$ rpki-client -vvvf rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft File: gJ8D89FTd5ZIUgkSmfr428wnR3w.mft (raw, json) Hash identifier: fYewNAI0yaFRxLTYD9bR5xY2L6kujTDZHsqeS6U5IEA= Subject key identifier: F9:FF:11:0E:69:17:22:DA:8C:27:16:B3:4F:5E:85:19:26:DB:1B:0F Authority key identifier: 80:9F:03:F3:D1:53:77:96:48:52:09:12:99:FA:F8:DB:CC:27:47:7C Certificate issuer: /CN=A9127BF1/serialNumber=809F03F3D15377964852091299FAF8DBCC27477C Certificate serial: 0267 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft Manifest number: 025A Signing time: Fri 25 Sep 2026 02:22:56 +0000 Manifest this update: Fri 25 Sep 2026 02:22:55 +0000 Manifest next update: Fri 02 Oct 2026 02:22:55 +0000 Files and hashes: 1: gJ8D89FTd5ZIUgkSmfr428wnR3w.crl (hash: tce/0ghqmGKGrrI8dOkJrmyDi55/opLs+s2vLz5h+mU=) 2: 62A413B2D23811EFA34C3663C4F9AE02.roa (hash: ZKyMMeDidw2RZBoa1Uac9hxWkhYX6qMAN6CuYcH5VgI=) 3: C9836F3A314C11EEB33F3686C4F9AE02.roa (hash: wfqgmiYwhfm3vauQpeYyEZQnrqn5J3zQJQ5nfR04nk4=) 4: 63A2921EB00A11F1BB307FE66811F970.roa (hash: fn1JWv5BqryK+ZEc9d9YgHpP5ZlZf/Pxj6q/K1vvhR4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.crl rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 02:22:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 615 (0x267) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127BF1, serialNumber=809F03F3D15377964852091299FAF8DBCC27477C Validity Not Before: Sep 25 02:22:55 2026 GMT Not After : Oct 2 02:22:55 2026 GMT Subject: CN=6ab5db00-8156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0d:01:83:b7:04:1f:58:05:b1:10:eb:68:82: 6d:cf:a9:8d:4a:bb:15:6e:a5:62:90:a5:63:b4:5e: 2e:6d:c9:46:52:16:e8:e1:cf:0c:c0:70:d4:af:14: a1:53:67:78:3b:f4:8d:dd:4f:fa:8f:cb:80:80:b3: 6c:31:fd:5a:4f:10:e8:c9:83:20:8d:68:a4:df:0c: 11:c3:59:d1:e9:62:f5:6f:ef:dd:35:32:98:f7:5e: 41:6a:6a:4b:7a:6f:d9:c7:ba:29:db:07:cd:15:e1: 89:06:35:76:0b:4a:be:c6:8c:bc:80:f1:76:9e:87: 24:e6:d5:a6:76:61:42:48:f6:b0:2e:a0:78:b0:d4: 8c:fa:27:a9:66:8f:29:a0:c0:d0:10:f9:a1:32:1e: a5:b8:28:1a:bd:f2:a1:c2:50:3f:a9:30:7b:d2:f1: 16:59:92:0f:1a:19:d6:c2:61:2f:de:34:5c:1a:2f: 6b:ba:cd:f4:85:21:4c:43:50:69:42:f5:09:0e:7f: 6b:51:a5:b3:38:5b:7f:af:9b:01:61:c2:2c:6c:fa: 3c:a9:24:d7:50:5b:3a:cb:75:1a:17:ae:bb:60:69: 16:bf:92:83:f8:c6:59:53:43:55:eb:70:e9:15:2e: e8:15:75:5e:af:c5:3b:7d:07:cc:ac:46:65:0d:59: 95:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:FF:11:0E:69:17:22:DA:8C:27:16:B3:4F:5E:85:19:26:DB:1B:0F X509v3 Authority Key Identifier: