$ rpki-client -vvvf rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft File: c7ohvjbd39WGkBFtbux73H7--yg.mft (raw, json) Hash identifier: pNlea0m1gVRACug9XP/pNMew/zmRfu5eUxzCRiIX6bE= Subject key identifier: BA:1C:D3:7B:3A:04:36:9A:39:52:99:79:2D:4A:BC:53:58:69:61:1D Authority key identifier: 73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28 Certificate issuer: /CN=A9127FC2/serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28 Certificate serial: 04BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft Manifest number: 0477 Signing time: Tue 22 Sep 2026 23:50:11 +0000 Manifest this update: Tue 22 Sep 2026 23:50:10 +0000 Manifest next update: Tue 29 Sep 2026 23:50:10 +0000 Files and hashes: 1: c7ohvjbd39WGkBFtbux73H7--yg.crl (hash: j9kj77rsHo7ryXD+nWxGaIh9X01WqpIp4MldYu+nvS8=) 2: 3143DEC26C8811EEBAB7F227C4F9AE02.roa (hash: PmWlH9hI8UDfrum8ljKdCPWBn/RfhOuKClthQ5ZzQA0=) 3: 1ABD64C4FC4B11EC9E374483C4F9AE02.roa (hash: 6txwDANkb+stD+30rgYCUnBhArG1SXPn7l/lsuR8IgY=) 4: DD152F4ECA7D11F0AD0F2B30C4F9AE02.roa (hash: XU66OcU3fnYJls4O62nuYW+aPPgFO6XUlfyCsJCffUE=) 5: BDD52DF26AF311F1A3F54E617547A888.roa (hash: YDvGDAvEOaQ3i1B7cemmqUz4csMi56McTSjidKVS5sQ=) 6: 63F359F0620711EE8BBCFF68C4F9AE02.roa (hash: 1cM14NhAHexpysqpl1gCbKReRuyBQxaQgkUwJjz7qxw=) 7: 4DD5897E501911F1B9231017C2833773.roa (hash: 74iwg4T3jS20u81MSENAOAD9vyDefXzwbL5rlNQ4X/0=) 8: AB95EEC4BCFA11EDAD328D3AC4F9AE02.roa (hash: klFS2EwojWiZ7PvsY5ywexl5W5eODCB0mjNce2fBPs8=) 9: 9B39DA4A17B611F0949B3513C4F9AE02.roa (hash: gWfYJLFQiUGGCySMAATeYDsxEOK4XTc6fxDY8vUTdP4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 23:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1210 (0x4ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127FC2, serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28 Validity Not Before: Sep 22 23:50:10 2026 GMT Not After : Sep 29 23:50:10 2026 GMT Subject: CN=6ab31433-aa36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5f:13:65:6c:44:41:89:e0:08:bd:bb:60:56: 55:47:c3:98:e7:1b:71:8a:a2:aa:78:3f:6d:e9:51: e6:8b:d9:5d:4e:3a:95:c1:76:a7:0a:e5:6f:f8:4f: a3:d8:26:a6:04:09:86:dd:5c:3f:17:1d:ba:8e:36: 98:b9:10:b9:c9:83:37:ad:60:56:78:a7:28:c0:18: 3e:68:68:15:ce:fb:06:ec:24:d9:be:70:75:d9:8f: 7f:30:f7:73:44:5c:75:b4:13:37:bd:92:29:a6:79: c0:6f:7b:9d:ff:6f:93:3a:30:c2:96:08:9b:7a:cf: 53:9b:5d:d6:f3:da:10:69:b6:fb:eb:e0:86:82:67: 5c:b6:25:ab:df:f8:70:3a:c9:c8:06:26:92:b3:0c: 6b:79:82:42:8f:8b:9a:98:a2:0b:4a:b1:ea:ee:62: f9:2b:06:59:f8:d1:f4:82:ba:e7:7e:b7:bd:3c:65: a1:00:83:e7:17:ee:b6:b3:d0:fa:bf:dc:0f:41:2f: 2b:52:3c:9a:1a:43:68:7b:7d:c6:b4:c6:5a:91:69: e4:da:85:e9:57:35:ac:73:4c:c2:02:84:34:4e:35: 