$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CDA42/C279EDD0B1BA11F1A69E71483911F970/9gCtpOpotG1MD-pnC_5Pf-2V_Hc.mft File: 9gCtpOpotG1MD-pnC_5Pf-2V_Hc.mft (raw, json) Hash identifier: GbPu3kECkMm0QBKlZD31mSMvqEj0dUCdjoDFc0AD4oI= Subject key identifier: 6B:30:50:0C:2B:26:43:13:33:7B:C2:A4:F6:36:D0:D9:D7:D9:B0:E2 Authority key identifier: F6:00:AD:A4:EA:68:B4:6D:4C:0F:EA:67:0B:FE:4F:7F:ED:95:FC:77 Certificate issuer: /CN=A91CDA42/serialNumber=F600ADA4EA68B46D4C0FEA670BFE4F7FED95FC77 Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9gCtpOpotG1MD-pnC_5Pf-2V_Hc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDA42/C279EDD0B1BA11F1A69E71483911F970/9gCtpOpotG1MD-pnC_5Pf-2V_Hc.mft Manifest number: 06 Signing time: Wed 23 Sep 2026 09:01:01 +0000 Manifest this update: Wed 23 Sep 2026 09:01:00 +0000 Manifest next update: Wed 30 Sep 2026 09:01:00 +0000 Files and hashes: 1: 9gCtpOpotG1MD-pnC_5Pf-2V_Hc.crl (hash: axeR3YHFGtLxsWjhHBSidJg9+F7vZYU4Uy4vx6G/QOc=) 2: 997A1D8EB1BE11F19E212CE03A11F970.roa (hash: RnKZWz2L71dQW3gVAIGIiUqPKGYnPENAxXVz7DSVHSo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDA42/C279EDD0B1BA11F1A69E71483911F970/9gCtpOpotG1MD-pnC_5Pf-2V_Hc.crl rsync://rpki.apnic.net/member_repository/A91CDA42/C279EDD0B1BA11F1A69E71483911F970/9gCtpOpotG1MD-pnC_5Pf-2V_Hc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9gCtpOpotG1MD-pnC_5Pf-2V_Hc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 09:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDA42, serialNumber=F600ADA4EA68B46D4C0FEA670BFE4F7FED95FC77 Validity Not Before: Sep 23 09:01:00 2026 GMT Not After : Sep 30 09:01:00 2026 GMT Subject: CN=6ab3954d-0571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c1:9a:72:e9:4c:bd:b7:70:12:73:08:f6:a6: 8e:4b:f4:54:4b:e5:e6:05:e2:34:f7:4b:ab:ef:dc: f8:4f:07:3d:59:0f:3d:92:1e:e4:38:74:3b:54:fc: 8a:8a:6d:f4:58:91:b2:14:f7:41:d7:c1:c4:0d:b7: 4c:ae:1a:49:81:2d:51:f1:77:c6:ca:5b:ab:56:61: 6f:90:f8:10:7a:5d:0b:64:a9:c2:3b:62:c0:6f:2c: 8d:71:38:95:15:b1:65:30:ea:d1:29:1c:ef:d1:6e: 4b:bc:59:f3:3f:a6:e8:e1:52:4d:15:64:cc:a3:c5: 59:e7:17:9d:2e:81:e5:51:a7:ce:1c:d9:4d:38:ba: fc:09:8a:eb:e7:89:7f:55:7a:45:36:b6:be:0f:86: ed:3d:42:d4:7b:d2:69:6c:1d:1c:aa:2c:2a:af:07: 7e:5b:88:ab:20:ad:21:fd:01:7b:59:df:ee:71:bd: e0:cc:dc:70:ef:b4:89:89:98:69:56:aa:e0:37:e7: 6b:43:ac:c7:db:69:ba:66:b9:1b:71:4f:0c:d9:4b: 73:15:07:3e:4e:6f:6c:fe:2c:ca:ab:7e:06:45:64: 86:77:cd:1c:c4:90:ce:b0:1a:c4:5c:c9:ec:15:1f: 8b:54:93:f5:78:87:55:9d:38:9d:b7:be:bc:f4:50: 87:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:30:50:0C:2B:26:43:13:33:7B:C2:A4:F6:36:D0:D9:D7:D9:B0:E2 X509v3 Authority Key Identifier: keyid:F6:00:AD:A4:EA:68:B4:6D:4C:0F:EA:67:0B:FE:4F:7F:ED:95:FC:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDA42/C279EDD0B1BA11F1A69E71483911F970/9gCtpOpotG1MD-pnC_5Pf-2V_Hc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9gCtpOpotG1MD-pnC_5Pf-2V_Hc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDA42/C279EDD0B1BA11F1A69E71483911F970/9gCtpOpotG1MD-pnC_5Pf-2V_Hc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:6e:66:74:70:18:85:73:15:01:2d:66:14:84:1b:73:1e:b3: b4:28:da:12:40:81:69:bd:60:fa:52:8a:8f:12:b6:f3:96:35: 0c:ed:7d:66:38:bc:f2:f0:b6:eb:95:53:e5:2f:b0:7a:e6:07: a3:0f:49:d1:63:f8:dc:77:b1:9b:9e:f4:4b:e3:39:d1:0f:0b: cb:03:a0:f3:0b:a7:f0:a0:46:01:3e:fe:7a:8d:4a:39:2b:a4: 65:32:94:23:2e:55:7f:bd:96:8e:8d:a3:32:de:c2:10:f4:52: 5c:2c:8c:a6:0d:c6:37:8e:aa:1d:dc:78:b7:40:fa:7e:01:67: 65:a5:a8:1d:2b:0f:f4:1e:0f:a8:55:e1:67:69:69:41:06:5c: 1e:97:af:86:01:d8:b4:df:fc:7a:49:d7:b7:8e:46:cb:d3:8f: 7b:61:88:7e:7f:f6:79:44:ea:33:27:21:64:16:1c:f0:34:6f: 8b:83:00:34:eb:70:10:58:f1:d3:76:51:66:62:e4:18:a4:fe: b1:80:cf:0f:30:49:20:3e:3c:47:4b:eb:87:06:c1:88:31:71: 8c:ec:05:b2:1e:e3:e8:74:d2:8b:b7:f0:9e:25:f1:00:fd:dc: 7b:57:78:59:99:43:58:10:37:79:34:71:d8:7f:7e:3d:43:60: 05:95:12:53 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD REE0MjExMC8GA1UEBRMoRjYwMEFEQTRFQTY4QjQ2RDRDMEZFQTY3MEJGRTRGN0ZF RDk1RkM3NzAeFw0yNjA5MjMwOTAxMDBaFw0yNjA5MzAwOTAxMDBaMBgxFjAUBgNV BAMTDTZhYjM5NTRkLTA1NzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmwZpy6Uy9t3AScwj2po5L9FRL5eYF4jT3S6vv3PhPBz1ZDz2SHuQ4dDtU/IqK bfRYkbIU90HXwcQNt0yuGkmBLVHxd8bKW6tWYW+Q+BB6XQtkqcI7YsBvLI1xOJUV sWUw6tEpHO/Rbku8WfM/pujhUk0VZMyjxVnnF50ugeVRp84c2U04uvwJiuvniX9V ekU2tr4Phu09QtR70mlsHRyqLCqvB35biKsgrSH9AXtZ3+5xveDM3HDvtImJmGlW quA352tDrMfbabpmuRtxTwzZS3MVBz5Ob2z+LMqrfgZFZIZ3zRzEkM6wGsRcyewV H4tUk/V4h1WdOJ23vrz0UIeFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUazBQDCsm QxMze8Kk9jbQ2dfZsOIwHwYDVR0jBBgwFoAU9gCtpOpotG1MD+pnC/5Pf+2V/Hcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEQTQyL0MyNzlFREQwQjFC QTExRjFBNjlFNzE0ODM5MTFGOTcwLzlnQ3RwT3BvdEcxTUQtcG5DXzVQZi0yVl9I Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOWdDdHBPcG90RzFNRC1wbkNfNVBmLTJWX0hjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE QTQyL0MyNzlFREQwQjFCQTExRjFBNjlFNzE0ODM5MTFGOTcwLzlnQ3RwT3BvdEcx TUQtcG5DXzVQZi0yVl9IYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA1bmZ0cBiFcxUBLWYUhBtzHrO0KNoSQIFpvWD6UoqPErbzljUM7X1mOLzy8Lbr lVPlL7B65gejD0nRY/jcd7GbnvRL4znRDwvLA6DzC6fwoEYBPv56jUo5K6RlMpQj LlV/vZaOjaMy3sIQ9FJcLIymDcY3jqod3Hi3QPp+AWdlpagdKw/0Hg+oVeFnaWlB Blwel6+GAdi03/x6Sde3jkbL0497YYh+f/Z5ROozJyFkFhzwNG+LgwA063AQWPHT dlFmYuQYpP6xgM8PMEkgPjxHS+uHBsGIMXGM7AWyHuPodNKLt/CeJfEA/dx7V3hZ mUNYEDd5NHHYf349Q2AFlRJT -----END CERTIFICATE-----Generated at Thu Sep 24 19:01:44 2026 by rpki-client