keyid:80:9F:03:F3:D1:53:77:96:48:52:09:12:99:FA:F8:DB:CC:27:47:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:c1:94:29:75:e7:3a:e6:e9:c7:b8:b6:a9:5b:36:e5:c0:20: a7:05:7f:0d:09:8a:61:29:c3:ef:be:37:ef:76:5f:a9:3a:9e: 7c:11:f0:e7:ee:8b:ae:5b:19:86:c1:13:af:2b:29:27:0d:dd: a9:4d:27:91:db:43:5d:76:fa:00:7e:b0:52:04:75:f6:b9:de: 8f:48:3b:74:ee:08:e4:55:4e:5a:b7:99:80:ce:48:02:7e:51: 30:ad:d8:77:3c:f1:67:f1:82:78:e7:a8:6e:0b:2f:0c:fe:df: 4c:bb:c1:44:6d:c8:bd:28:dc:c1:81:a0:89:d9:3f:74:c8:b0: 13:b8:cf:6c:4a:7a:50:e5:30:93:e7:85:8c:d3:5c:1d:3d:fe: 55:36:19:7a:64:2a:7d:8b:ad:3b:94:15:76:30:bf:e6:b3:d9: c2:e0:18:b3:dd:e7:4f:f4:80:74:f5:2a:62:33:24:4b:24:3e: ca:5d:fd:d5:8d:9a:21:41:b7:7a:e5:3b:28:1b:8e:a5:5a:00: 8a:87:c8:e2:d7:e0:e3:6c:bc:c5:63:f3:30:73:58:40:ed:c5: 73:ec:7e:51:0e:1d:1b:a2:2f:ca:e7:57:6b:1a:fc:8c:87:b6: a7:d5:77:3e:e0:ab:59:b2:f7:ad:5d:20:48:65:55:8c:17:c5: bb:d2:57:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdCRjExMTAvBgNVBAUTKDgwOUYwM0YzRDE1Mzc3OTY0ODUyMDkxMjk5RkFGOERC Q0MyNzQ3N0MwHhcNMjYwOTI1MDIyMjU1WhcNMjYxMDAyMDIyMjU1WjAYMRYwFAYD VQQDEw02YWI1ZGIwMC04MTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApw0Bg7cEH1gFsRDraIJtz6mNSrsVbqVikKVjtF4ubclGUhbo4c8MwHDUrxSh U2d4O/SN3U/6j8uAgLNsMf1aTxDoyYMgjWik3wwRw1nR6WL1b+/dNTKY915BampL em/Zx7op2wfNFeGJBjV2C0q+xoy8gPF2nock5tWmdmFCSPawLqB4sNSM+iepZo8p oMDQEPmhMh6luCgavfKhwlA/qTB70vEWWZIPGhnWwmEv3jRcGi9rus30hSFMQ1Bp QvUJDn9rUaWzOFt/r5sBYcIsbPo8qSTXUFs6y3UaF667YGkWv5KD+MZZU0NV63Dp FS7oFXVer8U7fQfMrEZlDVmVgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPn/EQ5p FyLajCcWs09ehRkm2xsPMB8GA1UdIwQYMBaAFICfA/PRU3eWSFIJEpn6+NvMJ0d8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0JGMS8zMEQ0ODYzNDMx NEMxMUVFQUJGRkE5ODRDNEY5QUUwMi9nSjhEODlGVGQ1WklVZ2tTbWZyNDI4d25S M3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dKOEQ4OUZUZDVaSVVna1NtZnI0Mjh3blIzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0JGMS8zMEQ0ODYzNDMxNEMxMUVFQUJGRkE5ODRDNEY5QUUwMi9nSjhEODlGVGQ1 WklVZ2tTbWZyNDI4d25SM3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUcGUKXXnOubpx7i2qVs25cAgpwV/DQmKYSnD774373ZfqTqefBHw5+6LrlsZ hsETryspJw3dqU0nkdtDXXb6AH6wUgR19rnej0g7dO4I5FVOWreZgM5IAn5RMK3Y dzzxZ/GCeOeobgsvDP7fTLvBRG3IvSjcwYGgidk/dMiwE7jPbEp6UOUwk+eFjNNc HT3+VTYZemQqfYutO5QVdjC/5rPZwuAYs93nT/SAdPUqYjMkSyQ+yl391Y2aIUG3 euU7KBuOpVoAiofI4tfg42y8xWPzMHNYQO3Fc+x+UQ4dG6IvyudXaxr8jIe2p9V3 PuCrWbL3rV0gSGVVjBfFu9JX9w== -----END CERTIFICATE-----Generated at Fri Sep 25 18:25:12 2026 by rpki-client