$ rpki-client -vvvf rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft File: gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft (raw, json) Hash identifier: dJskkE38Qy7CIN161t+gOtscL7RqQCYida6W/doWSOs= Subject key identifier: 26:AC:A2:27:68:71:40:22:4C:60:50:E2:A5:85:66:62:F5:69:7A:86 Authority key identifier: 80:A4:B8:FC:AE:CD:01:1E:82:AA:4E:2D:72:17:3C:A6:3E:9C:4E:51 Certificate issuer: /CN=A9155D1E/serialNumber=80A4B8FCAECD011E82AA4E2D72173CA63E9C4E51 Certificate serial: 037D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gKS4_K7NAR6Cqk4tchc8pj6cTlE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft Manifest number: 0377 Signing time: Sun 25 Oct 2026 00:46:51 +0000 Manifest this update: Sun 25 Oct 2026 00:46:50 +0000 Manifest next update: Sun 01 Nov 2026 00:46:50 +0000 Files and hashes: 1: gKS4_K7NAR6Cqk4tchc8pj6cTlE.crl (hash: 6bbwaG6jCqof3tieX1q55Yw+wwTb71uBup+cWPO7K60=) 2: C003531C10EB11ED9C882A38C4F9AE02.roa (hash: 4mLtegRFgk9fbTWJTkH5s5qPTSUzFVGI3R7GNiZDMVU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.crl rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gKS4_K7NAR6Cqk4tchc8pj6cTlE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 00:46:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 893 (0x37d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155D1E, serialNumber=80A4B8FCAECD011E82AA4E2D72173CA63E9C4E51 Validity Not Before: Oct 25 00:46:50 2026 GMT Not After : Nov 1 00:46:50 2026 GMT Subject: CN=6add517a-4917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:25:d6:e1:ab:e3:d6:b9:b9:bb:c4:cf:71:ea: a4:75:1b:28:54:3f:ba:3c:34:27:ae:e9:ae:ad:eb: 86:94:54:a0:60:f1:6a:b2:40:7a:26:d7:25:19:08: 28:bf:fc:67:8a:33:26:51:7d:e3:2f:95:07:b6:1a: 47:d1:fd:c5:44:67:37:83:77:65:45:a9:79:a4:d3: 1a:ef:d0:ef:5e:f2:ff:c8:20:82:54:88:26:8f:33: 24:70:fd:35:d7:a9:55:d8:6f:29:9d:b5:c0:bc:78: 47:d2:e2:e7:e4:47:fd:e1:a7:52:7c:06:2d:75:32: 80:84:13:a7:23:8e:e9:2f:e9:d2:b7:f8:b4:95:2e: ba:b1:46:4a:87:22:e0:f4:43:c0:3e:2e:48:93:4e: da:57:33:a6:7a:35:cc:73:31:4c:b9:a1:bd:7e:30: 58:36:f9:80:38:45:90:f2:a5:6a:d1:0e:ca:8f:af: ed:d0:f4:1d:46:da:3d:49:84:12:bc:eb:9c:b4:7a: 0e:b3:eb:b1:d9:e0:48:9d:c7:f2:21:9f:2d:1d:5a: 61:40:a1:ca:7b:63:c6:4d:3d:89:d6:74:57:f6:51: 16:38:61:bd:08:bb:44:16:47:98:28:08:d1:36:f8: fe:5c:07:26:7d:77:bd:51:c1:51:c2:56:bf:60:9c: 58:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:AC:A2:27:68:71:40:22:4C:60:50:E2:A5:85:66:62:F5:69:7A:86 X509v3 Authority Key Identifier: keyid:80:A4:B8:FC:AE:CD:01:1E:82:AA:4E:2D:72:17:3C:A6:3E:9C:4E:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gKS4_K7NAR6Cqk4tchc8pj6cTlE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:b6:c7:eb:04:7d:87:e6:fa:58:91:84:da:e3:79:d3:f7:83: 8f:12:53:59:15:1b:0e:d9:d5:19:0a:a3:43:2a:45:b8:9d:1f: 23:6e:b9:25:2b:69:f2:65:e5:98:af:63:8e:ac:ce:7e:96:57: 59:6a:4b:e0:41:e1:e7:f2:a1:59:34:a7:8c:86:e2:d1:2b:ea: 67:ef:51:06:07:5b:e6:cb:7d:e8:9f:9c:eb:ce:8c:6c:68:1b: ac:ec:89:bf:f1:99:8d:8d:fc:e0:6b:cf:d2:40:b4:69:e9:8e: fe:62:a1:fa:18:d5:97:a0:06:eb:77:61:c9:cb:ae:0c:7b:80: 8e:c4:98:7c:ae:59:c8:20:47:54:86:32:1e:76:08:f0:d3:22: 94:81:e9:97:89:0d:af:90:26:fb:ac:42:01:0e:e0:30:6d:8f: 71:89:ea:03:f6:7e:94:64:fd:54:8b:6c:a2:9a:31:95:fa:2c: 89:97:ab:2c:6d:09:91:66:9d:29:5b:0e:04:f7:34:1d:32:8b: 32:b7:d7:e0:d6:9f:ef:f3:b1:20:d5:41:4c:4c:b5:fa:29:f5: 8a:df:9d:d7:98:2d:f0:fa:9a:e2:7b:4f:cf:58:12:bb:b1:a5: 40:6a:67:16:d3:a4:ed:70:c4:ff:72:0f:89:0a:fb:97:3d:df: 3b:cf:6f:71 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA30wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTVEMUUxMTAvBgNVBAUTKDgwQTRCOEZDQUVDRDAxMUU4MkFBNEUyRDcyMTczQ0E2 M0U5QzRFNTEwHhcNMjYxMDI1MDA0NjUwWhcNMjYxMTAxMDA0NjUwWjAYMRYwFAYD VQQDEw02YWRkNTE3YS00OTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhSXW4avj1rm5u8TPceqkdRsoVD+6PDQnrumureuGlFSgYPFqskB6JtclGQgo v/xnijMmUX3jL5UHthpH0f3FRGc3g3dlRal5pNMa79DvXvL/yCCCVIgmjzMkcP01 16lV2G8pnbXAvHhH0uLn5Ef94adSfAYtdTKAhBOnI47pL+nSt/i0lS66sUZKhyLg 9EPAPi5Ik07aVzOmejXMczFMuaG9fjBYNvmAOEWQ8qVq0Q7Kj6/t0PQdRto9SYQS vOuctHoOs+ux2eBIncfyIZ8tHVphQKHKe2PGTT2J1nRX9lEWOGG9CLtEFkeYKAjR Nvj+XAcmfXe9UcFRwla/YJxYxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCasoido cUAiTGBQ4qWFZmL1aXqGMB8GA1UdIwQYMBaAFICkuPyuzQEegqpOLXIXPKY+nE5R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NUQxRS9BOEQ4ODNFQTEw RTMxMUVEQURBRkQ5MDlDNEY5QUUwMi9nS1M0X0s3TkFSNkNxazR0Y2hjOHBqNmNU bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dLUzRfSzdOQVI2Q3FrNHRjaGM4cGo2Y1RsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NUQxRS9BOEQ4ODNFQTEwRTMxMUVEQURBRkQ5MDlDNEY5QUUwMi9nS1M0X0s3TkFS NkNxazR0Y2hjOHBqNmNUbEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATrbH6wR9h+b6WJGE2uN50/eDjxJTWRUbDtnVGQqjQypFuJ0fI265JStp8mXl mK9jjqzOfpZXWWpL4EHh5/KhWTSnjIbi0SvqZ+9RBgdb5st96J+c686MbGgbrOyJ v/GZjY384GvP0kC0aemO/mKh+hjVl6AG63dhycuuDHuAjsSYfK5ZyCBHVIYyHnYI 8NMilIHpl4kNr5Am+6xCAQ7gMG2PcYnqA/Z+lGT9VItsopoxlfosiZerLG0JkWad KVsOBPc0HTKLMrfX4Naf7/OxINVBTEy1+in1it+d15gt8Pqa4ntPz1gSu7GlQGpn FtOk7XDE/3IPiQr7lz3fO89vcQ== -----END CERTIFICATE-----Generated at Mon Oct 26 20:59:48 2026 by rpki-client