$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F3695/9FA5C852A29B11F1A69892D93211F970/gSgm5X8SSW8LsT-ypYMZiqsnfZk.mft File: gSgm5X8SSW8LsT-ypYMZiqsnfZk.mft (raw, json) Hash identifier: T6XVPIffJ0v0Ip+1jtujAu7PX4LQWgO80VN86aml/qg= Subject key identifier: D9:80:E4:A0:4D:29:28:D6:77:B4:C0:00:B2:DB:B2:47:E4:20:70:E9 Authority key identifier: 81:28:26:E5:7F:12:49:6F:0B:B1:3F:B2:A5:83:19:8A:AB:27:7D:99 Certificate issuer: /CN=A91F3695/serialNumber=812826E57F12496F0BB13FB2A583198AAB277D99 Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gSgm5X8SSW8LsT-ypYMZiqsnfZk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3695/9FA5C852A29B11F1A69892D93211F970/gSgm5X8SSW8LsT-ypYMZiqsnfZk.mft Manifest number: 10 Signing time: Wed 23 Sep 2026 08:52:25 +0000 Manifest this update: Wed 23 Sep 2026 08:52:24 +0000 Manifest next update: Wed 30 Sep 2026 08:52:24 +0000 Files and hashes: 1: gSgm5X8SSW8LsT-ypYMZiqsnfZk.crl (hash: ntsqA83KygOQh4zHp4Q+8Xeilj5cFfMjM6NFcK+Pktc=) 2: 64898DB6A29C11F19776C6F43211F970.roa (hash: hyemipf6fhL37ipYH+N7rWJpNf7ZwBokBc6dwKfB0oA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3695/9FA5C852A29B11F1A69892D93211F970/gSgm5X8SSW8LsT-ypYMZiqsnfZk.crl rsync://rpki.apnic.net/member_repository/A91F3695/9FA5C852A29B11F1A69892D93211F970/gSgm5X8SSW8LsT-ypYMZiqsnfZk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gSgm5X8SSW8LsT-ypYMZiqsnfZk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:52:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3695, serialNumber=812826E57F12496F0BB13FB2A583198AAB277D99 Validity Not Before: Sep 23 08:52:24 2026 GMT Not After : Sep 30 08:52:24 2026 GMT Subject: CN=6ab39349-bd5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1b:f0:75:1f:69:09:72:1e:dc:5b:b2:41:92: 1f:c0:6c:2c:49:05:b1:ea:04:04:35:76:76:e2:fd: 03:57:4f:97:c8:29:d6:a7:59:ba:86:22:ca:df:61: 3e:60:cd:da:30:8d:d2:2b:5a:f5:f6:8b:e1:32:a0: b9:2a:b8:ff:89:a8:68:3d:f3:b9:bd:7f:48:8f:db: 81:65:06:52:c8:9f:83:ca:a6:f9:4c:28:90:db:1d: e1:28:1a:de:86:42:2d:5c:e2:29:bf:94:f8:8b:10: 4d:41:c1:db:0e:c0:96:21:5c:b3:f7:ba:6a:46:4e: 69:0d:be:cb:9e:fc:7d:d8:64:3b:54:88:b8:71:69: c3:e7:6d:1f:98:e9:4a:6a:9f:d5:ca:13:a6:97:be: a5:e3:ad:4f:73:8d:d4:5e:ef:eb:cc:a5:8f:e5:fd: 3a:25:01:71:83:ef:ed:d4:ad:ef:26:6f:75:54:93: 85:c8:36:12:2f:32:4a:a7:a9:3a:ec:e4:01:90:3e: 43:93:f5:99:fd:b6:58:61:12:93:8a:a6:04:4b:8c: aa:7f:26:34:ba:8d:e3:43:7d:b8:7d:d1:9b:53:b1: b3:96:45:3b:e5:4b:6f:2d:27:a9:fb:78:0c:7d:d6: 69:ba:7c:76:b9:ae:55:54:59:e7:42:25:c0:01:14: ab:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:80:E4:A0:4D:29:28:D6:77:B4:C0:00:B2:DB:B2:47:E4:20:70:E9 X509v3 Authority Key Identifier: