$ rpki-client -vvvf rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.mft File: rGoi8eThZQrPtSifXctdU5IPzzQ.mft (raw, json) Hash identifier: QnUCngNBcflaGBOpm6vGuTrzpDf9JXjxG5OZ5Z+gedA= Subject key identifier: EE:05:4E:91:05:45:C3:98:F4:48:5F:CD:1B:85:FF:90:79:43:07:A6 Authority key identifier: AC:6A:22:F1:E4:E1:65:0A:CF:B5:28:9F:5D:CB:5D:53:92:0F:CF:34 Certificate issuer: /CN=A91422D7/serialNumber=AC6A22F1E4E1650ACFB5289F5DCB5D53920FCF34 Certificate serial: 01F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoi8eThZQrPtSifXctdU5IPzzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.mft Manifest number: 05B8 Signing time: Fri 25 Sep 2026 00:22:49 +0000 Manifest this update: Fri 25 Sep 2026 00:22:49 +0000 Manifest next update: Fri 02 Oct 2026 00:22:49 +0000 Files and hashes: 1: rGoi8eThZQrPtSifXctdU5IPzzQ.crl (hash: j5NMR63UgoJBfyaBzQhzITHarygmHSA5/awiWk3H/R8=) 2: CE5F74E2BE5811EEA8C02E2AC4F9AE02.roa (hash: Z1lkPboS7Do5JVczgOK46BmhKy5Eyozp7p6CLVvAhpo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.crl rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoi8eThZQrPtSifXctdU5IPzzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 00:22:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 505 (0x1f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91422D7, serialNumber=AC6A22F1E4E1650ACFB5289F5DCB5D53920FCF34 Validity Not Before: Sep 25 00:22:49 2026 GMT Not After : Oct 2 00:22:49 2026 GMT Subject: CN=6ab5bed9-16a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ed:b2:22:ec:22:de:73:32:ae:74:f5:1e:33: 86:76:5b:7d:9b:63:56:77:ca:42:1b:e9:47:46:d3: bf:a9:cf:f1:bb:97:fb:7a:f2:7c:5e:f9:d0:15:7b: 90:90:35:e5:6f:9f:99:f6:6e:d3:69:cc:50:7d:7f: 4d:2a:46:86:d7:e1:27:5f:13:0c:7a:dc:13:d3:dd: d0:57:46:e9:7b:d5:2a:e1:05:d9:cb:83:f2:02:c2: 84:35:be:62:d6:89:dd:a9:f2:ac:c3:88:cd:b3:e7: 18:35:4f:16:e0:ec:bd:e9:60:b9:3e:db:f2:dd:4c: d6:62:a5:4a:16:20:f8:10:a2:c9:71:f7:9e:d3:b4: f1:cb:f8:de:ce:bf:91:d6:f0:b1:04:f3:ad:6e:90: 86:e8:66:ca:de:fe:a4:9f:11:22:d0:5b:1a:27:8d: c1:3d:c6:3e:8b:9a:55:90:4d:f1:cd:43:bd:c6:52: 7b:4c:9c:ef:e8:25:df:4d:e1:66:54:d1:e9:ad:d3: d0:14:2a:5b:e3:9a:44:7c:30:e1:49:a2:e0:e8:0f: a9:ef:f0:28:4c:55:63:03:a5:ab:fb:e6:d1:bb:d7: 18:9c:4e:0c:49:29:6b:9a:69:1e:21:65:08:dd:6a: 04:d4:30:50:25:2b:9e:11:7a:99:bf:c0:18:0c:5b: fe:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:05:4E:91:05:45:C3:98:F4:48:5F:CD:1B:85:FF:90:79:43:07:A6 X509v3 Authority Key Identifier: keyid:AC:6A:22:F1:E4:E1:65:0A:CF:B5:28:9F:5D:CB:5D:53:92:0F:CF:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoi8eThZQrPtSifXctdU5IPzzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:59:c9:c6:80:95:20:ab:62:18:89:b9:4f:2c:e4:d6:59:ba: c4:99:2a:ce:b5:02:cf:6c:5c:fa:9d:4c:e7:d1:f2:a8:87:e7: a0:9a:f0:8a:f5:da:32:e3:62:74:9d:09:7c:2d:e5:76:63:56: df:d2:7f:05:4d:6f:9c:da:6e:ad:4c:24:66:2d:b7:f5:8e:6c: 4a:f2:f1:72:1e:21:92:eb:52:0b:ec:aa:92:fc:61:4d:7a:d6: 3f:80:79:49:0e:eb:8d:f3:d1:05:30:a9:f1:2a:a5:54:7c:7d: d6:33:ab:96:1b:21:04:86:ae:61:39:0f:20:ec:aa:d1:eb:60: 02:77:12:ee:6b:15:22:b6:70:10:39:8c:52:fe:05:c6:42:74: 92:1a:f5:5f:b2:85:fb:0c:d2:a4:d7:1a:1c:c4:95:67:2d:42: e6:8b:87:01:ad:1c:66:02:1e:33:9e:f8:8e:54:a8:a9:c8:5e: 8e:be:fd:d2:10:41:77:51:d2:69:ab:a1:6b:0c:42:55:1f:30: 95:21:3b:8a:ae:84:69:67:9e:76:aa:5c:fd:a4:5c:af:25:b0: f4:4a:8e:7b:a8:0a:03:f7:ea:0f:06:95:2c:26:08:14:3a:95: 3a:58:1d:6a:f7:3d:59:ed:5e:44:ed:a9:c6:e9:5a:35:bb:09: b3:29:6e:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIyRDcxMTAvBgNVBAUTKEFDNkEyMkYxRTRFMTY1MEFDRkI1Mjg5RjVEQ0I1RDUz OTIwRkNGMzQwHhcNMjYwOTI1MDAyMjQ5WhcNMjYxMDAyMDAyMjQ5WjAYMRYwFAYD VQQDEw02YWI1YmVkOS0xNmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAye2yIuwi3nMyrnT1HjOGdlt9m2NWd8pCG+lHRtO/qc/xu5f7evJ8XvnQFXuQ kDXlb5+Z9m7TacxQfX9NKkaG1+EnXxMMetwT093QV0bpe9Uq4QXZy4PyAsKENb5i 1ondqfKsw4jNs+cYNU8W4Oy96WC5Ptvy3UzWYqVKFiD4EKLJcfee07Txy/jezr+R 1vCxBPOtbpCG6GbK3v6knxEi0FsaJ43BPcY+i5pVkE3xzUO9xlJ7TJzv6CXfTeFm VNHprdPQFCpb45pEfDDhSaLg6A+p7/AoTFVjA6Wr++bRu9cYnE4MSSlrmmkeIWUI 3WoE1DBQJSueEXqZv8AYDFv+fQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO4FTpEF RcOY9EhfzRuF/5B5QwemMB8GA1UdIwQYMBaAFKxqIvHk4WUKz7Uon13LXVOSD880 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjJENy81QjlGNzFEMkVE MzAxMUVDQkYwN0YwMTJDNEY5QUUwMi9yR29pOGVUaFpRclB0U2lmWGN0ZFU1SVB6 elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JHb2k4ZVRoWlFyUHRTaWZYY3RkVTVJUHp6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjJENy81QjlGNzFEMkVEMzAxMUVDQkYwN0YwMTJDNEY5QUUwMi9yR29pOGVUaFpR clB0U2lmWGN0ZFU1SVB6elEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXlnJxoCVIKtiGIm5Tyzk1lm6xJkqzrUCz2xc+p1M59HyqIfnoJrwivXaMuNi dJ0JfC3ldmNW39J/BU1vnNpurUwkZi239Y5sSvLxch4hkutSC+yqkvxhTXrWP4B5 SQ7rjfPRBTCp8SqlVHx91jOrlhshBIauYTkPIOyq0etgAncS7msVIrZwEDmMUv4F xkJ0khr1X7KF+wzSpNcaHMSVZy1C5ouHAa0cZgIeM574jlSoqchejr790hBBd1HS aauhawxCVR8wlSE7iq6EaWeedqpc/aRcryWw9EqOe6gKA/fqDwaVLCYIFDqVOlgd avc9We1eRO2pxulaNbsJsyluCg== -----END CERTIFICATE-----Generated at Fri Sep 25 14:53:06 2026 by rpki-client