$ rpki-client -vvvf rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft File: ggn985rwLDua5QPyJddH5nqjzfM.mft (raw, json) Hash identifier: ksqsuJBRtSAT72HuWEU5yPzeOlA69Ahale4dpd83FUc= Subject key identifier: 36:AE:23:7F:EC:8B:ED:B6:6A:C6:A8:FA:96:EA:6A:2B:60:73:A5:FE Authority key identifier: 82:09:FD:F3:9A:F0:2C:3B:9A:E5:03:F2:25:D7:47:E6:7A:A3:CD:F3 Certificate issuer: /CN=A9144788/serialNumber=8209FDF39AF02C3B9AE503F225D747E67AA3CDF3 Certificate serial: 0247 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft Manifest number: 0231 Signing time: Tue 29 Sep 2026 03:08:57 +0000 Manifest this update: Tue 29 Sep 2026 03:08:56 +0000 Manifest next update: Tue 06 Oct 2026 03:08:56 +0000 Files and hashes: 1: ggn985rwLDua5QPyJddH5nqjzfM.crl (hash: y1SF6ptL7EPRNh0sM8PQg75a3CdBcumslGfb+WxLhkk=) 2: 4E87E6766C9311EEA3DF6E7FC4F9AE02.roa (hash: dYjOKoFq07vgQeItv9OVgz3KsqWlrs+XcRm7MKKAaMM=) 3: 007AE4426C9311EEBEA0EB63C4F9AE02.roa (hash: /wkatpVrkS2oqc5vbQzFdNG4qk7SuNWJ/ByIrBY+v+s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.crl rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Oct 2026 03:08:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 583 (0x247) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144788, serialNumber=8209FDF39AF02C3B9AE503F225D747E67AA3CDF3 Validity Not Before: Sep 29 03:08:56 2026 GMT Not After : Oct 6 03:08:56 2026 GMT Subject: CN=6abb2bc9-894e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5d:03:7a:0e:2e:f9:30:ef:93:60:1d:95:30: 49:21:98:9b:61:eb:d4:90:20:17:9c:a3:7c:d2:59: ec:b3:29:23:95:a9:a7:73:67:e5:ce:22:3f:f1:5b: c5:fd:62:5d:8d:66:01:2b:0c:df:70:92:9c:ee:ec: be:0f:99:b1:b6:19:fe:b8:76:f5:ba:bc:59:e7:d6: b4:11:b2:bc:28:69:d9:89:47:62:57:1e:d6:fd:2e: e1:d4:c7:f9:ed:12:c5:d9:0d:c7:0c:4d:9e:83:e1: 35:71:b2:bc:51:e9:86:66:36:aa:58:e4:8a:10:f7: 61:90:71:f7:8e:ad:55:61:a1:7c:c9:1d:12:48:94: 0b:1f:07:81:dd:ce:86:a2:3d:ab:14:9a:3c:8d:72: 3b:01:b8:d1:40:00:b6:db:38:fe:33:92:7f:4c:07: 17:72:63:63:4a:6b:f8:e9:a0:1f:90:7d:2a:3c:12: b8:44:7e:3a:27:df:4b:c3:b6:f4:fa:e9:8e:07:22: 05:6b:eb:1d:e4:8e:ed:34:56:29:69:b8:20:eb:3c: 21:97:50:3e:69:f6:e5:88:d3:6c:a2:b8:18:78:7c: 2a:11:37:ae:0f:51:3a:ec:ed:c0:72:6c:f9:87:8d: c4:0f:62:72:64:1e:44:77:cc:93:96:19:59:b7:c2: b0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:AE:23:7F:EC:8B:ED:B6:6A:C6:A8:FA:96:EA:6A:2B:60:73:A5:FE X509v3 Authority Key Identifier: