$ rpki-client -vvvf rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft File: g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft (raw, json) Hash identifier: B7h5JYkv0FtAGdEL071luS0qADh2LydspFAqKoeeWVs= Subject key identifier: 25:8F:8B:F0:92:32:28:20:FB:C0:FC:47:3A:9E:10:D2:CA:95:BD:5A Authority key identifier: 83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E Certificate issuer: /CN=A91756B7/serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E Certificate serial: 0866 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft Manifest number: 07CD Signing time: Tue 22 Sep 2026 21:43:24 +0000 Manifest this update: Tue 22 Sep 2026 21:43:23 +0000 Manifest next update: Tue 29 Sep 2026 21:43:23 +0000 Files and hashes: 1: g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl (hash: 7CEndt/hB1ORP8F4JK1o2pnR6OzUv/0Mf4q4VQ1vCYk=) 2: 993EAAD4522911EFA600C035C4F9AE02.roa (hash: RHnBGV6zzAX096qelds19ug+GhjfXzLG9IQAG1LM73U=) 3: 48F50A889F7411F1B417F0063911F970.roa (hash: 4rAC2sCn051vT4i3fxiypBMiq2S5c+b6RpWtPnIYbTE=) 4: 3DB131DC86F211F1B8F66003A7EE528E.roa (hash: T9oa5S8DaEPPgONLHjexgjcqCZuStZji3DTSUWo4KYA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 21:43:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2150 (0x866) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91756B7, serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E Validity Not Before: Sep 22 21:43:23 2026 GMT Not After : Sep 29 21:43:23 2026 GMT Subject: CN=6ab2f67b-240e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3c:67:f8:a9:41:27:8f:ea:1d:08:54:9c:fc: 63:5d:ad:40:c1:e2:16:e6:69:ab:f4:35:8b:1b:4e: 9f:f6:ca:55:1e:ed:14:a3:a7:18:b0:b5:53:c4:45: ff:c9:57:43:d5:bf:3b:25:48:56:46:ba:1e:d4:bd: d0:97:33:fc:0e:6c:ce:03:27:49:0d:05:3b:90:9b: fb:e2:7c:26:e3:73:4b:15:85:f2:ed:02:d8:7a:b4: 51:b5:8e:cb:68:0d:93:b0:56:ae:af:18:39:8c:3b: f7:e1:6c:a4:17:65:6c:8b:5a:a1:0a:6b:41:df:22: 64:d3:5c:3a:52:d5:44:05:40:5e:f8:2e:f4:6d:31: 91:fa:33:fc:ee:21:f1:0f:b4:9f:eb:ee:f2:cb:13: 52:eb:1e:a0:a3:43:04:cb:42:32:96:a5:db:72:1e: f5:8d:fc:f5:d0:cd:cd:83:8e:9e:20:8d:d9:4d:d6: e5:3f:13:cb:65:4f:3f:0f:e4:48:0e:72:82:2e:a9: dc:7f:58:3a:f1:89:a8:8c:fb:be:ef:04:c5:51:d5: 3c:5a:67:de:11:2e:d3:56:96:c6:21:39:5e:52:24: 9b:d3:f5:45:d9:8d:2e:ae:2f:13:28:42:13:78:3d: 64:da:cd:9d:8e:b4:7a:53:48:0e:1e:71:a6:63:d1: 22:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:8F:8B:F0:92:32:28:20:FB:C0:FC:47:3A:9E:10:D2:CA:95:BD:5A X509v3 Authority Key Identifier: keyid:83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:2a:86:a4:7c:8f:5a:94:4b:5a:89:88:c0:1e:0e:bf:9d:f2: 09:a0:83:c0:2c:17:1e:4a:66:23:70:94:f4:25:93:22:12:4b: 71:ba:48:71:74:54:3d:2f:5a:7b:d6:89:aa:a6:21:70:07:35: 0e:bb:cd:20:d9:b5:4f:9f:96:8b:34:34:37:f3:66:1c:10:8f: 85:15:98:95:20:ef:be:08:ee:9e:c2:b3:c7:0e:8d:5e:1f:08: f6:77:24:ca:e6:5b:37:8d:6c:d2:c1:34:0b:e4:5d:66:53:75: 9b:29:0c:c8:7e:ea:a8:fb:67:61:b5:30:a5:4e:c2:5f:9d:a8: ff:6e:09:b8:c4:a9:6d:11:37:3e:0d:93:08:b3:f4:11:60:bf: 70:cc:d9:84:7c:77:d8:77:b5:5b:90:d8:e0:3e:da:3a:11:25: a7:6b:24:79:23:c3:ae:6b:95:c5:70:57:12:31:47:97:cd:fc: fe:16:7e:c1:e1:dc:fc:84:da:e8:92:a5:b0:23:93:d6:9e:1e: 6c:cd:44:e3:c1:12:6d:6f:46:bc:44:9d:7c:43:54:6b:fd:be: 26:41:12:df:d1:e0:4a:38:c0:80:fd:2c:42:00:51:65:67:f9: b1:25:3f:0c:ae:be:f9:65:19:2e:40:d5:f3:a0:1d:80:51:3e: 07:dd:ec:de -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCGYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU2QjcxMTAvBgNVBAUTKDgzRDk2RjFERUE3MkE5OUQyMzRCNDQ1NkQ2RjY2NzVE QzdFNjA2MUUwHhcNMjYwOTIyMjE0MzIzWhcNMjYwOTI5MjE0MzIzWjAYMRYwFAYD VQQDEw02YWIyZjY3Yi0yNDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3jxn+KlBJ4/qHQhUnPxjXa1AweIW5mmr9DWLG06f9spVHu0Uo6cYsLVTxEX/ yVdD1b87JUhWRroe1L3QlzP8DmzOAydJDQU7kJv74nwm43NLFYXy7QLYerRRtY7L aA2TsFaurxg5jDv34WykF2Vsi1qhCmtB3yJk01w6UtVEBUBe+C70bTGR+jP87iHx D7Sf6+7yyxNS6x6go0MEy0IylqXbch71jfz10M3Ng46eII3ZTdblPxPLZU8/D+RI DnKCLqncf1g68YmojPu+7wTFUdU8WmfeES7TVpbGITleUiSb0/VF2Y0uri8TKEIT eD1k2s2djrR6U0gOHnGmY9Ei8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCWPi/CS Migg+8D8RzqeENLKlb1aMB8GA1UdIwQYMBaAFIPZbx3qcqmdI0tEVtb2Z13H5gYe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTZCNy85NUVGN0RCQTk2 N0QxMUVCQURENTBEMkNDNEY5QUUwMi9nOWx2SGVweXFaMGpTMFJXMXZablhjZm1C aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c5bHZIZXB5cVowalMwUlcxdlpuWGNmbUJoNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTZCNy85NUVGN0RCQTk2N0QxMUVCQURENTBEMkNDNEY5QUUwMi9nOWx2SGVweXFa MGpTMFJXMXZablhjZm1CaDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATSqGpHyPWpRLWomIwB4Ov53yCaCDwCwXHkpmI3CU9CWTIhJLcbpIcXRUPS9a e9aJqqYhcAc1DrvNINm1T5+WizQ0N/NmHBCPhRWYlSDvvgjunsKzxw6NXh8I9nck yuZbN41s0sE0C+RdZlN1mykMyH7qqPtnYbUwpU7CX52o/24JuMSpbRE3Pg2TCLP0 EWC/cMzZhHx32He1W5DY4D7aOhElp2skeSPDrmuVxXBXEjFHl838/hZ+weHc/ITa 6JKlsCOT1p4ebM1E48ESbW9GvESdfENUa/2+JkES39HgSjjAgP0sQgBRZWf5sSU/ DK6++WUZLkDV86AdgFE+B93s3g== -----END CERTIFICATE-----Generated at Thu Sep 24 02:33:37 2026 by rpki-client