$ rpki-client -vvvf rpki.apnic.net/member_repository/A9131CF4/47BFD4DCB71111F0A5C28073C4F9AE02/SGjuTp_AEUegPCaatSEKj-cnp4s.mft File: SGjuTp_AEUegPCaatSEKj-cnp4s.mft (raw, json) Hash identifier: jVWKwkXth8qTV39bMvfuZRK4H+OxCFCAKksuvig6j6Q= Subject key identifier: 72:57:C1:B5:83:D4:4F:D9:55:E6:52:BE:28:C7:F8:6E:A0:7A:F0:7D Authority key identifier: 48:68:EE:4E:9F:C0:11:47:A0:3C:26:9A:B5:21:0A:8F:E7:27:A7:8B Certificate issuer: /CN=A9131CF4/serialNumber=4868EE4E9FC01147A03C269AB5210A8FE727A78B Certificate serial: A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SGjuTp_AEUegPCaatSEKj-cnp4s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131CF4/47BFD4DCB71111F0A5C28073C4F9AE02/SGjuTp_AEUegPCaatSEKj-cnp4s.mft Manifest number: A8 Signing time: Wed 23 Sep 2026 06:54:23 +0000 Manifest this update: Wed 23 Sep 2026 06:54:22 +0000 Manifest next update: Wed 30 Sep 2026 06:54:22 +0000 Files and hashes: 1: SGjuTp_AEUegPCaatSEKj-cnp4s.crl (hash: uI9ybbGhzlatNIEziN4mHLUXTiitqPZO96+xeVqELeE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131CF4/47BFD4DCB71111F0A5C28073C4F9AE02/SGjuTp_AEUegPCaatSEKj-cnp4s.crl rsync://rpki.apnic.net/member_repository/A9131CF4/47BFD4DCB71111F0A5C28073C4F9AE02/SGjuTp_AEUegPCaatSEKj-cnp4s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SGjuTp_AEUegPCaatSEKj-cnp4s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 06:54:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131CF4, serialNumber=4868EE4E9FC01147A03C269AB5210A8FE727A78B Validity Not Before: Sep 23 06:54:22 2026 GMT Not After : Sep 30 06:54:22 2026 GMT Subject: CN=6ab3779f-d2dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:67:c2:7b:a2:2a:f3:ac:81:60:e6:f4:4e:c4: 78:e8:1a:54:20:1b:78:8d:bd:d1:43:87:28:4e:3d: 0c:91:a0:12:09:da:57:18:85:ff:18:5a:a2:59:90: 9e:3c:04:0e:4c:3d:af:c1:e1:50:52:02:6b:3f:40: 00:aa:7f:2a:5c:75:e5:a2:63:c2:97:b9:f5:c9:87: 21:b4:46:e4:b2:99:3e:26:99:9e:2e:d3:5e:3c:73: 2a:87:6f:f1:ee:45:17:b3:14:95:70:1c:14:1f:c2: 9b:78:d0:de:13:44:05:57:17:87:4d:62:ba:6b:33: 33:87:43:6e:39:d4:00:9a:e5:32:e2:b3:5f:a6:01: 45:fa:20:07:8f:fd:0f:56:05:9e:22:69:ee:0d:1e: 71:42:97:49:68:d1:7e:0e:e6:ec:12:52:9b:17:87: 62:28:58:7d:58:f7:d3:88:cd:32:bd:6a:20:26:59: 15:28:a4:e0:09:bb:d1:69:74:86:1f:22:76:49:c2: 5b:5a:6b:ea:ba:de:1d:67:3e:cc:b0:57:b5:08:21: bf:8d:85:2a:b3:44:f2:b8:47:55:81:1b:dd:ad:34: 87:54:56:80:37:5c:34:1b:fe:9f:be:51:2f:8c:07: 24:16:0a:e0:97:35:8b:dd:0d:86:32:2d:3d:b2:27: c5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:57:C1:B5:83:D4:4F:D9:55:E6:52:BE:28:C7:F8:6E:A0:7A:F0:7D X509v3 Authority Key Identifier: keyid:48:68:EE:4E:9F:C0:11:47:A0:3C:26:9A:B5:21:0A:8F:E7:27:A7:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131CF4/47BFD4DCB71111F0A5C28073C4F9AE02/SGjuTp_AEUegPCaatSEKj-cnp4s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SGjuTp_AEUegPCaatSEKj-cnp4s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131CF4/47BFD4DCB71111F0A5C28073C4F9AE02/SGjuTp_AEUegPCaatSEKj-cnp4s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:97:8c:23:0e:6e:f2:6b:87:c3:09:29:ea:e1:34:c2:73:e8: 21:15:4e:88:be:ba:69:11:8a:3d:dc:85:16:1a:cd:9e:6a:8a: 08:3c:b7:14:e0:a8:21:b7:c4:f2:d1:53:ea:4f:74:c2:27:4f: 61:db:0f:3f:41:d1:c0:5f:2d:f2:d6:29:78:d7:de:f0:ab:ad: fc:f0:12:ef:b8:74:91:69:c2:6c:14:7e:d0:3d:cb:1f:32:bb: 1e:53:a7:d0:ef:08:37:93:89:d4:da:f4:0d:ba:5a:bb:ba:72: 9f:6b:6d:44:ec:c3:a5:f4:50:a1:0d:25:7c:1d:c8:bd:b9:36: bd:a8:c5:45:69:6d:b6:ed:79:72:23:60:14:0b:40:98:2d:db: 97:30:52:6d:3b:81:72:b0:d6:02:41:51:eb:cb:b2:30:95:44: 7f:e7:9c:66:fe:a6:9c:06:39:63:c7:26:f2:4c:c4:5a:61:2e: 6a:9b:91:98:1c:41:fb:a4:7c:ed:c0:9d:e1:11:de:52:b1:33: 79:eb:1a:99:9b:3d:e0:a2:36:7c:26:1b:3e:74:27:b8:f0:be: b2:f2:52:49:b7:91:52:2c:49:b0:af:53:3b:5b:f5:0b:ee:51: c8:31:de:40:e5:c3:92:b4:ca:54:39:1e:8d:e3:b4:93:b9:61: 16:30:72:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFDRjQxMTAvBgNVBAUTKDQ4NjhFRTRFOUZDMDExNDdBMDNDMjY5QUI1MjEwQThG RTcyN0E3OEIwHhcNMjYwOTIzMDY1NDIyWhcNMjYwOTMwMDY1NDIyWjAYMRYwFAYD VQQDEw02YWIzNzc5Zi1kMmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1WfCe6Iq86yBYOb0TsR46BpUIBt4jb3RQ4coTj0MkaASCdpXGIX/GFqiWZCe PAQOTD2vweFQUgJrP0AAqn8qXHXlomPCl7n1yYchtEbkspk+JpmeLtNePHMqh2/x 7kUXsxSVcBwUH8KbeNDeE0QFVxeHTWK6azMzh0NuOdQAmuUy4rNfpgFF+iAHj/0P VgWeImnuDR5xQpdJaNF+DubsElKbF4diKFh9WPfTiM0yvWogJlkVKKTgCbvRaXSG HyJ2ScJbWmvqut4dZz7MsFe1CCG/jYUqs0TyuEdVgRvdrTSHVFaAN1w0G/6fvlEv jAckFgrglzWL3Q2GMi09sifFlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHJXwbWD 1E/ZVeZSvijH+G6gevB9MB8GA1UdIwQYMBaAFEho7k6fwBFHoDwmmrUhCo/nJ6eL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUNGNC80N0JGRDREQ0I3 MTExMUYwQTVDMjgwNzNDNEY5QUUwMi9TR2p1VHBfQUVVZWdQQ2FhdFNFS2otY25w NHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NHanVUcF9BRVVlZ1BDYWF0U0VLai1jbnA0cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUNGNC80N0JGRDREQ0I3MTExMUYwQTVDMjgwNzNDNEY5QUUwMi9TR2p1VHBfQUVV ZWdQQ2FhdFNFS2otY25wNHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHpeMIw5u8muHwwkp6uE0wnPoIRVOiL66aRGKPdyFFhrNnmqKCDy3FOCoIbfE 8tFT6k90widPYdsPP0HRwF8t8tYpeNfe8Kut/PAS77h0kWnCbBR+0D3LHzK7HlOn 0O8IN5OJ1Nr0Dbpau7pyn2ttROzDpfRQoQ0lfB3Ivbk2vajFRWlttu15ciNgFAtA mC3blzBSbTuBcrDWAkFR68uyMJVEf+ecZv6mnAY5Y8cm8kzEWmEuapuRmBxB+6R8 7cCd4RHeUrEzeesamZs94KI2fCYbPnQnuPC+svJSSbeRUixJsK9TO1v1C+5RyDHe QOXDkrTKVDkejeO0k7lhFjByfA== -----END CERTIFICATE-----Generated at Fri Sep 25 04:51:06 2026 by rpki-client