$ rpki-client -vvvf rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft File: gCx1H6mENH35yTztuX7ZUalSgoY.mft (raw, json) Hash identifier: C3q5HA0g2e/pZy5VDyt7OA8cn9++cVqAkuUaLd/aPW8= Subject key identifier: 13:29:C8:2F:20:AD:C4:89:77:0A:9E:A6:C6:A0:AD:C0:E9:2E:75:F2 Authority key identifier: 80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86 Certificate issuer: /CN=A911AE8B/serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286 Certificate serial: 0E36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft Manifest number: 0E0D Signing time: Fri 02 Oct 2026 18:03:02 +0000 Manifest this update: Fri 02 Oct 2026 18:03:01 +0000 Manifest next update: Fri 09 Oct 2026 18:03:01 +0000 Files and hashes: 1: gCx1H6mENH35yTztuX7ZUalSgoY.crl (hash: Eci0cPZEyY9AYjZEpY+wlRmMijh7RrfyZy1KxQ8MI4k=) 2: 9A735F54EBE611EC82C08A11C4F9AE02.roa (hash: B3wAK97jhUd9WZXrgCNdwLjXUkDVCtHuNCOpZHTWsx4=) 3: 6FA8105A9B0311F1985317765C11F970.roa (hash: 1xRUftsJnRh7sCTB/2X4ITyJ8kMgTy2wBDyMf3YpsK4=) 4: C64AB888F28211F0B78FCAB4696F56BC.roa (hash: 2Wh9GEwPkIT3ersV2cUdA77BiYM2ozOHXH7e19XrJGE=) 5: AD727D903F8111F1AAE343DCAF833773.roa (hash: 6/Bw7aE+CShp5tga2BPNlQn9ZAcE3QdhOoOj6cEOvU8=) 6: C5C152D2F28211F0B78FCAB4696F56BC.roa (hash: BXi41BPmYbwmPR7CH8efyQzZoCZh4MQESuU5TAzEzUA=) 7: 677F3316E02711E9AB669750C4F9AE02.roa (hash: Rx39rgdKBA7zdcc962yiNhgXGCpK5LRJSU4D4pU54RA=) 8: AF2CB5CE101E11ED9FA78415C4F9AE02.roa (hash: c6Bxsf4/9YtF+57E7R8e7VzwUukKAS9p7Ji/ny3xUY8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 18:03:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3638 (0xe36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE8B, serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286 Validity Not Before: Oct 2 18:03:01 2026 GMT Not After : Oct 9 18:03:01 2026 GMT Subject: CN=6abff1d6-4a77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:69:83:5d:eb:e4:88:e8:79:c4:92:87:35:02: fe:71:b1:09:86:69:28:46:95:8c:6d:76:a2:50:5f: 31:7f:b8:94:f4:7e:d2:12:11:35:73:1b:f2:bf:78: 83:c2:c5:f4:d3:19:ee:2d:3e:e0:20:84:e3:f1:88: 1f:33:db:ea:6c:2a:8b:94:6f:05:04:39:07:9a:84: cf:f6:d5:d9:3e:25:11:a4:92:3e:a2:57:77:ef:f4: 10:af:f1:0b:8c:a1:5a:2d:bf:cc:4f:5d:64:f2:2d: 82:ee:62:8c:a9:1a:58:fe:f9:c8:63:07:4b:f0:2a: 35:bb:36:62:f1:d0:c5:b9:c4:93:ae:d0:04:80:82: 22:01:7a:4a:10:f5:2c:40:1f:a9:09:ca:a6:6f:7e: 82:c3:8b:14:a8:c8:37:d1:1b:40:37:6b:74:a1:b3: cd:3a:02:9c:a9:a3:b7:e3:89:2b:02:5a:b3:53:cb: 98:4d:80:b9:58:09:21:c0:67:9f:c5:ab:bb:ec:ef: 7b:1f:f5:9a:9c:78:16:04:21:89:a2:c0:4c:39:f7: 4a:2e:b1:e8:11:21:00:76:36:cd:2c:c4:86:89:be: 7d:45:f9:5f:30:66:96:4b:d3:1f:34:ec:41:32:ac: 