$ rpki-client -vvvf rpki.apnic.net/member_repository/A9138A44/7710230CA10511F180CEB6EF3511F970/g5QfcUHW2cwg3DLw_lc4OMWkdo0.mft File: g5QfcUHW2cwg3DLw_lc4OMWkdo0.mft (raw, json) Hash identifier: s/9w3UNCPoGUioSCe2jJy89UIcLKkhrXupmTPvLKKTk= Subject key identifier: 78:6B:11:B6:8A:C9:EA:89:17:72:7D:54:F9:F9:03:F9:E0:BF:AA:47 Authority key identifier: 83:94:1F:71:41:D6:D9:CC:20:DC:32:F0:FE:57:38:38:C5:A4:76:8D Certificate issuer: /CN=A9138A44/serialNumber=83941F7141D6D9CC20DC32F0FE573838C5A4768D Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g5QfcUHW2cwg3DLw_lc4OMWkdo0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138A44/7710230CA10511F180CEB6EF3511F970/g5QfcUHW2cwg3DLw_lc4OMWkdo0.mft Manifest number: 11 Signing time: Mon 21 Sep 2026 09:05:55 +0000 Manifest this update: Mon 21 Sep 2026 09:05:55 +0000 Manifest next update: Mon 28 Sep 2026 09:05:55 +0000 Files and hashes: 1: g5QfcUHW2cwg3DLw_lc4OMWkdo0.crl (hash: cGD7Js4M+eAIT2DbXqAyWUxoLyRYhTDN6yRRcq35Li0=) 2: 547E78ACA11911F1AA6D5C983C11F970.roa (hash: uSyq8GtigHdGR1YUbl2ZFJ4spXwNSbS2qhInIUnXVGY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138A44/7710230CA10511F180CEB6EF3511F970/g5QfcUHW2cwg3DLw_lc4OMWkdo0.crl rsync://rpki.apnic.net/member_repository/A9138A44/7710230CA10511F180CEB6EF3511F970/g5QfcUHW2cwg3DLw_lc4OMWkdo0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g5QfcUHW2cwg3DLw_lc4OMWkdo0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 09:05:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138A44, serialNumber=83941F7141D6D9CC20DC32F0FE573838C5A4768D Validity Not Before: Sep 21 09:05:55 2026 GMT Not After : Sep 28 09:05:55 2026 GMT Subject: CN=6ab0f373-fe35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a0:c8:7c:85:f9:da:17:01:ff:5a:e5:6b:09: ec:f7:5c:31:f9:63:bd:7c:4e:60:18:3b:c1:02:27: 0d:bb:71:23:a6:bc:ad:33:fc:cb:39:a8:9f:74:fc: 29:e5:11:8b:e1:f5:59:f9:f5:2e:9b:bc:53:b5:29: 49:19:23:6a:92:72:3d:39:0e:85:98:d9:3f:0e:30: af:b3:24:f3:e4:1c:88:78:bf:34:58:21:7d:75:48: 7e:65:50:f6:c3:5f:ed:d4:14:98:06:2b:22:ff:0b: c3:fe:89:03:37:d9:fb:87:84:84:31:1f:03:4a:6a: ec:b7:24:68:ba:98:7c:8d:aa:8b:49:98:06:e3:7a: 36:0f:4e:a3:da:c2:3f:84:57:b7:58:c4:e5:91:69: b2:86:74:33:83:09:0f:f9:ad:91:f4:28:ec:01:77: d5:4e:d4:77:4f:d2:3c:af:aa:77:8f:4c:52:72:e8: 8f:59:1f:b9:3c:b7:3e:37:de:31:d9:15:fc:b4:27: 67:94:0b:a5:60:aa:4c:fe:43:7d:04:02:a3:92:eb: 7f:42:08:32:10:cc:ae:0d:70:e5:0f:91:14:d8:df: 40:0f:10:e0:f1:5f:4c:73:48:33:21:27:98:83:09: b0:00:a6:fb:92:63:ca:41:2e:84:2a:94:2c:1b:6c: 1e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:6B:11:B6:8A:C9:EA:89:17:72:7D:54:F9:F9:03:F9:E0:BF:AA:47 X509v3 Authority Key Identifier: