$ rpki-client -vvvf rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.mft File: gO0g9_wH3gyfPBuOKunNP85u2yE.mft (raw, json) Hash identifier: AicFOJmWD28h02LIxnlfex1ln/m0xJRKzjbDIPOf/yI= Subject key identifier: 7F:3A:03:CE:CE:40:D0:3C:4C:52:07:63:56:DD:16:67:56:F3:F2:4B Authority key identifier: 80:ED:20:F7:FC:07:DE:0C:9F:3C:1B:8E:2A:E9:CD:3F:CE:6E:DB:21 Certificate issuer: /CN=A915BE00/serialNumber=80ED20F7FC07DE0C9F3C1B8E2AE9CD3FCE6EDB21 Certificate serial: 0648 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gO0g9_wH3gyfPBuOKunNP85u2yE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.mft Manifest number: 063A Signing time: Sun 20 Sep 2026 22:35:29 +0000 Manifest this update: Sun 20 Sep 2026 22:35:28 +0000 Manifest next update: Sun 27 Sep 2026 22:35:28 +0000 Files and hashes: 1: gO0g9_wH3gyfPBuOKunNP85u2yE.crl (hash: aJi1e0tTxnFSFZcaaK7ec5LetbeTXhioDNqrysZolhY=) 2: 972D6576112511F08AC1A549C4F9AE02.roa (hash: cXS9kwOeIytUZvskHO0vNiq0jU3tFCH1tuVFz+pCcZU=) 3: 513D702E112511F081CC4E49C4F9AE02.roa (hash: NH/K1DDvn5aeutjluyX6sIyhLYFZZaLzJygBEDC22+Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.crl rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gO0g9_wH3gyfPBuOKunNP85u2yE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 22:35:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1608 (0x648) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BE00, serialNumber=80ED20F7FC07DE0C9F3C1B8E2AE9CD3FCE6EDB21 Validity Not Before: Sep 20 22:35:28 2026 GMT Not After : Sep 27 22:35:28 2026 GMT Subject: CN=6ab05fb1-d016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ce:01:13:76:fb:b6:ad:62:ac:55:ff:2e:90: 50:be:ad:60:a2:73:fb:89:ee:2d:77:bb:02:70:8d: a9:a9:83:12:b1:79:37:20:1d:de:47:8d:ba:61:70: 1b:c8:6c:aa:61:0e:ca:fe:a7:54:ad:1c:5b:46:af: 84:87:79:82:e8:2d:c4:58:25:b1:f8:de:c0:67:24: 2a:57:51:09:9f:7a:b4:97:58:f9:00:8f:30:c3:ee: 7b:0f:89:4a:9d:d3:39:77:ef:00:ce:40:53:b3:77: 97:22:ee:d7:28:21:a6:88:85:a6:e0:6a:1e:cf:31: 31:5f:96:1b:f3:02:74:6a:93:77:93:b1:d2:45:2d: 4d:63:fe:b0:47:37:5d:37:94:6e:44:26:85:34:30: 3a:eb:3f:5b:0a:50:08:f1:f3:e4:e3:bd:98:66:a6: 7e:d3:1b:b3:8a:b9:56:f9:2d:0f:e2:6e:80:ed:22: 22:b6:88:49:98:78:c9:16:9d:90:4e:df:3c:c0:6a: e3:c2:91:2a:b4:78:86:48:e9:d7:98:5b:b5:8d:34: 98:ab:ec:89:72:e4:45:54:f3:d9:f0:f8:45:0c:f2: 13:f1:bb:45:2c:b5:53:02:65:26:3c:ea:8b:8e:90: e7:88:1f:4d:0e:40:4c:51:8b:75:24:4b:95:7f:28: 91:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:3A:03:CE:CE:40:D0:3C:4C:52:07:63:56:DD:16:67:56:F3:F2:4B X509v3 Authority Key Identifier: