$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft File: G0cdrc2RIJM1E26s9syYiChlSyo.mft (raw, json) Hash identifier: mzPEpLvpULgB40qxrfFE6LAU9xUZSABbzRUwenTYBWk= Subject key identifier: 7B:11:2D:69:CA:36:3A:29:D1:C1:F7:22:CC:29:2E:C2:7C:A6:D8:8F Authority key identifier: 1B:47:1D:AD:CD:91:20:93:35:13:6E:AC:F6:CC:98:88:28:65:4B:2A Certificate issuer: /CN=A91C9606/serialNumber=1B471DADCD91209335136EACF6CC988828654B2A Certificate serial: 0E2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft Manifest number: 0E11 Signing time: Tue 22 Sep 2026 17:43:29 +0000 Manifest this update: Tue 22 Sep 2026 17:43:28 +0000 Manifest next update: Tue 29 Sep 2026 17:43:28 +0000 Files and hashes: 1: G0cdrc2RIJM1E26s9syYiChlSyo.crl (hash: /tbXVlZamoUrzHhZ3fIQjHMhZ1BAQYWfCYF0pFkJ9B8=) 2: 06370CB2DB9211E9B70EDD2EC4F9AE02.roa (hash: QJuobED8AIYNaA07H0l+GwSOVK0e9Xo+0hZGeA9Tr5g=) 3: 7A9CD75E23E311F0BB28EA29C4F9AE02.roa (hash: VZEltJw0vEDbOnRvRf9ELAdzaAN+QgrjbGf4Pt5gMhA=) 4: 645EF9CADB9311E988E56C33C4F9AE02.roa (hash: giSaWoz0kPjXm5QgA1jXt8OZKatJUwxEOdzcbQiRQwI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.crl rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 17:43:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3630 (0xe2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9606, serialNumber=1B471DADCD91209335136EACF6CC988828654B2A Validity Not Before: Sep 22 17:43:28 2026 GMT Not After : Sep 29 17:43:28 2026 GMT Subject: CN=6ab2be41-0a1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:41:7a:e3:5f:bf:d5:87:14:5a:a4:2c:ea:b6: e8:3c:4d:5d:a0:dc:52:26:6e:86:ad:85:b2:e9:49: 4d:aa:ed:00:fb:3e:79:c1:5e:06:01:27:1a:c8:e0: fb:74:3f:a1:81:17:7f:db:f3:df:0c:50:8e:b8:d3: 76:47:83:82:83:fe:72:af:60:3c:83:b5:8e:57:39: e6:7d:b2:0c:35:78:1c:84:e3:1c:9a:b2:48:7d:11: bf:ea:c3:35:e5:f3:05:7a:51:e3:d4:e3:24:ab:5e: b7:5b:55:bc:e1:e9:57:40:04:24:fc:3b:d4:2a:e2: 41:6a:1f:4d:7f:5e:18:fd:47:d9:09:b4:35:94:f7: cb:11:ac:96:4e:58:d3:c8:61:4b:6c:1d:8e:26:a8: 3c:cb:7b:2d:1a:e5:5a:58:0b:a4:81:98:1c:ef:5a: 74:80:f9:b3:87:1e:b4:bd:db:27:16:6d:54:38:98: d8:5d:9e:ee:70:a3:c0:a7:6c:6c:10:e8:96:46:4c: cc:b2:2b:f9:a3:d6:b7:3a:66:38:c9:80:15:cd:e1: 29:59:73:75:1b:cd:37:ad:92:88:15:cb:31:2c:f4: fc:f3:2c:40:c0:63:a2:f6:e1:01:e4:4c:ce:b5:f2: 77:cb:71:1a:9a:d7:00:56:17:5c:00:65:7c:83:71: d1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:11:2D:69:CA:36:3A:29:D1:C1:F7:22:CC:29:2E:C2:7C:A6:D8:8F X509v3 Authority Key Identifier: keyid:1B:47:1D:AD:CD:91:20:93:35:13:6E:AC:F6:CC:98:88:28:65:4B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:22:fc:a6:2a:9c:20:22:64:f6:bc:51:50:be:d7:49:a4:ea: 81:7b:32:4e:4b:bf:95:08:9d:6d:23:d3:0d:82:c5:9d:17:af: 45:ff:f9:4d:d1:88:7a:38:f5:a2:43:99:ba:f6:c8:45:d5:4a: 15:95:77:bd:ab:67:19:df:93:5f:07:d5:20:a9:28:a3:ea:50: 1e:a8:0b:3d:71:6c:c4:12:07:5b:41:eb:9a:cf:03:f1:0f:b3: 10:83:f5:d9:63:5c:66:34:83:64:e6:df:8b:2e:df:27:e0:a7: 9a:41:b6:5f:1c:3b:fb:2a:99:0e:ec:db:ff:6d:6c:4b:84:70: c9:26:83:f1:77:3e:00:0f:c5:d0:e4:28:18:be:40:d2:b4:ec: 3d:4f:68:b9:a6:9c:c4:4a:bd:92:84:93:82:c2:fe:59:f9:20: 6a:9a:c2:c3:84:bf:2c:a4:b5:3f:5c:b5:5c:48:46:02:bb:67: 81:e5:00:e0:ba:10:9d:7e:89:bf:a3:77:96:af:60:6b:63:88: 32:68:c4:af:89:95:48:df:4a:53:0a:fd:88:4d:17:57:a3:c7: f3:af:05:4a:db:04:6f:9f:1e:42:cf:65:cf:dc:a4:7f:ae:76: 29:f4:99:e2:a0:ce:f7:c2:b3:f2:d2:18:59:ee:ea:35:4a:f6: 35:b7:57:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk2MDYxMTAvBgNVBAUTKDFCNDcxREFEQ0Q5MTIwOTMzNTEzNkVBQ0Y2Q0M5ODg4 Mjg2NTRCMkEwHhcNMjYwOTIyMTc0MzI4WhcNMjYwOTI5MTc0MzI4WjAYMRYwFAYD VQQDEw02YWIyYmU0MS0wYTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuEF641+/1YcUWqQs6rboPE1doNxSJm6GrYWy6UlNqu0A+z55wV4GAScayOD7 dD+hgRd/2/PfDFCOuNN2R4OCg/5yr2A8g7WOVznmfbIMNXgchOMcmrJIfRG/6sM1 5fMFelHj1OMkq163W1W84elXQAQk/DvUKuJBah9Nf14Y/UfZCbQ1lPfLEayWTljT yGFLbB2OJqg8y3stGuVaWAukgZgc71p0gPmzhx60vdsnFm1UOJjYXZ7ucKPAp2xs EOiWRkzMsiv5o9a3OmY4yYAVzeEpWXN1G803rZKIFcsxLPT88yxAwGOi9uEB5EzO tfJ3y3EamtcAVhdcAGV8g3HR4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHsRLWnK Njop0cH3IswpLsJ8ptiPMB8GA1UdIwQYMBaAFBtHHa3NkSCTNRNurPbMmIgoZUsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTYwNi85QzlGOUY5QURC OTAxMUU5QTNDMTJGMkNDNEY5QUUwMi9HMGNkcmMyUklKTTFFMjZzOXN5WWlDaGxT eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0cwY2RyYzJSSUpNMUUyNnM5c3lZaUNobFN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTYwNi85QzlGOUY5QURCOTAxMUU5QTNDMTJGMkNDNEY5QUUwMi9HMGNkcmMyUklK TTFFMjZzOXN5WWlDaGxTeW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZCL8piqcICJk9rxRUL7XSaTqgXsyTku/lQidbSPTDYLFnRevRf/5TdGIejj1 okOZuvbIRdVKFZV3vatnGd+TXwfVIKkoo+pQHqgLPXFsxBIHW0Hrms8D8Q+zEIP1 2WNcZjSDZObfiy7fJ+CnmkG2Xxw7+yqZDuzb/21sS4RwySaD8Xc+AA/F0OQoGL5A 0rTsPU9ouaacxEq9koSTgsL+WfkgaprCw4S/LKS1P1y1XEhGArtngeUA4LoQnX6J v6N3lq9ga2OIMmjEr4mVSN9KUwr9iE0XV6PH868FStsEb58eQs9lz9ykf652KfSZ 4qDO98Kz8tIYWe7qNUr2NbdXmA== -----END CERTIFICATE-----Generated at Wed Sep 23 09:14:04 2026 by rpki-client