keyid:83:94:1F:71:41:D6:D9:CC:20:DC:32:F0:FE:57:38:38:C5:A4:76:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138A44/7710230CA10511F180CEB6EF3511F970/g5QfcUHW2cwg3DLw_lc4OMWkdo0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g5QfcUHW2cwg3DLw_lc4OMWkdo0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A44/7710230CA10511F180CEB6EF3511F970/g5QfcUHW2cwg3DLw_lc4OMWkdo0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:33:63:b6:7b:7e:7f:bc:5c:47:5a:8b:89:df:7e:17:a7:f6: ea:5e:c5:25:2b:15:93:ee:97:cc:22:07:01:51:67:cb:41:f1: 81:1d:57:c0:ad:29:c4:12:22:02:dd:20:86:52:13:5f:4f:e1: cb:ad:86:31:d4:b5:3f:fb:21:a0:aa:76:75:e2:ab:ff:ba:f3: 79:ae:36:f8:1b:72:54:0c:7c:73:ce:7b:48:0e:16:64:e6:fa: 8f:af:bf:98:01:cd:2f:d8:48:cd:17:7e:bc:39:e7:df:1a:8a: 51:54:7f:af:ca:e5:07:36:8d:ca:33:94:09:44:14:b5:d7:50: 91:bb:f0:17:da:d5:0f:67:06:04:09:6f:a8:69:de:de:44:bf: 00:2d:77:43:16:9a:28:73:af:83:c0:0d:61:31:60:f1:74:66: 51:dd:56:1a:10:2a:04:2d:18:61:31:2c:0b:6f:0f:83:f8:a2: f4:5a:14:55:49:a6:79:76:8d:61:9b:24:d9:ea:02:c2:89:7b: 1d:1d:b4:95:74:3e:96:e6:52:55:25:a1:89:0f:a8:66:8a:03: 65:09:d1:e8:15:06:b0:19:1b:80:21:91:3f:cd:88:9f:6e:7d: fb:43:43:ca:b3:10:4a:c0:9b:4e:fd:1b:da:c5:20:2a:22:e5: 6a:f6:09:e8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz OEE0NDExMC8GA1UEBRMoODM5NDFGNzE0MUQ2RDlDQzIwREMzMkYwRkU1NzM4MzhD NUE0NzY4RDAeFw0yNjA5MjEwOTA1NTVaFw0yNjA5MjgwOTA1NTVaMBgxFjAUBgNV BAMTDTZhYjBmMzczLWZlMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnoMh8hfnaFwH/WuVrCez3XDH5Y718TmAYO8ECJw27cSOmvK0z/Ms5qJ90/Cnl EYvh9Vn59S6bvFO1KUkZI2qScj05DoWY2T8OMK+zJPPkHIh4vzRYIX11SH5lUPbD X+3UFJgGKyL/C8P+iQM32fuHhIQxHwNKauy3JGi6mHyNqotJmAbjejYPTqPawj+E V7dYxOWRabKGdDODCQ/5rZH0KOwBd9VO1HdP0jyvqnePTFJy6I9ZH7k8tz433jHZ Ffy0J2eUC6Vgqkz+Q30EAqOS639CCDIQzK4NcOUPkRTY30APEODxX0xzSDMhJ5iD CbAApvuSY8pBLoQqlCwbbB5xAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUeGsRtorJ 6okXcn1U+fkD+eC/qkcwHwYDVR0jBBgwFoAUg5QfcUHW2cwg3DLw/lc4OMWkdo0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4QTQ0Lzc3MTAyMzBDQTEw NTExRjE4MENFQjZFRjM1MTFGOTcwL2c1UWZjVUhXMmN3ZzNETHdfbGM0T01Xa2Rv MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZzVRZmNVSFcyY3dnM0RMd19sYzRPTVdrZG8wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4 QTQ0Lzc3MTAyMzBDQTEwNTExRjE4MENFQjZFRjM1MTFGOTcwL2c1UWZjVUhXMmN3 ZzNETHdfbGM0T01Xa2RvMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB2M2O2e35/vFxHWouJ334Xp/bqXsUlKxWT7pfMIgcBUWfLQfGBHVfArSnEEiIC 3SCGUhNfT+HLrYYx1LU/+yGgqnZ14qv/uvN5rjb4G3JUDHxzzntIDhZk5vqPr7+Y Ac0v2EjNF368OeffGopRVH+vyuUHNo3KM5QJRBS111CRu/AX2tUPZwYECW+oad7e RL8ALXdDFpooc6+DwA1hMWDxdGZR3VYaECoELRhhMSwLbw+D+KL0WhRVSaZ5do1h myTZ6gLCiXsdHbSVdD6W5lJVJaGJD6hmigNlCdHoFQawGRuAIZE/zYifbn37Q0PK sxBKwJtO/RvaxSAqIuVq9gno -----END CERTIFICATE-----Generated at Tue Sep 22 17:00:18 2026 by rpki-client