$ rpki-client -vvvf rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft File: cGWovjQWOF29AyJATk9jTG7-XYI.mft (raw, json) Hash identifier: vJjGjhVT+WHXMWCJTdRHl4bsCLtRKbj8ffnQHW4/a9w= Subject key identifier: 87:39:C9:7E:67:6B:1C:1E:A0:49:9B:A4:AB:D2:9F:70:F8:79:2A:C5 Authority key identifier: 70:65:A8:BE:34:16:38:5D:BD:03:22:40:4E:4F:63:4C:6E:FE:5D:82 Certificate issuer: /CN=A9125AE9/serialNumber=7065A8BE3416385DBD0322404E4F634C6EFE5D82 Certificate serial: 038F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft Manifest number: 0383 Signing time: Wed 23 Sep 2026 00:21:36 +0000 Manifest this update: Wed 23 Sep 2026 00:21:36 +0000 Manifest next update: Wed 30 Sep 2026 00:21:36 +0000 Files and hashes: 1: cGWovjQWOF29AyJATk9jTG7-XYI.crl (hash: f2KQr73Y6ayiD1kqFBA8bw3vkcvbEPaOGWmVsUE+zbw=) 2: 70BB6C14064A11EDA0A92068C4F9AE02.roa (hash: e6bCOgfRSemdp2rsVv83FamwpxN7KaZSE/x3Q3BUALg=) 3: 6FE0D496064A11EDA0A92068C4F9AE02.roa (hash: nSPvZX7KXzBzUT7OFwC/s1n132cCYNb3XtUKSB/sg50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.crl rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 00:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 911 (0x38f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125AE9, serialNumber=7065A8BE3416385DBD0322404E4F634C6EFE5D82 Validity Not Before: Sep 23 00:21:36 2026 GMT Not After : Sep 30 00:21:36 2026 GMT Subject: CN=6ab31b90-1a2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:9f:ea:59:e2:ba:b9:42:06:c0:f6:a0:02:ec: 75:ab:5a:59:94:1e:26:a0:86:63:1c:4b:87:30:35: d6:42:6b:56:ce:7b:3b:5e:3a:7b:e0:ab:f2:d9:83: b1:5c:3d:43:e9:d4:3e:6f:70:33:9e:e2:6b:1b:6e: 13:b3:bb:77:24:88:97:58:db:7f:35:4e:0f:7f:88: 5e:2a:1c:da:b5:ab:3c:f0:39:6a:62:35:3a:73:48: f8:0b:04:97:d6:cd:4a:40:1c:26:ac:33:90:e9:8a: a7:d6:ba:42:e0:8e:f4:bc:be:6f:6d:78:37:27:0a: 24:ea:46:01:e7:40:40:04:65:b5:42:9f:9e:d0:83: df:9f:20:1b:df:f5:cf:6e:01:f6:16:00:63:1b:82: ea:94:ed:fb:5c:49:81:46:69:35:64:c0:a3:e7:a0: 03:dc:dd:38:d8:39:fa:0a:e3:5e:5f:63:f6:e7:51: 62:5c:c3:45:2b:ba:5e:9d:1e:7d:3f:45:40:46:48: 90:9e:36:5c:c2:bc:7a:87:3a:d7:89:80:92:41:92: 7d:62:bf:02:1f:97:91:53:39:31:c2:a8:3a:d5:38: 1f:08:79:af:ce:f9:0e:8d:d6:48:87:a5:76:4b:e5: df:9b:b1:0c:1e:00:85:23:fd:82:b7:67:6f:7f:b9: 65:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:39:C9:7E:67:6B:1C:1E:A0:49:9B:A4:AB:D2:9F:70:F8:79:2A:C5 X509v3 Authority Key Identifier: