$ rpki-client -vvvf rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft File: c7ohvjbd39WGkBFtbux73H7--yg.mft (raw, json) Hash identifier: XVZ2u4PSfNa3jPCNXRqKLL7XsZp8WT+sYlRDR5erxa4= Subject key identifier: 0D:4A:1A:63:55:09:FE:0D:3E:0C:33:E2:D1:69:CB:92:A8:DB:59:0E Authority key identifier: 73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28 Certificate issuer: /CN=A9127FC2/serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28 Certificate serial: 04BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft Manifest number: 0478 Signing time: Fri 25 Sep 2026 00:02:12 +0000 Manifest this update: Fri 25 Sep 2026 00:02:11 +0000 Manifest next update: Fri 02 Oct 2026 00:02:11 +0000 Files and hashes: 1: c7ohvjbd39WGkBFtbux73H7--yg.crl (hash: HQ8oDyGv/ctKVjqoDIjRa3LerygGtCKRoDPS5djfawk=) 2: DD152F4ECA7D11F0AD0F2B30C4F9AE02.roa (hash: XU66OcU3fnYJls4O62nuYW+aPPgFO6XUlfyCsJCffUE=) 3: 63F359F0620711EE8BBCFF68C4F9AE02.roa (hash: 1cM14NhAHexpysqpl1gCbKReRuyBQxaQgkUwJjz7qxw=) 4: AB95EEC4BCFA11EDAD328D3AC4F9AE02.roa (hash: klFS2EwojWiZ7PvsY5ywexl5W5eODCB0mjNce2fBPs8=) 5: 9B39DA4A17B611F0949B3513C4F9AE02.roa (hash: gWfYJLFQiUGGCySMAATeYDsxEOK4XTc6fxDY8vUTdP4=) 6: BDD52DF26AF311F1A3F54E617547A888.roa (hash: YDvGDAvEOaQ3i1B7cemmqUz4csMi56McTSjidKVS5sQ=) 7: 4DD5897E501911F1B9231017C2833773.roa (hash: 74iwg4T3jS20u81MSENAOAD9vyDefXzwbL5rlNQ4X/0=) 8: 3143DEC26C8811EEBAB7F227C4F9AE02.roa (hash: PmWlH9hI8UDfrum8ljKdCPWBn/RfhOuKClthQ5ZzQA0=) 9: 1ABD64C4FC4B11EC9E374483C4F9AE02.roa (hash: 6txwDANkb+stD+30rgYCUnBhArG1SXPn7l/lsuR8IgY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 00:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1211 (0x4bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127FC2, serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28 Validity Not Before: Sep 25 00:02:11 2026 GMT Not After : Oct 2 00:02:11 2026 GMT Subject: CN=6ab5ba03-e2fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:87:f7:82:b0:37:06:5e:df:9b:62:b4:57:3a: a7:26:39:28:45:38:8b:c8:f6:d4:b5:f8:3b:c0:e6: 24:ec:a7:d5:1d:2f:88:23:42:48:25:f3:a3:dd:50: 65:96:90:f9:12:ed:d3:4e:72:7d:71:43:c7:f7:18: d5:c1:74:a7:e1:00:ab:22:8f:15:a8:4a:ba:59:5a: d1:86:96:5d:9c:3f:80:2d:e4:cc:52:77:ae:68:6b: d8:99:a7:43:54:f6:c4:91:f1:a1:ef:9f:cd:ae:60: 78:89:3d:52:1b:1e:a7:33:75:d0:fa:21:f7:f9:88: d9:7f:ca:5d:4f:8f:e0:86:d8:04:b5:13:ca:49:96: 39:4d:31:58:7e:e8:b5:a2:b0:35:b7:60:9e:6d:b3: 16:90:2e:02:c4:06:23:54:08:a1:69:cb:68:8a:a5: 0a:2d:ff:a4:cd:ce:48:d1:28:41:a0:06:3d:39:49: 22:2f:5e:14:2e:d9:e9:00:b3:59:4e:d2:32:d4:5c: e5:28:9c:37:c6:9c:87:25:52:20:15:c6:92:ec:f3: 0c:97:7b:5a:a5:d1:e0:b6:0a:73:32:23:c5:c4:bf: