:eb:0b:0b:9c:77:9f:01:ed: 9d:b4:18:f5:08:1d:a1:aa:b6:29:1e:4c:06:b2:1a: 33:fd:53:e2:b5:01:27:39:f2:a6:8e:ae:e0:fc:ff: 7c:08:b1:1c:d6:1a:4c:d0:d0:af:22:6e:0d:fc:80: 96:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:F1:F2:A3:1A:1B:2E:9D:18:DD:A6:1D:DE:2E:DC:E7:FD:8D:2F:D4 X509v3 Authority Key Identifier: keyid:70:65:A8:BE:34:16:38:5D:BD:03:22:40:4E:4F:63:4C:6E:FE:5D:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:e1:c5:ff:d7:15:92:d6:18:1c:7e:1e:eb:28:c0:61:53:ef: 95:e1:63:e2:e2:ee:37:8f:83:ef:bf:56:7e:46:06:f8:1c:b0: af:f6:fe:7a:1b:cc:9b:a5:51:cd:3b:c6:fd:b4:91:61:d7:27: de:d2:d5:64:eb:8d:6f:7e:53:52:f3:8a:4c:8e:68:bd:9b:a8: 94:98:9b:1d:d7:5e:ff:6d:3f:03:f8:c0:26:41:05:b4:9f:9d: 74:28:cb:e0:c8:53:36:5c:07:dd:27:b7:b8:be:8f:eb:a6:d6: 37:70:4a:80:de:e4:da:ac:78:81:f9:64:46:c2:cd:e2:59:ca: a3:fd:92:c5:5d:ff:09:1d:57:fb:de:14:17:df:d0:82:6e:57: 98:4a:fa:a5:4a:25:60:03:89:48:54:52:87:49:1d:80:58:5b: 0b:ec:fa:5f:9f:5f:f7:51:e7:29:63:58:c0:db:26:cf:ad:8f: ed:e3:74:4e:dd:30:1f:1c:f6:8d:4f:f0:9e:c9:22:cb:bc:57: be:ba:71:71:9f:b5:60:4a:ae:ef:32:42:46:6c:69:97:e4:f2: 05:46:6d:5b:fd:f0:c9:c8:f9:79:25:1f:b3:f6:92:c6:7b:aa: 89:e7:6d:e0:d2:5b:27:1c:ef:e1:c1:ff:42:c6:7d:32:cc:31: 4a:f0:52:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA5AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVBRTkxMTAvBgNVBAUTKDcwNjVBOEJFMzQxNjM4NURCRDAzMjI0MDRFNEY2MzRD NkVGRTVEODIwHhcNMjYwOTI1MDAzNDA4WhcNMjYxMDAyMDAzNDA4WjAYMRYwFAYD VQQDEw02YWI1YzE4MC00NjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2MY5wmkvhK1XQbC7Kk3rnFk8nN/aD28s3Q3IBaEc+smjCseB5oxze16Qi8me 9WjF4lrnABHfmAwedKSCFR8SdBk9m4C9ycBHeWk0s6n+KSDoPEngfkb5SeOMjzra MUP08lER5FUSQaKrQhXvrcg1yA7ZHDDTee9+eQMrd/eiLhYKNNd/Q9IpUV+Nf5gh 2KwBT8BUXhTYbBXLdzW1xocO74B54KUam5c/sFsI0wdGPZ5SEEjtRuaxg8E02oj9 IW2OKA8JfrDs86z46wsLnHefAe2dtBj1CB2hqrYpHkwGshoz/VPitQEnOfKmjq7g /P98CLEc1hpM0NCvIm4N/ICWoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKrx8qMa Gy6dGN2mHd4u3Of9jS/UMB8GA1UdIwQYMBaAFHBlqL40FjhdvQMiQE5PY0xu/l2C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUFFOS9GRkVCN0Y5QTA2 NDYxMUVEOUNCNzMxNjNDNEY5QUUwMi9jR1dvdmpRV09GMjlBeUpBVGs5alRHNy1Y WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NHV292alFXT0YyOUF5SkFUazlqVEc3LVhZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUFFOS9GRkVCN0Y5QTA2NDYxMUVEOUNCNzMxNjNDNEY5QUUwMi9jR1dvdmpRV09G MjlBeUpBVGs5alRHNy1YWUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkuHF/9cVktYYHH4e6yjAYVPvleFj4uLuN4+D779WfkYG+Bywr/b+ehvMm6VR zTvG/bSRYdcn3tLVZOuNb35TUvOKTI5ovZuolJibHdde/20/A/jAJkEFtJ+ddCjL 4MhTNlwH3Se3uL6P66bWN3BKgN7k2qx4gflkRsLN4lnKo/2SxV3/CR1X+94UF9/Q gm5XmEr6pUolYAOJSFRSh0kdgFhbC+z6X59f91HnKWNYwNsmz62P7eN0Tt0wHxz2 jU/wnskiy7xXvrpxcZ+1YEqu7zJCRmxpl+TyBUZtW/3wycj5eSUfs/aSxnuqiedt 4NJbJxzv4cH/QsZ9MswxSvBSeQ== -----END CERTIFICATE-----Generated at Sat Sep 26 07:19:06 2026 by rpki-client