$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft File: dGJBrad929_qD-FE7-ITkeP8T9k.mft (raw, json) Hash identifier: U7XI0ru+CKB8kPzDH3r7Tdddv4xpWdatfXPudhj3PCE= Subject key identifier: 63:97:C7:78:45:7F:DB:CD:63:B8:8F:1C:A2:D2:34:87:AB:FA:7D:78 Authority key identifier: 74:62:41:AD:A7:7D:DB:DF:EA:0F:E1:44:EF:E2:13:91:E3:FC:4F:D9 Certificate issuer: /CN=A91ACBB7/serialNumber=746241ADA77DDBDFEA0FE144EFE21391E3FC4FD9 Certificate serial: 0DE6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft Manifest number: 0DBF Signing time: Mon 12 Oct 2026 18:00:45 +0000 Manifest this update: Mon 12 Oct 2026 18:00:45 +0000 Manifest next update: Mon 19 Oct 2026 18:00:45 +0000 Files and hashes: 1: dGJBrad929_qD-FE7-ITkeP8T9k.crl (hash: m4SMBkLkZIIrechAhgvUO4Q+kWbqmHJ0+q6AVYKkZAM=) 2: 2CC5D50CDEC911EBA828524CC4F9AE02.roa (hash: 90DgDT5NeM7xQ03ACEtF57cO7mWeIuHF/7OMNDwtBac=) 3: 9AB3F8BABB3111F1BAB9CEAE6D11F970.roa (hash: FR5egO3pKbKnicc08FWFpCRQO3WPuUafCXH62c8iCos=) 4: 2B9FBCB0DEC911EBA828524CC4F9AE02.roa (hash: MCYhaXeWm4Azn45D+8Hoz0m3yVVZUkz11sIQ3TDfy9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.crl rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 16:59:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3558 (0xde6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACBB7, serialNumber=746241ADA77DDBDFEA0FE144EFE21391E3FC4FD9 Validity Not Before: Oct 12 18:00:45 2026 GMT Not After : Oct 19 18:00:45 2026 GMT Subject: CN=6acd204d-0df2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:70:dd:e0:f6:7a:5a:70:de:5d:f3:e5:21:05: d3:a4:04:fa:df:6f:30:da:1d:94:62:b6:c3:b6:bd: 44:df:25:c3:34:ca:bb:26:eb:58:7b:fa:d6:19:e7: 83:1b:78:f7:07:0c:12:09:fa:2b:21:27:47:ee:b5: f8:50:87:23:75:3c:f7:18:41:04:4d:93:38:9e:0c: f0:3b:d7:e4:23:67:13:e9:b2:0c:82:6a:2c:5f:c6: a1:b3:29:24:c8:58:59:4f:6d:0c:d6:69:11:f4:9f: aa:d6:42:88:56:a4:52:bb:8a:36:70:74:9c:ed:90: 41:90:a3:ad:90:ca:0a:8a:67:ae:28:ab:34:e7:25: 7d:c6:d8:60:b8:e6:e1:e7:c1:26:03:1c:2c:99:c9: fe:f2:c4:7a:89:5d:01:51:4a:ed:db:47:65:09:c1: 85:90:b6:be:d0:17:11:c5:1c:8e:50:52:3e:19:94: 39:da:eb:c7:c9:91:1f:1a:76:6c:0b:2e:72:23:7b: 6a:8f:29:3c:15:52:4b:ad:8a:93:b6:86:a8:1c:89: 6f:fe:62:10:6b:b4:bd:41:d0:d8:f0:e3:9f:b4:49: e1:ba:73:51:d4:4d:cc:07:48:42:dd:a0:63:14:5e: 2d:ac:79:c1:da:dd:ce:a4:5b:bb:99:9a:0a:de:95: 68:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:97:C7:78:45:7F:DB:CD:63:B8:8F:1C:A2:D2:34:87:AB:FA:7D:78 X509v3 Authority Key Identifier: