$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.mft File: gHwED6kB5dhpWmU03mbD1qC_vMU.mft (raw, json) Hash identifier: LQr9K4ovf4Q1PIklKU867wwyeOSmlLxq1FEmkaaQJ+c= Subject key identifier: 11:F8:71:89:D0:9D:D0:72:84:B7:DA:8A:83:C8:89:2C:75:FE:63:CE Authority key identifier: 80:7C:04:0F:A9:01:E5:D8:69:5A:65:34:DE:66:C3:D6:A0:BF:BC:C5 Certificate issuer: /CN=A91BC3F1/serialNumber=807C040FA901E5D8695A6534DE66C3D6A0BFBCC5 Certificate serial: 01D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gHwED6kB5dhpWmU03mbD1qC_vMU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.mft Manifest number: 01C2 Signing time: Mon 21 Sep 2026 03:54:16 +0000 Manifest this update: Mon 21 Sep 2026 03:54:16 +0000 Manifest next update: Mon 28 Sep 2026 03:54:16 +0000 Files and hashes: 1: gHwED6kB5dhpWmU03mbD1qC_vMU.crl (hash: Qde0JnAjx3CSrVRKF4MCSt8Mw74pF5fsYcMsKIH3+S8=) 2: 7D9F83FE10FA11EFADBBC431C4F9AE02.roa (hash: KbP7kVzHWAr0cCL8qb5P7XMSVn4UE0itefeoDnYZT/Q=) 3: A697738410FA11EF9A068536C4F9AE02.roa (hash: lzeeMDb5p2SWBBeQKxNMB3dDJPfZPBC3dVUcHVXCC0U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.crl rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gHwED6kB5dhpWmU03mbD1qC_vMU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 03:54:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 472 (0x1d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC3F1, serialNumber=807C040FA901E5D8695A6534DE66C3D6A0BFBCC5 Validity Not Before: Sep 21 03:54:16 2026 GMT Not After : Sep 28 03:54:16 2026 GMT Subject: CN=6ab0aa68-8b2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c5:40:31:23:84:b3:09:fa:09:2c:b3:d0:54: 69:65:cf:3f:f8:d0:00:48:23:6a:9a:2c:ba:dc:0b: aa:f0:11:f5:ee:3d:98:f5:1f:ca:c7:8d:2e:ad:2c: 7d:79:3c:a9:bd:f5:b3:19:36:22:01:ed:b5:83:94: 19:0b:11:d7:cf:ac:b8:2c:52:1d:03:c1:11:f9:f1: 47:3c:bb:2e:5d:a0:0b:33:fc:a5:c2:92:e1:c4:b0: 42:88:f1:ab:1d:14:b9:f3:ee:6e:79:f8:94:fa:02: 4f:91:79:63:d4:86:c5:10:1a:a5:85:6f:76:dc:0a: ee:f4:aa:42:4b:d9:e7:e5:08:35:f0:b8:59:12:fc: 97:5f:82:f7:e5:cc:5a:d6:3b:a0:26:90:79:4a:e0: d3:5c:4a:0b:0d:69:b6:d4:fb:49:9d:9e:bf:b6:75: 1a:23:71:d7:1a:5a:97:23:61:1b:ef:1a:78:a8:35: 56:00:cc:96:ae:6a:66:4e:44:7a:1f:65:f4:3c:4e: 3d:7b:18:2a:76:5f:12:08:77:2c:a7:5a:6d:bc:77: 3a:05:92:24:9a:27:4c:49:d0:5d:29:21:b3:a6:cd: b2:bf:62:ba:89:2f:db:93:a0:cf:b7:4f:bd:ec:b6: de:b0:97:01:cf:ac:be:7a:f5:a1:90:13:43:14:c6: 1a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F8:71:89:D0:9D:D0:72:84:B7:DA:8A:83:C8:89:2C:75:FE:63:CE X509v3 Authority Key Identifier: keyid:80:7C:04:0F:A9:01:E5:D8:69:5A:65:34:DE:66:C3:D6:A0:BF:BC:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gHwED6kB5dhpWmU03mbD1qC_vMU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:de:5a:67:80:39:95:cb:b6:f7:2d:09:03:0a:07:1b:6a:74: f2:bc:f0:2d:a3:8f:84:2b:23:f4:d2:25:4c:76:ee:9a:72:9b: 4d:d3:0f:9c:24:f3:dd:e9:b7:dc:f0:4f:ca:1f:0e:32:cc:6b: 76:45:7a:0b:bc:a1:5a:4c:18:81:af:0d:bd:85:0d:30:50:0c: 22:06:51:a5:dd:e7:4b:fe:c5:0e:96:24:99:79:39:21:1f:ac: ac:f7:7f:66:eb:20:5b:b7:26:d9:82:b0:1c:b3:28:db:25:6b: 65:e8:b8:c9:b3:6a:21:9e:10:e6:c8:85:ca:1a:4e:bb:7f:9e: 8b:61:5b:93:71:09:a1:12:4f:3b:d1:ec:81:9f:d1:4c:7b:eb: e4:2e:e3:07:fa:5c:36:60:1f:68:cc:e4:32:d5:22:74:ce:9a: 32:07:00:16:f0:3e:14:12:bd:7a:fe:92:af:63:6b:b1:11:c7: 94:a2:2c:a8:3e:16:e3:c0:95:d0:65:97:bd:f0:a3:4e:e5:b3: f5:bb:a2:e7:c5:4f:73:c5:18:e9:68:23:e2:08:79:d1:4a:37: 83:ca:ee:a5:b6:42:85:95:d5:3e:af:f9:9e:cd:ba:52:34:73: a5:be:60:14:73:79:39:db:8a:eb:85:01:c7:b5:d0:de:18:92: e9:13:00:ed -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMzRjExMTAvBgNVBAUTKDgwN0MwNDBGQTkwMUU1RDg2OTVBNjUzNERFNjZDM0Q2 QTBCRkJDQzUwHhcNMjYwOTIxMDM1NDE2WhcNMjYwOTI4MDM1NDE2WjAYMRYwFAYD VQQDEw02YWIwYWE2OC04YjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz8VAMSOEswn6CSyz0FRpZc8/+NAASCNqmiy63Auq8BH17j2Y9R/Kx40urSx9 eTypvfWzGTYiAe21g5QZCxHXz6y4LFIdA8ER+fFHPLsuXaALM/ylwpLhxLBCiPGr HRS58+5uefiU+gJPkXlj1IbFEBqlhW923Aru9KpCS9nn5Qg18LhZEvyXX4L35cxa 1jugJpB5SuDTXEoLDWm21PtJnZ6/tnUaI3HXGlqXI2Eb7xp4qDVWAMyWrmpmTkR6 H2X0PE49exgqdl8SCHcsp1ptvHc6BZIkmidMSdBdKSGzps2yv2K6iS/bk6DPt0+9 7LbesJcBz6y+evWhkBNDFMYa0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBH4cYnQ ndByhLfaioPIiSx1/mPOMB8GA1UdIwQYMBaAFIB8BA+pAeXYaVplNN5mw9agv7zF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzNGMS85NUI3MTFDNDEw RjkxMUVGODg4QzUyMkZDNEY5QUUwMi9nSHdFRDZrQjVkaHBXbVUwM21iRDFxQ192 TVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dId0VENmtCNWRocFdtVTAzbWJEMXFDX3ZNVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzNGMS85NUI3MTFDNDEwRjkxMUVGODg4QzUyMkZDNEY5QUUwMi9nSHdFRDZrQjVk aHBXbVUwM21iRDFxQ192TVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcN5aZ4A5lcu29y0JAwoHG2p08rzwLaOPhCsj9NIlTHbumnKbTdMPnCTz3em3 3PBPyh8OMsxrdkV6C7yhWkwYga8NvYUNMFAMIgZRpd3nS/7FDpYkmXk5IR+srPd/ ZusgW7cm2YKwHLMo2yVrZei4ybNqIZ4Q5siFyhpOu3+ei2Fbk3EJoRJPO9HsgZ/R THvr5C7jB/pcNmAfaMzkMtUidM6aMgcAFvA+FBK9ev6Sr2NrsRHHlKIsqD4W48CV 0GWXvfCjTuWz9bui58VPc8UY6Wgj4gh50Uo3g8rupbZChZXVPq/5ns26UjRzpb5g FHN5OduK64UBx7XQ3hiS6RMA7Q== -----END CERTIFICATE-----Generated at Tue Sep 22 08:21:00 2026 by rpki-client