$ rpki-client -vvvf rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft File: g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft (raw, json) Hash identifier: yCu3MiYIPotNjdWU9bBckOR0UL9Utv38fjNeOJJ3iZs= Subject key identifier: 27:78:2F:63:86:39:55:45:EF:15:C1:D1:DD:4C:E5:20:2F:78:4B:7E Authority key identifier: 83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E Certificate issuer: /CN=A91756B7/serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E Certificate serial: 086A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft Manifest number: 07D1 Signing time: Wed 30 Sep 2026 22:16:42 +0000 Manifest this update: Wed 30 Sep 2026 22:16:41 +0000 Manifest next update: Wed 07 Oct 2026 22:16:41 +0000 Files and hashes: 1: g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl (hash: N8ShzrwicnMrmj/WZz9EQ2OZNu0RQiSj6YM5SFFxB6U=) 2: 3DB131DC86F211F1B8F66003A7EE528E.roa (hash: T9oa5S8DaEPPgONLHjexgjcqCZuStZji3DTSUWo4KYA=) 3: 48F50A889F7411F1B417F0063911F970.roa (hash: 4rAC2sCn051vT4i3fxiypBMiq2S5c+b6RpWtPnIYbTE=) 4: 993EAAD4522911EFA600C035C4F9AE02.roa (hash: RHnBGV6zzAX096qelds19ug+GhjfXzLG9IQAG1LM73U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Oct 2026 22:16:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2154 (0x86a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91756B7, serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E Validity Not Before: Sep 30 22:16:41 2026 GMT Not After : Oct 7 22:16:41 2026 GMT Subject: CN=6abd8a49-caa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:99:0a:92:c7:be:08:02:6f:f4:d2:0e:34:c6: 94:bd:6e:b8:d4:af:d1:dc:d0:91:9e:41:68:36:64: b3:c0:04:11:f7:17:50:bc:32:59:4c:be:60:88:4c: 91:90:2a:f5:c8:17:77:59:f1:ca:49:56:52:72:c2: e1:4f:88:db:8b:c0:12:a2:4e:76:7e:e3:6e:0e:88: 02:8d:c0:9e:3a:c5:ab:95:34:a1:49:97:f6:63:b7: 46:b2:a1:9f:dc:38:bb:de:fd:a1:aa:02:9a:eb:ee: 3a:86:bf:ac:83:a1:95:ae:cb:df:25:ad:d1:a4:ec: 6c:bb:0d:b8:60:6d:98:6d:d6:90:92:2d:90:f5:30: 50:23:74:5e:28:69:2b:e8:60:09:39:81:68:05:42: ea:fb:fe:05:b1:49:5b:c9:cb:37:5b:70:23:56:b6: 3d:73:c3:6e:44:d3:8e:8c:40:1e:65:49:81:e8:74: 29:f2:23:26:fb:9f:cd:58:1a:b6:97:74:bb:0a:c5: 57:f0:d1:ff:10:70:b1:0a:c5:71:ca:2e:38:88:0e: 24:f7:31:42:93:c5:ad:41:80:21:ea:93:71:7b:94: 69:1f:42:c1:62:ad:90:e0:68:ad:ab:42:7f:39:a9: 15:eb:05:70:2d:cd:c2:ea:ba:17:2b:29:e0:85:97: 01:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:78:2F:63:86:39:55:45:EF:15:C1:D1:DD:4C:E5:20:2F:78:4B:7E X509v3 Authority Key Identifier: keyid:83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:c7:75:54:a4:8f:22:2b:9b:7d:f7:06:c0:a6:14:79:b7:b0: 8c:6a:c5:08:1d:9a:46:e3:59:35:f1:d7:48:30:3b:9e:d6:71: 14:84:d1:19:58:7e:09:81:70:53:35:7f:99:87:08:43:ec:8c: be:8d:d6:4f:e4:f4:10:57:41:86:75:33:ac:38:0c:56:e3:f5: 3a:5d:89:72:94:3a:c3:8c:08:39:37:2e:03:79:6a:40:2a:e2: 26:9a:8e:c2:b1:cf:4a:53:2a:ef:4f:2b:d7:98:cc:53:4b:f7: 2e:22:fb:2f:aa:57:aa:98:87:64:0d:ec:be:c8:2a:8f:a0:99: 90:86:ad:1b:80:f0:8e:5b:45:cf:64:c9:48:b1:b6:f5:ab:d3: 71:61:6d:41:54:5f:e7:d7:a7:b1:ab:ab:d8:6b:51:76:a1:bb: d3:09:59:d7:bb:8f:c2:f5:5c:eb:6e:03:b5:d3:b6:fc:19:6c: c1:40:6d:e2:40:aa:b0:fb:d3:3f:43:7c:c2:e0:72:3f:6a:99: bc:99:76:f2:08:a1:32:92:3a:2b:7f:8f:60:f8:43:69:77:3b: 38:8d:37:2f:7d:cb:3b:4b:f7:78:fe:c1:ad:22:e0:d5:c2:49: 63:3b:e3:a7:5e:57:b3:75:5b:c9:8e:42:4d:9a:e4:a5:04:df: ba:f9:ce:f8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCGowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU2QjcxMTAvBgNVBAUTKDgzRDk2RjFERUE3MkE5OUQyMzRCNDQ1NkQ2RjY2NzVE QzdFNjA2MUUwHhcNMjYwOTMwMjIxNjQxWhcNMjYxMDA3MjIxNjQxWjAYMRYwFAYD VQQDEw02YWJkOGE0OS1jYWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJkKkse+CAJv9NIONMaUvW641K/R3NCRnkFoNmSzwAQR9xdQvDJZTL5giEyR kCr1yBd3WfHKSVZScsLhT4jbi8ASok52fuNuDogCjcCeOsWrlTShSZf2Y7dGsqGf 3Di73v2hqgKa6+46hr+sg6GVrsvfJa3RpOxsuw24YG2YbdaQki2Q9TBQI3ReKGkr 6GAJOYFoBULq+/4FsUlbycs3W3AjVrY9c8NuRNOOjEAeZUmB6HQp8iMm+5/NWBq2 l3S7CsVX8NH/EHCxCsVxyi44iA4k9zFCk8WtQYAh6pNxe5RpH0LBYq2Q4Gitq0J/ OakV6wVwLc3C6roXKynghZcB1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCd4L2OG OVVF7xXB0d1M5SAveEt+MB8GA1UdIwQYMBaAFIPZbx3qcqmdI0tEVtb2Z13H5gYe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTZCNy85NUVGN0RCQTk2 N0QxMUVCQURENTBEMkNDNEY5QUUwMi9nOWx2SGVweXFaMGpTMFJXMXZablhjZm1C aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c5bHZIZXB5cVowalMwUlcxdlpuWGNmbUJoNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTZCNy85NUVGN0RCQTk2N0QxMUVCQURENTBEMkNDNEY5QUUwMi9nOWx2SGVweXFa MGpTMFJXMXZablhjZm1CaDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcsd1VKSPIiubffcGwKYUebewjGrFCB2aRuNZNfHXSDA7ntZxFITRGVh+CYFw UzV/mYcIQ+yMvo3WT+T0EFdBhnUzrDgMVuP1Ol2JcpQ6w4wIOTcuA3lqQCriJpqO wrHPSlMq708r15jMU0v3LiL7L6pXqpiHZA3svsgqj6CZkIatG4DwjltFz2TJSLG2 9avTcWFtQVRf59ensaur2GtRdqG70wlZ17uPwvVc624DtdO2/BlswUBt4kCqsPvT P0N8wuByP2qZvJl28gihMpI6K3+PYPhDaXc7OI03L33LO0v3eP7BrSLg1cJJYzvj p15Xs3VbyY5CTZrkpQTfuvnO+A== -----END CERTIFICATE-----Generated at Thu Oct 1 13:26:06 2026 by rpki-client