$ rpki-client -vvvf rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft File: gJ8D89FTd5ZIUgkSmfr428wnR3w.mft (raw, json) Hash identifier: slZjEWiIXX61MtYqp1QfdGHEXNeWAxZWJEYAbSBSEMQ= Subject key identifier: 02:9F:7F:5B:0C:BE:8A:F0:D8:56:0F:DF:83:25:64:87:F0:B3:32:E6 Authority key identifier: 80:9F:03:F3:D1:53:77:96:48:52:09:12:99:FA:F8:DB:CC:27:47:7C Certificate issuer: /CN=A9127BF1/serialNumber=809F03F3D15377964852091299FAF8DBCC27477C Certificate serial: 0274 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft Manifest number: 0267 Signing time: Wed 21 Oct 2026 02:42:18 +0000 Manifest this update: Wed 21 Oct 2026 02:42:18 +0000 Manifest next update: Wed 28 Oct 2026 02:42:18 +0000 Files and hashes: 1: gJ8D89FTd5ZIUgkSmfr428wnR3w.crl (hash: /cVCRqB6CQuE0cdt6afC7hqf5i8QYXQmsEUsN2t0h/g=) 2: 62A413B2D23811EFA34C3663C4F9AE02.roa (hash: ZKyMMeDidw2RZBoa1Uac9hxWkhYX6qMAN6CuYcH5VgI=) 3: C9836F3A314C11EEB33F3686C4F9AE02.roa (hash: wfqgmiYwhfm3vauQpeYyEZQnrqn5J3zQJQ5nfR04nk4=) 4: 63A2921EB00A11F1BB307FE66811F970.roa (hash: fn1JWv5BqryK+ZEc9d9YgHpP5ZlZf/Pxj6q/K1vvhR4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.crl rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 02:42:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 628 (0x274) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127BF1, serialNumber=809F03F3D15377964852091299FAF8DBCC27477C Validity Not Before: Oct 21 02:42:18 2026 GMT Not After : Oct 28 02:42:18 2026 GMT Subject: CN=6ad8268a-05c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a9:49:e1:0a:f5:55:13:52:31:12:49:36:38: 80:63:68:ac:fc:b4:66:65:53:cc:a0:f3:a0:eb:b7: ec:4b:b1:2c:a7:23:3d:d4:16:ab:e7:00:bc:16:12: 41:b7:53:44:32:56:a9:89:c3:69:13:38:4e:93:ad: f0:97:75:57:2d:1a:42:06:12:e7:fb:55:7c:05:ba: 88:e3:25:62:52:8e:bd:b0:c4:85:d9:ae:9f:e3:92: dc:66:36:80:3c:28:67:15:f3:f8:7b:3f:e9:d3:66: 84:1c:0e:be:9d:91:b2:65:98:e4:a7:ae:d9:e1:25: b7:d1:ea:86:6a:2a:90:63:dc:d0:a0:76:82:cc:7b: 59:19:ed:11:f5:b9:37:e8:fd:26:42:9b:8c:c0:d0: 93:db:90:e8:a0:6e:55:b5:ed:6b:a4:b3:77:ac:0e: 98:59:89:9d:00:a1:47:e1:fa:0b:d5:8c:d9:c4:3a: 54:b6:52:61:90:ba:ad:70:62:c6:f6:93:fc:9b:11: ad:65:2e:48:98:80:37:8f:9d:39:a9:1f:3d:3c:4c: 1d:7c:ad:6e:fc:67:aa:bd:4f:aa:58:9b:2e:a9:74: ed:9d:0e:1d:eb:42:5c:e3:c9:d1:f0:d6:fa:9b:70: d7:ee:8f:26:7f:41:11:a1:a5:df:c9:bd:16:6d:eb: fb:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:9F:7F:5B:0C:BE:8A:F0:D8:56:0F:DF:83:25:64:87:F0:B3:32:E6 X509v3 Authority Key Identifier: keyid:80:9F:03:F3:D1:53:77:96:48:52:09:12:99:FA:F8:DB:CC:27:47:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:6c:f0:97:ca:22:1b:1c:a5:86:16:3d:a4:db:2f:b9:28:31: 28:27:a3:05:52:c8:3c:ae:93:81:4a:35:cb:70:98:7b:62:35: 8c:f2:80:d3:5e:c6:92:3e:a3:ef:42:cd:e4:46:a7:63:94:f4: 99:8d:4a:93:ba:0e:6c:c9:56:9e:d7:ef:9f:e5:e9:26:15:28: 84:a5:55:9e:83:94:b3:5a:9e:45:e2:1a:7d:c0:45:91:95:e5: c8:10:50:87:3c:33:89:a6:e3:44:5b:b5:60:79:6f:4b:19:a6: 35:ce:76:05:58:6f:5d:10:33:1d:65:6a:0b:6f:22:fd:48:61: 95:45:12:17:00:cf:5a:bb:d4:e2:0b:fd:be:f2:9e:3c:ed:60: 44:02:47:80:85:ff:8c:5b:88:9a:8e:48:5a:a9:31:83:47:9b: 93:84:a0:3a:9f:b8:89:87:5b:a9:e7:d6:ab:40:06:65:c1:76: af:4c:29:18:4b:7f:93:f0:b3:f8:65:d4:12:b1:63:38:28:3b: b7:de:aa:47:06:4f:a7:b0:69:22:7a:60:0f:5b:d9:01:5e:56: dd:ef:16:f1:92:ca:a3:71:6b:f5:a9:61:85:39:c6:45:7d:16: a7:54:e8:36:75:64:ae:e3:7f:02:ff:79:15:54:07:9a:d9:c2: 1b:f0:f8:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdCRjExMTAvBgNVBAUTKDgwOUYwM0YzRDE1Mzc3OTY0ODUyMDkxMjk5RkFGOERC Q0MyNzQ3N0MwHhcNMjYxMDIxMDI0MjE4WhcNMjYxMDI4MDI0MjE4WjAYMRYwFAYD VQQDEw02YWQ4MjY4YS0wNWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp6lJ4Qr1VRNSMRJJNjiAY2is/LRmZVPMoPOg67fsS7EspyM91Bar5wC8FhJB t1NEMlapicNpEzhOk63wl3VXLRpCBhLn+1V8BbqI4yViUo69sMSF2a6f45LcZjaA PChnFfP4ez/p02aEHA6+nZGyZZjkp67Z4SW30eqGaiqQY9zQoHaCzHtZGe0R9bk3 6P0mQpuMwNCT25DooG5Vte1rpLN3rA6YWYmdAKFH4foL1YzZxDpUtlJhkLqtcGLG 9pP8mxGtZS5ImIA3j505qR89PEwdfK1u/GeqvU+qWJsuqXTtnQ4d60Jc48nR8Nb6 m3DX7o8mf0ERoaXfyb0Wbev7LQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAKff1sM vorw2FYP34MlZIfwszLmMB8GA1UdIwQYMBaAFICfA/PRU3eWSFIJEpn6+NvMJ0d8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0JGMS8zMEQ0ODYzNDMx NEMxMUVFQUJGRkE5ODRDNEY5QUUwMi9nSjhEODlGVGQ1WklVZ2tTbWZyNDI4d25S M3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dKOEQ4OUZUZDVaSVVna1NtZnI0Mjh3blIzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0JGMS8zMEQ0ODYzNDMxNEMxMUVFQUJGRkE5ODRDNEY5QUUwMi9nSjhEODlGVGQ1 WklVZ2tTbWZyNDI4d25SM3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMmzwl8oiGxylhhY9pNsvuSgxKCejBVLIPK6TgUo1y3CYe2I1jPKA017Gkj6j 70LN5EanY5T0mY1Kk7oObMlWntfvn+XpJhUohKVVnoOUs1qeReIafcBFkZXlyBBQ hzwziabjRFu1YHlvSxmmNc52BVhvXRAzHWVqC28i/UhhlUUSFwDPWrvU4gv9vvKe PO1gRAJHgIX/jFuImo5IWqkxg0ebk4SgOp+4iYdbqefWq0AGZcF2r0wpGEt/k/Cz +GXUErFjOCg7t96qRwZPp7BpInpgD1vZAV5W3e8W8ZLKo3Fr9alhhTnGRX0Wp1To NnVkruN/Av95FVQHmtnCG/D4Qw== -----END CERTIFICATE-----Generated at Thu Oct 22 19:09:39 2026 by rpki-client