$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft File: dGJBrad929_qD-FE7-ITkeP8T9k.mft (raw, json) Hash identifier: diwsDpEvFvO750wms59JaTs68xVyIdpHYfQgRle9atw= Subject key identifier: 2C:E7:91:27:53:DD:09:E0:5F:2E:A4:BD:47:97:43:E3:CD:ED:0D:7F Authority key identifier: 74:62:41:AD:A7:7D:DB:DF:EA:0F:E1:44:EF:E2:13:91:E3:FC:4F:D9 Certificate issuer: /CN=A91ACBB7/serialNumber=746241ADA77DDBDFEA0FE144EFE21391E3FC4FD9 Certificate serial: 0DD4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft Manifest number: 0DAE Signing time: Thu 10 Sep 2026 17:54:35 +0000 Manifest this update: Thu 10 Sep 2026 17:54:34 +0000 Manifest next update: Thu 17 Sep 2026 17:54:34 +0000 Files and hashes: 1: dGJBrad929_qD-FE7-ITkeP8T9k.crl (hash: RpvZepitSvEPQUDd5DBfXfOsg12xIXSf6WOV/ZpILlk=) 2: 2CC5D50CDEC911EBA828524CC4F9AE02.roa (hash: 90DgDT5NeM7xQ03ACEtF57cO7mWeIuHF/7OMNDwtBac=) 3: 2B9FBCB0DEC911EBA828524CC4F9AE02.roa (hash: MCYhaXeWm4Azn45D+8Hoz0m3yVVZUkz11sIQ3TDfy9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.crl rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 17:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3540 (0xdd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACBB7, serialNumber=746241ADA77DDBDFEA0FE144EFE21391E3FC4FD9 Validity Not Before: Sep 10 17:54:34 2026 GMT Not After : Sep 17 17:54:34 2026 GMT Subject: CN=6aa2eeda-c27a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:57:9a:63:15:2a:6d:6a:33:be:a9:eb:0b:09: 77:29:33:fc:15:60:e4:06:f2:16:f0:c3:3f:6b:9f: a0:0a:c3:af:2a:4e:4a:d7:3c:eb:ce:2f:4a:84:78: 19:ef:d9:2a:3f:51:f1:55:76:c3:66:e1:70:bd:3c: 64:84:54:57:5b:53:5d:ce:5c:71:8e:e2:c5:4e:e1: 56:73:68:68:00:23:0e:4d:44:ea:ee:f7:65:8b:e6: c7:e1:3a:f5:e8:4b:74:77:72:63:cc:db:bb:14:de: e1:79:b7:d7:84:92:fb:50:5d:8d:65:6b:d9:2f:f4: e3:8e:78:31:c0:67:e8:9b:20:5d:e2:e5:4c:7e:b4: a9:1a:24:1f:6d:40:bb:d8:ac:25:37:bf:f8:b4:c1: 0b:15:d2:4b:72:17:c2:0b:42:ff:a8:2b:b1:2c:e7: 2f:e0:2d:5a:a0:2e:bc:66:97:90:44:3f:ea:88:da: 0c:ed:0a:c4:2b:4b:46:83:ae:94:5b:98:bd:3e:7e: 15:8e:91:51:8e:20:48:94:ba:54:13:9c:03:23:a3: ab:be:f3:26:43:3f:80:7b:c1:6e:1f:9b:7e:c3:f2: d6:a0:c7:77:72:86:84:31:ac:64:d2:ab:ef:50:b0: c6:f7:19:f6:f2:e9:97:dd:29:93:c3:26:75:85:18: b7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:E7:91:27:53:DD:09:E0:5F:2E:A4:BD:47:97:43:E3:CD:ED:0D:7F X509v3 Authority Key Identifier: keyid:74:62:41:AD:A7:7D:DB:DF:EA:0F:E1:44:EF:E2:13:91:E3:FC:4F:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:f9:a8:93:8f:a3:30:61:a3:0d:55:bf:7b:2c:37:61:d4:a5: 6b:d4:95:db:e9:6e:b0:f2:5d:2e:e9:d3:aa:b1:dc:73:2f:26: 50:4d:4d:84:83:95:78:09:6c:72:36:02:d8:e1:06:f6:e3:7c: 11:7b:ef:2a:fa:8e:db:5e:21:bc:e0:7f:5c:cd:cc:12:b2:05: 0c:55:e1:e8:f9:55:47:d8:dd:9b:07:ed:a1:07:02:a7:cf:56: 53:3e:d7:7c:80:9b:87:e2:2b:b8:70:a2:a4:5b:d7:44:8f:b9: c5:cb:67:0d:83:dd:73:08:12:30:8b:53:be:e1:fa:23:a2:7c: a7:e4:cb:68:68:94:cf:89:d4:c9:11:3d:f8:7c:ef:9e:29:31: 45:ea:60:fc:c3:fc:ab:ef:b4:b0:df:b2:43:46:30:ea:05:81: b9:f4:3e:f1:c6:7e:86:32:92:5d:77:60:9a:c1:85:d0:c0:6e: 07:9b:1d:c0:5b:1c:b8:41:cd:63:fe:72:35:3d:1c:9c:08:35: 1f:96:d3:28:ef:a9:ad:bb:95:4c:5b:05:9a:67:69:d4:53:b6: 5d:ac:2b:3e:63:8e:69:4d:a5:1d:34:ec:4b:21:3a:d5:8a:34: f4:5a:aa:9e:99:6b:b6:74:0e:2a:02:ea:83:81:e9:9a:5c:5d: 9b:43:84:aa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNCQjcxMTAvBgNVBAUTKDc0NjI0MUFEQTc3RERCREZFQTBGRTE0NEVGRTIxMzkx RTNGQzRGRDkwHhcNMjYwOTEwMTc1NDM0WhcNMjYwOTE3MTc1NDM0WjAYMRYwFAYD VQQDEw02YWEyZWVkYS1jMjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1eaYxUqbWozvqnrCwl3KTP8FWDkBvIW8MM/a5+gCsOvKk5K1zzrzi9KhHgZ 79kqP1HxVXbDZuFwvTxkhFRXW1NdzlxxjuLFTuFWc2hoACMOTUTq7vdli+bH4Tr1 6Et0d3JjzNu7FN7hebfXhJL7UF2NZWvZL/TjjngxwGfomyBd4uVMfrSpGiQfbUC7 2KwlN7/4tMELFdJLchfCC0L/qCuxLOcv4C1aoC68ZpeQRD/qiNoM7QrEK0tGg66U W5i9Pn4VjpFRjiBIlLpUE5wDI6OrvvMmQz+Ae8FuH5t+w/LWoMd3coaEMaxk0qvv ULDG9xn28umX3SmTwyZ1hRi3XwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCznkSdT 3QngXy6kvUeXQ+PN7Q1/MB8GA1UdIwQYMBaAFHRiQa2nfdvf6g/hRO/iE5Hj/E/Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0JCNy81RTFGQ0VCQ0Yz RjkxMUU5QjhBODMxMEFDNEY5QUUwMi9kR0pCcmFkOTI5X3FELUZFNy1JVGtlUDhU OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RHSkJyYWQ5MjlfcUQtRkU3LUlUa2VQOFQ5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0JCNy81RTFGQ0VCQ0YzRjkxMUU5QjhBODMxMEFDNEY5QUUwMi9kR0pCcmFkOTI5 X3FELUZFNy1JVGtlUDhUOWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjvmok4+jMGGjDVW/eyw3YdSla9SV2+lusPJdLunTqrHccy8mUE1NhIOVeAls cjYC2OEG9uN8EXvvKvqO214hvOB/XM3MErIFDFXh6PlVR9jdmwftoQcCp89WUz7X fICbh+IruHCipFvXRI+5xctnDYPdcwgSMItTvuH6I6J8p+TLaGiUz4nUyRE9+Hzv nikxRepg/MP8q++0sN+yQ0Yw6gWBufQ+8cZ+hjKSXXdgmsGF0MBuB5sdwFscuEHN Y/5yNT0cnAg1H5bTKO+prbuVTFsFmmdp1FO2XawrPmOOaU2lHTTsSyE61Yo09Fqq nplrtnQOKgLqg4Hpmlxdm0OEqg== -----END CERTIFICATE-----Generated at Fri Sep 11 14:50:32 2026 by rpki-client