$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft File: dGJBrad929_qD-FE7-ITkeP8T9k.mft (raw, json) Hash identifier: vnOWwOlJhJIuEgW/DTPfgg9ALKgtAwIAn95qY0erJ7Q= Subject key identifier: D3:44:52:E4:83:2F:F4:5D:2C:E5:18:8C:62:C5:83:F5:7A:DC:99:0D Authority key identifier: 74:62:41:AD:A7:7D:DB:DF:EA:0F:E1:44:EF:E2:13:91:E3:FC:4F:D9 Certificate issuer: /CN=A91ACBB7/serialNumber=746241ADA77DDBDFEA0FE144EFE21391E3FC4FD9 Certificate serial: 0DE3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft Manifest number: 0DBC Signing time: Tue 06 Oct 2026 18:01:02 +0000 Manifest this update: Tue 06 Oct 2026 18:01:02 +0000 Manifest next update: Tue 13 Oct 2026 18:01:02 +0000 Files and hashes: 1: dGJBrad929_qD-FE7-ITkeP8T9k.crl (hash: +gUHOszAQvCz38gY+EtK74TQnyzEy7ICSXFs+qxtf0s=) 2: 9AB3F8BABB3111F1BAB9CEAE6D11F970.roa (hash: FR5egO3pKbKnicc08FWFpCRQO3WPuUafCXH62c8iCos=) 3: 2CC5D50CDEC911EBA828524CC4F9AE02.roa (hash: 90DgDT5NeM7xQ03ACEtF57cO7mWeIuHF/7OMNDwtBac=) 4: 2B9FBCB0DEC911EBA828524CC4F9AE02.roa (hash: MCYhaXeWm4Azn45D+8Hoz0m3yVVZUkz11sIQ3TDfy9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.crl rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 18:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3555 (0xde3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACBB7, serialNumber=746241ADA77DDBDFEA0FE144EFE21391E3FC4FD9 Validity Not Before: Oct 6 18:01:02 2026 GMT Not After : Oct 13 18:01:02 2026 GMT Subject: CN=6ac5375e-88e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3e:6d:7f:29:28:5e:f6:09:5c:d0:d3:73:4b: 14:e3:1e:21:f0:50:e2:bb:25:2f:66:b3:a2:b4:b7: 84:e9:75:22:66:34:57:5f:92:5e:bc:b6:1a:e4:72: 01:44:23:f8:ce:d2:cb:5f:74:d8:22:ba:1c:38:d8: 56:2f:3c:12:79:13:b3:3b:07:f1:e7:f2:4e:1a:fd: 49:6e:f6:6e:d2:16:12:23:c8:4e:b0:1f:4d:d3:13: 10:82:2e:f8:df:8d:34:3e:70:9c:fa:ea:42:c0:07: 32:71:ea:6c:c2:06:fb:e8:e5:ea:77:f4:78:a8:37: 70:f7:48:76:46:22:1e:64:fc:e7:f1:77:c3:7c:dc: b6:db:39:3d:ba:67:b4:f2:02:66:8f:b0:6f:5d:00: 03:92:48:28:40:ee:b4:21:9a:30:2f:80:a9:ec:b7: e5:b6:0c:50:29:47:80:71:9d:4c:f8:82:5a:0f:fd: 12:d4:fa:95:d3:2f:fe:d1:4c:c3:50:ef:72:68:ee: c9:5d:56:be:d4:f8:a8:95:98:c9:d2:b7:77:a0:ef: 40:4a:6e:c4:5b:9d:a1:d7:cc:b2:bf:70:eb:20:cf: 7a:ba:86:37:28:61:52:94:d9:bd:c5:10:20:0f:8a: 4b:05:ec:a6:f9:8c:4b:ae:72:ad:be:6e:a0:7c:af: f5:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:44:52:E4:83:2F:F4:5D:2C:E5:18:8C:62:C5:83:F5:7A:DC:99:0D X509v3 Authority Key Identifier: keyid:74:62:41:AD:A7:7D:DB:DF:EA:0F:E1:44:EF:E2:13:91:E3:FC:4F:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:e9:a4:95:c9:27:ca:3a:80:45:15:f2:e9:68:d4:d3:8a:44: c9:85:43:1c:d3:f8:f6:6e:59:4c:c0:1f:ce:46:a8:e7:5e:1a: aa:fb:dc:f7:d1:59:16:46:29:fc:2e:8b:97:e5:5b:c6:23:a4: f0:59:75:4e:80:30:99:23:c8:20:ab:72:2f:e7:e4:22:de:af: b0:83:b2:e6:e1:47:be:2a:fa:0b:0a:95:e4:67:f2:fe:d8:2c: 78:31:53:8f:b7:dd:cc:1c:40:b2:89:0d:fd:43:a6:7c:f3:9a: 81:9d:ee:05:08:b0:4e:0e:72:97:ce:86:f4:98:24:29:9e:33: aa:cf:7a:04:98:19:f7:5b:31:83:0f:14:8d:98:5e:91:23:cf: 6f:33:c2:9a:0a:bd:83:30:92:90:63:b0:61:8e:8e:ac:e4:dc: fc:41:42:fd:e5:0e:91:46:32:1d:d3:4e:c5:8f:9b:0d:91:c4: b9:ed:ac:91:d7:30:d1:76:4b:98:63:19:36:fc:89:63:ab:09: dc:47:fd:6b:5d:dc:1e:d5:78:89:a9:23:90:59:9e:2d:84:fb: b6:e5:5c:a3:6e:20:11:bc:c3:21:fa:36:4c:0c:2e:5d:e9:0b: 5d:47:d3:02:15:e2:1a:10:1b:39:51:df:9b:1f:1b:ae:88:c3: 4f:c9:f2:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNCQjcxMTAvBgNVBAUTKDc0NjI0MUFEQTc3RERCREZFQTBGRTE0NEVGRTIxMzkx RTNGQzRGRDkwHhcNMjYxMDA2MTgwMTAyWhcNMjYxMDEzMTgwMTAyWjAYMRYwFAYD VQQDEw02YWM1Mzc1ZS04OGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmz5tfykoXvYJXNDTc0sU4x4h8FDiuyUvZrOitLeE6XUiZjRXX5JevLYa5HIB RCP4ztLLX3TYIrocONhWLzwSeROzOwfx5/JOGv1JbvZu0hYSI8hOsB9N0xMQgi74 3400PnCc+upCwAcycepswgb76OXqd/R4qDdw90h2RiIeZPzn8XfDfNy22zk9ume0 8gJmj7BvXQADkkgoQO60IZowL4Cp7LfltgxQKUeAcZ1M+IJaD/0S1PqV0y/+0UzD UO9yaO7JXVa+1PiolZjJ0rd3oO9ASm7EW52h18yyv3DrIM96uoY3KGFSlNm9xRAg D4pLBeym+YxLrnKtvm6gfK/1wQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNNEUuSD L/RdLOUYjGLFg/V63JkNMB8GA1UdIwQYMBaAFHRiQa2nfdvf6g/hRO/iE5Hj/E/Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0JCNy81RTFGQ0VCQ0Yz RjkxMUU5QjhBODMxMEFDNEY5QUUwMi9kR0pCcmFkOTI5X3FELUZFNy1JVGtlUDhU OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RHSkJyYWQ5MjlfcUQtRkU3LUlUa2VQOFQ5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0JCNy81RTFGQ0VCQ0YzRjkxMUU5QjhBODMxMEFDNEY5QUUwMi9kR0pCcmFkOTI5 X3FELUZFNy1JVGtlUDhUOWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAw+mklcknyjqARRXy6WjU04pEyYVDHNP49m5ZTMAfzkao514aqvvc99FZFkYp /C6Ll+VbxiOk8Fl1ToAwmSPIIKtyL+fkIt6vsIOy5uFHvir6CwqV5Gfy/tgseDFT j7fdzBxAsokN/UOmfPOagZ3uBQiwTg5yl86G9JgkKZ4zqs96BJgZ91sxgw8UjZhe kSPPbzPCmgq9gzCSkGOwYY6OrOTc/EFC/eUOkUYyHdNOxY+bDZHEue2skdcw0XZL mGMZNvyJY6sJ3Ef9a13cHtV4iakjkFmeLYT7tuVco24gEbzDIfo2TAwuXekLXUfT AhXiGhAbOVHfmx8brojDT8nyLg== -----END CERTIFICATE-----Generated at Thu Oct 8 08:33:51 2026 by rpki-client