$ rpki-client -vvvf rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.mft File: G6BR2hk8ATG2Ggp4gG4vN4bO0ME.mft (raw, json) Hash identifier: xCeDGoj249yVlTxr0RTg11LsH8UGQbsv5+3RnhYWO5A= Subject key identifier: BD:CC:45:AB:4B:72:D6:1A:E7:E0:D3:70:AE:B4:82:3C:65:D0:BD:C0 Authority key identifier: 1B:A0:51:DA:19:3C:01:31:B6:1A:0A:78:80:6E:2F:37:86:CE:D0:C1 Certificate issuer: /CN=A9188811/serialNumber=1BA051DA193C0131B61A0A78806E2F3786CED0C1 Certificate serial: 01F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.mft Manifest number: 01DD Signing time: Wed 23 Sep 2026 03:30:06 +0000 Manifest this update: Wed 23 Sep 2026 03:30:05 +0000 Manifest next update: Wed 30 Sep 2026 03:30:05 +0000 Files and hashes: 1: G6BR2hk8ATG2Ggp4gG4vN4bO0ME.crl (hash: 0YRKQSSpwu5pB/XGcU+ZK9em3WFizxzmOe2SdMqXuLE=) 2: 9E132FF6E82711EEA7DD994FC4F9AE02.roa (hash: B26dPX7b/Yjt4TuSkN2bNnJztJZLAH1RdhqMlSo1OgI=) 3: B5EC27DC80F411F1A8E5D2AB65A30FBC.roa (hash: HDAMBq9cGBoodO1E3jLw/cK2FtT7+fINXvRzCe1mDLw=) 4: B51FD00AE82711EEB8A9D24FC4F9AE02.roa (hash: 3cHCQj/rr6yYx0ybKITdR2Z1FEVXIoTC8cGCbWIYYI8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.crl rsync://rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 03:30:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 502 (0x1f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188811, serialNumber=1BA051DA193C0131B61A0A78806E2F3786CED0C1 Validity Not Before: Sep 23 03:30:05 2026 GMT Not After : Sep 30 03:30:05 2026 GMT Subject: CN=6ab347be-2c7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:1e:d7:6d:e7:a1:10:71:79:7e:e6:fa:d9:f0: 63:68:bd:0d:33:a9:72:5f:e9:35:4c:8b:2a:34:74: 64:73:63:0f:69:ee:37:b4:ed:24:5a:b3:95:8e:da: e5:9b:f5:73:89:be:10:e6:60:11:cd:61:5c:6b:80: cf:40:5e:cc:e3:f9:d1:a6:4d:3c:c7:25:08:6d:2a: 53:28:ff:bd:f5:e5:6f:56:25:f3:c7:a8:99:13:30: 8a:87:96:b3:40:8c:1a:7d:d6:25:e3:7f:5a:da:a8: c0:3e:c5:6a:20:1d:c5:36:9a:02:24:2f:b8:9a:75: b8:a5:20:bd:47:79:2b:d9:9c:be:89:67:ea:7c:c2: 9c:4f:94:af:20:7d:8b:2b:58:91:00:f4:c4:e8:37: e7:35:ae:64:db:c8:f6:e4:b5:3b:31:7c:23:38:f6: 0c:0b:ef:91:ab:72:21:af:d1:c7:7a:7d:66:0b:a2: f2:2d:2c:b1:51:29:31:e1:eb:35:4b:cd:14:90:dd: ec:e1:89:fd:25:97:33:f8:92:ad:a4:fe:67:29:7e: 24:50:09:fb:c2:62:59:38:40:74:72:77:6e:3d:65: df:ae:67:3c:f0:26:4f:61:e7:94:80:a6:6b:69:32: 32:4d:9e:db:bf:ad:24:28:36:84:11:7f:b1:fc:fd: 1c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:CC:45:AB:4B:72:D6:1A:E7:E0:D3:70:AE:B4:82:3C:65:D0:BD:C0 X509v3 Authority Key Identifier: keyid:1B:A0:51:DA:19:3C:01:31:B6:1A:0A:78:80:6E:2F:37:86:CE:D0:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:4c:42:69:73:b3:1b:6a:7a:43:fc:19:70:5c:39:f3:fa:0f: 1d:74:64:3f:fb:ba:7c:46:bc:5e:de:b7:58:79:4c:22:b1:3a: 0e:ba:73:ac:e4:1c:59:5b:e2:73:5b:64:f1:7a:66:26:5c:25: 6a:d2:4b:2a:39:a1:dd:f2:03:fc:d0:b4:7b:6c:0f:b2:1b:49: 1e:7d:4e:64:6a:56:fd:0d:c8:89:ca:f2:18:92:0a:ca:fd:de: 26:ef:a7:19:82:3d:2f:11:df:11:9e:e1:6b:91:da:bd:2d:0f: 73:d6:35:f1:b4:46:b8:8d:72:3b:89:5c:43:89:80:e7:9d:b1: 3c:16:52:fb:9d:00:00:2c:65:41:ee:78:97:b1:07:27:23:13: d5:6c:f1:55:5a:16:ef:c0:a1:57:86:a5:80:1a:c4:e8:ae:fc: 87:17:f6:41:c9:51:a7:67:b2:ad:cb:40:46:f8:97:ae:ab:05: ba:f1:0a:f1:e1:ad:44:3d:c2:4d:1f:8c:13:6b:b8:f3:3c:c7: e8:be:be:fa:eb:69:2b:d2:1c:b1:4e:5d:81:4c:27:62:fd:7e: 20:4a:e5:de:ff:ab:b6:a6:c2:b7:2d:93:ea:36:3a:37:0c:2d: 13:b3:5c:c6:50:47:28:13:b8:a5:45:85:93:42:a3:2f:f6:6e: 31:d7:11:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg4MTExMTAvBgNVBAUTKDFCQTA1MURBMTkzQzAxMzFCNjFBMEE3ODgwNkUyRjM3 ODZDRUQwQzEwHhcNMjYwOTIzMDMzMDA1WhcNMjYwOTMwMDMzMDA1WjAYMRYwFAYD VQQDEw02YWIzNDdiZS0yYzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8B7XbeehEHF5fub62fBjaL0NM6lyX+k1TIsqNHRkc2MPae43tO0kWrOVjtrl m/Vzib4Q5mARzWFca4DPQF7M4/nRpk08xyUIbSpTKP+99eVvViXzx6iZEzCKh5az QIwafdYl439a2qjAPsVqIB3FNpoCJC+4mnW4pSC9R3kr2Zy+iWfqfMKcT5SvIH2L K1iRAPTE6DfnNa5k28j25LU7MXwjOPYMC++Rq3Ihr9HHen1mC6LyLSyxUSkx4es1 S80UkN3s4Yn9JZcz+JKtpP5nKX4kUAn7wmJZOEB0cnduPWXfrmc88CZPYeeUgKZr aTIyTZ7bv60kKDaEEX+x/P0clQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL3MRatL ctYa5+DTcK60gjxl0L3AMB8GA1UdIwQYMBaAFBugUdoZPAExthoKeIBuLzeGztDB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODgxMS9FMDNDQzY1NEU4 MjYxMUVFOTVCRTcxNEVDNEY5QUUwMi9HNkJSMmhrOEFURzJHZ3A0Z0c0dk40Yk8w TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c2QlIyaGs4QVRHMkdncDRnRzR2TjRiTzBNRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODgxMS9FMDNDQzY1NEU4MjYxMUVFOTVCRTcxNEVDNEY5QUUwMi9HNkJSMmhrOEFU RzJHZ3A0Z0c0dk40Yk8wTUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHExCaXOzG2p6Q/wZcFw58/oPHXRkP/u6fEa8Xt63WHlMIrE6DrpzrOQcWVvi c1tk8XpmJlwlatJLKjmh3fID/NC0e2wPshtJHn1OZGpW/Q3IicryGJIKyv3eJu+n GYI9LxHfEZ7ha5HavS0Pc9Y18bRGuI1yO4lcQ4mA552xPBZS+50AACxlQe54l7EH JyMT1WzxVVoW78ChV4algBrE6K78hxf2QclRp2eyrctARviXrqsFuvEK8eGtRD3C TR+ME2u48zzH6L6++utpK9IcsU5dgUwnYv1+IErl3v+rtqbCty2T6jY6NwwtE7Nc xlBHKBO4pUWFk0KjL/ZuMdcRsg== -----END CERTIFICATE-----Generated at Thu Sep 24 17:05:13 2026 by rpki-client