$ rpki-client -vvvf rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft File: rGOF7VY-H9amaz5LUQ3MaTDNSww.mft (raw, json) Hash identifier: qMl02Ar2MvyNATWeBWfqGTYdd8V8ZuWltpP/eaUFppU= Subject key identifier: 51:05:9A:0C:5E:66:5B:94:A4:F0:5F:73:88:02:9E:0D:15:6C:39:5B Authority key identifier: AC:63:85:ED:56:3E:1F:D6:A6:6B:3E:4B:51:0D:CC:69:30:CD:4B:0C Certificate issuer: /CN=A9160D0A/serialNumber=AC6385ED563E1FD6A66B3E4B510DCC6930CD4B0C Certificate serial: 02C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft Manifest number: 029E Signing time: Sun 27 Sep 2026 02:06:10 +0000 Manifest this update: Sun 27 Sep 2026 02:06:10 +0000 Manifest next update: Sun 04 Oct 2026 02:06:10 +0000 Files and hashes: 1: rGOF7VY-H9amaz5LUQ3MaTDNSww.crl (hash: XPSZhiOWUXMCZryLt5LmHlTaa9QfVyjPogS3ov2Um5c=) 2: 096A1DB6D2BA11ED8E06CC13C4F9AE02.roa (hash: xjJh+3SCJ/mrp3JYArjRvZVJMzUf7HfzNFOkj330dzY=) 3: D1EAA18CD2BC11ED9E7A9A1BC4F9AE02.roa (hash: s27t8mzFE7pAO+YQ8b7HEZWkopZAKcG8DRX9E1bRajo=) 4: 42EC5F02D2B711EDAF6DC017C4F9AE02.roa (hash: pkC+D8p7TNYzPBnocLkHTaXfdgtNXvj2i4jRd1Gl3NY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.crl rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 02:06:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 704 (0x2c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160D0A, serialNumber=AC6385ED563E1FD6A66B3E4B510DCC6930CD4B0C Validity Not Before: Sep 27 02:06:10 2026 GMT Not After : Oct 4 02:06:10 2026 GMT Subject: CN=6ab87a12-772a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c8:2f:a1:6b:05:0f:37:b8:3c:d9:cb:06:87: d4:9b:0d:88:4d:b3:35:fa:f5:fb:59:84:98:d7:2f: bc:b9:d9:7e:3f:29:29:df:29:82:17:cd:ee:64:92: 01:b3:54:ec:85:cf:ee:33:d4:a9:eb:16:69:10:aa: 52:5a:41:ad:ec:18:1a:a7:52:7a:7d:a4:25:d3:fc: e7:4d:a6:35:b3:cd:44:9e:5c:d1:88:ad:9a:af:10: 74:2a:54:43:77:af:a1:83:e7:17:dd:eb:cb:a2:4c: 74:a7:dc:e3:0d:4f:95:03:6b:32:67:a6:20:1f:c1: 32:d6:18:ef:e7:9c:81:3b:04:27:18:60:b7:e2:8a: bb:da:65:e1:4e:ef:18:bb:08:c8:f3:fe:33:4a:a0: 93:15:62:80:2f:a2:c6:1c:5d:e2:f6:29:3a:9a:aa: c6:c3:3b:6c:db:f2:b1:9d:b1:da:03:5a:29:b7:b6: 6e:da:72:da:d1:ad:a0:fc:c3:1b:a5:e5:0b:13:6f: 07:3a:74:8f:a2:96:9b:60:cd:1d:83:76:0c:f0:0b: 74:ea:0c:82:5c:fd:f0:4c:0e:8f:d0:e7:4d:9f:68: 01:71:b1:68:83:c4:70:31:d5:ce:13:eb:14:b7:26: d6:e9:ab:37:a9:1c:a3:72:51:d8:d8:09:c9:57:62: 64:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:05:9A:0C:5E:66:5B:94:A4:F0:5F:73:88:02:9E:0D:15:6C:39:5B X509v3 Authority Key Identifier: keyid:AC:63:85:ED:56:3E:1F:D6:A6:6B:3E:4B:51:0D:CC:69:30:CD:4B:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:83:8c:d8:72:a1:d9:56:e4:21:95:6a:7d:fa:c3:cb:d3:51: 3c:c8:f6:e6:21:6a:12:e7:c9:93:0d:5b:ed:a7:bb:43:a1:82: 49:a7:3f:9f:f0:db:8d:2c:b5:aa:a6:1d:1c:4d:d0:65:8d:45: 9e:2c:3e:9d:60:74:8a:94:aa:e7:6d:77:cf:1e:b3:fb:04:71: 9c:fa:b7:c8:c8:cd:5b:26:0b:70:da:34:9d:4c:28:78:b0:a3: 88:b1:93:44:fb:7c:cb:bb:46:8f:1d:8d:3d:73:7b:9e:a4:1a: c5:8b:f5:86:e8:73:ef:08:e9:34:49:a5:fb:81:50:0c:a0:5f: 38:e0:d2:da:b7:95:e7:82:48:aa:3f:bd:6c:8e:25:17:60:be: e9:2d:c8:17:ed:20:fb:e4:a4:68:c4:2d:d1:2c:ef:da:03:da: 5f:ae:05:c8:35:e5:f5:66:f2:3e:94:c0:bb:85:3e:fe:63:1a: 8f:d3:fd:55:2c:56:bf:94:cd:b7:f1:09:31:ef:c3:5f:d1:b6: 62:92:ca:e4:fc:ee:40:f0:5a:1b:bd:31:a6:a0:90:e3:e4:3c: 4d:a0:56:05:97:06:7f:1a:e1:a6:ce:d7:b1:93:27:e0:34:9a: 77:f4:8b:63:49:8d:92:e4:e3:d5:5d:f7:76:d1:9b:45:0c:ef: ea:2b:06:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBEMEExMTAvBgNVBAUTKEFDNjM4NUVENTYzRTFGRDZBNjZCM0U0QjUxMERDQzY5 MzBDRDRCMEMwHhcNMjYwOTI3MDIwNjEwWhcNMjYxMDA0MDIwNjEwWjAYMRYwFAYD VQQDEw02YWI4N2ExMi03NzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArcgvoWsFDze4PNnLBofUmw2ITbM1+vX7WYSY1y+8udl+Pykp3ymCF83uZJIB s1Tshc/uM9Sp6xZpEKpSWkGt7Bgap1J6faQl0/znTaY1s81EnlzRiK2arxB0KlRD d6+hg+cX3evLokx0p9zjDU+VA2syZ6YgH8Ey1hjv55yBOwQnGGC34oq72mXhTu8Y uwjI8/4zSqCTFWKAL6LGHF3i9ik6mqrGwzts2/KxnbHaA1opt7Zu2nLa0a2g/MMb peULE28HOnSPopabYM0dg3YM8At06gyCXP3wTA6P0OdNn2gBcbFog8RwMdXOE+sU tybW6as3qRyjclHY2AnJV2JkhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFEFmgxe ZluUpPBfc4gCng0VbDlbMB8GA1UdIwQYMBaAFKxjhe1WPh/Wpms+S1ENzGkwzUsM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEQwQS81NjRBMTM1RUQy MjIxMUVEOUEyMDZDNDZDNEY5QUUwMi9yR09GN1ZZLUg5YW1hejVMVVEzTWFURE5T d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JHT0Y3VlktSDlhbWF6NUxVUTNNYVRETlN3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEQwQS81NjRBMTM1RUQyMjIxMUVEOUEyMDZDNDZDNEY5QUUwMi9yR09GN1ZZLUg5 YW1hejVMVVEzTWFURE5Td3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGIOM2HKh2VbkIZVqffrDy9NRPMj25iFqEufJkw1b7ae7Q6GCSac/n/DbjSy1 qqYdHE3QZY1Fniw+nWB0ipSq5213zx6z+wRxnPq3yMjNWyYLcNo0nUwoeLCjiLGT RPt8y7tGjx2NPXN7nqQaxYv1huhz7wjpNEml+4FQDKBfOODS2reV54JIqj+9bI4l F2C+6S3IF+0g++SkaMQt0Szv2gPaX64FyDXl9WbyPpTAu4U+/mMaj9P9VSxWv5TN t/EJMe/DX9G2YpLK5PzuQPBaG70xpqCQ4+Q8TaBWBZcGfxrhps7XsZMn4DSad/SL Y0mNkuTj1V33dtGbRQzv6isGdg== -----END CERTIFICATE-----Generated at Mon Sep 28 20:00:48 2026 by rpki-client