b1:c1:db:7d:25:2f:d5:13:c7:0a:ff:ee:a6:c0:15: 8b:bb:af:cb:4b:eb:c0:b8:cd:00:75:37:37:38:74: f6:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:4A:1A:63:55:09:FE:0D:3E:0C:33:E2:D1:69:CB:92:A8:DB:59:0E X509v3 Authority Key Identifier: keyid:73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:c4:03:02:85:a6:61:1a:dc:e8:e0:3c:03:ed:e2:b9:57:05: c5:2a:a5:08:c2:a8:91:5c:19:9e:cc:3b:a4:45:7e:c1:c4:62: ed:ac:98:08:ce:f4:15:7f:85:90:83:a8:d5:bf:bf:06:da:09: 8a:ac:84:ef:88:b0:b5:56:72:24:f6:87:64:f8:78:48:2a:1f: 6e:c5:9b:96:68:8b:e8:ce:7d:90:05:6a:ca:70:67:85:30:dc: 71:3d:e9:49:2b:bf:9a:fc:92:0d:8d:39:fc:51:03:d9:cb:74: b3:32:89:b2:36:ad:3b:e7:f4:b0:b9:02:21:74:14:e8:9d:dd: 53:a6:03:6a:6f:df:3b:97:74:63:6b:0c:12:7c:4d:41:93:b7: fd:5f:c5:6d:02:dc:93:79:25:52:5e:f9:4d:32:f1:68:dd:13: 87:46:ee:3f:10:ce:f8:e2:f1:dc:03:5a:33:1d:af:27:2c:dc: ae:a8:7d:75:fc:97:b0:4e:f2:1e:b8:20:c2:7a:c0:76:a5:e5: 62:a0:06:7b:43:b1:32:c2:bd:66:56:aa:b1:6f:c8:5b:fa:ef: 1f:b8:b5:0f:76:9a:a9:f9:db:96:08:14:64:e7:fd:52:ce:3d: 66:e7:e7:ce:ee:2e:33:cf:0f:18:48:d0:b8:d0:f5:ed:90:68: 38:e1:7a:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdGQzIxMTAvBgNVBAUTKDczQkEyMUJFMzZERERGRDU4NjkwMTE2RDZFRUM3QkRD N0VGRUZCMjgwHhcNMjYwOTI1MDAwMjExWhcNMjYxMDAyMDAwMjExWjAYMRYwFAYD VQQDEw02YWI1YmEwMy1lMmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqof3grA3Bl7fm2K0VzqnJjkoRTiLyPbUtfg7wOYk7KfVHS+II0JIJfOj3VBl lpD5Eu3TTnJ9cUPH9xjVwXSn4QCrIo8VqEq6WVrRhpZdnD+ALeTMUneuaGvYmadD VPbEkfGh75/NrmB4iT1SGx6nM3XQ+iH3+YjZf8pdT4/ghtgEtRPKSZY5TTFYfui1 orA1t2CebbMWkC4CxAYjVAihactoiqUKLf+kzc5I0ShBoAY9OUkiL14ULtnpALNZ TtIy1FzlKJw3xpyHJVIgFcaS7PMMl3tapdHgtgpzMiPFxL+xwdt9JS/VE8cK/+6m wBWLu6/LS+vAuM0AdTc3OHT21QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA1KGmNV Cf4NPgwz4tFpy5Ko21kOMB8GA1UdIwQYMBaAFHO6Ib423d/VhpARbW7se9x+/vso MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0ZDMi81RTMwQkY3MEJC QTYxMUVDQkFGNDMxNTZDNEY5QUUwMi9jN29odmpiZDM5V0drQkZ0YnV4NzNINy0t eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3b2h2amJkMzlXR2tCRnRidXg3M0g3LS15Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0ZDMi81RTMwQkY3MEJCQTYxMUVDQkFGNDMxNTZDNEY5QUUwMi9jN29odmpiZDM5 V0drQkZ0YnV4NzNINy0teWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATcQDAoWmYRrc6OA8A+3iuVcFxSqlCMKokVwZnsw7pEV+wcRi7ayYCM70FX+F kIOo1b+/BtoJiqyE74iwtVZyJPaHZPh4SCofbsWblmiL6M59kAVqynBnhTDccT3p SSu/mvySDY05/FED2ct0szKJsjatO+f0sLkCIXQU6J3dU6YDam/fO5d0Y2sMEnxN QZO3/V/FbQLck3klUl75TTLxaN0Th0buPxDO+OLx3ANaMx2vJyzcrqh9dfyXsE7y HrggwnrAdqXlYqAGe0OxMsK9ZlaqsW/IW/rvH7i1D3aaqfnblggUZOf9Us49Zufn zu4uM88PGEjQuND17ZBoOOF6EA== -----END CERTIFICATE-----Generated at Sat Sep 26 14:10:15 2026 by rpki-client