$ rpki-client -vvvf rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft File: rGOF7VY-H9amaz5LUQ3MaTDNSww.mft (raw, json) Hash identifier: tLKmgj0ED+CW2qrrw5jQlgJw0UKz2AeOHaWD+lrYZ8Y= Subject key identifier: 30:62:3E:5B:B2:5A:DD:4A:2F:1A:35:5E:0D:8E:28:71:0A:35:79:10 Authority key identifier: AC:63:85:ED:56:3E:1F:D6:A6:6B:3E:4B:51:0D:CC:69:30:CD:4B:0C Certificate issuer: /CN=A9160D0A/serialNumber=AC6385ED563E1FD6A66B3E4B510DCC6930CD4B0C Certificate serial: 02C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft Manifest number: 02A1 Signing time: Sat 03 Oct 2026 02:21:00 +0000 Manifest this update: Sat 03 Oct 2026 02:20:59 +0000 Manifest next update: Sat 10 Oct 2026 02:20:59 +0000 Files and hashes: 1: rGOF7VY-H9amaz5LUQ3MaTDNSww.crl (hash: LSGe3QHqMEh4DK5umXjN7mCH6du+bClM8gUv3CK4Ff0=) 2: 42EC5F02D2B711EDAF6DC017C4F9AE02.roa (hash: pkC+D8p7TNYzPBnocLkHTaXfdgtNXvj2i4jRd1Gl3NY=) 3: D1EAA18CD2BC11ED9E7A9A1BC4F9AE02.roa (hash: s27t8mzFE7pAO+YQ8b7HEZWkopZAKcG8DRX9E1bRajo=) 4: 096A1DB6D2BA11ED8E06CC13C4F9AE02.roa (hash: xjJh+3SCJ/mrp3JYArjRvZVJMzUf7HfzNFOkj330dzY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.crl rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 02:20:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 707 (0x2c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160D0A, serialNumber=AC6385ED563E1FD6A66B3E4B510DCC6930CD4B0C Validity Not Before: Oct 3 02:20:59 2026 GMT Not After : Oct 10 02:20:59 2026 GMT Subject: CN=6ac0668b-28ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:79:aa:78:57:cd:f4:ed:53:59:cc:13:6d:dc: d2:3d:67:4e:e0:42:0c:ff:ce:b3:b5:73:99:85:16: bc:b6:01:17:78:ae:43:da:64:ef:45:10:35:f2:af: 03:a6:90:47:20:cb:d2:e4:40:22:3f:c0:b9:aa:1d: 45:bf:7e:cd:60:6d:00:bf:7d:61:5c:f1:5b:85:2b: 03:ab:48:b9:70:dc:de:d5:76:92:41:82:ac:44:ad: 73:1d:f2:f6:a2:1f:59:a5:47:fa:0e:7c:2d:25:1b: 79:29:c5:a3:cd:49:68:d5:22:81:97:6f:cf:b7:4f: a4:1f:ca:22:7f:f0:12:6b:25:60:aa:b7:ea:c3:a4: e4:24:f2:b6:3b:af:27:fd:78:21:82:4f:65:76:1f: 53:3d:56:83:76:e6:fb:0b:04:ff:b5:c4:b9:2c:db: d8:9d:9a:5c:12:6d:3e:3d:8a:fa:fd:fa:cf:7f:15: 7c:f1:d1:f9:42:a3:04:53:e2:18:88:b9:b1:9e:54: a2:ef:db:f8:cd:9c:e0:ce:09:fd:ae:d2:31:b1:c8: d1:0c:04:0c:64:e8:e7:22:02:19:cd:b8:95:02:28: b9:ff:5f:45:d8:1d:11:22:40:fa:1f:26:89:6d:82: 2e:9d:2d:cb:26:09:3b:db:2b:f3:cc:af:f4:62:54: 95:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:62:3E:5B:B2:5A:DD:4A:2F:1A:35:5E:0D:8E:28:71:0A:35:79:10 X509v3 Authority Key Identifier: