$ rpki-client -vvvf rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft File: cGWovjQWOF29AyJATk9jTG7-XYI.mft (raw, json) Hash identifier: w3Jx1JTkUIxCtKfcgEPHLc8+UDMUiR4HUoeM/df+1TQ= Subject key identifier: 0D:2C:FF:98:3C:81:3A:C9:3A:33:D5:26:2B:C3:14:31:87:C2:13:36 Authority key identifier: 70:65:A8:BE:34:16:38:5D:BD:03:22:40:4E:4F:63:4C:6E:FE:5D:82 Certificate issuer: /CN=A9125AE9/serialNumber=7065A8BE3416385DBD0322404E4F634C6EFE5D82 Certificate serial: 0392 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft Manifest number: 0386 Signing time: Tue 29 Sep 2026 00:52:12 +0000 Manifest this update: Tue 29 Sep 2026 00:52:12 +0000 Manifest next update: Tue 06 Oct 2026 00:52:12 +0000 Files and hashes: 1: cGWovjQWOF29AyJATk9jTG7-XYI.crl (hash: i7XFtxpAxKcZRVlrOk+7BwyJe5fDp+VXAhrzw43+8O8=) 2: 70BB6C14064A11EDA0A92068C4F9AE02.roa (hash: e6bCOgfRSemdp2rsVv83FamwpxN7KaZSE/x3Q3BUALg=) 3: 6FE0D496064A11EDA0A92068C4F9AE02.roa (hash: nSPvZX7KXzBzUT7OFwC/s1n132cCYNb3XtUKSB/sg50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.crl rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Oct 2026 00:52:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 914 (0x392) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125AE9, serialNumber=7065A8BE3416385DBD0322404E4F634C6EFE5D82 Validity Not Before: Sep 29 00:52:12 2026 GMT Not After : Oct 6 00:52:12 2026 GMT Subject: CN=6abb0bbc-2cc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f8:a0:64:92:3c:d9:be:6f:6f:45:aa:77:2e: af:7d:10:5f:68:ae:d3:8d:ff:cd:dc:f8:c7:1b:09: 5b:00:c1:02:ec:10:e6:5b:24:af:f8:0d:d6:db:ef: 2f:e2:3b:17:b5:f5:7e:e0:ff:df:1b:28:65:83:9d: 67:00:50:bc:6c:ab:52:3d:71:50:68:a1:d7:97:ea: 76:62:e3:03:0b:51:31:72:89:7b:bd:35:21:64:88: b6:f1:e0:af:d5:70:61:6e:b0:7f:55:dc:dc:06:a4: ca:d7:4b:3a:3f:21:db:af:04:ed:ac:45:07:23:57: 60:ef:26:d3:6b:ce:1b:73:25:62:e6:6f:35:b4:3b: 33:70:ba:53:0a:28:15:28:37:31:61:de:fd:c1:0b: da:cf:7c:44:ca:a4:fb:8a:25:2e:a9:3f:62:58:38: fb:8a:78:97:59:56:df:e5:fd:6a:43:e0:26:22:31: 39:49:2c:7e:37:e0:07:26:eb:b9:79:76:b4:b0:fb: 5c:95:1e:48:da:19:51:5c:59:b9:ad:ff:92:80:bc: 49:a6:54:42:c1:c8:04:dd:b2:92:e7:72:bd:57:0e: 51:bb:51:52:fd:fe:a9:90:9e:a0:af:63:8a:65:32: 6f:39:8e:aa:51:5a:39:05:de:d2:d0:e5:f9:51:d9: f6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:2C:FF:98:3C:81:3A:C9:3A:33:D5:26:2B:C3:14:31:87:C2:13:36 X509v3 Authority Key Identifier: keyid:70:65:A8:BE:34:16:38:5D:BD:03:22:40:4E:4F:63:4C:6E:FE:5D:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:a5:12:63:62:c6:78:d0:19:45:b7:63:73:b1:eb:a5:82:ce: c2:79:c2:5c:ff:58:58:f5:2d:f5:2a:43:fa:03:72:e4:da:8a: ba:89:e9:ec:30:5e:1b:ee:d8:8d:b9:a2:e1:e0:24:9d:1e:78: 20:3b:1a:e1:bc:ca:97:a8:57:8d:46:ed:d1:54:3b:c3:60:88: af:76:2a:b0:a2:64:51:bc:10:67:c7:47:8b:97:ac:7c:01:42: 15:50:9b:0e:a6:62:ec:e7:ed:a5:9b:61:e7:e3:40:62:89:23: f2:a4:bb:dc:3f:c6:7e:13:c2:8d:05:d3:a8:fa:2e:aa:85:de: 15:d9:6b:73:bc:0a:01:0f:cc:a6:8e:76:d2:f5:0b:2b:4a:b3: 13:f3:08:cf:8f:b9:a0:eb:f4:21:61:1a:6b:62:21:50:ac:52: 87:2b:ee:3b:d6:5d:21:c1:2a:7e:5d:ef:7f:3e:6a:86:ed:20: 84:ff:c3:4e:d2:b3:2d:79:5c:1a:df:25:84:b8:e1:19:04:66: 47:b4:d8:67:b5:02:45:1d:97:8d:1e:06:8f:ad:bf:08:31:33: d8:72:82:ba:c6:4d:3a:8c:b5:af:b6:f3:3a:c5:af:a7:60:c7: 42:5b:6a:4b:e4:24:d9:8b:f7:b4:b9:d8:b2:e7:8f:e9:05:3c: 00:2e:2d:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA5IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVBRTkxMTAvBgNVBAUTKDcwNjVBOEJFMzQxNjM4NURCRDAzMjI0MDRFNEY2MzRD NkVGRTVEODIwHhcNMjYwOTI5MDA1MjEyWhcNMjYxMDA2MDA1MjEyWjAYMRYwFAYD VQQDEw02YWJiMGJiYy0yY2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmvigZJI82b5vb0Wqdy6vfRBfaK7Tjf/N3PjHGwlbAMEC7BDmWySv+A3W2+8v 4jsXtfV+4P/fGyhlg51nAFC8bKtSPXFQaKHXl+p2YuMDC1Excol7vTUhZIi28eCv 1XBhbrB/VdzcBqTK10s6PyHbrwTtrEUHI1dg7ybTa84bcyVi5m81tDszcLpTCigV KDcxYd79wQvaz3xEyqT7iiUuqT9iWDj7iniXWVbf5f1qQ+AmIjE5SSx+N+AHJuu5 eXa0sPtclR5I2hlRXFm5rf+SgLxJplRCwcgE3bKS53K9Vw5Ru1FS/f6pkJ6gr2OK ZTJvOY6qUVo5Bd7S0OX5Udn2gQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA0s/5g8 gTrJOjPVJivDFDGHwhM2MB8GA1UdIwQYMBaAFHBlqL40FjhdvQMiQE5PY0xu/l2C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUFFOS9GRkVCN0Y5QTA2 NDYxMUVEOUNCNzMxNjNDNEY5QUUwMi9jR1dvdmpRV09GMjlBeUpBVGs5alRHNy1Y WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NHV292alFXT0YyOUF5SkFUazlqVEc3LVhZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUFFOS9GRkVCN0Y5QTA2NDYxMUVEOUNCNzMxNjNDNEY5QUUwMi9jR1dvdmpRV09G MjlBeUpBVGs5alRHNy1YWUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoqUSY2LGeNAZRbdjc7HrpYLOwnnCXP9YWPUt9SpD+gNy5NqKuonp7DBeG+7Y jbmi4eAknR54IDsa4bzKl6hXjUbt0VQ7w2CIr3YqsKJkUbwQZ8dHi5esfAFCFVCb DqZi7OftpZth5+NAYokj8qS73D/GfhPCjQXTqPouqoXeFdlrc7wKAQ/Mpo520vUL K0qzE/MIz4+5oOv0IWEaa2IhUKxShyvuO9ZdIcEqfl3vfz5qhu0ghP/DTtKzLXlc Gt8lhLjhGQRmR7TYZ7UCRR2XjR4Gj62/CDEz2HKCusZNOoy1r7bzOsWvp2DHQltq S+Qk2Yv3tLnYsueP6QU8AC4t1Q== -----END CERTIFICATE-----Generated at Tue Sep 29 13:26:31 2026 by rpki-client