$ rpki-client -vvvf rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft File: cGWovjQWOF29AyJATk9jTG7-XYI.mft (raw, json) Hash identifier: M+IUGBdg25MYLTh/IqkINTn0TMl+TD5t/I/A3L+HYzg= Subject key identifier: DE:DE:57:65:D5:7E:03:21:E3:49:76:AB:3E:DF:44:A3:B2:D7:4C:0C Authority key identifier: 70:65:A8:BE:34:16:38:5D:BD:03:22:40:4E:4F:63:4C:6E:FE:5D:82 Certificate issuer: /CN=A9125AE9/serialNumber=7065A8BE3416385DBD0322404E4F634C6EFE5D82 Certificate serial: 0394 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft Manifest number: 0388 Signing time: Sat 03 Oct 2026 01:02:29 +0000 Manifest this update: Sat 03 Oct 2026 01:02:29 +0000 Manifest next update: Sat 10 Oct 2026 01:02:29 +0000 Files and hashes: 1: cGWovjQWOF29AyJATk9jTG7-XYI.crl (hash: 9Hk8fxZEtMqDCxmVk2TiRUnRJXb3t7CzXPWi1TiaxyI=) 2: 70BB6C14064A11EDA0A92068C4F9AE02.roa (hash: e6bCOgfRSemdp2rsVv83FamwpxN7KaZSE/x3Q3BUALg=) 3: 6FE0D496064A11EDA0A92068C4F9AE02.roa (hash: nSPvZX7KXzBzUT7OFwC/s1n132cCYNb3XtUKSB/sg50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.crl rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 01:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 916 (0x394) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125AE9, serialNumber=7065A8BE3416385DBD0322404E4F634C6EFE5D82 Validity Not Before: Oct 3 01:02:29 2026 GMT Not After : Oct 10 01:02:29 2026 GMT Subject: CN=6ac05425-a43a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:ee:99:2a:74:f7:3d:dd:86:ba:96:26:e5:05: d0:5f:af:0a:8e:af:af:5a:20:09:a1:36:df:be:7a: ba:4f:4f:ca:fc:9c:4c:9f:67:ee:1b:cb:e6:61:89: 74:51:ef:20:b4:68:1f:e6:f0:44:ae:39:b9:a1:64: 76:02:d0:ac:b2:91:c1:03:18:25:82:be:2e:0d:bc: b8:25:dd:cc:ed:87:f9:6c:1b:e6:86:4b:96:5c:04: 7e:54:19:72:37:eb:aa:f9:1d:3c:e2:65:d8:95:3b: 78:5b:c1:93:c6:26:b1:e0:f3:0c:bb:f2:9c:2f:70: 15:ee:4d:78:66:6d:d6:78:22:21:04:41:90:23:ea: b6:1c:96:e4:9e:8a:d6:7a:4a:07:f6:bc:32:79:7c: d0:0f:b1:c1:9c:4a:be:72:66:d7:23:4a:4a:0d:3e: 89:85:e5:84:42:91:a7:51:6d:c9:a3:d7:f9:57:46: 66:de:56:9e:ac:e6:12:ac:11:45:e9:1b:1c:3f:7a: 6d:6f:70:9e:04:03:fe:da:52:0f:23:1d:c8:b4:8e: 6c:07:a3:4c:47:e8:02:fe:61:5c:98:a1:f6:30:31: bb:46:43:d2:76:17:7a:dc:bc:70:06:48:e8:5d:79: df:6b:0d:ac:86:7c:d7:ea:38:20:83:3b:2d:a3:7e: 33:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:DE:57:65:D5:7E:03:21:E3:49:76:AB:3E:DF:44:A3:B2:D7:4C:0C X509v3 Authority Key Identifier: