$ rpki-client -vvvf rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft File: SSgoWwzlZAMAEAFOY147esxilFc.mft (raw, json) Hash identifier: etSesDbGVjB7C18xITuU3UuQXtvr6pp4Sts2Hjge/1U= Subject key identifier: 64:BE:F4:16:0B:91:48:CA:FF:62:AA:62:4C:CB:D8:F9:C6:18:C1:91 Authority key identifier: 49:28:28:5B:0C:E5:64:03:00:10:01:4E:63:5E:3B:7A:CC:62:94:57 Certificate issuer: /CN=A9191E77/serialNumber=4928285B0CE564030010014E635E3B7ACC629457 Certificate serial: 03D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft Manifest number: 03CA Signing time: Sun 27 Sep 2026 00:34:36 +0000 Manifest this update: Sun 27 Sep 2026 00:34:35 +0000 Manifest next update: Sun 04 Oct 2026 00:34:35 +0000 Files and hashes: 1: SSgoWwzlZAMAEAFOY147esxilFc.crl (hash: FQJjSfvSbQWYxGD6wIQB2u+EUWxOUUA61KpyYUEMBTA=) 2: 26E6B114EB2B11ECBE328172C4F9AE02.roa (hash: ky7BpvXCWWvVGX/3oyVJJwDRQTX3DEgXUQn+49Yrj9I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.crl rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 00:34:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 976 (0x3d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191E77, serialNumber=4928285B0CE564030010014E635E3B7ACC629457 Validity Not Before: Sep 27 00:34:35 2026 GMT Not After : Oct 4 00:34:35 2026 GMT Subject: CN=6ab8649c-4b43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:99:69:b3:69:7d:6a:ef:b0:50:84:e5:de:b6: d2:46:76:81:e2:22:4e:3e:6a:d5:89:39:a1:2c:84: 1a:ae:a9:00:98:89:9b:d5:9e:8d:f6:4e:b1:24:19: b8:b6:df:4e:5a:d2:bc:fb:2a:9b:03:39:3f:3c:e8: 02:07:2e:9b:76:14:ee:c6:4d:44:58:c4:53:eb:30: a5:95:e7:8d:b9:1f:63:22:65:eb:d4:63:e6:32:4c: ed:ee:39:8f:e7:9c:86:71:22:66:eb:0d:3d:ed:43: c9:5a:33:cd:e1:c8:a5:8f:4f:3e:bf:5a:21:eb:09: 9a:07:14:e1:e4:ab:4e:d7:2a:ad:52:ff:db:89:f8: f1:95:2c:6c:14:49:60:34:75:77:92:c2:2b:05:3b: cb:5a:b6:7d:c0:8b:d7:2b:fa:7f:f2:c1:80:c6:89: da:c3:dc:08:5c:a5:03:d4:90:d0:33:ab:ea:c3:65: 00:13:d5:4b:f7:83:86:ca:b5:68:44:fc:1a:5b:6c: 87:2f:a4:0c:ea:a8:00:32:04:62:cb:73:b3:54:2a: b7:29:66:57:22:57:7f:60:ba:1d:6f:ca:bd:c6:26: 8f:c0:0e:52:d4:09:53:93:5e:f3:3a:d8:a9:dc:75: 84:d2:09:ae:6c:0c:54:e5:df:8b:9e:49:d0:ee:f7: bd:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:BE:F4:16:0B:91:48:CA:FF:62:AA:62:4C:CB:D8:F9:C6:18:C1:91 X509v3 Authority Key Identifier: keyid:49:28:28:5B:0C:E5:64:03:00:10:01:4E:63:5E:3B:7A:CC:62:94:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:31:0d:b7:1f:79:5e:a3:f3:e9:ae:af:9c:c2:f9:1a:8d:f2: 