$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.mft File: DGhYIowwF0gr3H85geiYuVbaoCk.mft (raw, json) Hash identifier: yADWayLAhZPTcYortf133jGlzwTE9UInUqLtvDKdOxw= Subject key identifier: C7:F0:AB:C1:FF:34:BD:93:43:25:F1:35:C9:10:86:0A:84:06:A2:2A Authority key identifier: 0C:68:58:22:8C:30:17:48:2B:DC:7F:39:81:E8:98:B9:56:DA:A0:29 Certificate issuer: /CN=A9170975/serialNumber=0C6858228C3017482BDC7F3981E898B956DAA029 Certificate serial: 0101 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGhYIowwF0gr3H85geiYuVbaoCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.mft Manifest number: FD Signing time: Fri 25 Sep 2026 06:18:59 +0000 Manifest this update: Fri 25 Sep 2026 06:18:58 +0000 Manifest next update: Fri 02 Oct 2026 06:18:58 +0000 Files and hashes: 1: DGhYIowwF0gr3H85geiYuVbaoCk.crl (hash: q03iOnnDyo+HuoHUOfhB5AdsXboAiKXEPuhwB0Vx8bA=) 2: B12A39803A2A11F09E37DB48C4F9AE02.roa (hash: CoN2ChPQA1qn/Xvwh+q1CXaNL7awqOvoz+KnawFyjQE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.crl rsync://rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGhYIowwF0gr3H85geiYuVbaoCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 06:18:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 257 (0x101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170975, serialNumber=0C6858228C3017482BDC7F3981E898B956DAA029 Validity Not Before: Sep 25 06:18:58 2026 GMT Not After : Oct 2 06:18:58 2026 GMT Subject: CN=6ab61253-226c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5d:66:41:2e:9c:d0:e1:95:e5:e4:d1:29:9f: 73:54:73:42:0a:a9:41:97:4f:82:ef:87:e9:e0:17: 85:8b:36:59:f4:1b:c3:a0:29:a2:ac:0e:76:dd:76: 8c:38:ea:68:9f:7f:75:a8:0b:00:f4:41:9a:80:d5: 2f:4a:16:8e:39:94:5b:88:d2:19:1d:5b:4f:ca:9b: bd:3e:48:8e:09:c7:55:7e:8e:c2:66:70:00:7a:5f: 0b:a2:9a:ea:76:a7:43:e8:af:36:bf:f7:6c:7c:22: 03:12:51:a2:a8:ce:6f:4a:98:41:f4:bb:df:28:be: 87:1e:e2:4b:b5:e5:c7:61:55:fa:e5:2a:36:a7:78: 42:14:f9:20:d4:c5:03:86:65:31:31:e0:f2:a1:ab: c9:99:1c:f7:ac:b0:90:95:a6:a8:b2:b4:ec:f1:1b: f7:94:eb:10:a9:f1:a2:ff:0d:96:a5:b4:ef:7f:b4: a1:e9:27:c4:2a:b0:c5:33:f9:41:7f:08:c4:84:a4: 66:da:2b:b4:43:9e:80:43:a5:f1:24:82:37:d7:7f: a4:bb:3b:2b:a7:7c:2a:48:f1:1c:69:bc:ea:32:03: d7:87:50:dd:e5:0d:fc:6c:d9:c8:29:c0:e0:f3:52: 67:87:7c:3f:fb:d8:db:66:93:4e:4b:a6:27:a2:44: 83:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:F0:AB:C1:FF:34:BD:93:43:25:F1:35:C9:10:86:0A:84:06:A2:2A X509v3 Authority Key Identifier: keyid:0C:68:58:22:8C:30:17:48:2B:DC:7F:39:81:E8:98:B9:56:DA:A0:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGhYIowwF0gr3H85geiYuVbaoCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:ce:37:63:32:12:28:5d:96:d6:87:f6:d6:9d:8c:10:4a:0d: 15:55:9e:d7:48:fb:36:c8:ef:26:43:1c:1d:17:ce:14:cf:c9: 42:76:67:e1:90:ff:7b:b5:07:a8:fa:1a:6c:60:11:be:cf:14: 6f:5d:c1:f8:f6:e5:27:20:9c:e5:42:e4:82:03:b4:26:f1:c9: ec:e6:22:7f:0c:fe:ad:76:fb:72:12:6e:0b:69:9a:3c:b3:c0: fc:57:f7:25:a1:48:10:2a:fe:02:3e:d7:0a:0d:66:11:a9:76: e1:0d:34:bd:f2:1a:b0:ef:71:7c:26:5f:46:1b:bf:bc:40:26: fc:e0:5e:eb:46:0c:6e:e2:91:11:b7:67:c1:a1:6b:f5:93:53: 8e:e8:3f:60:7b:ef:65:0e:a5:e9:98:2f:65:ce:d8:d0:d3:0c: 14:de:7f:ed:4b:85:7f:d4:bc:ab:41:8b:cf:32:7f:4c:d2:6a: c7:e6:a8:66:87:16:ea:79:89:2a:91:ad:ca:26:9f:46:7b:b2: d6:4e:b7:bc:24:7a:b6:e5:af:db:f0:d3:a5:4f:86:f7:9d:70: 37:7b:f4:30:79:b1:66:72:5f:3f:32:b1:8b:fc:85:f1:89:b8: cd:dd:30:38:99:52:f2:c5:27:91:b9:bc:fc:f0:bf:8b:57:d0: 81:48:c3:6a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5NzUxMTAvBgNVBAUTKDBDNjg1ODIyOEMzMDE3NDgyQkRDN0YzOTgxRTg5OEI5 NTZEQUEwMjkwHhcNMjYwOTI1MDYxODU4WhcNMjYxMDAyMDYxODU4WjAYMRYwFAYD VQQDEw02YWI2MTI1My0yMjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuF1mQS6c0OGV5eTRKZ9zVHNCCqlBl0+C74fp4BeFizZZ9BvDoCmirA523XaM OOpon391qAsA9EGagNUvShaOOZRbiNIZHVtPypu9PkiOCcdVfo7CZnAAel8Loprq dqdD6K82v/dsfCIDElGiqM5vSphB9LvfKL6HHuJLteXHYVX65So2p3hCFPkg1MUD hmUxMeDyoavJmRz3rLCQlaaosrTs8Rv3lOsQqfGi/w2WpbTvf7Sh6SfEKrDFM/lB fwjEhKRm2iu0Q56AQ6XxJII313+kuzsrp3wqSPEcabzqMgPXh1Dd5Q38bNnIKcDg 81Jnh3w/+9jbZpNOS6YnokSDywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMfwq8H/ NL2TQyXxNckQhgqEBqIqMB8GA1UdIwQYMBaAFAxoWCKMMBdIK9x/OYHomLlW2qAp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDk3NS82N0M3QTQyQTNB MjYxMUYwQkNDRjVFMUZDNEY5QUUwMi9ER2hZSW93d0YwZ3IzSDg1Z2VpWXVWYmFv Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RHaFlJb3d3RjBncjNIODVnZWlZdVZiYW9Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDk3NS82N0M3QTQyQTNBMjYxMUYwQkNDRjVFMUZDNEY5QUUwMi9ER2hZSW93d0Yw Z3IzSDg1Z2VpWXVWYmFvQ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAi843YzISKF2W1of21p2MEEoNFVWe10j7NsjvJkMcHRfOFM/JQnZn4ZD/e7UH qPoabGARvs8Ub13B+PblJyCc5ULkggO0JvHJ7OYifwz+rXb7chJuC2maPLPA/Ff3 JaFIECr+Aj7XCg1mEal24Q00vfIasO9xfCZfRhu/vEAm/OBe60YMbuKREbdnwaFr 9ZNTjug/YHvvZQ6l6ZgvZc7Y0NMMFN5/7UuFf9S8q0GLzzJ/TNJqx+aoZocW6nmJ KpGtyiafRnuy1k63vCR6tuWv2/DTpU+G951wN3v0MHmxZnJfPzKxi/yF8Ym4zd0w OJlS8sUnkbm8/PC/i1fQgUjDag== -----END CERTIFICATE-----Generated at Sat Sep 26 03:43:22 2026 by rpki-client