keyid:70:65:A8:BE:34:16:38:5D:BD:03:22:40:4E:4F:63:4C:6E:FE:5D:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:6c:c6:b9:a6:40:e2:73:9b:81:29:bb:57:22:a5:4b:f5:6d: 53:9a:25:47:1e:f6:f5:de:1a:2a:b4:bf:42:a0:43:bb:48:61: 06:5a:1b:7e:f9:65:b1:93:4e:1b:ff:e1:5f:30:1a:51:6d:9f: 7f:5d:74:ba:68:80:2a:b7:70:38:52:22:d2:07:a6:9c:2a:cd: 6d:86:ad:8c:80:fa:28:3f:c7:76:6f:af:2e:79:bd:63:3f:92: f3:94:88:d7:8c:63:da:13:aa:3a:92:8a:74:cc:fd:8e:9a:ac: 9d:f8:31:74:16:eb:f0:7c:e9:71:b5:1b:65:89:7a:27:2a:5c: 13:8a:92:87:e5:bb:6a:8a:5d:25:28:f1:fa:e7:bb:74:1a:bb: fc:e4:3e:f2:2d:e6:df:fd:c2:7b:2b:5a:48:fa:85:ae:e5:46: 78:b5:d9:b2:50:12:b6:50:60:ee:a3:14:85:f4:08:c3:6c:e4: f2:2c:0a:da:1b:ad:74:e4:7b:0c:78:95:c6:2f:d1:4f:1d:df: 9f:0c:82:a1:ee:d3:09:96:83:89:78:88:b2:06:9f:d4:08:9a: 76:b8:9a:14:e1:3b:3e:9e:1c:9d:88:7f:0e:c2:98:7d:ac:a2: 00:74:ff:4e:e6:01:72:72:02:ca:57:b5:81:1f:f4:7e:23:bf: 4d:e2:92:eb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVBRTkxMTAvBgNVBAUTKDcwNjVBOEJFMzQxNjM4NURCRDAzMjI0MDRFNEY2MzRD NkVGRTVEODIwHhcNMjYxMDAzMDEwMjI5WhcNMjYxMDEwMDEwMjI5WjAYMRYwFAYD VQQDEw02YWMwNTQyNS1hNDNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7e6ZKnT3Pd2GupYm5QXQX68Kjq+vWiAJoTbfvnq6T0/K/JxMn2fuG8vmYYl0 Ue8gtGgf5vBErjm5oWR2AtCsspHBAxglgr4uDby4Jd3M7Yf5bBvmhkuWXAR+VBly N+uq+R084mXYlTt4W8GTxiax4PMMu/KcL3AV7k14Zm3WeCIhBEGQI+q2HJbknorW ekoH9rwyeXzQD7HBnEq+cmbXI0pKDT6JheWEQpGnUW3Jo9f5V0Zm3laerOYSrBFF 6RscP3ptb3CeBAP+2lIPIx3ItI5sB6NMR+gC/mFcmKH2MDG7RkPSdhd63LxwBkjo XXnfaw2shnzX6jgggzsto34z/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN7eV2XV fgMh40l2qz7fRKOy10wMMB8GA1UdIwQYMBaAFHBlqL40FjhdvQMiQE5PY0xu/l2C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUFFOS9GRkVCN0Y5QTA2 NDYxMUVEOUNCNzMxNjNDNEY5QUUwMi9jR1dvdmpRV09GMjlBeUpBVGs5alRHNy1Y WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NHV292alFXT0YyOUF5SkFUazlqVEc3LVhZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUFFOS9GRkVCN0Y5QTA2NDYxMUVEOUNCNzMxNjNDNEY5QUUwMi9jR1dvdmpRV09G MjlBeUpBVGs5alRHNy1YWUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA2zGuaZA4nObgSm7VyKlS/VtU5olRx729d4aKrS/QqBDu0hhBlobfvllsZNO G//hXzAaUW2ff110umiAKrdwOFIi0gemnCrNbYatjID6KD/Hdm+vLnm9Yz+S85SI 14xj2hOqOpKKdMz9jpqsnfgxdBbr8HzpcbUbZYl6JypcE4qSh+W7aopdJSjx+ue7 dBq7/OQ+8i3m3/3CeytaSPqFruVGeLXZslAStlBg7qMUhfQIw2zk8iwK2hutdOR7 DHiVxi/RTx3fnwyCoe7TCZaDiXiIsgaf1AiadriaFOE7Pp4cnYh/DsKYfayiAHT/ TuYBcnICyle1gR/0fiO/TeKS6w== -----END CERTIFICATE-----Generated at Sun Oct 4 08:19:13 2026 by rpki-client