$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft File: G0cdrc2RIJM1E26s9syYiChlSyo.mft (raw, json) Hash identifier: u/SX6P6Vs4eWd4uwU7tA7Uu6pv6D5LbMDuHLJoTqkxE= Subject key identifier: 41:32:8D:95:EB:C7:BE:F1:83:7C:CC:BA:6F:6E:4A:0C:1D:27:4B:EF Authority key identifier: 1B:47:1D:AD:CD:91:20:93:35:13:6E:AC:F6:CC:98:88:28:65:4B:2A Certificate issuer: /CN=A91C9606/serialNumber=1B471DADCD91209335136EACF6CC988828654B2A Certificate serial: 0E2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft Manifest number: 0E10 Signing time: Sun 20 Sep 2026 17:47:42 +0000 Manifest this update: Sun 20 Sep 2026 17:47:42 +0000 Manifest next update: Sun 27 Sep 2026 17:47:42 +0000 Files and hashes: 1: G0cdrc2RIJM1E26s9syYiChlSyo.crl (hash: OVXd3g2VeBb+nbSQCzFyn1UfzNcCcQLFPx+ZE6FVISU=) 2: 7A9CD75E23E311F0BB28EA29C4F9AE02.roa (hash: VZEltJw0vEDbOnRvRf9ELAdzaAN+QgrjbGf4Pt5gMhA=) 3: 06370CB2DB9211E9B70EDD2EC4F9AE02.roa (hash: QJuobED8AIYNaA07H0l+GwSOVK0e9Xo+0hZGeA9Tr5g=) 4: 645EF9CADB9311E988E56C33C4F9AE02.roa (hash: giSaWoz0kPjXm5QgA1jXt8OZKatJUwxEOdzcbQiRQwI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.crl rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 17:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3629 (0xe2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9606, serialNumber=1B471DADCD91209335136EACF6CC988828654B2A Validity Not Before: Sep 20 17:47:42 2026 GMT Not After : Sep 27 17:47:42 2026 GMT Subject: CN=6ab01c3e-7980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:1d:f2:7f:bc:48:8a:3b:92:13:91:e1:c2:61: d1:f3:b2:48:6f:89:28:3a:8b:29:74:15:c7:81:b9: 73:00:ae:cc:e2:be:6f:63:5f:38:f5:44:03:7c:2e: d5:4f:1f:d5:1c:97:67:44:3c:5f:18:b7:fc:ad:4e: c7:07:c4:e6:6b:07:94:18:86:e1:10:8c:9a:96:25: 21:fe:d8:24:72:4e:0a:ba:4b:00:c3:6c:67:2e:e1: 43:28:55:ef:bf:b9:e2:3a:11:c4:26:6e:07:e4:ca: 09:9c:99:54:c9:99:e9:96:6b:59:c5:2f:b5:4d:70: c7:7a:5d:18:a2:d3:8c:6c:26:28:2e:ec:9f:02:08: f9:30:1f:e0:cb:36:d3:b0:74:fa:bf:aa:9c:44:73: 6b:e3:9c:bf:72:a2:ed:97:ff:2a:ab:55:cd:86:27: 4b:b0:b7:8e:b9:9d:ea:60:63:3b:f7:fd:dc:73:61: e5:32:77:f7:9d:a8:c1:0b:f4:f7:17:85:ab:35:7a: aa:25:6d:13:c8:f9:a6:92:cf:10:b8:db:96:bd:d3: d1:87:6f:61:de:85:41:5b:38:4b:8f:d9:88:2f:aa: c1:40:60:11:76:b0:d9:3c:97:ec:f6:46:2b:ea:1d: b1:b9:05:6c:5f:99:99:f0:50:dd:4d:f6:75:41:15: 25:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:32:8D:95:EB:C7:BE:F1:83:7C:CC:BA:6F:6E:4A:0C:1D:27:4B:EF X509v3 Authority Key Identifier: keyid:1B:47:1D:AD:CD:91:20:93:35:13:6E:AC:F6:CC:98:88:28:65:4B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:48:59:f0:c4:ed:ab:19:82:8b:44:98:ca:fb:79:99:16:d3: ad:35:31:0a:d7:cc:c2:75:a1:12:9a:db:95:c1:b9:ea:c3:e8: 1c:66:15:a3:db:c0:b6:75:45:d4:98:ee:45:de:45:64:24:31: 39:33:36:8a:48:53:fc:3c:1c:da:eb:84:51:63:00:19:92:a7: 9a:c0:1d:f0:73:ec:40:da:1f:af:ed:92:b1:b3:7b:db:65:1c: 6a:bd:ca:83:34:9c:45:a0:81:a0:c5:64:aa:25:d5:b2:d9:4a: 5c:1a:f6:c9:10:d7:d5:cf:ed:c5:df:7c:2e:ce:5b:61:e3:97: d7:79:00:55:c5:74:4c:c7:c1:ae:21:6c:68:f7:d3:17:37:9d: b5:d9:63:34:3f:00:02:8a:7d:ec:c2:d0:c2:ca:58:54:d7:6c: 64:e4:8e:20:61:53:d7:de:f7:8e:a2:c9:a8:4b:84:42:f4:38: 5b:be:68:f6:7f:33:38:e1:1b:e9:51:b5:5e:ee:9b:b3:ae:51: 83:f3:7a:b5:53:10:70:75:69:65:c9:46:d3:70:59:a3:4a:1f: e2:e7:83:56:8f:36:13:ca:b1:53:aa:b8:ed:6a:5b:dc:bd:d1: cd:a9:1a:08:f7:94:cf:48:17:0e:30:58:a8:d6:f8:d6:73:53: c2:6b:c3:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk2MDYxMTAvBgNVBAUTKDFCNDcxREFEQ0Q5MTIwOTMzNTEzNkVBQ0Y2Q0M5ODg4 Mjg2NTRCMkEwHhcNMjYwOTIwMTc0NzQyWhcNMjYwOTI3MTc0NzQyWjAYMRYwFAYD VQQDEw02YWIwMWMzZS03OTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiB3yf7xIijuSE5HhwmHR87JIb4koOospdBXHgblzAK7M4r5vY1849UQDfC7V Tx/VHJdnRDxfGLf8rU7HB8TmaweUGIbhEIyaliUh/tgkck4KuksAw2xnLuFDKFXv v7niOhHEJm4H5MoJnJlUyZnplmtZxS+1TXDHel0YotOMbCYoLuyfAgj5MB/gyzbT sHT6v6qcRHNr45y/cqLtl/8qq1XNhidLsLeOuZ3qYGM79/3cc2HlMnf3najBC/T3 F4WrNXqqJW0TyPmmks8QuNuWvdPRh29h3oVBWzhLj9mIL6rBQGARdrDZPJfs9kYr 6h2xuQVsX5mZ8FDdTfZ1QRUl1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEEyjZXr x77xg3zMum9uSgwdJ0vvMB8GA1UdIwQYMBaAFBtHHa3NkSCTNRNurPbMmIgoZUsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTYwNi85QzlGOUY5QURC OTAxMUU5QTNDMTJGMkNDNEY5QUUwMi9HMGNkcmMyUklKTTFFMjZzOXN5WWlDaGxT eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0cwY2RyYzJSSUpNMUUyNnM5c3lZaUNobFN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTYwNi85QzlGOUY5QURCOTAxMUU5QTNDMTJGMkNDNEY5QUUwMi9HMGNkcmMyUklK TTFFMjZzOXN5WWlDaGxTeW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAa0hZ8MTtqxmCi0SYyvt5mRbTrTUxCtfMwnWhEprblcG56sPoHGYVo9vAtnVF 1JjuRd5FZCQxOTM2ikhT/Dwc2uuEUWMAGZKnmsAd8HPsQNofr+2SsbN722Ucar3K gzScRaCBoMVkqiXVstlKXBr2yRDX1c/txd98Ls5bYeOX13kAVcV0TMfBriFsaPfT FzedtdljND8AAop97MLQwspYVNdsZOSOIGFT1973jqLJqEuEQvQ4W75o9n8zOOEb 6VG1Xu6bs65Rg/N6tVMQcHVpZclG03BZo0of4ueDVo82E8qxU6q47Wpb3L3Rzaka CPeUz0gXDjBYqNb41nNTwmvD2g== -----END CERTIFICATE-----Generated at Tue Sep 22 08:36:53 2026 by rpki-client