$ rpki-client -vvvf rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft File: GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft (raw, json) Hash identifier: 6qYCkrGVatYx7LplXYzTV9wJf2fTD3R3mmkAz4R6BxE= Subject key identifier: 2D:84:4D:97:4B:9F:7D:6A:F4:CA:45:48:0C:58:DE:B2:61:1A:50:CB Authority key identifier: 18:3F:A9:0D:C3:55:6C:1D:16:56:8E:BE:BB:18:E2:FC:5A:78:1D:93 Certificate issuer: /CN=A9127D58/serialNumber=183FA90DC3556C1D16568EBEBB18E2FC5A781D93 Certificate serial: D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft Manifest number: CA Signing time: Thu 03 Sep 2026 07:03:37 +0000 Manifest this update: Thu 03 Sep 2026 07:03:36 +0000 Manifest next update: Thu 10 Sep 2026 07:03:36 +0000 Files and hashes: 1: GD-pDcNVbB0WVo6-uxji_Fp4HZM.crl (hash: +ci/Lt2BMxi+9tmdy/9j8WA8UI/NppteUD3coqF6jfw=) 2: E09D5D9C7F0711F092740742C4F9AE02.roa (hash: FRx1ILrXRk/D6NM37DgKlOP8QzRDUYGOaHdxxmU119o=) 3: 7B86E2347F0711F0B9016941C4F9AE02.roa (hash: RJ2sx6p2KIpfuzWkhVi9i2Tb6z+LWx+fgMZmXi47440=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.crl rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 07:03:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127D58, serialNumber=183FA90DC3556C1D16568EBEBB18E2FC5A781D93 Validity Not Before: Sep 3 07:03:36 2026 GMT Not After : Sep 10 07:03:36 2026 GMT Subject: CN=6a991bc9-b077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a5:c1:cf:a6:ea:59:f0:80:76:2a:e6:a2:0b: f8:4e:21:c0:3c:44:f0:7c:53:a0:b3:54:a1:d4:a7: 33:16:d0:0d:0e:a9:e5:ec:f6:0e:9c:a3:0b:a1:85: 86:7d:56:7b:57:4a:66:b1:6c:b9:b4:54:df:28:0c: ca:c4:f0:72:59:9b:13:4d:53:f4:91:ec:6d:9b:7e: 43:66:94:12:2c:f4:45:a7:9e:35:59:08:18:3b:c0: d8:a0:04:27:34:cd:28:45:8a:a9:3b:92:fe:b8:e0: d3:a7:e1:4a:87:dc:3b:f4:cf:b7:77:fe:63:c1:4f: 8c:a9:4d:02:f7:2b:31:28:e0:92:01:08:67:0c:a9: 56:3d:48:d1:26:68:2e:14:2b:d5:e3:4c:0f:c8:96: 63:d5:3f:c3:09:6b:84:2e:9c:c8:d6:5f:81:6f:48: 08:5f:27:42:60:57:c9:80:09:39:67:fd:a8:99:c5: 75:67:18:74:bb:7a:0e:ae:d1:0a:fa:7a:94:62:a9: cf:0f:7a:ac:c6:25:63:fe:b3:9e:a3:7f:a2:2c:26: e2:07:e7:f5:f1:23:11:b9:83:87:0c:a6:f4:a1:c2: 17:d4:c7:1a:32:fa:51:8d:16:1b:f6:58:68:93:a4: 9c:a5:3d:9f:35:6d:3f:0e:e7:8a:31:12:b2:5d:43: 9e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:84:4D:97:4B:9F:7D:6A:F4:CA:45:48:0C:58:DE:B2:61:1A:50:CB X509v3 Authority Key Identifier: keyid:18:3F:A9:0D:C3:55:6C:1D:16:56:8E:BE:BB:18:E2:FC:5A:78:1D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:fb:b0:14:07:29:be:91:64:49:72:8e:64:85:6e:e9:7a:40: 85:08:74:8c:7a:0a:a7:6c:a2:e6:73:c0:04:41:d6:5f:97:7e: c4:f5:25:7c:06:2e:9d:df:2b:37:d3:3d:9d:ab:d3:46:18:67: 42:80:3b:17:f5:29:97:e3:cc:62:c8:11:26:88:ad:cd:e9:57: cb:0b:43:07:d2:1a:24:60:0f:17:b5:86:c4:c7:94:df:ca:d5: 0c:26:91:ab:38:a8:df:dd:77:4c:27:7e:a3:05:c1:5d:1b:06: b2:8f:d1:53:2f:9b:fb:06:72:39:fb:ce:2e:62:59:46:15:42: 5a:37:03:48:94:e7:e9:ca:53:58:00:db:00:9c:46:2d:4c:ce: 47:57:27:7d:49:71:b9:74:34:2d:50:ac:f9:08:1d:61:bd:2e: e7:bc:46:8e:97:8e:3f:be:c1:e9:89:b2:7f:74:ad:76:6d:2d: 30:f5:f6:cf:01:62:e1:03:fd:19:1d:b2:58:b3:17:5e:ed:d7: cd:7c:57:a7:70:0c:10:de:de:b6:8b:77:c9:b6:07:d7:65:51: 10:65:37:98:26:bc:09:45:97:57:09:11:44:0c:75:09:f7:a7: a8:c9:5a:19:9c:27:2b:32:6d:84:45:a2:3d:32:d6:16:b1:3f: 2d:cb:af:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdENTgxMTAvBgNVBAUTKDE4M0ZBOTBEQzM1NTZDMUQxNjU2OEVCRUJCMThFMkZD NUE3ODFEOTMwHhcNMjYwOTAzMDcwMzM2WhcNMjYwOTEwMDcwMzM2WjAYMRYwFAYD VQQDEw02YTk5MWJjOS1iMDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArqXBz6bqWfCAdirmogv4TiHAPETwfFOgs1Sh1KczFtANDqnl7PYOnKMLoYWG fVZ7V0pmsWy5tFTfKAzKxPByWZsTTVP0kextm35DZpQSLPRFp541WQgYO8DYoAQn NM0oRYqpO5L+uODTp+FKh9w79M+3d/5jwU+MqU0C9ysxKOCSAQhnDKlWPUjRJmgu FCvV40wPyJZj1T/DCWuELpzI1l+Bb0gIXydCYFfJgAk5Z/2omcV1Zxh0u3oOrtEK +nqUYqnPD3qsxiVj/rOeo3+iLCbiB+f18SMRuYOHDKb0ocIX1McaMvpRjRYb9lho k6ScpT2fNW0/DueKMRKyXUOeCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC2ETZdL n31q9MpFSAxY3rJhGlDLMB8GA1UdIwQYMBaAFBg/qQ3DVWwdFlaOvrsY4vxaeB2T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0Q1OC81OUQwNkExMjdG MDYxMUYwOTUyMDU5M0FDNEY5QUUwMi9HRC1wRGNOVmJCMFdWbzYtdXhqaV9GcDRI Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dELXBEY05WYkIwV1ZvNi11eGppX0ZwNEhaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0Q1OC81OUQwNkExMjdGMDYxMUYwOTUyMDU5M0FDNEY5QUUwMi9HRC1wRGNOVmJC MFdWbzYtdXhqaV9GcDRIWk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZvuwFAcpvpFkSXKOZIVu6XpAhQh0jHoKp2yi5nPABEHWX5d+xPUlfAYund8r N9M9navTRhhnQoA7F/Upl+PMYsgRJoitzelXywtDB9IaJGAPF7WGxMeU38rVDCaR qzio3913TCd+owXBXRsGso/RUy+b+wZyOfvOLmJZRhVCWjcDSJTn6cpTWADbAJxG LUzOR1cnfUlxuXQ0LVCs+QgdYb0u57xGjpeOP77B6Ymyf3Stdm0tMPX2zwFi4QP9 GR2yWLMXXu3XzXxXp3AMEN7etot3ybYH12VREGU3mCa8CUWXVwkRRAx1CfenqMla GZwnKzJthEWiPTLWFrE/Lcuvfg== -----END CERTIFICATE-----Generated at Sat Sep 5 07:00:18 2026 by rpki-client