$ rpki-client -vvvf rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.mft File: mgZOprZttN4gyTzAQbhaFwbIBnI.mft (raw, json) Hash identifier: BTuAUiF4wuHox754XPGQlawhzxWoRJVvYStE9YksN2E= Subject key identifier: CC:6B:D5:85:A5:96:01:2A:BA:1F:9D:2A:63:64:A0:34:EE:81:05:4C Authority key identifier: 9A:06:4E:A6:B6:6D:B4:DE:20:C9:3C:C0:41:B8:5A:17:06:C8:06:72 Certificate issuer: /CN=A913A5BD/serialNumber=9A064EA6B66DB4DE20C93CC041B85A1706C80672 Certificate serial: 0356 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgZOprZttN4gyTzAQbhaFwbIBnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.mft Manifest number: 034B Signing time: Mon 21 Sep 2026 00:46:49 +0000 Manifest this update: Mon 21 Sep 2026 00:46:49 +0000 Manifest next update: Mon 28 Sep 2026 00:46:49 +0000 Files and hashes: 1: mgZOprZttN4gyTzAQbhaFwbIBnI.crl (hash: U2LHz6hZd8lHPdn2fPqo7UuI1j+ophxu6vwAp6B8mZM=) 2: C6B3DBFE1CF911EDBAE62F45C4F9AE02.roa (hash: HIwqlmntoeFwo+S7UDebJJRPpqNaEv4Pryk7jDC+0qM=) 3: E79D93681C1F11F1B2DF50D0313D8C67.roa (hash: W4I4DorhQtZcnS22ft48DnGQCDVeftj54k6lXf7w3f0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.crl rsync://rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgZOprZttN4gyTzAQbhaFwbIBnI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 854 (0x356) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A5BD, serialNumber=9A064EA6B66DB4DE20C93CC041B85A1706C80672 Validity Not Before: Sep 21 00:46:49 2026 GMT Not After : Sep 28 00:46:49 2026 GMT Subject: CN=6ab07e79-e2d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:24:dd:56:27:86:28:19:51:e4:da:5d:a3:51: 68:d4:1e:63:3a:42:35:66:1a:e6:87:a9:81:41:dc: 72:f2:8a:24:7f:79:90:79:a5:86:d6:62:8b:7f:40: 3d:de:9c:c1:a5:5d:63:90:55:4f:c1:67:45:41:f2: ea:7a:ad:95:04:0a:2d:38:a3:e4:c6:ae:e1:9b:8b: 46:f9:86:37:0a:7c:bb:79:0d:46:4a:74:8f:93:a1: c4:0f:a9:09:9f:fa:d7:82:c4:60:b6:b0:ce:79:ce: 44:32:80:0c:e8:85:59:ce:57:00:98:4b:31:2a:13: 3e:db:4e:4e:a4:b1:34:e9:01:52:3e:73:ac:c1:34: ac:ae:92:1e:01:4f:d1:74:9a:77:8b:4d:05:fd:44: 6a:17:9d:64:33:ba:a1:23:67:57:3f:49:17:da:c1: bc:1e:86:1f:b6:2c:87:8c:78:95:41:e6:1a:c7:af: a2:62:39:e3:41:ca:aa:b5:2a:5c:38:d7:94:f0:78: 53:22:90:97:1f:35:27:e4:4f:ba:6c:9b:d5:c9:7d: 81:7e:25:91:bb:a2:72:6a:ed:19:d6:c8:6d:f5:df: 93:fd:b9:b3:eb:a6:82:e6:b8:ff:79:5a:b4:ea:74: 8d:0e:16:02:b7:43:38:1e:62:68:1c:04:bf:79:be: 6a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:6B:D5:85:A5:96:01:2A:BA:1F:9D:2A:63:64:A0:34:EE:81:05:4C X509v3 Authority Key Identifier: keyid:9A:06:4E:A6:B6:6D:B4:DE:20:C9:3C:C0:41:B8:5A:17:06:C8:06:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgZOprZttN4gyTzAQbhaFwbIBnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:07:78:29:f7:22:39:ce:f1:f7:9b:c0:8a:d6:6d:f5:19:53: 5c:be:3c:17:1a:0e:30:d3:0e:6e:cf:c0:41:c4:38:32:42:cf: 9d:2e:81:a0:54:13:36:64:a0:2e:47:84:0a:0f:6c:28:12:aa: 54:ad:06:70:b3:43:ad:ea:96:e4:cc:a3:22:11:f3:3d:95:23: a5:e8:c3:e6:8e:90:fe:81:7e:b6:40:d5:f2:be:54:12:d1:35: de:83:c1:0c:85:3b:96:98:2c:a2:99:26:8e:e3:5c:8b:db:12: f0:be:bc:31:f3:2a:f2:ae:30:c3:58:cf:b1:04:bd:d2:98:3c: ae:52:60:e5:a6:1e:10:60:b0:9b:a5:ec:c1:3c:bd:36:a3:62: 61:58:92:b6:fb:e2:0d:ec:8d:ab:90:6f:d5:bd:09:b4:ee:42: dc:40:9d:b7:78:23:c1:eb:ae:fe:c1:89:80:5e:3c:7f:c5:24: 92:1e:39:cd:57:63:e1:14:b5:75:f4:5e:1d:40:4c:08:a8:f9: df:69:f2:0e:45:19:db:28:74:74:04:50:03:4f:66:08:04:57: b1:fe:a3:d4:f1:3d:66:cf:9a:a6:11:6e:ed:24:e8:f2:f6:de: 55:b5:b2:d5:f8:8c:bd:37:c7:06:90:b7:16:ca:3e:38:45:7c: ff:ec:f4:0f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA1YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E1QkQxMTAvBgNVBAUTKDlBMDY0RUE2QjY2REI0REUyMEM5M0NDMDQxQjg1QTE3 MDZDODA2NzIwHhcNMjYwOTIxMDA0NjQ5WhcNMjYwOTI4MDA0NjQ5WjAYMRYwFAYD VQQDEw02YWIwN2U3OS1lMmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9yTdVieGKBlR5Npdo1Fo1B5jOkI1Zhrmh6mBQdxy8ookf3mQeaWG1mKLf0A9 3pzBpV1jkFVPwWdFQfLqeq2VBAotOKPkxq7hm4tG+YY3Cny7eQ1GSnSPk6HED6kJ n/rXgsRgtrDOec5EMoAM6IVZzlcAmEsxKhM+205OpLE06QFSPnOswTSsrpIeAU/R dJp3i00F/URqF51kM7qhI2dXP0kX2sG8HoYftiyHjHiVQeYax6+iYjnjQcqqtSpc ONeU8HhTIpCXHzUn5E+6bJvVyX2BfiWRu6Jyau0Z1sht9d+T/bmz66aC5rj/eVq0 6nSNDhYCt0M4HmJoHAS/eb5qVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMxr1YWl lgEquh+dKmNkoDTugQVMMB8GA1UdIwQYMBaAFJoGTqa2bbTeIMk8wEG4WhcGyAZy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTVCRC81NEVFRjUxNDFD RjcxMUVEQTAwRkQzNDNDNEY5QUUwMi9tZ1pPcHJadHRONGd5VHpBUWJoYUZ3YklC bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21nWk9wclp0dE40Z3lUekFRYmhhRndiSUJuSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QTVCRC81NEVFRjUxNDFDRjcxMUVEQTAwRkQzNDNDNEY5QUUwMi9tZ1pPcHJadHRO NGd5VHpBUWJoYUZ3YklCbkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQgd4KfciOc7x95vAitZt9RlTXL48FxoOMNMObs/AQcQ4MkLPnS6BoFQTNmSg LkeECg9sKBKqVK0GcLNDreqW5MyjIhHzPZUjpejD5o6Q/oF+tkDV8r5UEtE13oPB DIU7lpgsopkmjuNci9sS8L68MfMq8q4ww1jPsQS90pg8rlJg5aYeEGCwm6XswTy9 NqNiYViStvviDeyNq5Bv1b0JtO5C3ECdt3gjweuu/sGJgF48f8Ukkh45zVdj4RS1 dfReHUBMCKj532nyDkUZ2yh0dARQA09mCARXsf6j1PE9Zs+aphFu7STo8vbeVbWy 1fiMvTfHBpC3Fso+OEV8/+z0Dw== -----END CERTIFICATE-----Generated at Tue Sep 22 20:42:14 2026 by rpki-client