keyid:80:ED:20:F7:FC:07:DE:0C:9F:3C:1B:8E:2A:E9:CD:3F:CE:6E:DB:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gO0g9_wH3gyfPBuOKunNP85u2yE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:d3:39:91:e1:11:93:13:35:31:1f:13:d8:1c:c9:7b:52:7a: 97:6b:b7:bf:29:e0:b4:83:65:e6:e7:96:08:e3:d7:e5:9a:c9: d1:e3:9a:9e:df:cd:5f:03:7f:76:3e:31:3a:78:77:4c:76:af: 38:d4:6c:fa:fe:4a:61:76:be:b2:5d:39:f5:4c:11:13:72:36: c3:7a:b0:c8:15:53:d3:b2:9e:7e:3a:59:cd:cb:f9:00:95:93: a4:8f:42:9f:f2:bc:dc:a6:3a:47:d3:4b:52:64:90:94:a1:de: ee:66:dd:58:9d:e3:5d:b7:8e:e9:cf:37:58:33:50:00:a6:8e: 81:69:b7:2a:16:78:cf:5b:9a:8c:f4:95:3b:0f:f4:6e:39:f2: 6b:eb:c7:c9:d1:60:60:61:18:5f:3a:fa:3b:24:eb:56:9d:84: a2:a5:49:2e:7e:95:e8:18:83:98:54:79:e9:e1:49:f6:86:3b: 08:49:ca:de:d0:2d:b2:c5:55:f4:7b:5a:e2:73:7f:96:da:0e: 79:9b:1b:0f:9f:f3:f3:4f:18:d9:85:c4:95:ce:8f:f0:e6:c7: ce:42:db:94:8f:f8:b3:dc:20:8c:20:dd:2f:29:67:34:67:d5: 7f:e8:66:2b:32:4e:a6:0f:6f:73:2d:d0:83:1b:d0:fe:f6:24: 0e:dc:17:ef -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJFMDAxMTAvBgNVBAUTKDgwRUQyMEY3RkMwN0RFMEM5RjNDMUI4RTJBRTlDRDNG Q0U2RURCMjEwHhcNMjYwOTIwMjIzNTI4WhcNMjYwOTI3MjIzNTI4WjAYMRYwFAYD VQQDEw02YWIwNWZiMS1kMDE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzM4BE3b7tq1irFX/LpBQvq1gonP7ie4td7sCcI2pqYMSsXk3IB3eR426YXAb yGyqYQ7K/qdUrRxbRq+Eh3mC6C3EWCWx+N7AZyQqV1EJn3q0l1j5AI8ww+57D4lK ndM5d+8AzkBTs3eXIu7XKCGmiIWm4GoezzExX5Yb8wJ0apN3k7HSRS1NY/6wRzdd N5RuRCaFNDA66z9bClAI8fPk472YZqZ+0xuzirlW+S0P4m6A7SIitohJmHjJFp2Q Tt88wGrjwpEqtHiGSOnXmFu1jTSYq+yJcuRFVPPZ8PhFDPIT8btFLLVTAmUmPOqL jpDniB9NDkBMUYt1JEuVfyiRewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH86A87O QNA8TFIHY1bdFmdW8/JLMB8GA1UdIwQYMBaAFIDtIPf8B94MnzwbjirpzT/Obtsh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkUwMC8zRDBCMjEyQUY0 RkQxMUVCQTUyQ0UyMTFDNEY5QUUwMi9nTzBnOV93SDNneWZQQnVPS3VuTlA4NXUy eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dPMGc5X3dIM2d5ZlBCdU9LdW5OUDg1dTJ5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkUwMC8zRDBCMjEyQUY0RkQxMUVCQTUyQ0UyMTFDNEY5QUUwMi9nTzBnOV93SDNn eWZQQnVPS3VuTlA4NXUyeUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKNM5keERkxM1MR8T2BzJe1J6l2u3vyngtINl5ueWCOPX5ZrJ0eOant/NXwN/ dj4xOnh3THavONRs+v5KYXa+sl059UwRE3I2w3qwyBVT07KefjpZzcv5AJWTpI9C n/K83KY6R9NLUmSQlKHe7mbdWJ3jXbeO6c83WDNQAKaOgWm3KhZ4z1uajPSVOw/0 bjnya+vHydFgYGEYXzr6OyTrVp2EoqVJLn6V6BiDmFR56eFJ9oY7CEnK3tAtssVV 9Hta4nN/ltoOeZsbD5/z808Y2YXElc6P8ObHzkLblI/4s9wgjCDdLylnNGfVf+hm KzJOpg9vcy3QgxvQ/vYkDtwX7w== -----END CERTIFICATE-----Generated at Mon Sep 21 09:11:14 2026 by rpki-client