$ rpki-client -vvvf rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft File: gYE9avls8KB0gHHNux4nD2tcYRM.mft (raw, json) Hash identifier: Xy046psxURALX+b03xNeV1Rtj+jvr8XGJT4jOee8QKU= Subject key identifier: 47:8B:FC:D8:DE:6A:69:66:2C:A6:2A:80:A2:89:9B:D7:D8:22:4C:31 Authority key identifier: 81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13 Certificate issuer: /CN=A9128DE9/serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113 Certificate serial: 0CE8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft Manifest number: 0CCB Signing time: Fri 04 Sep 2026 18:27:06 +0000 Manifest this update: Fri 04 Sep 2026 18:27:06 +0000 Manifest next update: Fri 11 Sep 2026 18:27:06 +0000 Files and hashes: 1: gYE9avls8KB0gHHNux4nD2tcYRM.crl (hash: GWIn16KqoHfywfW0404/Q+YwIjCm7ikOKogju+o/+DQ=) 2: FE677A947F3611F1AEABD9D88FA30FBC.roa (hash: xXKNP1utbvVSzFEm+p/CVGumail8NouJOePObgsIKAg=) 3: 1D77B4081BD911EAB49CC840C4F9AE02.roa (hash: aM0okos6HP2lmuHFZTzsM6czS1dLwWW/PzQ8J/OHsFE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 18:27:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3304 (0xce8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128DE9, serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113 Validity Not Before: Sep 4 18:27:06 2026 GMT Not After : Sep 11 18:27:06 2026 GMT Subject: CN=6a9b0d7a-2032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:60:9f:d3:24:ce:95:42:48:4d:2e:84:9d:2d: aa:8e:2e:48:20:55:f6:5a:3d:c4:bf:4d:97:1f:f9: ff:d1:c7:28:13:d9:cc:4d:49:be:f8:9a:78:a7:fc: 86:93:6a:03:d2:24:8c:7f:e0:ef:97:85:19:d4:4e: df:6c:e1:9a:28:0d:e4:58:42:89:0b:c8:b3:29:bc: 24:51:e1:c1:d2:44:8e:51:c1:7f:d4:3e:81:0e:c8: ee:a6:5a:09:71:ce:21:88:64:41:0a:79:ff:d3:89: b8:fd:fa:e9:38:3c:49:c9:e2:69:ed:14:af:cd:69: b4:f2:d9:1d:04:d2:cf:f0:52:1e:75:da:73:51:19: ad:4c:b0:bc:d0:2d:49:5d:31:c6:de:d9:02:31:38: 12:2a:79:a6:f1:e7:68:f5:61:53:b0:c2:9e:11:29: 45:6f:ae:13:3c:4a:47:5d:b2:9b:16:bd:d7:e8:75: 49:61:ad:b5:51:51:ae:91:e9:70:c2:1f:5a:ab:68: 1f:b3:2e:48:2c:b9:1c:0b:11:83:77:82:3f:aa:24: 62:5e:ec:a2:2b:3b:ac:d9:d1:b0:05:ab:85:71:9d: e0:92:fa:96:ce:3d:2f:75:7e:47:af:51:9e:09:40: e3:ad:8b:c4:c1:70:9f:5b:d5:bd:08:e3:2c:da:f2: 83:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:8B:FC:D8:DE:6A:69:66:2C:A6:2A:80:A2:89:9B:D7:D8:22:4C:31 X509v3 Authority Key Identifier: keyid:81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:f3:f5:d7:32:9a:fa:ea:57:c5:29:1a:35:49:e6:e7:d7:99: 1d:a9:70:8d:72:ab:b3:9b:ff:38:3b:d3:f9:a7:3c:01:7f:72: 93:94:63:f8:a3:ef:2c:0b:ee:b7:d6:b8:e5:ee:07:9b:03:46: ab:e4:14:39:94:25:85:6c:74:c8:3d:01:1b:39:cd:6e:f8:7e: 57:8d:c4:46:b9:a4:0c:f1:a2:4f:03:de:a6:eb:e7:90:ac:89: c3:39:29:45:7d:45:89:3f:d9:dc:b9:c1:e0:f9:97:f2:a5:3f: ce:7d:f2:4a:12:64:0f:15:78:83:3c:57:21:ab:04:a1:10:12: fe:8d:7a:8e:0d:c9:12:2e:c3:09:a5:c7:5a:59:0e:fc:b9:cc: 76:4b:3e:22:19:8d:51:e2:82:94:a5:35:e6:36:01:32:e3:73: 6f:1b:b8:b0:81:80:8d:53:7a:2a:ac:76:4f:9e:32:c0:dd:b1: e5:d0:e1:44:3a:73:52:7f:2f:74:b6:d4:76:b5:53:47:c5:37: dd:a1:bb:50:e1:84:86:5c:29:fa:b9:8d:6d:4f:e8:44:89:df: f9:15:d8:cc:59:d1:2b:0a:8d:39:65:69:07:a6:7b:f5:8b:82: 58:9d:52:09:b4:2d:cc:e6:31:f7:fa:22:69:3b:f1:df:66:8f: a6:96:01:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhERTkxMTAvBgNVBAUTKDgxODEzRDZBRjk2Q0YwQTA3NDgwNzFDREJCMUUyNzBG NkI1QzYxMTMwHhcNMjYwOTA0MTgyNzA2WhcNMjYwOTExMTgyNzA2WjAYMRYwFAYD VQQDEw02YTliMGQ3YS0yMDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5mCf0yTOlUJITS6EnS2qji5IIFX2Wj3Ev02XH/n/0ccoE9nMTUm++Jp4p/yG k2oD0iSMf+Dvl4UZ1E7fbOGaKA3kWEKJC8izKbwkUeHB0kSOUcF/1D6BDsjuploJ cc4hiGRBCnn/04m4/frpODxJyeJp7RSvzWm08tkdBNLP8FIeddpzURmtTLC80C1J XTHG3tkCMTgSKnmm8edo9WFTsMKeESlFb64TPEpHXbKbFr3X6HVJYa21UVGukelw wh9aq2gfsy5ILLkcCxGDd4I/qiRiXuyiKzus2dGwBauFcZ3gkvqWzj0vdX5Hr1Ge CUDjrYvEwXCfW9W9COMs2vKDqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEeL/Nje amlmLKYqgKKJm9fYIkwxMB8GA1UdIwQYMBaAFIGBPWr5bPCgdIBxzbseJw9rXGET MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOERFOS9ENjlCNDVFODFC RDUxMUVBODBDQkNGMzZDNEY5QUUwMi9nWUU5YXZsczhLQjBnSEhOdXg0bkQydGNZ Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dZRTlhdmxzOEtCMGdISE51eDRuRDJ0Y1lSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OERFOS9ENjlCNDVFODFCRDUxMUVBODBDQkNGMzZDNEY5QUUwMi9nWUU5YXZsczhL QjBnSEhOdXg0bkQydGNZUk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgfP11zKa+upXxSkaNUnm59eZHalwjXKrs5v/ODvT+ac8AX9yk5Rj+KPvLAvu t9a45e4HmwNGq+QUOZQlhWx0yD0BGznNbvh+V43ERrmkDPGiTwPepuvnkKyJwzkp RX1FiT/Z3LnB4PmX8qU/zn3yShJkDxV4gzxXIasEoRAS/o16jg3JEi7DCaXHWlkO /LnMdks+IhmNUeKClKU15jYBMuNzbxu4sIGAjVN6Kqx2T54ywN2x5dDhRDpzUn8v dLbUdrVTR8U33aG7UOGEhlwp+rmNbU/oRInf+RXYzFnRKwqNOWVpB6Z79YuCWJ1S CbQtzOYx9/oiaTvx32aPppYBsw== -----END CERTIFICATE-----Generated at Sat Sep 5 06:56:58 2026 by rpki-client