65:ef:91:2e:30:13:98:38:63:20:b5:46:94:33:08: bc:a3:ee:30:7b:0e:2a:99:77:b8:1a:ab:39:58:37: ca:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:1C:D3:7B:3A:04:36:9A:39:52:99:79:2D:4A:BC:53:58:69:61:1D X509v3 Authority Key Identifier: keyid:73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:d5:f3:ab:e5:77:9a:cb:e1:d7:e3:d6:5b:33:c0:d1:10:33: d3:63:0c:8f:94:02:b8:35:77:d8:b3:bd:e8:21:91:92:59:8f: bb:4a:d6:4f:b0:04:ab:ad:2e:10:9c:f1:73:5d:fa:c4:04:ea: 5a:1b:2f:3a:19:e7:cd:58:4e:5b:9d:8f:6f:b5:c0:de:eb:17: 2e:16:17:e6:61:fd:f9:8c:02:d1:e9:8a:96:c3:a9:80:11:c7: a6:c4:3e:69:dc:8e:df:ff:17:5e:89:df:25:65:bc:1c:fe:f2: e6:0c:b7:79:65:9a:c5:ea:6a:c3:29:2f:8b:54:65:3e:ff:9a: f5:dc:26:10:2f:f8:81:eb:f0:56:02:f3:28:e1:c7:52:ed:79: c0:f7:9b:a9:8b:d2:c3:8a:fb:6f:a4:98:d7:0e:54:b6:3e:0f: 6f:7a:a3:6b:70:14:b1:17:ac:64:a7:f2:80:61:3b:12:f7:69: 5e:a1:5b:bf:26:fc:89:e9:6c:11:7f:40:70:e8:94:2b:c3:11: 18:4f:0e:9f:87:36:cc:26:a7:25:84:46:5e:98:2a:95:46:25: 5a:55:c5:c2:13:73:36:a1:d6:cd:af:43:b0:97:31:c6:f7:a9: 45:18:2f:7d:d8:41:83:3b:a2:ff:79:44:d2:6b:26:9d:5a:30: 35:75:b0:60 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdGQzIxMTAvBgNVBAUTKDczQkEyMUJFMzZERERGRDU4NjkwMTE2RDZFRUM3QkRD N0VGRUZCMjgwHhcNMjYwOTIyMjM1MDEwWhcNMjYwOTI5MjM1MDEwWjAYMRYwFAYD VQQDEw02YWIzMTQzMy1hYTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyF8TZWxEQYngCL27YFZVR8OY5xtxiqKqeD9t6VHmi9ldTjqVwXanCuVv+E+j 2CamBAmG3Vw/Fx26jjaYuRC5yYM3rWBWeKcowBg+aGgVzvsG7CTZvnB12Y9/MPdz RFx1tBM3vZIppnnAb3ud/2+TOjDClgibes9Tm13W89oQabb76+CGgmdctiWr3/hw OsnIBiaSswxreYJCj4uamKILSrHq7mL5KwZZ+NH0grrnfre9PGWhAIPnF+62s9D6 v9wPQS8rUjyaGkNoe33GtMZakWnk2oXpVzWsc0zCAoQ0TjVl75EuMBOYOGMgtUaU Mwi8o+4wew4qmXe4Gqs5WDfK2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLoc03s6 BDaaOVKZeS1KvFNYaWEdMB8GA1UdIwQYMBaAFHO6Ib423d/VhpARbW7se9x+/vso MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0ZDMi81RTMwQkY3MEJC QTYxMUVDQkFGNDMxNTZDNEY5QUUwMi9jN29odmpiZDM5V0drQkZ0YnV4NzNINy0t eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3b2h2amJkMzlXR2tCRnRidXg3M0g3LS15Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0ZDMi81RTMwQkY3MEJCQTYxMUVDQkFGNDMxNTZDNEY5QUUwMi9jN29odmpiZDM5 V0drQkZ0YnV4NzNINy0teWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAe9Xzq+V3msvh1+PWWzPA0RAz02MMj5QCuDV32LO96CGRklmPu0rWT7AEq60u EJzxc136xATqWhsvOhnnzVhOW52Pb7XA3usXLhYX5mH9+YwC0emKlsOpgBHHpsQ+ adyO3/8XXonfJWW8HP7y5gy3eWWaxepqwykvi1RlPv+a9dwmEC/4gevwVgLzKOHH Uu15wPebqYvSw4r7b6SY1w5Utj4Pb3qja3AUsResZKfygGE7EvdpXqFbvyb8iels EX9AcOiUK8MRGE8On4c2zCanJYRGXpgqlUYlWlXFwhNzNqHWza9DsJcxxvepRRgv fdhBgzui/3lE0msmnVowNXWwYA== -----END CERTIFICATE-----Generated at Thu Sep 24 11:07:56 2026 by rpki-client