$ rpki-client -vvvf rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft File: -gRcYwK4c-iDZfqaAhSZtPPFhog.mft (raw, json) Hash identifier: 0ZcHw447J307JTL4zu6TD1tucwZ7ZxTII136Nv4Mf2M= Subject key identifier: 7A:CC:97:8D:D6:CE:21:0E:63:33:13:E1:A8:27:A6:B0:D3:1D:F8:F2 Authority key identifier: FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88 Certificate issuer: /CN=A91853D3/serialNumber=FA045C6302B873E88365FA9A021499B4F3C58688 Certificate serial: 0656 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft Manifest number: 0636 Signing time: Fri 04 Sep 2026 22:38:22 +0000 Manifest this update: Fri 04 Sep 2026 22:38:22 +0000 Manifest next update: Fri 11 Sep 2026 22:38:22 +0000 Files and hashes: 1: -gRcYwK4c-iDZfqaAhSZtPPFhog.crl (hash: q1K/8JjVoiiHFdn7WL9DN7uGv/CNjnznihLYxZDw4tE=) 2: 5C9E3A00E83111F0B570A08B79EE528E.roa (hash: ME2B8uuD8K+ZGXPv64QmrsnI4TiGRtKbpWpIh4aJJVc=) 3: 52A1A77A6ECF11F0B2785815C4F9AE02.roa (hash: 99SBr5WJIbWwpgEc6hwr9lvi4BLubRre2gvekG03kuo=) 4: 36C4FAAAA9FC11EEBEF3E64AC4F9AE02.roa (hash: sXo/EfCy1P1hXgj+XVBKjDkQi4E974lDfTItj2KXQOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.crl rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 22:38:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1622 (0x656) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91853D3, serialNumber=FA045C6302B873E88365FA9A021499B4F3C58688 Validity Not Before: Sep 4 22:38:22 2026 GMT Not After : Sep 11 22:38:22 2026 GMT Subject: CN=6a9b485e-1e57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:43:55:d9:8a:79:d7:ab:6c:e5:7a:b9:f8:2a: 2d:5e:bb:ed:d0:04:3f:72:bd:7b:79:dc:3e:de:ee: 27:98:5a:b1:0d:3e:7a:f5:62:9b:5b:df:01:da:c0: 10:ea:c9:7c:67:17:d6:00:bd:74:22:2d:b7:33:af: 4f:0f:0b:61:a9:83:50:4f:1f:7c:67:13:a0:b4:33: ca:65:87:d0:d1:b3:88:b6:82:19:3d:12:4e:d3:81: 0e:a3:94:95:11:5b:37:13:a7:46:9d:e9:d7:59:ee: 65:12:a4:e3:62:cb:ae:39:92:d0:db:95:48:b4:8a: 03:f7:56:24:35:3a:0a:eb:45:35:86:e9:4c:32:94: fe:89:59:44:8b:34:66:5d:2b:a3:ec:9f:bf:80:0e: ce:c5:d7:1f:43:bd:cb:e1:f8:59:de:ce:ca:17:63: 68:db:d9:e8:12:18:42:13:c2:26:77:a8:93:fc:86: 89:3b:88:7b:1a:b0:67:34:04:06:cc:5c:64:6d:a8: 64:70:41:17:1d:be:4e:bd:8b:21:4e:76:c7:35:5d: e9:30:a5:2f:37:ce:cd:59:bb:1c:20:d6:24:71:50: 60:19:26:36:75:d0:57:97:68:5a:2c:9d:4d:c8:23: 55:f9:d6:8f:35:a8:d3:7e:bf:2b:3a:f8:54:24:08: 84:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:CC:97:8D:D6:CE:21:0E:63:33:13:E1:A8:27:A6:B0:D3:1D:F8:F2 X509v3 Authority Key Identifier: keyid:FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:83:10:6b:6f:29:62:d3:a1:fb:98:4b:23:6e:24:aa:3e:c5: c3:40:ec:17:66:9d:20:a1:b2:31:5d:4c:89:00:c6:c2:08:d5: cc:cf:bc:89:e5:f7:08:b0:9f:cb:aa:c5:de:14:c0:2d:8d:f0: 86:33:94:6d:af:ac:2f:c6:91:ee:ff:0e:58:58:93:95:11:66: 5b:6b:b8:88:ab:c6:8a:c2:94:ce:69:7d:db:68:f9:10:12:3f: e3:24:9b:6d:46:af:e7:3d:1c:6a:95:b9:77:bd:79:3b:d9:56: 78:62:b8:9b:d5:ee:b4:73:fc:73:fa:3d:15:4e:85:6c:14:b4: e7:bc:97:6c:48:d9:62:47:99:54:6b:8f:da:7c:a9:ee:76:dc: 2e:f4:ba:b1:6d:99:50:7c:cf:71:93:be:f0:c8:d6:88:30:cd: 4b:47:36:cc:6c:10:c9:0b:d3:e7:0b:5c:21:f4:4b:93:70:7c: 24:cd:5b:89:38:c9:84:f8:63:6d:33:38:df:4b:c8:84:44:a5: 10:56:47:38:9c:57:dc:1c:8c:68:36:3b:fd:51:42:51:e9:99: cf:ea:2d:1d:6e:f9:d7:c1:49:32:4c:75:22:7c:a1:15:35:15: 2e:ac:3c:4a:9f:dd:a3:69:4f:fd:dd:d5:71:e5:29:d8:4c:69: 95:6e:24:62 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBlYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUzRDMxMTAvBgNVBAUTKEZBMDQ1QzYzMDJCODczRTg4MzY1RkE5QTAyMTQ5OUI0 RjNDNTg2ODgwHhcNMjYwOTA0MjIzODIyWhcNMjYwOTExMjIzODIyWjAYMRYwFAYD VQQDEw02YTliNDg1ZS0xZTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArENV2Yp516ts5Xq5+CotXrvt0AQ/cr17edw+3u4nmFqxDT569WKbW98B2sAQ 6sl8ZxfWAL10Ii23M69PDwthqYNQTx98ZxOgtDPKZYfQ0bOItoIZPRJO04EOo5SV EVs3E6dGnenXWe5lEqTjYsuuOZLQ25VItIoD91YkNToK60U1hulMMpT+iVlEizRm XSuj7J+/gA7OxdcfQ73L4fhZ3s7KF2No29noEhhCE8Imd6iT/IaJO4h7GrBnNAQG zFxkbahkcEEXHb5OvYshTnbHNV3pMKUvN87NWbscINYkcVBgGSY2ddBXl2haLJ1N yCNV+daPNajTfr8rOvhUJAiEeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHrMl43W ziEOYzMT4agnprDTHfjyMB8GA1UdIwQYMBaAFPoEXGMCuHPog2X6mgIUmbTzxYaI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTNEMy82RUMwRTM2ODAw MEExMUVDOEMyODcyNTJDNEY5QUUwMi8tZ1JjWXdLNGMtaURaZnFhQWhTWnRQUEZo b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1nUmNZd0s0Yy1pRFpmcWFBaFNadFBQRmhvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTNEMy82RUMwRTM2ODAwMEExMUVDOEMyODcyNTJDNEY5QUUwMi8tZ1JjWXdLNGMt aURaZnFhQWhTWnRQUEZob2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMYMQa28pYtOh+5hLI24kqj7Fw0DsF2adIKGyMV1MiQDGwgjVzM+8ieX3CLCf y6rF3hTALY3whjOUba+sL8aR7v8OWFiTlRFmW2u4iKvGisKUzml922j5EBI/4ySb bUav5z0capW5d715O9lWeGK4m9XutHP8c/o9FU6FbBS057yXbEjZYkeZVGuP2nyp 7nbcLvS6sW2ZUHzPcZO+8MjWiDDNS0c2zGwQyQvT5wtcIfRLk3B8JM1biTjJhPhj bTM430vIhESlEFZHOJxX3ByMaDY7/VFCUemZz+otHW7518FJMkx1InyhFTUVLqw8 Sp/do2lP/d3VceUp2ExplW4kYg== -----END CERTIFICATE-----Generated at Sat Sep 5 04:07:01 2026 by rpki-client