$ rpki-client -vvvf rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft File: CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft (raw, json) Hash identifier: QkvQaSDxcAXyAycvVYwObLsIaVr+S+NWBPMk/4wCODM= Subject key identifier: 72:4F:CB:0D:9E:C0:8F:CA:15:03:C3:66:3E:12:2D:A2:FA:3E:62:6E Authority key identifier: 09:89:E1:91:55:8B:BC:E4:6F:AB:7B:53:E4:A7:35:EE:AD:A8:D4:77 Certificate issuer: /CN=A913806E/serialNumber=0989E191558BBCE46FAB7B53E4A735EEADA8D477 Certificate serial: 08AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft Manifest number: 08A5 Signing time: Sat 26 Sep 2026 20:42:01 +0000 Manifest this update: Sat 26 Sep 2026 20:42:00 +0000 Manifest next update: Sat 03 Oct 2026 20:42:00 +0000 Files and hashes: 1: CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl (hash: +lX2Hvm+pVMK6I2hxwwGuHn91a7eE1pvrVpbtOzMeeo=) 2: 1AC2369A010911ECB732340DC4F9AE02.roa (hash: 1d5DWa9kmJ4w10WbuE7/Yrtfavj9f+ay8eq6OsazIQw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 20:42:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2223 (0x8af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913806E, serialNumber=0989E191558BBCE46FAB7B53E4A735EEADA8D477 Validity Not Before: Sep 26 20:42:00 2026 GMT Not After : Oct 3 20:42:00 2026 GMT Subject: CN=6ab82e19-00c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:14:c4:60:bf:ab:78:91:07:04:64:16:47:84: 4b:cb:af:aa:86:bb:21:87:c5:81:68:42:b2:a6:8f: 40:81:94:ea:32:58:3f:65:fc:17:a7:81:6b:45:c0: 3b:ef:07:3d:3c:de:3d:a2:9e:48:5f:40:f5:14:45: c7:f5:42:b0:b3:0e:06:21:a1:33:25:1a:bb:af:3b: 7f:bb:f4:1b:5b:e7:af:38:8e:b0:52:f4:6d:7b:b9: a4:6b:8c:fa:e3:25:0c:42:5b:5d:27:a2:6b:16:4f: cd:e1:8e:90:72:45:7f:28:b3:7e:39:42:43:3d:c3: 32:0b:e6:81:d6:e3:2b:29:ed:bc:1c:fe:44:86:2e: 4c:a2:69:69:01:46:50:c2:48:41:7d:24:af:97:fd: 70:90:aa:e2:ea:1d:ff:ec:f8:c4:6c:d0:66:3b:54: f9:ed:28:af:0b:ab:7f:a6:83:9b:3b:8a:45:2d:e2: 32:b5:f6:8e:53:89:c2:9f:d9:33:ec:26:4c:33:0c: e9:ab:f0:51:01:e0:ce:84:45:74:0b:34:fb:6c:df: 97:33:bb:5a:23:91:d9:28:56:43:6f:06:e1:91:b9: d1:de:20:80:40:64:0e:3b:c9:a8:d2:fb:41:5b:37: e7:e3:e1:01:eb:1d:fc:8a:2b:1c:0e:e2:4e:88:65: 07:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:4F:CB:0D:9E:C0:8F:CA:15:03:C3:66:3E:12:2D:A2:FA:3E:62:6E X509v3 Authority Key Identifier: keyid:09:89:E1:91:55:8B:BC:E4:6F:AB:7B:53:E4:A7:35:EE:AD:A8:D4:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:50:30:63:a4:53:34:6b:f3:9c:f4:76:79:7d:3c:b1:fd:aa: ac:d3:6d:2a:66:a6:5a:09:0d:68:c6:15:b5:60:47:fd:4b:80: 5c:d7:4e:c5:60:a5:db:b9:d8:a3:6b:a6:6d:e1:28:88:fc:93: 3d:9d:f8:e1:ff:62:75:9c:3d:26:c1:5d:99:d1:03:7d:ab:c1: 1b:97:7c:01:2c:60:d5:a4:b0:74:2f:2a:ff:8c:df:94:c2:3f: a6:98:ff:8e:33:02:4c:23:c7:21:45:c4:1f:11:3e:12:89:6a: 3b:28:66:0c:40:87:6d:78:1d:82:0d:95:65:5a:5f:54:e6:0e: e5:dc:af:5c:8e:3f:a7:5a:a8:15:9c:96:7c:d4:74:8b:64:40: f4:19:8a:d3:d2:f4:2b:54:cf:06:1e:71:95:ad:0b:4e:82:ce: a2:f0:49:ec:13:23:9f:4c:42:02:30:77:47:05:55:1f:6a:ee: 39:8f:ce:d0:e7:da:e9:ab:41:5c:d5:47:40:7c:87:f5:f1:aa: 5e:8a:a0:c5:bf:2b:a3:da:63:fc:77:36:08:3e:4c:c8:93:8b: fc:ba:d6:50:eb:0d:0a:64:ee:61:71:ee:db:d3:d1:71:b7:44: 52:bb:51:48:54:8a:ed:7f:71:7e:a6:fa:1d:3d:4a:94:2a:3c: 25:70:04:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgwNkUxMTAvBgNVBAUTKDA5ODlFMTkxNTU4QkJDRTQ2RkFCN0I1M0U0QTczNUVF QURBOEQ0NzcwHhcNMjYwOTI2MjA0MjAwWhcNMjYxMDAzMjA0MjAwWjAYMRYwFAYD VQQDEw02YWI4MmUxOS0wMGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApBTEYL+reJEHBGQWR4RLy6+qhrshh8WBaEKypo9AgZTqMlg/ZfwXp4FrRcA7 7wc9PN49op5IX0D1FEXH9UKwsw4GIaEzJRq7rzt/u/QbW+evOI6wUvRte7mka4z6 4yUMQltdJ6JrFk/N4Y6QckV/KLN+OUJDPcMyC+aB1uMrKe28HP5Ehi5MomlpAUZQ wkhBfSSvl/1wkKri6h3/7PjEbNBmO1T57SivC6t/poObO4pFLeIytfaOU4nCn9kz 7CZMMwzpq/BRAeDOhEV0CzT7bN+XM7taI5HZKFZDbwbhkbnR3iCAQGQOO8mo0vtB Wzfn4+EB6x38iiscDuJOiGUHGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHJPyw2e wI/KFQPDZj4SLaL6PmJuMB8GA1UdIwQYMBaAFAmJ4ZFVi7zkb6t7U+SnNe6tqNR3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODA2RS85REJGQUIzODAy MkYxMUVCOTMzMzE4M0NDNEY5QUUwMi9DWW5oa1ZXTHZPUnZxM3RUNUtjMTdxMm8x SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NZbmhrVldMdk9SdnEzdFQ1S2MxN3EybzFIYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODA2RS85REJGQUIzODAyMkYxMUVCOTMzMzE4M0NDNEY5QUUwMi9DWW5oa1ZXTHZP UnZxM3RUNUtjMTdxMm8xSGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdFAwY6RTNGvznPR2eX08sf2qrNNtKmamWgkNaMYVtWBH/UuAXNdOxWCl27nY o2umbeEoiPyTPZ344f9idZw9JsFdmdEDfavBG5d8ASxg1aSwdC8q/4zflMI/ppj/ jjMCTCPHIUXEHxE+EolqOyhmDECHbXgdgg2VZVpfVOYO5dyvXI4/p1qoFZyWfNR0 i2RA9BmK09L0K1TPBh5xla0LToLOovBJ7BMjn0xCAjB3RwVVH2ruOY/O0Ofa6atB XNVHQHyH9fGqXoqgxb8ro9pj/Hc2CD5MyJOL/LrWUOsNCmTuYXHu29PRcbdEUrtR SFSK7X9xfqb6HT1KlCo8JXAEPg== -----END CERTIFICATE-----Generated at Sun Sep 27 23:56:06 2026 by rpki-client