$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.mft File: sgd9XTkKxy472IWxHzrm0qUmqe0.mft (raw, json) Hash identifier: 1PME+8sq4KTW8hccWxb0vJ9zAIFbSlrK95OXwtfAjjA= Subject key identifier: 19:C4:ED:02:01:72:67:A6:C1:A4:CC:7F:43:D4:51:E3:86:DC:8F:98 Authority key identifier: B2:07:7D:5D:39:0A:C7:2E:3B:D8:85:B1:1F:3A:E6:D2:A5:26:A9:ED Certificate issuer: /CN=A91C9B85/serialNumber=B2077D5D390AC72E3BD885B11F3AE6D2A526A9ED Certificate serial: 0886 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sgd9XTkKxy472IWxHzrm0qUmqe0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.mft Manifest number: 087B Signing time: Thu 24 Sep 2026 20:44:40 +0000 Manifest this update: Thu 24 Sep 2026 20:44:39 +0000 Manifest next update: Thu 01 Oct 2026 20:44:39 +0000 Files and hashes: 1: sgd9XTkKxy472IWxHzrm0qUmqe0.crl (hash: HeWR7nwmSvtsgdX+q0ws0XhMKw4xbgt6aQ81KzPIxTs=) 2: 53B6E5D212CF11EBA8D2C037C4F9AE02.roa (hash: xQ5Osl/g5IBEyHi+z/+JpV9FYOt4yj/DoqbHsRmNM28=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.crl rsync://rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sgd9XTkKxy472IWxHzrm0qUmqe0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 20:44:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2182 (0x886) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9B85, serialNumber=B2077D5D390AC72E3BD885B11F3AE6D2A526A9ED Validity Not Before: Sep 24 20:44:39 2026 GMT Not After : Oct 1 20:44:39 2026 GMT Subject: CN=6ab58bb7-a811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:27:a3:a7:38:7d:9b:84:4a:c7:43:e3:f7:e8: f6:21:d7:56:b5:28:98:11:29:0c:3c:5c:49:78:42: 72:51:88:bb:72:c4:02:dc:bb:07:7d:bb:cf:ab:d4: c9:ab:c9:f9:13:9f:76:ad:b7:4e:b9:36:03:15:c9: a9:58:c6:7a:76:09:ac:27:19:e6:ae:8c:07:b1:31: 31:66:69:fd:a2:a0:f1:1d:84:ca:41:cc:ad:6f:12: da:22:da:ab:e0:dc:c0:de:96:01:6e:74:87:ab:7b: 6c:e1:35:d2:e0:e1:01:35:02:ce:a2:e0:75:38:49: 1e:0c:12:aa:d3:2b:ed:59:95:27:eb:4e:2d:28:ae: 8a:4e:fc:8d:70:e8:28:be:c1:3d:d5:b7:49:10:2d: 9c:0b:08:3a:d8:61:8e:22:1f:d9:37:49:84:37:43: b7:f7:03:50:21:d4:4b:21:f5:b8:23:90:46:86:9f: 2f:95:4e:be:7e:e6:d4:5d:50:ea:5f:1e:e0:e3:71: 11:6e:66:ed:e0:18:d1:a3:9e:99:21:8c:61:08:ea: 0b:14:98:e7:af:f6:93:5a:44:84:c0:9d:24:dd:8a: 13:a8:3c:93:25:7d:75:30:49:03:68:55:8b:47:ac: 81:2a:0e:e7:0d:99:26:5f:cc:4b:cd:5e:dc:89:28: a3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:C4:ED:02:01:72:67:A6:C1:A4:CC:7F:43:D4:51:E3:86:DC:8F:98 X509v3 Authority Key Identifier: keyid:B2:07:7D:5D:39:0A:C7:2E:3B:D8:85:B1:1F:3A:E6:D2:A5:26:A9:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sgd9XTkKxy472IWxHzrm0qUmqe0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:ae:0e:5b:fe:a4:ac:7d:02:da:7f:3f:07:b9:d3:23:65:d4: ef:64:77:d5:04:09:91:a0:05:78:3d:41:d7:68:8d:e9:04:64: 1a:ba:c8:e9:87:6b:c1:8b:29:5f:d4:56:f3:82:f5:e2:9a:c2: 9c:b8:f5:ff:6f:45:4f:a4:ed:3d:eb:e4:b6:cc:4f:c1:d8:a2: a1:54:14:4c:0e:79:3d:ff:02:5a:56:67:b4:35:64:6c:32:5e: a9:d4:aa:e0:00:fc:ef:53:ca:36:71:1a:b5:a1:e9:11:44:fb: 07:60:87:df:0e:b9:0a:56:9a:18:c0:c5:4a:e3:2d:23:5b:a8: 92:ce:4c:d4:81:ef:56:4c:61:97:2a:a6:0a:b6:2e:74:7b:0f: fb:c1:47:7f:76:d4:bb:9e:71:b0:b2:20:a4:a0:23:7c:a9:5b: 03:2d:4d:6e:69:cb:0e:d0:35:fa:c6:f6:31:c1:c0:b3:cb:55: 2c:da:f7:11:c5:7e:d6:3b:07:b5:30:b4:97:f4:bf:74:31:08: 32:c9:d2:59:23:59:f4:20:5f:59:95:f4:e9:7f:5f:b4:04:f3: 1b:61:2e:97:4c:94:5e:14:c0:ac:ef:e4:33:ad:b7:ee:b8:01: d6:e8:03:4b:e6:6c:bc:16:0e:4a:21:c9:d7:8d:24:99:ee:88: 63:ff:22:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlCODUxMTAvBgNVBAUTKEIyMDc3RDVEMzkwQUM3MkUzQkQ4ODVCMTFGM0FFNkQy QTUyNkE5RUQwHhcNMjYwOTI0MjA0NDM5WhcNMjYxMDAxMjA0NDM5WjAYMRYwFAYD VQQDEw02YWI1OGJiNy1hODExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0yejpzh9m4RKx0Pj9+j2IddWtSiYESkMPFxJeEJyUYi7csQC3LsHfbvPq9TJ q8n5E592rbdOuTYDFcmpWMZ6dgmsJxnmrowHsTExZmn9oqDxHYTKQcytbxLaItqr 4NzA3pYBbnSHq3ts4TXS4OEBNQLOouB1OEkeDBKq0yvtWZUn604tKK6KTvyNcOgo vsE91bdJEC2cCwg62GGOIh/ZN0mEN0O39wNQIdRLIfW4I5BGhp8vlU6+fubUXVDq Xx7g43ERbmbt4BjRo56ZIYxhCOoLFJjnr/aTWkSEwJ0k3YoTqDyTJX11MEkDaFWL R6yBKg7nDZkmX8xLzV7ciSijdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBnE7QIB cmemwaTMf0PUUeOG3I+YMB8GA1UdIwQYMBaAFLIHfV05CscuO9iFsR865tKlJqnt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUI4NS80MkQ3QzAwQzEy Q0UxMUVCOTUzMzE5MzdDNEY5QUUwMi9zZ2Q5WFRrS3h5NDcySVd4SHpybTBxVW1x ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NnZDlYVGtLeHk0NzJJV3hIenJtMHFVbXFlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUI4NS80MkQ3QzAwQzEyQ0UxMUVCOTUzMzE5MzdDNEY5QUUwMi9zZ2Q5WFRrS3h5 NDcySVd4SHpybTBxVW1xZTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAS64OW/6krH0C2n8/B7nTI2XU72R31QQJkaAFeD1B12iN6QRkGrrI6YdrwYsp X9RW84L14prCnLj1/29FT6TtPevktsxPwdiioVQUTA55Pf8CWlZntDVkbDJeqdSq 4AD871PKNnEataHpEUT7B2CH3w65ClaaGMDFSuMtI1uoks5M1IHvVkxhlyqmCrYu dHsP+8FHf3bUu55xsLIgpKAjfKlbAy1NbmnLDtA1+sb2McHAs8tVLNr3EcV+1jsH tTC0l/S/dDEIMsnSWSNZ9CBfWZX06X9ftATzG2Eul0yUXhTArO/kM6237rgB1ugD S+ZsvBYOSiHJ140kme6IY/8imA== -----END CERTIFICATE-----Generated at Fri Sep 25 01:24:36 2026 by rpki-client