keyid:74:62:41:AD:A7:7D:DB:DF:EA:0F:E1:44:EF:E2:13:91:E3:FC:4F:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:c3:48:6b:88:55:03:c1:bb:92:19:5e:a3:66:81:2c:74:77: 06:74:a8:ac:38:79:15:a5:b3:c4:88:d0:d1:6c:bd:3d:78:be: da:33:32:c0:49:84:54:38:c0:9c:6d:a7:78:df:c4:7b:bc:87: 61:82:7a:1c:c1:b9:a2:2d:f0:0e:97:a0:f2:a1:6e:51:a5:2e: bd:8f:92:2a:0c:50:ee:d2:07:8f:20:4f:3d:cb:ae:f2:b7:86: dc:8b:50:ce:b6:3c:cd:ee:aa:1a:2f:67:62:98:f1:5c:79:d0: 6b:62:88:ed:25:7f:68:02:8f:b5:b4:2e:a7:0d:05:c7:87:ea: b5:04:a9:13:a1:30:aa:99:cd:07:59:45:d9:ed:b5:d8:cd:67: 53:99:3d:90:84:85:71:53:a6:a4:64:df:b7:fa:d6:71:2e:49: d9:3c:36:ba:e3:53:2d:e4:a2:4b:97:c2:e4:50:e8:23:9f:e7: 9d:78:aa:2a:1d:fb:58:68:e7:79:40:0a:60:89:40:a5:e0:09: 10:51:52:19:14:9c:fc:73:70:c4:90:30:b7:4c:7f:35:68:f3: 08:a3:57:e9:f2:54:38:57:22:60:ed:65:e9:7c:86:e3:6f:50: 07:f8:f6:ea:08:03:fe:a4:d1:15:6a:31:8f:54:ed:a4:03:2a: b0:b1:8f:4d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNCQjcxMTAvBgNVBAUTKDc0NjI0MUFEQTc3RERCREZFQTBGRTE0NEVGRTIxMzkx RTNGQzRGRDkwHhcNMjYxMDEyMTgwMDQ1WhcNMjYxMDE5MTgwMDQ1WjAYMRYwFAYD VQQDEw02YWNkMjA0ZC0wZGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs3Dd4PZ6WnDeXfPlIQXTpAT6328w2h2UYrbDtr1E3yXDNMq7JutYe/rWGeeD G3j3BwwSCforISdH7rX4UIcjdTz3GEEETZM4ngzwO9fkI2cT6bIMgmosX8ahsykk yFhZT20M1mkR9J+q1kKIVqRSu4o2cHSc7ZBBkKOtkMoKimeuKKs05yV9xthguObh 58EmAxwsmcn+8sR6iV0BUUrt20dlCcGFkLa+0BcRxRyOUFI+GZQ52uvHyZEfGnZs Cy5yI3tqjyk8FVJLrYqTtoaoHIlv/mIQa7S9QdDY8OOftEnhunNR1E3MB0hC3aBj FF4trHnB2t3OpFu7mZoK3pVo4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGOXx3hF f9vNY7iPHKLSNIer+n14MB8GA1UdIwQYMBaAFHRiQa2nfdvf6g/hRO/iE5Hj/E/Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0JCNy81RTFGQ0VCQ0Yz RjkxMUU5QjhBODMxMEFDNEY5QUUwMi9kR0pCcmFkOTI5X3FELUZFNy1JVGtlUDhU OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RHSkJyYWQ5MjlfcUQtRkU3LUlUa2VQOFQ5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0JCNy81RTFGQ0VCQ0YzRjkxMUU5QjhBODMxMEFDNEY5QUUwMi9kR0pCcmFkOTI5 X3FELUZFNy1JVGtlUDhUOWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWcNIa4hVA8G7khleo2aBLHR3BnSorDh5FaWzxIjQ0Wy9PXi+2jMywEmEVDjA nG2neN/Ee7yHYYJ6HMG5oi3wDpeg8qFuUaUuvY+SKgxQ7tIHjyBPPcuu8reG3ItQ zrY8ze6qGi9nYpjxXHnQa2KI7SV/aAKPtbQupw0Fx4fqtQSpE6EwqpnNB1lF2e21 2M1nU5k9kISFcVOmpGTft/rWcS5J2Tw2uuNTLeSiS5fC5FDoI5/nnXiqKh37WGjn eUAKYIlApeAJEFFSGRSc/HNwxJAwt0x/NWjzCKNX6fJUOFciYO1l6XyG429QB/j2 6ggD/qTRFWoxj1TtpAMqsLGPTQ== -----END CERTIFICATE-----Generated at Mon Oct 12 23:16:20 2026 by rpki-client