15:47:b7:34:43:43:79:ca:e2:03:56:60:46:0e:1f:d6:00:9b: e5:03:ef:56:d0:1f:e8:0c:51:c1:2a:ed:e5:64:00:1c:af:b7: c6:99:2a:90:3a:c3:50:7f:ba:db:43:bc:33:54:57:9d:28:70: 12:f7:de:cd:f2:b5:ef:c6:1a:77:42:ec:0c:f4:a2:a1:50:7d: 54:a6:f7:cd:4b:b0:31:82:87:4d:63:82:37:75:ad:37:00:fd: a2:e2:ee:53:b9:54:dd:29:87:63:cf:b1:70:05:7e:c0:72:48: 4e:c3:ea:cd:0f:1c:0d:4d:2f:d1:d3:92:34:88:16:5e:8e:94: 46:e5:01:f1:c4:2a:e6:a9:e6:87:56:ba:f6:1c:63:b0:cb:9b: 0d:a2:72:92:2f:ad:a2:50:f2:f2:2e:26:fc:3e:7a:83:52:cf: e2:e3:2b:45:2e:c4:43:17:f6:bf:55:bc:a6:06:3a:d3:a5:a7: 36:8b:06:6c:20:fb:c3:9d:17:02:b8:8d:12:40:3d:16:53:5d: f2:cf:5d:02:26:ac:23:e0:1e:76:fc:79:40:2d:f3:90:c3:f1: d6:a5:58:dd:15:91:16:23:f1:11:4f:1d:b3:af:4f:b8:02:4a: a1:52:75:28 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA9AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFFNzcxMTAvBgNVBAUTKDQ5MjgyODVCMENFNTY0MDMwMDEwMDE0RTYzNUUzQjdB Q0M2Mjk0NTcwHhcNMjYwOTI3MDAzNDM1WhcNMjYxMDA0MDAzNDM1WjAYMRYwFAYD VQQDEw02YWI4NjQ5Yy00YjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZlps2l9au+wUITl3rbSRnaB4iJOPmrViTmhLIQarqkAmImb1Z6N9k6xJBm4 tt9OWtK8+yqbAzk/POgCBy6bdhTuxk1EWMRT6zClleeNuR9jImXr1GPmMkzt7jmP 55yGcSJm6w097UPJWjPN4cilj08+v1oh6wmaBxTh5KtO1yqtUv/bifjxlSxsFElg NHV3ksIrBTvLWrZ9wIvXK/p/8sGAxonaw9wIXKUD1JDQM6vqw2UAE9VL94OGyrVo RPwaW2yHL6QM6qgAMgRiy3OzVCq3KWZXIld/YLodb8q9xiaPwA5S1AlTk17zOtip 3HWE0gmubAxU5d+LnknQ7ve9xQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGS+9BYL kUjK/2KqYkzL2PnGGMGRMB8GA1UdIwQYMBaAFEkoKFsM5WQDABABTmNeO3rMYpRX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUU3Ny8xMjFDRjEzNEVC MjcxMUVDOTI4RDBBNkZDNEY5QUUwMi9TU2dvV3d6bFpBTUFFQUZPWTE0N2VzeGls RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NTZ29Xd3psWkFNQUVBRk9ZMTQ3ZXN4aWxGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUU3Ny8xMjFDRjEzNEVCMjcxMUVDOTI4RDBBNkZDNEY5QUUwMi9TU2dvV3d6bFpB TUFFQUZPWTE0N2VzeGlsRmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdDENtx95XqPz6a6vnML5Go3yFUe3NENDecriA1ZgRg4f1gCb5QPvVtAf6AxR wSrt5WQAHK+3xpkqkDrDUH+620O8M1RXnShwEvfezfK178Yad0LsDPSioVB9VKb3 zUuwMYKHTWOCN3WtNwD9ouLuU7lU3SmHY8+xcAV+wHJITsPqzQ8cDU0v0dOSNIgW Xo6URuUB8cQq5qnmh1a69hxjsMubDaJyki+tolDy8i4m/D56g1LP4uMrRS7EQxf2 v1W8pgY606WnNosGbCD7w50XAriNEkA9FlNd8s9dAiasI+Aedvx5QC3zkMPx1qVY 3RWRFiPxEU8ds69PuAJKoVJ1KA== -----END CERTIFICATE-----Generated at Sun Sep 27 10:36:13 2026 by rpki-client