$ rpki-client -vvvf rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/cg3tscVvVSBB9EiED3YVdts3rfI.mft File: cg3tscVvVSBB9EiED3YVdts3rfI.mft (raw, json) Hash identifier: pUlJ3so6JsAouHwA/PCvi18RPiENtS8yK9KZfKiqyg8= Subject key identifier: 0F:84:26:4B:7F:82:05:DF:C4:22:6E:F4:DB:E7:81:A9:D4:3A:F8:0D Authority key identifier: 72:0D:ED:B1:C5:6F:55:20:41:F4:48:84:0F:76:15:76:DB:37:AD:F2 Certificate issuer: /CN=A9135597/serialNumber=720DEDB1C56F552041F448840F761576DB37ADF2 Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cg3tscVvVSBB9EiED3YVdts3rfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/cg3tscVvVSBB9EiED3YVdts3rfI.mft Manifest number: 02FA Signing time: Sat 03 Oct 2026 02:01:33 +0000 Manifest this update: Sat 03 Oct 2026 02:01:32 +0000 Manifest next update: Sat 10 Oct 2026 02:01:32 +0000 Files and hashes: 1: cg3tscVvVSBB9EiED3YVdts3rfI.crl (hash: 0IUxbr2XCvwjLjuiMHICsXBcM6GDU1QcxLfnmr5112g=) 2: 1A47E4986DE811F1A234B57A5CA30FBC.roa (hash: 1gx+6aoEh7HCS4ZBkElgy0tGymufvKOntntuWXEXFU4=) 3: 19C7B1C46DE811F1A234B57A5CA30FBC.roa (hash: GKp1QODQO8zjgMFMSHC7XIbNh/54vtscAesJ+Vx1oaY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/cg3tscVvVSBB9EiED3YVdts3rfI.crl rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/cg3tscVvVSBB9EiED3YVdts3rfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cg3tscVvVSBB9EiED3YVdts3rfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 02:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135597, serialNumber=720DEDB1C56F552041F448840F761576DB37ADF2 Validity Not Before: Oct 3 02:01:32 2026 GMT Not After : Oct 10 02:01:32 2026 GMT Subject: CN=6ac061fd-4b4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:27:6c:61:55:34:89:81:95:7e:34:40:b4:f1: 2e:d8:38:0e:05:3d:3b:fe:f2:c1:74:76:f0:f2:3d: cb:c5:ad:4d:1b:82:05:b9:20:86:02:c3:d1:8b:ff: bb:30:36:51:27:0b:1d:69:b0:e1:17:c0:fa:6e:f2: c5:c4:58:f5:06:fa:b2:4a:0c:44:1b:59:37:2f:ad: 66:46:2c:06:06:f1:35:d8:73:d9:54:8a:f3:a7:9d: 63:89:50:10:9c:ba:86:cf:66:0b:46:96:04:85:57: a3:30:b7:b2:35:d7:ce:03:26:f8:81:79:4c:b4:d0: a8:a7:59:c0:35:4a:8e:2e:5a:6f:3b:0b:2d:ef:3a: e2:e2:69:17:66:27:9f:1d:e9:0b:24:90:c2:29:c0: c7:29:ee:2f:4a:c1:d1:3f:ca:64:10:d6:09:3d:19: 7c:9b:fc:66:10:e3:a3:f4:bf:d3:8c:70:41:d6:1f: 2f:92:7d:d7:f0:1c:aa:84:0a:b4:01:03:ba:25:3b: 2e:22:7c:b1:3b:ff:fb:39:57:7f:43:3d:68:77:b5: 0e:46:4b:6d:b5:6d:13:d2:73:3e:86:5b:38:c1:4f: d2:f6:2b:86:59:30:8d:2c:67:20:c4:0e:4e:81:9e: cb:18:c7:2b:b7:f6:b5:82:d9:ce:93:21:d4:61:19: 03:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:84:26:4B:7F:82:05:DF:C4:22:6E:F4:DB:E7:81:A9:D4:3A:F8:0D X509v3 Authority Key Identifier: keyid:72:0D:ED:B1:C5:6F:55:20:41:F4:48:84:0F:76:15:76:DB:37:AD:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/cg3tscVvVSBB9EiED3YVdts3rfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cg3tscVvVSBB9EiED3YVdts3rfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/cg3tscVvVSBB9EiED3YVdts3rfI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:74:3a:a7:3a:af:d1:30:05:c7:a6:3b:31:3d:b6:d9:74:94: d0:86:43:4f:c7:91:a3:d4:5a:41:ca:c3:d8:d1:7d:5f:9a:90: fb:0b:4a:66:63:b1:3f:8a:5d:85:91:2b:5b:d0:e3:70:06:43: e6:01:ab:ec:2a:14:8b:ee:50:07:59:6f:52:b6:45:4f:5b:4e: 8e:a8:23:41:57:39:6e:4c:e9:b0:81:83:15:4b:a1:97:d2:8a: 5e:3e:94:7d:d5:bc:47:81:11:27:94:b4:98:0c:67:e1:e7:f2: 2f:7d:88:9c:be:4c:e0:8b:8b:5a:79:51:06:39:a4:f6:1f:7d: e4:55:e7:90:de:15:60:6c:cc:8e:ee:8c:71:62:e1:f3:6c:6f: 35:85:c6:bd:40:2c:e5:9f:4c:46:53:78:ca:1b:ba:81:84:cb: 12:70:2b:6b:5b:21:a0:7b:1a:5e:8f:41:6f:c9:36:ba:2f:72: 29:4d:d7:bb:7e:4f:f4:0e:02:01:e9:61:d9:eb:c1:86:d0:db: 7e:0e:0f:6c:b3:1a:6e:74:dd:18:d8:24:60:62:50:15:d8:93: cb:d6:50:4a:80:7a:3a:f5:57:3f:71:63:37:d9:d1:5c:db:50: ed:fc:9b:fb:5b:75:41:01:39:a6:e7:0c:2e:31:67:d1:40:3e: 2b:94:97:88 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NTU5NzExMC8GA1UEBRMoNzIwREVEQjFDNTZGNTUyMDQxRjQ0ODg0MEY3NjE1NzZE QjM3QURGMjAeFw0yNjEwMDMwMjAxMzJaFw0yNjEwMTAwMjAxMzJaMBgxFjAUBgNV BAMTDTZhYzA2MWZkLTRiNGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDdJ2xhVTSJgZV+NEC08S7YOA4FPTv+8sF0dvDyPcvFrU0bggW5IIYCw9GL/7sw NlEnCx1psOEXwPpu8sXEWPUG+rJKDEQbWTcvrWZGLAYG8TXYc9lUivOnnWOJUBCc uobPZgtGlgSFV6Mwt7I1184DJviBeUy00KinWcA1So4uWm87Cy3vOuLiaRdmJ58d 6QskkMIpwMcp7i9KwdE/ymQQ1gk9GXyb/GYQ46P0v9OMcEHWHy+SfdfwHKqECrQB A7olOy4ifLE7//s5V39DPWh3tQ5GS221bRPScz6GWzjBT9L2K4ZZMI0sZyDEDk6B nssYxyu39rWC2c6TIdRhGQPbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUD4QmS3+C Bd/EIm702+eBqdQ6+A0wHwYDVR0jBBgwFoAUcg3tscVvVSBB9EiED3YVdts3rfIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1NTk3L0U5NzA3RDFFOUEz QTExRUQ4MUIxMjcxREM0RjlBRTAyL2NnM3RzY1Z2VlNCQjlFaUVEM1lWZHRzM3Jm SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY2czdHNjVnZWU0JCOUVpRUQzWVZkdHMzcmZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1 NTk3L0U5NzA3RDFFOUEzQTExRUQ4MUIxMjcxREM0RjlBRTAyL2NnM3RzY1Z2VlNC QjlFaUVEM1lWZHRzM3JmSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQALdDqnOq/RMAXHpjsxPbbZdJTQhkNPx5Gj1FpBysPY0X1fmpD7C0pmY7E/il2F kStb0ONwBkPmAavsKhSL7lAHWW9StkVPW06OqCNBVzluTOmwgYMVS6GX0opePpR9 1bxHgREnlLSYDGfh5/IvfYicvkzgi4taeVEGOaT2H33kVeeQ3hVgbMyO7oxxYuHz bG81hca9QCzln0xGU3jKG7qBhMsScCtrWyGgexpej0FvyTa6L3IpTde7fk/0DgIB 6WHZ68GG0Nt+Dg9ssxpudN0Y2CRgYlAV2JPL1lBKgHo69Vc/cWM32dFc21Dt/Jv7 W3VBATmm5wwuMWfRQD4rlJeI -----END CERTIFICATE-----Generated at Sun Oct 4 20:14:52 2026 by rpki-client