$ rpki-client -vvvf rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft File: Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft (raw, json) Hash identifier: iKoA7euAk/MPz3w8GPiucn7akWfdmnfIcjXUpuvWTxU= Subject key identifier: 83:44:54:51:53:5C:D2:9A:DE:10:05:F8:A6:F1:29:FF:77:EB:7A:21 Authority key identifier: 1A:9F:2B:BE:A5:22:F1:EE:25:92:35:9B:4B:52:FA:2B:41:A3:CD:C4 Certificate issuer: /CN=A9184017/serialNumber=1A9F2BBEA522F1EE2592359B4B52FA2B41A3CDC4 Certificate serial: 05C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft Manifest number: 05B2 Signing time: Tue 22 Sep 2026 22:49:01 +0000 Manifest this update: Tue 22 Sep 2026 22:49:00 +0000 Manifest next update: Tue 29 Sep 2026 22:49:00 +0000 Files and hashes: 1: Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.crl (hash: 3PItZ5ojy8VzPnILirrLixQAWvTt8dfbpMqkr3I97Cc=) 2: 0F8709542D6E11EC8327E321C4F9AE02.roa (hash: qaKzx77+nBK5zsg6fuFgrv2QAFMiOydcXTk+cOmWTww=) 3: A6DC22C63C7D11ECB08DFD13C4F9AE02.roa (hash: DQfdj3ZMSPB3txDb1HLKXJybAJALB43rjOD3LqwaGkM=) 4: 4349B44E6DE711F1BCBC7BF05BA30FBC.roa (hash: JD1aPI73JLaEpdcBHYLIfnAT0px6Vx5cEfrWoHfyxZ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.crl rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 22:48:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1478 (0x5c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184017, serialNumber=1A9F2BBEA522F1EE2592359B4B52FA2B41A3CDC4 Validity Not Before: Sep 22 22:49:00 2026 GMT Not After : Sep 29 22:49:00 2026 GMT Subject: CN=6ab305dd-ecda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:53:44:82:6d:36:b4:a5:41:06:23:a2:0e:ba: 3a:d3:c3:5d:db:f0:bb:49:39:98:f3:fa:d1:3e:50: 5d:d3:a0:b5:77:f4:52:a4:ca:8e:94:6b:d1:55:6f: b3:2a:24:62:93:8d:13:9c:1e:ca:0e:e9:ff:63:94: fb:c2:2a:ef:9f:6b:b9:6e:73:22:4c:77:d7:d3:c1: 53:89:fd:a3:b6:98:cd:25:69:d3:56:62:8a:57:fe: ca:73:10:3d:a0:cd:bf:1b:cb:66:ce:95:1c:76:e0: 72:1e:ac:34:a6:e5:fd:20:e4:de:0f:2a:3d:7d:28: 83:26:1d:b5:be:34:ac:a3:14:62:f9:cf:e1:8e:15: 3a:f0:83:fd:b8:f2:fd:bf:be:c2:f5:4f:3c:8b:6d: 9a:54:93:ff:61:9a:a2:ac:d1:0f:39:c0:d3:29:cb: a6:dc:83:33:a0:89:ac:a8:62:d5:ca:9a:82:fc:a5: 16:77:3a:73:bc:5a:cd:af:1c:46:83:13:dd:cc:55: da:43:25:13:f2:f0:f8:64:8d:33:54:3c:27:e6:b1: f0:7b:3f:1d:ac:58:d8:7c:ee:e7:22:85:66:4e:74: 42:3d:d4:ec:b7:7b:54:b7:26:09:78:ad:f8:71:16: 49:c9:19:89:2d:c3:61:3e:92:f2:7b:11:be:3c:1f: 15:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:44:54:51:53:5C:D2:9A:DE:10:05:F8:A6:F1:29:FF:77:EB:7A:21 X509v3 