$ rpki-client -vvvf rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.mft File: rGoi8eThZQrPtSifXctdU5IPzzQ.mft (raw, json) Hash identifier: PQHRHDNQzAQWTVEG8ADlPmVMSMc2OoI2r6thkKYyZQ4= Subject key identifier: 38:20:01:2F:BD:D9:CD:B7:83:5D:2D:EA:D3:EE:8D:7A:4A:90:BC:E6 Authority key identifier: AC:6A:22:F1:E4:E1:65:0A:CF:B5:28:9F:5D:CB:5D:53:92:0F:CF:34 Certificate issuer: /CN=A91422D7/serialNumber=AC6A22F1E4E1650ACFB5289F5DCB5D53920FCF34 Certificate serial: 01F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoi8eThZQrPtSifXctdU5IPzzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.mft Manifest number: 05B4 Signing time: Mon 21 Sep 2026 00:22:44 +0000 Manifest this update: Mon 21 Sep 2026 00:22:44 +0000 Manifest next update: Mon 28 Sep 2026 00:22:44 +0000 Files and hashes: 1: rGoi8eThZQrPtSifXctdU5IPzzQ.crl (hash: c8D8FGHNv5eZCG6zs7ry+P3DFNDjsZ0jmYWBeA0v254=) 2: CE5F74E2BE5811EEA8C02E2AC4F9AE02.roa (hash: Z1lkPboS7Do5JVczgOK46BmhKy5Eyozp7p6CLVvAhpo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.crl rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoi8eThZQrPtSifXctdU5IPzzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:22:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 503 (0x1f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91422D7, serialNumber=AC6A22F1E4E1650ACFB5289F5DCB5D53920FCF34 Validity Not Before: Sep 21 00:22:44 2026 GMT Not After : Sep 28 00:22:44 2026 GMT Subject: CN=6ab078d4-d67b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c3:68:70:e3:56:4a:c8:03:88:07:8f:50:98: ac:23:aa:f0:1a:b5:f2:ac:1d:8e:d2:d7:9c:f1:d4: aa:54:0c:f2:eb:d9:f0:a9:35:05:d6:de:4a:00:23: 23:58:bf:c0:95:04:4b:49:ee:48:b7:96:77:d9:e5: 09:39:de:53:25:d4:75:3e:1d:2f:10:ba:75:8b:45: ac:ed:9e:03:ff:7c:82:72:83:52:c8:4d:aa:3b:95: 86:29:f9:d5:09:c7:a0:06:91:1c:8a:5c:f4:70:02: 73:8d:87:8a:74:a9:e8:82:bb:b8:ac:4d:02:8c:bd: 6e:b0:01:58:44:88:18:94:1f:5f:ef:77:cc:47:03: 85:68:91:2f:2e:9b:ac:e0:4d:ed:5f:1b:64:27:46: 9f:c1:1f:f9:35:fa:a3:f2:06:03:9b:54:a0:df:89: 0e:a1:77:e6:1b:78:21:05:cc:bc:0d:9f:38:6c:ac: cc:10:44:be:1b:22:24:62:ee:a7:2f:69:86:08:3f: 39:57:25:bc:55:22:8a:73:8f:11:33:75:cf:69:1b: b3:9d:58:a3:af:aa:b6:a6:34:fa:a5:24:69:7b:a1: e5:d6:bf:9b:f5:76:40:01:a4:aa:83:90:73:71:46: f4:fa:2e:c7:b2:df:6a:0c:a8:38:14:30:fe:e6:e3: 7f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:20:01:2F:BD:D9:CD:B7:83:5D:2D:EA:D3:EE:8D:7A:4A:90:BC:E6 X509v3 Authority Key Identifier: keyid:AC:6A:22:F1:E4:E1:65:0A:CF:B5:28:9F:5D:CB:5D:53:92:0F:CF:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoi8eThZQrPtSifXctdU5IPzzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:98:3e:cf:4f:3c:d2:f8:2e:81:ea:5c:09:83:6b:1b:33:74: 3a:20:de:2c:dc:e4:74:a9:91:2d:ce:df:2a:e9:dd:86:e4:20: 0b:aa:55:b0:1b:a1:ff:4b:cd:70:00:bc:1b:5b:0c:39:4b:aa: 83:93:b6:46:69:fa:1c:d5:76:dc:f2:23:2b:2b:18:78:12:a7: 7f:87:74:9b:29:0b:05:c2:64:3d:6d:de:46:ca:1f:84:dd:d3: f4:5a:39:92:fb:a3:31:90:c3:7c:a1:86:99:bf:1d:79:e5:8d: 49:5d:c3:06:57:3c:11:08:30:19:3a:1f:59:97:2b:4b:ad:95: b1:4b:93:87:01:b9:36:51:38:48:e7:e3:52:35:1d:7d:23:53: f3:f5:9c:f4:01:57:1c:f7:9f:94:d7:9b:04:67:bf:8f:cd:c6: b1:7c:6a:aa:0b:07:14:ed:76:92:56:5d:a3:78:4e:c7:21:be: 85:29:d1:9d:5c:25:54:ee:e4:10:f3:f9:d8:af:f9:f9:bf:00: 35:47:f4:10:20:46:62:ad:e4:69:46:a9:38:ea:d9:30:04:95: ce:c1:f0:20:ff:6b:02:32:d1:de:6d:92:e0:d1:fb:d4:86:68: a9:22:48:c3:43:ef:44:19:18:4e:84:32:9f:1d:6e:eb:9e:78: 75:91:16:b4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIyRDcxMTAvBgNVBAUTKEFDNkEyMkYxRTRFMTY1MEFDRkI1Mjg5RjVEQ0I1RDUz OTIwRkNGMzQwHhcNMjYwOTIxMDAyMjQ0WhcNMjYwOTI4MDAyMjQ0WjAYMRYwFAYD VQQDEw02YWIwNzhkNC1kNjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmMNocONWSsgDiAePUJisI6rwGrXyrB2O0tec8dSqVAzy69nwqTUF1t5KACMj WL/AlQRLSe5It5Z32eUJOd5TJdR1Ph0vELp1i0Ws7Z4D/3yCcoNSyE2qO5WGKfnV CcegBpEcilz0cAJzjYeKdKnogru4rE0CjL1usAFYRIgYlB9f73fMRwOFaJEvLpus 4E3tXxtkJ0afwR/5Nfqj8gYDm1Sg34kOoXfmG3ghBcy8DZ84bKzMEES+GyIkYu6n L2mGCD85VyW8VSKKc48RM3XPaRuznVijr6q2pjT6pSRpe6Hl1r+b9XZAAaSqg5Bz cUb0+i7Hst9qDKg4FDD+5uN/SQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDggAS+9 2c23g10t6tPujXpKkLzmMB8GA1UdIwQYMBaAFKxqIvHk4WUKz7Uon13LXVOSD880 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjJENy81QjlGNzFEMkVE MzAxMUVDQkYwN0YwMTJDNEY5QUUwMi9yR29pOGVUaFpRclB0U2lmWGN0ZFU1SVB6 elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JHb2k4ZVRoWlFyUHRTaWZYY3RkVTVJUHp6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjJENy81QjlGNzFEMkVEMzAxMUVDQkYwN0YwMTJDNEY5QUUwMi9yR29pOGVUaFpR clB0U2lmWGN0ZFU1SVB6elEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALpg+z0880vgugepcCYNrGzN0OiDeLNzkdKmRLc7fKundhuQgC6pVsBuh/0vN cAC8G1sMOUuqg5O2Rmn6HNV23PIjKysYeBKnf4d0mykLBcJkPW3eRsofhN3T9Fo5 kvujMZDDfKGGmb8deeWNSV3DBlc8EQgwGTofWZcrS62VsUuThwG5NlE4SOfjUjUd fSNT8/Wc9AFXHPeflNebBGe/j83GsXxqqgsHFO12klZdo3hOxyG+hSnRnVwlVO7k EPP52K/5+b8ANUf0ECBGYq3kaUapOOrZMASVzsHwIP9rAjLR3m2S4NH71IZoqSJI w0PvRBkYToQynx1u6554dZEWtA== -----END CERTIFICATE-----Generated at Tue Sep 22 16:45:06 2026 by rpki-client