$ rpki-client -vvvf rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft File: gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft (raw, json) Hash identifier: 5UmkTg4K3ClPkXDfk0PA5oPNAe/zRAfvBFZeI2ZOKBk= Subject key identifier: BB:29:56:15:E2:4E:6C:F7:64:CB:39:64:E5:87:38:FF:03:44:67:80 Authority key identifier: 80:21:B1:6B:92:42:1F:77:B7:26:0E:97:E6:AD:8C:1D:24:BD:29:9A Certificate issuer: /CN=A91936BE/serialNumber=8021B16B92421F77B7260E97E6AD8C1D24BD299A Certificate serial: 0917 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft Manifest number: 08FC Signing time: Sat 26 Sep 2026 20:26:39 +0000 Manifest this update: Sat 26 Sep 2026 20:26:39 +0000 Manifest next update: Sat 03 Oct 2026 20:26:39 +0000 Files and hashes: 1: gCGxa5JCH3e3Jg6X5q2MHSS9KZo.crl (hash: OUQkTCUMD0L7vb8URsr5u8LXA15uwHyHgqBAQswCXxw=) 2: 538866F6E44B11EAA31DD984C4F9AE02.roa (hash: a1CNS+aw2qVdCSuRRm//a5IPz4YXPjTaG+Ec6by8sVk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.crl rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 20:26:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2327 (0x917) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91936BE, serialNumber=8021B16B92421F77B7260E97E6AD8C1D24BD299A Validity Not Before: Sep 26 20:26:39 2026 GMT Not After : Oct 3 20:26:39 2026 GMT Subject: CN=6ab82a7f-07d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ee:40:44:f0:70:7c:7e:28:0d:6c:40:3b:73: cc:bb:97:13:f9:d3:fb:42:68:12:2a:ab:79:49:66: 06:eb:df:07:f8:95:b0:6b:27:dd:c4:b6:3f:23:9a: 0e:da:ee:fb:02:3d:8c:9c:27:a7:bf:0f:90:15:17: 5d:36:84:06:ce:62:44:3f:82:45:97:21:3e:f4:cb: 3e:c5:c1:7e:33:28:57:9f:59:2f:d3:07:dc:b2:11: 5d:f7:cc:82:96:75:08:03:1e:ed:54:bf:ed:27:83: 43:ff:28:a0:9a:dd:2c:9e:3d:d8:fb:31:87:17:30: 2d:11:e1:34:39:b6:cb:b9:76:a6:1b:96:58:f5:4f: d8:28:9e:29:43:15:ec:43:09:1d:2a:40:9a:31:c2: 2a:63:36:c9:4a:b8:4c:13:01:03:fa:f6:24:91:d9: 70:02:7b:85:e6:29:f4:8c:65:ed:da:e2:2c:5e:cc: fb:db:5a:5e:fb:2e:ea:80:d0:2c:cb:b8:39:bc:62: 9a:47:58:96:bd:8e:ee:71:7c:e5:f7:ea:93:dc:1f: f4:16:a4:03:6c:ee:bd:a1:45:c4:93:81:cf:08:15: 74:5d:87:1c:c6:88:26:eb:7c:70:db:f9:b1:02:d3: 50:56:55:52:9c:48:b9:80:dc:8d:61:37:28:ac:8c: 73:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:29:56:15:E2:4E:6C:F7:64:CB:39:64:E5:87:38:FF:03:44:67:80 X509v3 Authority Key Identifier: keyid:80:21:B1:6B:92:42:1F:77:B7:26:0E:97:E6:AD:8C:1D:24:BD:29:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:1d:8a:28:30:93:de:a9:0e:a1:60:be:54:87:15:f6:21:ed: 