keyid:AC:63:85:ED:56:3E:1F:D6:A6:6B:3E:4B:51:0D:CC:69:30:CD:4B:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:43:53:20:e8:c2:23:6a:6d:4b:89:99:c1:e0:fe:b2:36:4c: fc:71:fc:a7:a2:89:95:21:73:c0:bf:3f:3e:3d:2a:4f:f2:bc: 48:4e:2a:7a:b2:70:1f:37:4f:aa:1d:26:c7:24:ec:af:e0:ef: be:a5:95:e6:b3:a0:69:3f:fc:e8:5a:32:84:c4:45:e4:96:35: f7:ca:b3:9b:7a:46:65:47:1b:40:80:15:c5:77:83:3a:26:0e: 9f:d8:c4:a0:b6:e9:0e:58:f4:cf:26:06:52:e3:3f:dd:5f:cb: 04:67:f4:1b:1c:25:fb:9c:0a:a5:b2:c1:e6:98:1c:e3:f8:7b: 1d:1f:3d:64:1e:cc:84:50:a8:ca:74:86:1e:91:f0:79:01:24: 60:d2:ac:a2:a0:73:68:35:51:6e:21:c6:b4:2f:8b:02:5b:4e: cf:d7:f7:3d:76:f6:ae:b9:bb:0d:50:8a:74:c5:fa:8a:9a:84: bf:8d:1d:ba:09:dc:b5:ba:90:e3:2c:e3:d8:8d:3b:ab:59:f8: 84:48:06:97:1f:4e:41:40:35:41:5e:22:3e:d2:b9:24:c0:c0: ff:bc:8b:ff:2a:26:50:20:18:a3:6e:24:cb:ed:18:4a:b1:b8: 82:05:ed:93:46:12:e0:8d:31:21:d9:d1:a1:23:33:af:61:5e: aa:f2:2b:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAsMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBEMEExMTAvBgNVBAUTKEFDNjM4NUVENTYzRTFGRDZBNjZCM0U0QjUxMERDQzY5 MzBDRDRCMEMwHhcNMjYxMDAzMDIyMDU5WhcNMjYxMDEwMDIyMDU5WjAYMRYwFAYD VQQDEw02YWMwNjY4Yi0yOGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9HmqeFfN9O1TWcwTbdzSPWdO4EIM/86ztXOZhRa8tgEXeK5D2mTvRRA18q8D ppBHIMvS5EAiP8C5qh1Fv37NYG0Av31hXPFbhSsDq0i5cNze1XaSQYKsRK1zHfL2 oh9ZpUf6DnwtJRt5KcWjzUlo1SKBl2/Pt0+kH8oif/ASayVgqrfqw6TkJPK2O68n /Xghgk9ldh9TPVaDdub7CwT/tcS5LNvYnZpcEm0+PYr6/frPfxV88dH5QqMEU+IY iLmxnlSi79v4zZzgzgn9rtIxscjRDAQMZOjnIgIZzbiVAii5/19F2B0RIkD6HyaJ bYIunS3LJgk72yvzzK/0YlSVYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDBiPluy Wt1KLxo1Xg2OKHEKNXkQMB8GA1UdIwQYMBaAFKxjhe1WPh/Wpms+S1ENzGkwzUsM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEQwQS81NjRBMTM1RUQy MjIxMUVEOUEyMDZDNDZDNEY5QUUwMi9yR09GN1ZZLUg5YW1hejVMVVEzTWFURE5T d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JHT0Y3VlktSDlhbWF6NUxVUTNNYVRETlN3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEQwQS81NjRBMTM1RUQyMjIxMUVEOUEyMDZDNDZDNEY5QUUwMi9yR09GN1ZZLUg5 YW1hejVMVVEzTWFURE5Td3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAz0NTIOjCI2ptS4mZweD+sjZM/HH8p6KJlSFzwL8/Pj0qT/K8SE4qerJwHzdP qh0mxyTsr+DvvqWV5rOgaT/86FoyhMRF5JY198qzm3pGZUcbQIAVxXeDOiYOn9jE oLbpDlj0zyYGUuM/3V/LBGf0Gxwl+5wKpbLB5pgc4/h7HR89ZB7MhFCoynSGHpHw eQEkYNKsoqBzaDVRbiHGtC+LAltOz9f3PXb2rrm7DVCKdMX6ipqEv40dugnctbqQ 4yzj2I07q1n4hEgGlx9OQUA1QV4iPtK5JMDA/7yL/yomUCAYo24ky+0YSrG4ggXt k0YS4I0xIdnRoSMzr2FeqvIrvg== -----END CERTIFICATE-----Generated at Sun Oct 4 05:24:06 2026 by rpki-client