$ rpki-client -vvvf rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft File: ggZKEDz1DwHRlFMAajhs04c5G-Y.mft (raw, json) Hash identifier: eZ5jazeR0ocAzibPBUVCW45Esg21HPDeKSxaz0NykH8= Subject key identifier: 4E:77:D2:B1:12:E4:C7:27:54:B5:9A:18:9A:92:DC:88:25:07:A3:48 Authority key identifier: 82:06:4A:10:3C:F5:0F:01:D1:94:53:00:6A:38:6C:D3:87:39:1B:E6 Certificate issuer: /CN=A919CA1B/serialNumber=82064A103CF50F01D19453006A386CD387391BE6 Certificate serial: 02ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft Manifest number: 02D9 Signing time: Tue 27 Oct 2026 01:18:29 +0000 Manifest this update: Tue 27 Oct 2026 01:18:29 +0000 Manifest next update: Tue 03 Nov 2026 01:18:29 +0000 Files and hashes: 1: ggZKEDz1DwHRlFMAajhs04c5G-Y.crl (hash: YHr6YdFRaNQpGG6Izx7gG6OvapsrGZlovkGb5xJG1yw=) 2: D3B49A1676CA11EDAA4FE042C4F9AE02.roa (hash: feVu+a8lF5HfZtn0mtMt+vLIfU2xl9dTaoTUFZoVD6I=) 3: D318E67076CA11EDAA4FE042C4F9AE02.roa (hash: 4BA5NqaVokjWFwQzUDF6z/aNu276DFdfvc22Mig/Z84=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.crl rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 01:18:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 749 (0x2ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CA1B, serialNumber=82064A103CF50F01D19453006A386CD387391BE6 Validity Not Before: Oct 27 01:18:29 2026 GMT Not After : Nov 3 01:18:29 2026 GMT Subject: CN=6adffbe5-cb2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:05:f0:e4:0a:cc:00:7e:fa:37:8b:91:8d:33: d1:ce:5f:0a:c4:4d:5c:0c:5f:33:36:43:54:65:2a: ed:a2:64:ca:e1:67:ba:a9:4a:67:57:a1:f3:6c:2b: 64:05:34:aa:cf:e0:29:8e:a6:97:dd:5c:06:58:41: ac:24:8b:8a:f3:b7:4e:c9:3f:66:7b:4e:b4:37:33: 6b:e8:85:bc:f7:4a:6d:99:62:13:ba:03:eb:0a:63: aa:d7:6c:03:05:5f:1a:9b:16:b2:bb:4e:db:ff:a2: 72:de:23:e1:03:75:c1:4f:1b:17:1f:8a:d7:1f:04: 41:de:63:36:4a:fa:a0:26:e0:81:ca:59:c3:ca:e7: 39:27:32:0d:81:64:15:5f:0c:fc:5c:f6:0b:a1:15: 10:a0:7b:09:c7:57:9c:98:8e:df:61:9a:0a:f2:0a: 21:09:4d:36:b3:d2:99:1c:e0:b2:3b:1a:48:63:f5: 15:28:45:d0:b6:e8:d2:20:0c:8e:ff:7d:0f:e7:13: 83:fc:df:1f:7d:62:32:4e:ee:65:41:f1:6e:a9:9b: 6f:3c:29:56:03:fb:fa:63:7a:df:a1:68:75:f3:eb: 5a:ff:fd:94:d5:ba:35:67:3d:3e:a1:1c:cd:05:ce: 42:be:08:3c:2c:9d:ef:25:93:41:2e:53:83:7d:da: 58:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:77:D2:B1:12:E4:C7:27:54:B5:9A:18:9A:92:DC:88:25:07:A3:48 X509v3 Authority Key Identifier: keyid:82:06:4A:10:3C:F5:0F:01:D1:94:53:00:6A:38:6C:D3:87:39:1B:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:db:cc:bd:08:d5:2f:bb:98:c2:ca:51:1d:cf:05:f9:0e:f2: 99:9c:da:30:a4:fe:fb:c4:33:1b:f1:b1:3f:f6:f3:c0:d9:05: 72:4f:29:80:62:85:70:44:3c:d6:18:a6:d7:be:c1:35:69:24: 07:e5:52:a2:8c:78:45:8b:fd:46:0f:12:7e:e4:89:10:76:d9: 5a:9b:bb:17:b9:42:86:8a:3a:bb:5b:b5:cd:22:06:f3:14:44: 1b:b2:15:e4:53:5a:ac:29:86:63:eb:80:44:b1:41:19:55:ab: 24:fd:4e:45:8d:86:11:41:ef:35:38:a6:cd:31:80:85:74:c4: d8:cf:b9:0d:74:84:b5:bf:31:fd:a8:31:81:19:73:2b:c8:ab: a2:61:96:0f:56:3f:5c:af:70:b6:e6:c7:f9:ae:ed:f2:6f:c4: c8:11:c5:b5:88:5d:34:10:59:e0:23:b9:d1:55:23:9f:3a:f6: e5:6d:9f:d3:8a:dc:bb:85:26:a8:e2:2c:db:61:6a:f0:c4:a3: 56:ea:80:28:ca:db:82:57:77:98:92:64:d1:c6:ba:a9:16:9d: b7:27:7d:e3:5b:f5:65:69:4e:1a:00:c5:6d:89:f7:7a:87:fa: 05:a4:21:23:06:b6:d9:13:e2:4b:ff:e3:f7:16:ba:21:d9:37: 98:07:1b:fc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAu0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNBMUIxMTAvBgNVBAUTKDgyMDY0QTEwM0NGNTBGMDFEMTk0NTMwMDZBMzg2Q0Qz ODczOTFCRTYwHhcNMjYxMDI3MDExODI5WhcNMjYxMTAzMDExODI5WjAYMRYwFAYD VQQDEw02YWRmZmJlNS1jYjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwwXw5ArMAH76N4uRjTPRzl8KxE1cDF8zNkNUZSrtomTK4We6qUpnV6HzbCtk BTSqz+ApjqaX3VwGWEGsJIuK87dOyT9me060NzNr6IW890ptmWITugPrCmOq12wD BV8amxayu07b/6Jy3iPhA3XBTxsXH4rXHwRB3mM2SvqgJuCBylnDyuc5JzINgWQV Xwz8XPYLoRUQoHsJx1ecmI7fYZoK8gohCU02s9KZHOCyOxpIY/UVKEXQtujSIAyO /30P5xOD/N8ffWIyTu5lQfFuqZtvPClWA/v6Y3rfoWh18+ta//2U1bo1Zz0+oRzN Bc5Cvgg8LJ3vJZNBLlODfdpYtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE530rES 5McnVLWaGJqS3IglB6NIMB8GA1UdIwQYMBaAFIIGShA89Q8B0ZRTAGo4bNOHORvm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0ExQi8xNDQ3ODI5QTc2 QkQxMUVEQkI0ODk0N0RDNEY5QUUwMi9nZ1pLRUR6MUR3SFJsRk1BYWpoczA0YzVH LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dnWktFRHoxRHdIUmxGTUFhamhzMDRjNUctWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0ExQi8xNDQ3ODI5QTc2QkQxMUVEQkI0ODk0N0RDNEY5QUUwMi9nZ1pLRUR6MUR3 SFJsRk1BYWpoczA0YzVHLVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAp9vMvQjVL7uYwspRHc8F+Q7ymZzaMKT++8QzG/GxP/bzwNkFck8pgGKFcEQ8 1him177BNWkkB+VSoox4RYv9Rg8SfuSJEHbZWpu7F7lChoo6u1u1zSIG8xREG7IV 5FNarCmGY+uARLFBGVWrJP1ORY2GEUHvNTimzTGAhXTE2M+5DXSEtb8x/agxgRlz K8iromGWD1Y/XK9wtubH+a7t8m/EyBHFtYhdNBBZ4CO50VUjnzr25W2f04rcu4Um qOIs22Fq8MSjVuqAKMrbgld3mJJk0ca6qRadtyd941v1ZWlOGgDFbYn3eof6BaQh Iwa22RPiS//j9xa6Idk3mAcb/A== -----END CERTIFICATE-----Generated at Wed Oct 28 14:19:43 2026 by rpki-client