09:bc:26:4f:32:97:ee:42:ae:8e:55:a2:3d:7e:b0: 97:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:29:C8:2F:20:AD:C4:89:77:0A:9E:A6:C6:A0:AD:C0:E9:2E:75:F2 X509v3 Authority Key Identifier: keyid:80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:2e:80:f0:32:a9:1e:6a:ca:dc:6f:c5:61:a5:e5:14:67:8b: 52:37:ca:be:46:8f:a2:6d:35:3d:0e:17:9c:b5:42:54:59:01: b4:ae:00:5a:4e:53:22:f7:46:e7:07:32:f2:f1:d3:7b:5f:c9: ea:c4:98:8e:b8:19:45:87:fe:1d:2c:35:d4:06:1d:80:48:79: 8b:00:8f:9c:e6:48:ac:47:e2:24:e6:9f:f2:5c:71:8f:dd:f7: 11:e3:1f:a5:73:2e:d3:08:4d:a7:d6:35:8a:4a:63:95:1c:cc: 43:f4:9b:f1:3d:f9:98:c1:5f:1d:b3:5c:a4:d4:c5:7d:0a:39: eb:89:2c:9b:c8:c4:c5:72:38:3d:3c:16:f5:e0:01:7c:1f:49: 55:c3:5a:d0:99:6d:e3:f2:a7:42:95:04:d9:9e:c0:25:6d:5f: d7:f0:3a:63:ba:c7:01:ae:53:bf:95:13:43:21:96:02:b6:86: dd:ca:89:72:51:ec:18:f9:e1:21:55:ac:d1:7e:ba:93:f5:2e: b0:77:62:40:d8:7e:6b:47:73:8c:96:3d:be:25:6d:73:df:be: 31:c8:8e:19:e2:ee:45:4b:70:c9:93:62:27:87:df:e9:8f:78: e1:a7:b4:e1:e8:e7:e4:19:ab:b1:9d:ee:83:c3:3d:52:5c:83: 32:e3:a3:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFOEIxMTAvBgNVBAUTKDgwMkM3NTFGQTk4NDM0N0RGOUM5M0NFREI5N0VEOTUx QTk1MjgyODYwHhcNMjYxMDAyMTgwMzAxWhcNMjYxMDA5MTgwMzAxWjAYMRYwFAYD VQQDEw02YWJmZjFkNi00YTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsmmDXevkiOh5xJKHNQL+cbEJhmkoRpWMbXaiUF8xf7iU9H7SEhE1cxvyv3iD wsX00xnuLT7gIITj8YgfM9vqbCqLlG8FBDkHmoTP9tXZPiURpJI+old37/QQr/EL jKFaLb/MT11k8i2C7mKMqRpY/vnIYwdL8Co1uzZi8dDFucSTrtAEgIIiAXpKEPUs QB+pCcqmb36Cw4sUqMg30RtAN2t0obPNOgKcqaO344krAlqzU8uYTYC5WAkhwGef xau77O97H/WanHgWBCGJosBMOfdKLrHoESEAdjbNLMSGib59RflfMGaWS9MfNOxB MqwJvCZPMpfuQq6OVaI9frCXFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBMpyC8g rcSJdwqepsagrcDpLnXyMB8GA1UdIwQYMBaAFIAsdR+phDR9+ck87bl+2VGpUoKG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU4Qi9FQzI1N0NDNkUw MjUxMUU5OTFBOTc3NERDNEY5QUUwMi9nQ3gxSDZtRU5IMzV5VHp0dVg3WlVhbFNn b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dDeDFINm1FTkgzNXlUenR1WDdaVWFsU2dvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUU4Qi9FQzI1N0NDNkUwMjUxMUU5OTFBOTc3NERDNEY5QUUwMi9nQ3gxSDZtRU5I MzV5VHp0dVg3WlVhbFNnb1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATC6A8DKpHmrK3G/FYaXlFGeLUjfKvkaPom01PQ4XnLVCVFkBtK4AWk5TIvdG 5wcy8vHTe1/J6sSYjrgZRYf+HSw11AYdgEh5iwCPnOZIrEfiJOaf8lxxj933EeMf pXMu0whNp9Y1ikpjlRzMQ/Sb8T35mMFfHbNcpNTFfQo564ksm8jExXI4PTwW9eAB fB9JVcNa0Jlt4/KnQpUE2Z7AJW1f1/A6Y7rHAa5Tv5UTQyGWAraG3cqJclHsGPnh IVWs0X66k/UusHdiQNh+a0dzjJY9viVtc9++MciOGeLuRUtwyZNiJ4ff6Y944ae0 4ejn5BmrsZ3ug8M9UlyDMuOj6g== -----END CERTIFICATE-----Generated at Sun Oct 4 03:42:37 2026 by rpki-client