7a:dc:8c:d6:5a:c0:88:41:67:5d:8a:f5:99:f3:80:18:59:fa: b1:32:25:71:c5:e7:c3:9b:4d:a5:ce:30:ad:9e:37:96:7b:02: 25:4a:d1:ae:0c:7a:af:d2:b3:c2:fe:a6:d8:8a:e4:30:c2:4c: ad:7a:24:5b:b5:65:1d:06:ec:d6:8d:5b:a3:79:78:1f:92:6f: b3:7e:3a:f0:bb:ec:60:96:7f:1b:c8:e2:ba:1b:2b:74:48:39: bd:30:47:76:82:ec:04:b6:49:87:56:33:07:48:7c:b9:73:2f: f5:b9:f3:6a:af:57:2d:98:ea:2a:cb:bf:97:05:d2:28:01:01: cf:4d:2c:39:dc:98:cf:c6:3d:12:74:92:ab:56:a0:b4:f7:63: 9f:28:02:14:66:fe:17:1b:b4:07:00:01:1f:5a:b1:20:f7:dc: a8:c1:30:9f:ab:3e:8a:e0:cc:43:d7:e9:04:f1:47:14:4a:cb: ff:a0:57:bc:d5:17:63:56:3a:89:a4:db:43:2a:1a:d3:29:e4: 5e:f1:20:59:47:a9:2c:43:dd:31:1e:04:67:6f:23:99:fe:f7: 10:d6:c3:89:53:88:59:83:d9:6e:d6:e2:ac:14:a8:d4:3b:74: 02:96:b4:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCRcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM2QkUxMTAvBgNVBAUTKDgwMjFCMTZCOTI0MjFGNzdCNzI2MEU5N0U2QUQ4QzFE MjRCRDI5OUEwHhcNMjYwOTI2MjAyNjM5WhcNMjYxMDAzMjAyNjM5WjAYMRYwFAYD VQQDEw02YWI4MmE3Zi0wN2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtu5ARPBwfH4oDWxAO3PMu5cT+dP7QmgSKqt5SWYG698H+JWwayfdxLY/I5oO 2u77Aj2MnCenvw+QFRddNoQGzmJEP4JFlyE+9Ms+xcF+MyhXn1kv0wfcshFd98yC lnUIAx7tVL/tJ4ND/yigmt0snj3Y+zGHFzAtEeE0ObbLuXamG5ZY9U/YKJ4pQxXs QwkdKkCaMcIqYzbJSrhMEwED+vYkkdlwAnuF5in0jGXt2uIsXsz721pe+y7qgNAs y7g5vGKaR1iWvY7ucXzl9+qT3B/0FqQDbO69oUXEk4HPCBV0XYccxogm63xw2/mx AtNQVlVSnEi5gNyNYTcorIxzXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLspVhXi Tmz3ZMs5ZOWHOP8DRGeAMB8GA1UdIwQYMBaAFIAhsWuSQh93tyYOl+atjB0kvSma MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzZCRS9DQTA2NjY4Q0U0 NDgxMUVBODEwQjAzODBDNEY5QUUwMi9nQ0d4YTVKQ0gzZTNKZzZYNXEyTUhTUzlL Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dDR3hhNUpDSDNlM0pnNlg1cTJNSFNTOUtaby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzZCRS9DQTA2NjY4Q0U0NDgxMUVBODEwQjAzODBDNEY5QUUwMi9nQ0d4YTVKQ0gz ZTNKZzZYNXEyTUhTUzlLWm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXR2KKDCT3qkOoWC+VIcV9iHtetyM1lrAiEFnXYr1mfOAGFn6sTIlccXnw5tN pc4wrZ43lnsCJUrRrgx6r9Kzwv6m2IrkMMJMrXokW7VlHQbs1o1bo3l4H5Jvs346 8LvsYJZ/G8jiuhsrdEg5vTBHdoLsBLZJh1YzB0h8uXMv9bnzaq9XLZjqKsu/lwXS KAEBz00sOdyYz8Y9EnSSq1agtPdjnygCFGb+Fxu0BwABH1qxIPfcqMEwn6s+iuDM Q9fpBPFHFErL/6BXvNUXY1Y6iaTbQyoa0ynkXvEgWUepLEPdMR4EZ28jmf73ENbD iVOIWYPZbtbirBSo1Dt0Apa06g== -----END CERTIFICATE-----Generated at Sun Sep 27 14:23:48 2026 by rpki-client