$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CDA42/C279EDD0B1BA11F1A69E71483911F970/9gCtpOpotG1MD-pnC_5Pf-2V_Hc.mft File: 9gCtpOpotG1MD-pnC_5Pf-2V_Hc.mft (raw, json) Hash identifier: vDuVjJyivz26H0z+kQMmXefHapUy5zfodA/ZMAS3kc4= Subject key identifier: EA:67:78:63:36:40:CC:FF:67:F8:C1:E4:D6:7E:0C:6E:56:B8:91:9F Authority key identifier: F6:00:AD:A4:EA:68:B4:6D:4C:0F:EA:67:0B:FE:4F:7F:ED:95:FC:77 Certificate issuer: /CN=A91CDA42/serialNumber=F600ADA4EA68B46D4C0FEA670BFE4F7FED95FC77 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9gCtpOpotG1MD-pnC_5Pf-2V_Hc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDA42/C279EDD0B1BA11F1A69E71483911F970/9gCtpOpotG1MD-pnC_5Pf-2V_Hc.mft Manifest number: 0A Signing time: Thu 01 Oct 2026 10:39:35 +0000 Manifest this update: Thu 01 Oct 2026 10:39:35 +0000 Manifest next update: Thu 08 Oct 2026 10:39:35 +0000 Files and hashes: 1: 9gCtpOpotG1MD-pnC_5Pf-2V_Hc.crl (hash: 0sitYDKzotDR90ZihtqiDaATLzNGYGGzgk4o/HZYvpQ=) 2: 997A1D8EB1BE11F19E212CE03A11F970.roa (hash: RnKZWz2L71dQW3gVAIGIiUqPKGYnPENAxXVz7DSVHSo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDA42/C279EDD0B1BA11F1A69E71483911F970/9gCtpOpotG1MD-pnC_5Pf-2V_Hc.crl rsync://rpki.apnic.net/member_repository/A91CDA42/C279EDD0B1BA11F1A69E71483911F970/9gCtpOpotG1MD-pnC_5Pf-2V_Hc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9gCtpOpotG1MD-pnC_5Pf-2V_Hc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Oct 2026 10:39:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDA42, serialNumber=F600ADA4EA68B46D4C0FEA670BFE4F7FED95FC77 Validity Not Before: Oct 1 10:39:35 2026 GMT Not After : Oct 8 10:39:35 2026 GMT Subject: CN=6abe3867-6888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:93:29:24:92:de:ed:53:cb:97:42:4a:1c:31: 81:ed:ab:f0:82:3c:74:d6:d7:c5:9d:82:01:17:e5: d2:e4:cf:23:51:d3:e8:02:fc:2e:27:82:cd:62:a2: ef:69:d4:13:8f:bc:67:c8:54:74:d3:c5:10:62:a2: ac:1d:be:26:d4:69:38:5c:c1:b4:e4:b0:84:85:62: d5:34:65:39:fd:15:7a:14:ba:98:23:c3:bc:e8:96: a3:58:09:14:9d:76:68:b3:09:fe:92:7b:83:f5:09: 20:3c:eb:de:e2:c3:cf:61:e0:1f:0f:96:46:d5:54: c7:c6:41:9f:da:2a:63:3f:f4:16:2f:66:16:fe:39: 4e:aa:b0:1b:fe:f2:c9:d9:be:9d:71:0e:7e:6b:39: 72:00:9c:49:6c:97:d5:b8:bd:5d:8e:61:62:2f:6d: 8f:86:98:89:f3:6a:5e:0f:2b:fd:32:36:ae:6a:86: d3:7c:26:0b:61:1c:35:46:c8:10:09:da:c9:c4:52: ae:cd:5a:5e:34:d9:0f:85:9a:f6:81:b9:e5:d6:3c: ff:8c:d5:cb:24:9b:49:d0:ea:ae:ed:6d:8a:9b:88: 4c:cb:0e:7a:2a:a8:df:ff:67:75:32:60:1b:47:ca: 9a:00:89:11:a9:a1:4c:14:5b:c1:e9:50:44:73:39: 40:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:67:78:63:36:40:CC:FF:67:F8:C1:E4:D6:7E:0C:6E:56:B8:91:9F X509v3 Authority Key Identifier: keyid:F6:00:AD:A4:EA:68:B4:6D:4C:0F:EA:67:0B:FE:4F:7F:ED:95:FC:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDA42/C279EDD0B1BA11F1A69E71483911F970/9gCtpOpotG1MD-pnC_5Pf-2V_Hc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9gCtpOpotG1MD-pnC_5Pf-2V_Hc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDA42/C279EDD0B1BA11F1A69E71483911F970/9gCtpOpotG1MD-pnC_5Pf-2V_Hc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:f3:c2:4c:6f:bd:b9:89:f8:1c:bc:3c:d4:5f:1b:87:78:f2: 49:96:51:5f:c4:1c:c4:c3:57:de:97:c5:a3:50:91:b7:ce:6c: f2:b2:db:12:50:d7:d0:bb:3b:63:c1:5f:9f:8f:f7:bc:49:e1: ca:a0:df:01:88:f9:a2:5a:6b:c7:71:8c:25:28:5f:97:f5:13: 21:c1:ab:bc:44:8a:ed:fd:4f:2c:00:cf:75:4c:70:7c:89:21: d0:88:42:ac:71:04:0f:bc:82:a2:e0:8a:9f:a8:78:75:04:a6: ea:6b:94:c7:b1:1f:b9:fb:5a:4c:5b:e1:d3:e1:b5:19:a4:09: 6f:47:50:29:e0:c4:5d:6b:7d:cb:27:7b:36:8c:27:e2:3a:95: aa:13:7d:2c:05:2f:d3:b5:38:84:8e:2e:45:af:13:4d:bd:80: b6:3a:c9:f1:8c:ad:76:ac:f5:f4:0f:e4:38:45:39:09:95:c1: b8:d8:28:c2:76:a8:fa:7a:19:91:95:e8:ae:92:04:ed:b3:a7: 92:b8:57:c9:3e:77:40:42:5e:07:96:32:36:aa:d1:8c:35:2f: 8c:24:db:13:1a:b9:88:87:1c:fb:90:cc:18:1a:2c:6f:cc:68: e3:5a:d8:ea:ca:87:aa:91:51:fe:63:ff:62:11:6a:d6:e6:ef: 55:38:93:50 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD REE0MjExMC8GA1UEBRMoRjYwMEFEQTRFQTY4QjQ2RDRDMEZFQTY3MEJGRTRGN0ZF RDk1RkM3NzAeFw0yNjEwMDExMDM5MzVaFw0yNjEwMDgxMDM5MzVaMBgxFjAUBgNV BAMTDTZhYmUzODY3LTY4ODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1kykkkt7tU8uXQkocMYHtq/CCPHTW18WdggEX5dLkzyNR0+gC/C4ngs1iou9p 1BOPvGfIVHTTxRBioqwdvibUaThcwbTksISFYtU0ZTn9FXoUupgjw7zolqNYCRSd dmizCf6Se4P1CSA8697iw89h4B8PlkbVVMfGQZ/aKmM/9BYvZhb+OU6qsBv+8snZ vp1xDn5rOXIAnElsl9W4vV2OYWIvbY+GmInzal4PK/0yNq5qhtN8JgthHDVGyBAJ 2snEUq7NWl402Q+FmvaBueXWPP+M1cskm0nQ6q7tbYqbiEzLDnoqqN//Z3UyYBtH ypoAiRGpoUwUW8HpUERzOUCxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU6md4YzZA zP9n+MHk1n4Mbla4kZ8wHwYDVR0jBBgwFoAU9gCtpOpotG1MD+pnC/5Pf+2V/Hcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEQTQyL0MyNzlFREQwQjFC QTExRjFBNjlFNzE0ODM5MTFGOTcwLzlnQ3RwT3BvdEcxTUQtcG5DXzVQZi0yVl9I Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOWdDdHBPcG90RzFNRC1wbkNfNVBmLTJWX0hjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE QTQyL0MyNzlFREQwQjFCQTExRjFBNjlFNzE0ODM5MTFGOTcwLzlnQ3RwT3BvdEcx TUQtcG5DXzVQZi0yVl9IYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBo88JMb725ifgcvDzUXxuHePJJllFfxBzEw1fel8WjUJG3zmzystsSUNfQuztj wV+fj/e8SeHKoN8BiPmiWmvHcYwlKF+X9RMhwau8RIrt/U8sAM91THB8iSHQiEKs cQQPvIKi4IqfqHh1BKbqa5THsR+5+1pMW+HT4bUZpAlvR1Ap4MRda33LJ3s2jCfi OpWqE30sBS/TtTiEji5FrxNNvYC2OsnxjK12rPX0D+Q4RTkJlcG42CjCdqj6ehmR leiukgTts6eSuFfJPndAQl4HljI2qtGMNS+MJNsTGrmIhxz7kMwYGixvzGjjWtjq yoeqkVH+Y/9iEWrW5u9VOJNQ -----END CERTIFICATE-----Generated at Fri Oct 2 07:19:52 2026 by rpki-client