keyid:82:09:FD:F3:9A:F0:2C:3B:9A:E5:03:F2:25:D7:47:E6:7A:A3:CD:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:1f:3c:8b:45:50:30:e7:8c:4b:af:0c:e0:b8:79:42:49:b8: 7a:d7:e1:81:3c:cf:b8:e2:5c:8e:4c:ec:7b:88:de:4a:cb:ce: f8:03:af:7e:38:80:8d:84:6f:28:bd:6c:12:ad:4e:5d:48:a8: 25:fc:df:81:3d:fa:f0:f2:8b:f1:22:f5:f5:b2:22:d8:a5:9b: 09:c1:5e:66:69:c3:64:58:e1:c5:10:ca:d1:23:2c:7a:16:12: 7b:4a:26:49:45:1a:18:01:2c:d4:bc:cf:39:da:2b:cc:dd:bc: 0d:36:20:74:17:8f:3c:d3:7a:a8:03:9c:a1:f5:1a:44:5b:33: ea:49:04:af:c2:7c:7f:44:2c:48:1c:aa:1c:6e:a0:92:ac:e6: 47:b9:57:60:dd:9f:3c:9b:1a:8b:2b:3e:51:d7:1b:98:b7:b2: 59:e7:32:99:e7:07:ca:59:f8:ac:46:d5:58:d2:ba:85:ca:db: ba:87:a6:d5:26:9a:31:d8:fa:e1:73:90:1f:da:46:ca:6d:0b: 5d:7a:ba:1a:1d:52:a5:57:fc:11:5d:c7:bf:90:47:24:3c:7c: 05:0b:09:58:f1:9f:ba:56:4b:7f:fe:35:44:a9:da:04:5e:93: ec:c7:52:d7:04:a4:a6:a1:59:e1:53:89:56:a7:e1:39:19:ec: c8:27:46:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ3ODgxMTAvBgNVBAUTKDgyMDlGREYzOUFGMDJDM0I5QUU1MDNGMjI1RDc0N0U2 N0FBM0NERjMwHhcNMjYwOTI5MDMwODU2WhcNMjYxMDA2MDMwODU2WjAYMRYwFAYD VQQDEw02YWJiMmJjOS04OTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw10Deg4u+TDvk2AdlTBJIZibYevUkCAXnKN80lnssykjlamnc2flziI/8VvF /WJdjWYBKwzfcJKc7uy+D5mxthn+uHb1urxZ59a0EbK8KGnZiUdiVx7W/S7h1Mf5 7RLF2Q3HDE2eg+E1cbK8UemGZjaqWOSKEPdhkHH3jq1VYaF8yR0SSJQLHweB3c6G oj2rFJo8jXI7AbjRQAC22zj+M5J/TAcXcmNjSmv46aAfkH0qPBK4RH46J99Lw7b0 +umOByIFa+sd5I7tNFYpabgg6zwhl1A+afbliNNsorgYeHwqETeuD1E67O3Acmz5 h43ED2JyZB5Ed8yTlhlZt8KwcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDauI3/s i+22asao+pbqaitgc6X+MB8GA1UdIwQYMBaAFIIJ/fOa8Cw7muUD8iXXR+Z6o83z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDc4OC8zN0YwMUIxQTZD OTExMUVFQTU2MDdCMjlDNEY5QUUwMi9nZ245ODVyd0xEdWE1UVB5SmRkSDVucWp6 Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dnbjk4NXJ3TER1YTVRUHlKZGRINW5xanpmTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDc4OC8zN0YwMUIxQTZDOTExMUVFQTU2MDdCMjlDNEY5QUUwMi9nZ245ODVyd0xE dWE1UVB5SmRkSDVucWp6Zk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQB88i0VQMOeMS68M4Lh5Qkm4etfhgTzPuOJcjkzse4jeSsvO+AOvfjiAjYRv KL1sEq1OXUioJfzfgT368PKL8SL19bIi2KWbCcFeZmnDZFjhxRDK0SMsehYSe0om SUUaGAEs1LzPOdorzN28DTYgdBePPNN6qAOcofUaRFsz6kkEr8J8f0QsSByqHG6g kqzmR7lXYN2fPJsaiys+UdcbmLeyWecymecHyln4rEbVWNK6hcrbuoem1SaaMdj6 4XOQH9pGym0LXXq6Gh1SpVf8EV3Hv5BHJDx8BQsJWPGfulZLf/41RKnaBF6T7MdS 1wSkpqFZ4VOJVqfhORnsyCdG4Q== -----END CERTIFICATE-----Generated at Tue Sep 29 19:58:39 2026 by rpki-client