$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft File: -9GoSKH4mo0k2wtoF6CH-y313wg.mft (raw, json) Hash identifier: zLI/O7RkKOrnIqVfEtW5NK9Z1lupL5o/Dc28W7rqdxY= Subject key identifier: E3:E4:97:22:E8:D3:11:BC:BE:7D:59:6F:50:DA:46:F6:2B:B9:ED:D4 Authority key identifier: FB:D1:A8:48:A1:F8:9A:8D:24:DB:0B:68:17:A0:87:FB:2D:F5:DF:08 Certificate issuer: /CN=A91BAFCE/serialNumber=FBD1A848A1F89A8D24DB0B6817A087FB2DF5DF08 Certificate serial: 02A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9GoSKH4mo0k2wtoF6CH-y313wg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft Manifest number: 02A2 Signing time: Wed 23 Sep 2026 01:27:03 +0000 Manifest this update: Wed 23 Sep 2026 01:27:03 +0000 Manifest next update: Wed 30 Sep 2026 01:27:03 +0000 Files and hashes: 1: -9GoSKH4mo0k2wtoF6CH-y313wg.crl (hash: L9HVii+nTtoEyn+2xEcN7n5NjZVyE/vDHkL1d1ajTQE=) 2: 37C8FE80B2A211ED9A5C4B53C4F9AE02.roa (hash: 8Y4nrhPY6RsS1NE1gpg04ierg266aCYEgZiZ3ft65yY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.crl rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9GoSKH4mo0k2wtoF6CH-y313wg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 01:27:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 680 (0x2a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAFCE, serialNumber=FBD1A848A1F89A8D24DB0B6817A087FB2DF5DF08 Validity Not Before: Sep 23 01:27:03 2026 GMT Not After : Sep 30 01:27:03 2026 GMT Subject: CN=6ab32ae7-43aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fb:11:d0:66:33:07:a1:b9:82:bf:53:cc:5e: 06:61:91:89:1a:08:59:63:c5:de:d3:80:7d:22:4f: a1:5f:ca:a3:66:f5:fa:1c:55:a8:ed:8d:1c:f8:0b: 93:5a:f2:4b:62:e1:78:54:5b:7d:64:36:53:24:4a: c2:64:e2:45:56:2d:2d:79:c4:a2:22:17:97:96:6a: 9f:7e:82:ac:ba:72:3b:41:8f:7e:64:e6:18:e1:d4: 84:46:34:86:42:5e:bd:67:3d:e3:59:54:4c:73:53: f1:a9:98:10:cd:b5:8f:ac:71:c1:06:8e:7b:76:cd: 20:22:d9:fc:7d:b2:69:52:a1:15:29:3c:12:be:14: 70:ab:33:3d:53:3c:ce:ea:4c:f3:90:af:b5:94:5a: 07:46:76:35:f1:52:dc:d0:e2:20:55:b1:3e:77:d5: ce:fb:25:ed:54:39:39:ae:30:9e:14:07:74:14:2d: 33:c8:da:0b:18:70:80:ab:0c:69:fa:c7:d5:20:bd: 21:68:f4:e4:cd:69:7a:de:6a:58:23:8e:bd:e9:ba: c0:e2:5c:74:d1:91:82:3b:55:f7:ef:3c:52:6f:ef: aa:fe:e2:a5:6e:8e:28:b0:96:16:83:95:eb:07:75: 87:f8:db:0a:b3:0e:13:cc:79:40:be:72:2f:c2:db: 79:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:E4:97:22:E8:D3:11:BC:BE:7D:59:6F:50:DA:46:F6:2B:B9:ED:D4 X509v3 Authority Key Identifier: keyid:FB:D1:A8:48:A1:F8:9A:8D:24:DB:0B:68:17:A0:87:FB:2D:F5:DF:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9GoSKH4mo0k2wtoF6CH-y313wg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:e9:b0:cd:15:32:2a:47:0d:05:1f:80:2d:93:9c:32:07:0f: f0:d7:55:82:97:4c:2e:68:1c:39:50:d7:ee:b5:57:73:c8:46: 02:30:1b:e0:c7:8f:2c:a7:80:fd:89:a5:47:90:a3:27:1b:8b: 43:75:f1:02:54:f7:25:68:54:c7:ab:82:e9:cb:2d:2a:c7:63: e7:f1:bc:78:57:b2:d2:38:ff:d2:c9:ad:41:8f:4e:83:d0:45: 42:ae:e2:b4:63:4b:a7:bc:17:08:c1:eb:19:49:29:6d:3e:f7: 0e:0d:8c:72:3e:45:e4:73:95:cd:9e:84:27:a5:db:c7:24:ff: a9:a5:1e:55:5d:a6:85:27:c9:2a:11:54:f4:97:50:14:ee:66: 0b:33:5f:4f:fa:a0:bc:cd:bf:fd:e7:c6:7c:d8:db:84:42:7a: 34:28:00:11:1d:fe:93:80:01:a9:f7:18:6b:ed:53:79:87:c0: b8:2a:8e:07:6b:35:c9:ab:e3:9b:75:5c:6c:b8:1a:32:5e:6c: 52:d8:f2:35:c6:17:bc:34:5d:52:4b:0e:38:f1:70:bc:41:ba: 6c:5b:f5:ba:9d:fa:9f:3a:ae:45:d5:47:a5:a0:1f:30:ae:29: 87:fc:c0:90:fe:d5:73:a3:02:f0:0f:f9:8f:3e:cc:24:c9:17: 7e:0c:94:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFGQ0UxMTAvBgNVBAUTKEZCRDFBODQ4QTFGODlBOEQyNERCMEI2ODE3QTA4N0ZC MkRGNURGMDgwHhcNMjYwOTIzMDEyNzAzWhcNMjYwOTMwMDEyNzAzWjAYMRYwFAYD VQQDEw02YWIzMmFlNy00M2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqPsR0GYzB6G5gr9TzF4GYZGJGghZY8Xe04B9Ik+hX8qjZvX6HFWo7Y0c+AuT WvJLYuF4VFt9ZDZTJErCZOJFVi0tecSiIheXlmqffoKsunI7QY9+ZOYY4dSERjSG Ql69Zz3jWVRMc1PxqZgQzbWPrHHBBo57ds0gItn8fbJpUqEVKTwSvhRwqzM9UzzO 6kzzkK+1lFoHRnY18VLc0OIgVbE+d9XO+yXtVDk5rjCeFAd0FC0zyNoLGHCAqwxp +sfVIL0haPTkzWl63mpYI4696brA4lx00ZGCO1X37zxSb++q/uKlbo4osJYWg5Xr B3WH+NsKsw4TzHlAvnIvwtt5RQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOPklyLo 0xG8vn1Zb1DaRvYrue3UMB8GA1UdIwQYMBaAFPvRqEih+JqNJNsLaBegh/st9d8I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUZDRS8yRDM0QzM5MkIy OUMxMUVEOThBODMxNEFDNEY5QUUwMi8tOUdvU0tING1vMGsyd3RvRjZDSC15MzEz d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy05R29TS0g0bW8wazJ3dG9GNkNILXkzMTN3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUZDRS8yRDM0QzM5MkIyOUMxMUVEOThBODMxNEFDNEY5QUUwMi8tOUdvU0tING1v MGsyd3RvRjZDSC15MzEzd2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQOmwzRUyKkcNBR+ALZOcMgcP8NdVgpdMLmgcOVDX7rVXc8hGAjAb4MePLKeA /YmlR5CjJxuLQ3XxAlT3JWhUx6uC6cstKsdj5/G8eFey0jj/0smtQY9Og9BFQq7i tGNLp7wXCMHrGUkpbT73Dg2Mcj5F5HOVzZ6EJ6XbxyT/qaUeVV2mhSfJKhFU9JdQ FO5mCzNfT/qgvM2//efGfNjbhEJ6NCgAER3+k4ABqfcYa+1TeYfAuCqOB2s1yavj m3VcbLgaMl5sUtjyNcYXvDRdUksOOPFwvEG6bFv1up36nzquRdVHpaAfMK4ph/zA kP7Vc6MC8A/5jz7MJMkXfgyU8g== -----END CERTIFICATE-----Generated at Thu Sep 24 21:21:14 2026 by rpki-client