keyid:70:65:A8:BE:34:16:38:5D:BD:03:22:40:4E:4F:63:4C:6E:FE:5D:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:07:47:2c:b9:4c:51:75:18:24:92:3b:56:2b:83:d9:65:c3: 2c:14:15:3f:5c:51:44:2a:19:12:7d:31:ed:0b:b6:8a:b8:ae: 29:54:0f:6e:4d:61:77:82:e0:09:ab:2c:ab:ff:69:70:49:0c: 50:2f:1b:96:c9:fc:a3:8e:ac:41:d6:33:6c:8a:db:66:7b:88: 46:74:e5:59:ee:6d:cb:21:e5:d0:20:d9:fb:53:84:97:bd:0b: 69:4f:b3:25:24:40:df:72:66:5a:40:a8:3a:ab:60:19:b5:aa: ba:5b:4c:38:6a:94:d6:d3:71:e8:17:25:4f:9b:78:ac:fe:1c: 7a:6b:99:0f:15:62:1d:de:5d:7c:e2:3c:7e:23:2d:1e:81:7b: 6a:51:f8:a3:15:c6:bf:a2:86:cc:30:d5:85:89:62:2d:1e:40: 82:5e:18:68:f9:d1:98:fa:d8:97:24:06:9d:94:ce:19:e4:79: d5:9e:6a:a8:8b:0a:86:3c:28:1d:ba:31:09:d7:a0:89:53:bb: 66:10:84:f7:3a:43:bd:03:75:e9:df:a7:bb:4f:21:b8:08:0c: a4:9a:1a:50:38:3a:6a:23:dc:c7:49:b6:1a:36:10:af:40:28: 0b:85:a8:90:c9:60:ea:9d:4c:7e:30:15:6c:34:d2:77:c4:f8: 7c:4e:a3:71 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA48wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVBRTkxMTAvBgNVBAUTKDcwNjVBOEJFMzQxNjM4NURCRDAzMjI0MDRFNEY2MzRD NkVGRTVEODIwHhcNMjYwOTIzMDAyMTM2WhcNMjYwOTMwMDAyMTM2WjAYMRYwFAYD VQQDEw02YWIzMWI5MC0xYTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2J/qWeK6uUIGwPagAux1q1pZlB4moIZjHEuHMDXWQmtWzns7Xjp74Kvy2YOx XD1D6dQ+b3AznuJrG24Ts7t3JIiXWNt/NU4Pf4heKhzatas88DlqYjU6c0j4CwSX 1s1KQBwmrDOQ6Yqn1rpC4I70vL5vbXg3Jwok6kYB50BABGW1Qp+e0IPfnyAb3/XP bgH2FgBjG4LqlO37XEmBRmk1ZMCj56AD3N042Dn6CuNeX2P251FiXMNFK7penR59 P0VARkiQnjZcwrx6hzrXiYCSQZJ9Yr8CH5eRUzkxwqg61TgfCHmvzvkOjdZIh6V2 S+Xfm7EMHgCFI/2Ct2dvf7ll1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIc5yX5n axweoEmbpKvSn3D4eSrFMB8GA1UdIwQYMBaAFHBlqL40FjhdvQMiQE5PY0xu/l2C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUFFOS9GRkVCN0Y5QTA2 NDYxMUVEOUNCNzMxNjNDNEY5QUUwMi9jR1dvdmpRV09GMjlBeUpBVGs5alRHNy1Y WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NHV292alFXT0YyOUF5SkFUazlqVEc3LVhZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUFFOS9GRkVCN0Y5QTA2NDYxMUVEOUNCNzMxNjNDNEY5QUUwMi9jR1dvdmpRV09G MjlBeUpBVGs5alRHNy1YWUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnwdHLLlMUXUYJJI7ViuD2WXDLBQVP1xRRCoZEn0x7Qu2iriuKVQPbk1hd4Lg Cassq/9pcEkMUC8blsn8o46sQdYzbIrbZnuIRnTlWe5tyyHl0CDZ+1OEl70LaU+z JSRA33JmWkCoOqtgGbWqultMOGqU1tNx6BclT5t4rP4cemuZDxViHd5dfOI8fiMt HoF7alH4oxXGv6KGzDDVhYliLR5Agl4YaPnRmPrYlyQGnZTOGeR51Z5qqIsKhjwo HboxCdegiVO7ZhCE9zpDvQN16d+nu08huAgMpJoaUDg6aiPcx0m2GjYQr0AoC4Wo kMlg6p1MfjAVbDTSd8T4fE6jcQ== -----END CERTIFICATE-----Generated at Thu Sep 24 17:49:55 2026 by rpki-client