Authority Key Identifier: keyid:1A:9F:2B:BE:A5:22:F1:EE:25:92:35:9B:4B:52:FA:2B:41:A3:CD:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:13:93:7d:5a:a6:93:5e:37:b5:b0:96:4e:7d:87:30:78:74: 12:00:a1:ec:57:62:90:17:61:a9:dd:6b:af:cf:b5:9a:5b:74: a4:07:7a:a5:bc:7b:fa:21:6d:4f:17:b1:ef:26:b3:57:28:d9: 3d:b5:ce:4b:5d:c7:d3:e7:c1:da:97:a5:b4:c1:3b:06:e6:84: 2e:46:02:fd:36:87:56:b8:c3:46:ec:bf:9b:9e:a3:cf:f8:e8: 3f:22:d8:bd:63:c1:d3:09:30:c9:1c:e9:9d:5a:ec:04:ad:d1: 90:43:ac:50:47:c2:67:77:62:26:83:e3:5e:72:41:e3:6c:21: a2:d7:66:30:29:06:82:a7:83:55:0a:b0:53:6c:30:60:5e:12: ee:9e:76:93:59:69:37:49:8c:8d:76:93:c6:3d:71:82:61:bb: 77:79:62:aa:d2:d1:15:c9:76:79:3b:4b:58:e3:10:8b:af:81: cd:85:81:65:18:13:9e:f1:32:5d:a5:b9:3b:57:d8:09:30:73: c3:8f:22:7c:78:e8:64:0f:6b:e6:ee:34:22:ce:4f:db:23:4e: a3:69:b0:75:18:10:80:15:07:bd:d6:3b:5c:c7:66:8a:09:38: 98:5e:39:da:d3:f5:11:a4:b2:6e:9e:18:c3:1a:cc:7c:30:0a: 07:e1:5c:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQwMTcxMTAvBgNVBAUTKDFBOUYyQkJFQTUyMkYxRUUyNTkyMzU5QjRCNTJGQTJC NDFBM0NEQzQwHhcNMjYwOTIyMjI0OTAwWhcNMjYwOTI5MjI0OTAwWjAYMRYwFAYD VQQDEw02YWIzMDVkZC1lY2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA11NEgm02tKVBBiOiDro608Nd2/C7STmY8/rRPlBd06C1d/RSpMqOlGvRVW+z KiRik40TnB7KDun/Y5T7wirvn2u5bnMiTHfX08FTif2jtpjNJWnTVmKKV/7KcxA9 oM2/G8tmzpUcduByHqw0puX9IOTeDyo9fSiDJh21vjSsoxRi+c/hjhU68IP9uPL9 v77C9U88i22aVJP/YZqirNEPOcDTKcum3IMzoImsqGLVypqC/KUWdzpzvFrNrxxG gxPdzFXaQyUT8vD4ZI0zVDwn5rHwez8drFjYfO7nIoVmTnRCPdTst3tUtyYJeK34 cRZJyRmJLcNhPpLyexG+PB8VbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFINEVFFT XNKa3hAF+KbxKf9363ohMB8GA1UdIwQYMBaAFBqfK76lIvHuJZI1m0tS+itBo83E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDAxNy83RjEyMjgxQzJE NjQxMUVDODVENjhCODBDNEY5QUUwMi9HcDhydnFVaThlNGxraldiUzFMNkswR2p6 Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dwOHJ2cVVpOGU0bGtqV2JTMUw2SzBHanpjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDAxNy83RjEyMjgxQzJENjQxMUVDODVENjhCODBDNEY5QUUwMi9HcDhydnFVaThl NGxraldiUzFMNkswR2p6Y1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlROTfVqmk143tbCWTn2HMHh0EgCh7FdikBdhqd1rr8+1mlt0pAd6pbx7+iFt Txex7yazVyjZPbXOS13H0+fB2peltME7BuaELkYC/TaHVrjDRuy/m56jz/joPyLY vWPB0wkwyRzpnVrsBK3RkEOsUEfCZ3diJoPjXnJB42whotdmMCkGgqeDVQqwU2ww YF4S7p52k1lpN0mMjXaTxj1xgmG7d3liqtLRFcl2eTtLWOMQi6+BzYWBZRgTnvEy XaW5O1fYCTBzw48ifHjoZA9r5u40Is5P2yNOo2mwdRgQgBUHvdY7XMdmigk4mF45 2tP1EaSybp4YwxrMfDAKB+FcIg== -----END CERTIFICATE-----Generated at Thu Sep 24 21:54:13 2026 by rpki-client