keyid:81:28:26:E5:7F:12:49:6F:0B:B1:3F:B2:A5:83:19:8A:AB:27:7D:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3695/9FA5C852A29B11F1A69892D93211F970/gSgm5X8SSW8LsT-ypYMZiqsnfZk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gSgm5X8SSW8LsT-ypYMZiqsnfZk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3695/9FA5C852A29B11F1A69892D93211F970/gSgm5X8SSW8LsT-ypYMZiqsnfZk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:48:66:f6:57:26:9d:ed:d5:cb:8e:3d:30:61:53:f2:91:5e: 57:0b:3c:af:37:06:7b:87:65:6e:dc:65:58:43:53:5b:e2:23: e9:41:e5:83:b3:36:77:ed:ab:8b:55:87:87:fb:7c:5e:1a:7b: 10:c7:ed:61:35:2a:c6:d7:5c:32:3b:9b:c9:27:e4:d0:e8:74: b7:24:e1:27:88:75:a4:ba:3e:d2:e5:b6:d6:e6:75:c4:63:ce: 60:3e:ad:7f:78:89:ad:00:81:88:cf:68:82:93:62:65:c5:75: 80:87:4a:46:4b:b7:93:7a:31:a5:2f:b3:60:49:55:26:74:a5: 65:ae:0b:19:00:d9:7f:40:0b:ea:58:ae:4d:3e:89:d0:a5:6f: 39:a1:a4:7e:b3:2c:bf:4f:09:d0:93:58:a2:78:f3:a5:fa:29: 37:ba:1c:56:e7:2b:76:55:7f:a0:94:19:48:01:63:8a:4f:38: 45:3a:b4:ec:95:30:75:09:c4:fe:e6:63:21:cf:6d:f5:99:36: dd:14:c8:cf:97:33:f9:31:71:0b:14:00:ac:41:d8:f9:a0:4a: 81:6d:1f:26:c4:15:4e:96:ba:bf:9a:f8:cb:18:ea:aa:32:72: 7b:fd:ff:f4:e8:9c:64:e7:b6:ef:40:b7:aa:1b:b0:df:76:02: 99:3d:de:9a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MzY5NTExMC8GA1UEBRMoODEyODI2RTU3RjEyNDk2RjBCQjEzRkIyQTU4MzE5OEFB QjI3N0Q5OTAeFw0yNjA5MjMwODUyMjRaFw0yNjA5MzAwODUyMjRaMBgxFjAUBgNV BAMTDTZhYjM5MzQ5LWJkNWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCeG/B1H2kJch7cW7JBkh/AbCxJBbHqBAQ1dnbi/QNXT5fIKdanWbqGIsrfYT5g zdowjdIrWvX2i+EyoLkquP+JqGg987m9f0iP24FlBlLIn4PKpvlMKJDbHeEoGt6G Qi1c4im/lPiLEE1BwdsOwJYhXLP3umpGTmkNvsue/H3YZDtUiLhxacPnbR+Y6Upq n9XKE6aXvqXjrU9zjdRe7+vMpY/l/TolAXGD7+3Ure8mb3VUk4XINhIvMkqnqTrs 5AGQPkOT9Zn9tlhhEpOKpgRLjKp/JjS6jeNDfbh90ZtTsbOWRTvlS28tJ6n7eAx9 1mm6fHa5rlVUWedCJcABFKupAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU2YDkoE0p KNZ3tMAAstuyR+QgcOkwHwYDVR0jBBgwFoAUgSgm5X8SSW8LsT+ypYMZiqsnfZkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzNjk1LzlGQTVDODUyQTI5 QjExRjFBNjk4OTJEOTMyMTFGOTcwL2dTZ201WDhTU1c4THNULXlwWU1aaXFzbmZa ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZ1NnbTVYOFNTVzhMc1QteXBZTVppcXNuZlprLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz Njk1LzlGQTVDODUyQTI5QjExRjFBNjk4OTJEOTMyMTFGOTcwL2dTZ201WDhTU1c4 THNULXlwWU1aaXFzbmZaay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBZSGb2Vyad7dXLjj0wYVPykV5XCzyvNwZ7h2Vu3GVYQ1Nb4iPpQeWDszZ37auL VYeH+3xeGnsQx+1hNSrG11wyO5vJJ+TQ6HS3JOEniHWkuj7S5bbW5nXEY85gPq1/ eImtAIGIz2iCk2JlxXWAh0pGS7eTejGlL7NgSVUmdKVlrgsZANl/QAvqWK5NPonQ pW85oaR+syy/TwnQk1iiePOl+ik3uhxW5yt2VX+glBlIAWOKTzhFOrTslTB1CcT+ 5mMhz231mTbdFMjPlzP5MXELFACsQdj5oEqBbR8mxBVOlrq/mvjLGOqqMnJ7/f/0 6Jxk57bvQLeqG7DfdgKZPd6a -----END CERTIFICATE-----Generated at Thu Sep 24 10:20:57 2026 by rpki-client