$ rpki-client -vvvf rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft File: gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft (raw, json) Hash identifier: cu/W+pIe1kaYOFttdlbT5m6ylZmdMOK6r7yC8zeB5gY= Subject key identifier: F4:F6:AF:07:82:DA:43:03:3C:84:B9:D0:50:46:CC:9E:19:02:71:F8 Authority key identifier: 81:A7:15:1B:17:75:92:F8:68:23:B6:9F:43:76:24:E9:C0:02:DE:41 Certificate issuer: /CN=A9175299/serialNumber=81A7151B177592F86823B69F437624E9C002DE41 Certificate serial: 0C2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gacVGxd1kvhoI7afQ3Yk6cAC3kE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft Manifest number: 0C16 Signing time: Sun 20 Sep 2026 18:50:59 +0000 Manifest this update: Sun 20 Sep 2026 18:50:59 +0000 Manifest next update: Sun 27 Sep 2026 18:50:59 +0000 Files and hashes: 1: gacVGxd1kvhoI7afQ3Yk6cAC3kE.crl (hash: MCEA63FpDG0IvZruIVhUMqQQJKhv6r2bkBXGjOBSUvo=) 2: 89340B10B5E011EE91DD4D53C4F9AE02.roa (hash: 6cuRYkKrSNBuAIRhtyOQTmq+Tuxf6pFsDwJm5X0jf/o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.crl rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gacVGxd1kvhoI7afQ3Yk6cAC3kE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 18:50:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3117 (0xc2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175299, serialNumber=81A7151B177592F86823B69F437624E9C002DE41 Validity Not Before: Sep 20 18:50:59 2026 GMT Not After : Sep 27 18:50:59 2026 GMT Subject: CN=6ab02b13-4fa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:13:e5:0b:3e:8c:e0:d8:d5:20:ff:0b:c2:a4: 1e:f6:26:bf:a3:f9:69:3f:d1:87:6e:24:b7:72:db: 5c:04:d5:22:ce:2c:bb:8b:47:32:95:a5:1d:33:01: 45:5c:eb:6b:94:c1:3e:68:0c:28:ad:e5:b2:d7:14: e8:01:ca:e2:49:0b:50:50:a0:e4:f9:7d:6d:9b:04: 17:bd:92:4a:0a:f9:57:4d:92:ec:11:9a:e7:44:a7: 18:75:1f:d7:5c:0f:48:b3:9c:3f:c2:46:f5:06:02: cb:c1:8e:10:9f:9e:a0:7a:f8:cc:5c:f3:3c:92:ac: b7:97:d0:80:09:fa:78:23:cf:82:37:e0:34:af:fe: e7:12:9b:52:1b:bd:75:0f:9b:22:c1:cb:64:65:39: d5:b6:29:05:59:19:b8:16:12:86:d5:7a:08:10:9e: 17:e9:9b:00:09:d4:3e:0f:ee:d9:94:d6:cc:ae:20: 0d:09:30:04:6b:b6:8a:af:4b:51:66:66:2e:f3:c3: c1:2d:8b:19:7b:ae:d3:8b:5f:8c:ad:ad:9c:15:88: 15:d2:11:f6:62:4c:51:57:a1:c2:9c:5d:ed:ce:ed: 1c:78:9c:f5:12:6b:9c:c7:b1:e7:62:c2:87:f5:d3: 0e:00:fe:36:2a:25:7f:11:ab:09:09:5c:82:8b:f4: 93:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:F6:AF:07:82:DA:43:03:3C:84:B9:D0:50:46:CC:9E:19:02:71:F8 X509v3 Authority Key Identifier: keyid:81:A7:15:1B:17:75:92:F8:68:23:B6:9F:43:76:24:E9:C0:02:DE:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gacVGxd1kvhoI7afQ3Yk6cAC3kE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:80:d5:17:af:c7:f3:51:ac:67:73:6d:e1:55:61:e6:4b:cb: f9:db:03:9d:e6:a4:e9:70:05:0b:33:a5:c1:64:f2:f1:5d:db: 70:83:4e:5c:09:be:4c:07:8a:e9:33:e6:5f:da:f7:c2:56:95: ae:76:40:17:b3:4a:08:cd:ba:d8:b7:8b:f9:6b:65:58:ad:9d: e5:03:79:74:39:bd:77:46:0d:1e:98:b4:b1:76:6f:72:45:99: 3c:b0:a9:a1:f5:e1:fc:36:65:7e:2a:3d:b0:d9:c4:04:f1:0f: 45:23:30:32:f0:23:e9:59:83:0e:5f:be:31:dc:c0:8b:9f:f7: 1f:4f:5d:e3:40:0d:66:05:4a:64:3e:a6:e7:08:5b:31:4e:c7: 0b:33:be:60:52:7b:46:a5:1b:e3:69:b9:d0:e9:d3:88:69:b8: 56:c8:0e:24:6e:b1:18:09:99:c3:13:9b:46:f4:bb:28:33:3e: 9e:b7:e5:b8:79:7d:90:5a:39:5a:c2:cd:bb:a6:1a:34:f6:61: cc:f6:38:70:d8:89:a0:c8:14:b8:ea:a0:62:e4:52:d2:62:9a: bc:b9:32:2f:f8:fd:bd:2d:eb:e7:5a:34:fe:d0:dd:44:dd:d4: 54:ee:6a:99:71:9c:56:19:0a:47:b2:96:38:c3:6f:1d:30:70: 0d:58:b4:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDC0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUyOTkxMTAvBgNVBAUTKDgxQTcxNTFCMTc3NTkyRjg2ODIzQjY5RjQzNzYyNEU5 QzAwMkRFNDEwHhcNMjYwOTIwMTg1MDU5WhcNMjYwOTI3MTg1MDU5WjAYMRYwFAYD VQQDEw02YWIwMmIxMy00ZmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApBPlCz6M4NjVIP8LwqQe9ia/o/lpP9GHbiS3cttcBNUiziy7i0cylaUdMwFF XOtrlME+aAworeWy1xToAcriSQtQUKDk+X1tmwQXvZJKCvlXTZLsEZrnRKcYdR/X XA9Is5w/wkb1BgLLwY4Qn56gevjMXPM8kqy3l9CACfp4I8+CN+A0r/7nEptSG711 D5siwctkZTnVtikFWRm4FhKG1XoIEJ4X6ZsACdQ+D+7ZlNbMriANCTAEa7aKr0tR ZmYu88PBLYsZe67Ti1+Mra2cFYgV0hH2YkxRV6HCnF3tzu0ceJz1Emucx7HnYsKH 9dMOAP42KiV/EasJCVyCi/STzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPT2rweC 2kMDPIS50FBGzJ4ZAnH4MB8GA1UdIwQYMBaAFIGnFRsXdZL4aCO2n0N2JOnAAt5B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTI5OS8yNjg5MEVEQTQy QzUxMUVBQjI2Q0ZEMUJDNEY5QUUwMi9nYWNWR3hkMWt2aG9JN2FmUTNZazZjQUMz a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dhY1ZHeGQxa3Zob0k3YWZRM1lrNmNBQzNrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTI5OS8yNjg5MEVEQTQyQzUxMUVBQjI2Q0ZEMUJDNEY5QUUwMi9nYWNWR3hkMWt2 aG9JN2FmUTNZazZjQUMza0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA4DVF6/H81GsZ3Nt4VVh5kvL+dsDneak6XAFCzOlwWTy8V3bcINOXAm+TAeK 6TPmX9r3wlaVrnZAF7NKCM262LeL+WtlWK2d5QN5dDm9d0YNHpi0sXZvckWZPLCp ofXh/DZlfio9sNnEBPEPRSMwMvAj6VmDDl++MdzAi5/3H09d40ANZgVKZD6m5whb MU7HCzO+YFJ7RqUb42m50OnTiGm4VsgOJG6xGAmZwxObRvS7KDM+nrfluHl9kFo5 WsLNu6YaNPZhzPY4cNiJoMgUuOqgYuRS0mKavLkyL/j9vS3r51o0/tDdRN3UVO5q mXGcVhkKR7KWOMNvHTBwDVi00g== -----END CERTIFICATE-----Generated at Tue Sep 22 16:38:07 2026 by rpki-client