$ rpki-client -vvvf rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.mft File: rGoi8eThZQrPtSifXctdU5IPzzQ.mft (raw, json) Hash identifier: 1N80Ecy9ZdNiwldim7o2oDMW7b3iW47ZHyBSFrnJoc4= Subject key identifier: C7:EA:18:E4:DA:6C:93:EB:2F:7C:06:F5:25:36:A9:A7:F7:2C:DD:83 Authority key identifier: AC:6A:22:F1:E4:E1:65:0A:CF:B5:28:9F:5D:CB:5D:53:92:0F:CF:34 Certificate issuer: /CN=A91422D7/serialNumber=AC6A22F1E4E1650ACFB5289F5DCB5D53920FCF34 Certificate serial: 01FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoi8eThZQrPtSifXctdU5IPzzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.mft Manifest number: 05C4 Signing time: Wed 07 Oct 2026 00:39:47 +0000 Manifest this update: Wed 07 Oct 2026 00:39:47 +0000 Manifest next update: Wed 14 Oct 2026 00:39:47 +0000 Files and hashes: 1: rGoi8eThZQrPtSifXctdU5IPzzQ.crl (hash: xQShVn0ItOL/xTNhOzcfQFfxyuBNh3oI8xSk5/gx8+E=) 2: CE5F74E2BE5811EEA8C02E2AC4F9AE02.roa (hash: Z1lkPboS7Do5JVczgOK46BmhKy5Eyozp7p6CLVvAhpo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.crl rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoi8eThZQrPtSifXctdU5IPzzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 00:39:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 511 (0x1ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91422D7, serialNumber=AC6A22F1E4E1650ACFB5289F5DCB5D53920FCF34 Validity Not Before: Oct 7 00:39:47 2026 GMT Not After : Oct 14 00:39:47 2026 GMT Subject: CN=6ac594d3-3eca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b4:cf:99:48:6b:c4:9a:65:c6:9c:74:a3:b8: 2a:fe:63:5a:59:51:32:f0:07:1b:9a:79:44:ce:db: 96:6c:a5:66:0c:e5:71:58:ce:c6:30:ed:22:38:fd: fa:91:13:be:33:24:9b:a2:f2:5d:49:14:1c:ae:69: 5a:d3:85:a7:95:4b:70:92:5b:1d:e3:63:2f:79:b4: e0:5e:2c:e7:f1:42:b6:2b:87:a7:cc:7e:65:38:c8: 66:16:0f:09:52:ff:2d:21:79:92:cf:eb:3f:89:65: 60:89:13:bd:a6:4f:50:07:a2:fa:55:6e:d2:30:f7: cc:19:b7:44:55:08:c7:de:c7:33:fd:78:ae:2f:24: 67:b3:48:29:74:f3:9b:49:0d:4b:49:d2:68:fc:1c: 05:6d:8b:6f:63:b1:34:7f:a5:cf:fc:b8:29:f1:61: e2:21:80:61:35:2a:31:fa:60:3e:c5:b5:be:95:2a: f4:c5:df:f9:49:7b:67:aa:71:44:7f:aa:ce:d2:ee: 2c:4f:2f:8c:c0:8a:f2:72:28:32:4d:d1:26:2c:0e: bf:af:f8:10:33:56:73:34:3d:45:71:d2:c5:a7:0e: f9:fd:8c:4c:c6:de:da:ae:5a:73:72:ea:a2:7c:b8: 90:ea:92:f6:6b:e8:a1:0a:31:f9:8a:83:5a:57:52: 9c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:EA:18:E4:DA:6C:93:EB:2F:7C:06:F5:25:36:A9:A7:F7:2C:DD:83 X509v3 Authority Key Identifier: keyid:AC:6A:22:F1:E4:E1:65:0A:CF:B5:28:9F:5D:CB:5D:53:92:0F:CF:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoi8eThZQrPtSifXctdU5IPzzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:42:a1:ee:75:0f:8b:4c:af:ca:2e:aa:d0:63:35:be:93:8c: 8e:7e:b9:80:d5:2c:b8:19:e5:9e:44:0b:37:bd:8e:7f:a7:1b: 27:25:b4:f3:88:33:6d:45:41:1c:63:49:e6:1c:e4:14:aa:2e: 33:0e:65:f9:87:66:1a:5a:1c:47:5d:1d:7f:00:f6:c5:c3:8a: ec:6c:93:7c:d1:ea:9d:af:de:be:46:b0:f1:ee:94:23:d0:83: a1:45:53:a0:71:b2:8e:e6:f6:e5:74:e6:c2:a3:97:22:1d:7f: 27:f3:12:bf:6d:94:b5:75:ea:f3:13:ec:75:98:cd:7d:d5:e1: 09:a2:ae:5d:c4:4d:a4:b6:ce:24:c6:d0:f9:9b:03:e0:1d:dc: 7b:d4:0f:d6:67:e2:a8:4e:3a:fc:2e:78:41:4e:c6:e0:5d:c3: b5:09:49:71:1f:d6:71:1e:fe:fc:a2:a9:bb:6c:c2:62:b3:17: 40:a1:e2:34:ec:4a:af:8c:a5:0c:bc:6b:a1:2f:29:3b:9d:ac: f7:38:94:fa:20:b9:c7:66:6f:9c:9f:fd:ea:4c:f0:36:58:91: 53:32:c4:9a:65:3b:2e:d8:e8:1b:2b:d3:90:b9:47:f6:4a:1f: e6:6e:e6:7f:34:30:6d:28:50:26:37:76:6b:ad:c8:a3:6e:1a: 68:cd:86:ef -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIyRDcxMTAvBgNVBAUTKEFDNkEyMkYxRTRFMTY1MEFDRkI1Mjg5RjVEQ0I1RDUz OTIwRkNGMzQwHhcNMjYxMDA3MDAzOTQ3WhcNMjYxMDE0MDAzOTQ3WjAYMRYwFAYD VQQDEw02YWM1OTRkMy0zZWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk7TPmUhrxJplxpx0o7gq/mNaWVEy8AcbmnlEztuWbKVmDOVxWM7GMO0iOP36 kRO+MySbovJdSRQcrmla04WnlUtwklsd42MvebTgXizn8UK2K4enzH5lOMhmFg8J Uv8tIXmSz+s/iWVgiRO9pk9QB6L6VW7SMPfMGbdEVQjH3scz/XiuLyRns0gpdPOb SQ1LSdJo/BwFbYtvY7E0f6XP/Lgp8WHiIYBhNSox+mA+xbW+lSr0xd/5SXtnqnFE f6rO0u4sTy+MwIrycigyTdEmLA6/r/gQM1ZzND1FcdLFpw75/YxMxt7arlpzcuqi fLiQ6pL2a+ihCjH5ioNaV1Kc/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMfqGOTa bJPrL3wG9SU2qaf3LN2DMB8GA1UdIwQYMBaAFKxqIvHk4WUKz7Uon13LXVOSD880 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjJENy81QjlGNzFEMkVE MzAxMUVDQkYwN0YwMTJDNEY5QUUwMi9yR29pOGVUaFpRclB0U2lmWGN0ZFU1SVB6 elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JHb2k4ZVRoWlFyUHRTaWZYY3RkVTVJUHp6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjJENy81QjlGNzFEMkVEMzAxMUVDQkYwN0YwMTJDNEY5QUUwMi9yR29pOGVUaFpR clB0U2lmWGN0ZFU1SVB6elEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGEKh7nUPi0yvyi6q0GM1vpOMjn65gNUsuBnlnkQLN72Of6cbJyW084gzbUVB HGNJ5hzkFKouMw5l+YdmGlocR10dfwD2xcOK7GyTfNHqna/evkaw8e6UI9CDoUVT oHGyjub25XTmwqOXIh1/J/MSv22UtXXq8xPsdZjNfdXhCaKuXcRNpLbOJMbQ+ZsD 4B3ce9QP1mfiqE46/C54QU7G4F3DtQlJcR/WcR7+/KKpu2zCYrMXQKHiNOxKr4yl DLxroS8pO52s9ziU+iC5x2ZvnJ/96kzwNliRUzLEmmU7LtjoGyvTkLlH9kof5m7m fzQwbShQJjd2a63Io24aaM2G7w== -----END CERTIFICATE-----Generated at Thu Oct 8 12:33:44 2026 by rpki-client