$ rpki-client -vvvf rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.mft File: cmIg2YvMfcZqPM83Z36go9sJDaQ.mft (raw, json) Hash identifier: XfwZOVs1bikANjCQlSEnrecIyItNeCOFIBEDqk9geQI= Subject key identifier: 71:44:50:84:88:BA:35:1B:41:35:50:0C:4A:68:39:31:83:2F:04:44 Authority key identifier: 72:62:20:D9:8B:CC:7D:C6:6A:3C:CF:37:67:7E:A0:A3:DB:09:0D:A4 Certificate issuer: /CN=A914AE22/serialNumber=726220D98BCC7DC66A3CCF37677EA0A3DB090DA4 Certificate serial: 0CD8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmIg2YvMfcZqPM83Z36go9sJDaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.mft Manifest number: 0CCC Signing time: Thu 24 Sep 2026 18:27:25 +0000 Manifest this update: Thu 24 Sep 2026 18:27:25 +0000 Manifest next update: Thu 01 Oct 2026 18:27:25 +0000 Files and hashes: 1: cmIg2YvMfcZqPM83Z36go9sJDaQ.crl (hash: e/O/b88/M8fB4X/z82nJa1KPiTuxJpnw0tGZ44UjGO4=) 2: 021496F2A4EC11F0A8EB5F7EC4F9AE02.roa (hash: wgK4ZuIIb0twemfmKGJQ9J4VlAgOAeotYnSBFamHuz8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.crl rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmIg2YvMfcZqPM83Z36go9sJDaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 18:27:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3288 (0xcd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914AE22, serialNumber=726220D98BCC7DC66A3CCF37677EA0A3DB090DA4 Validity Not Before: Sep 24 18:27:25 2026 GMT Not After : Oct 1 18:27:25 2026 GMT Subject: CN=6ab56b8d-8a09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d2:64:f9:8c:30:89:3f:1e:9b:a2:23:03:dd: d0:53:f6:1e:b0:20:f2:00:d3:f9:42:d2:5c:a2:87: 40:45:3f:bd:9a:38:04:3b:cf:0e:28:84:17:5f:e2: cf:e7:da:8e:f3:29:14:51:95:5a:24:0f:b8:08:1f: 37:26:d2:37:fc:5c:ce:41:5e:93:f2:ff:94:78:81: 04:da:f7:91:e7:ea:48:4b:8d:98:f1:1c:ee:f6:6c: 66:89:fc:7d:b1:d5:43:f5:46:7d:de:23:09:33:11: 3d:c2:61:4a:c1:23:fc:a6:08:50:50:ef:c5:8e:b0: 74:9a:8e:8d:e8:8d:70:69:91:3c:e8:ab:23:d3:22: 1c:17:50:77:a4:d5:59:e8:49:99:f4:a3:d6:e3:59: 5e:82:8d:60:e4:f9:d6:bc:e7:68:28:7e:3e:b2:52: 1b:26:6e:31:be:01:ec:a3:56:c2:e3:47:f6:37:32: 0f:e7:ce:58:d5:7f:9c:5d:98:44:ae:48:8f:09:32: 71:db:c0:25:8f:ee:98:ea:bc:7d:3d:0e:83:ab:56: 6d:56:c1:e7:cf:31:6a:46:19:38:33:9a:9d:f4:61: 29:a1:ff:95:10:f9:66:56:80:9f:e9:30:e9:1b:5b: 5c:e0:0b:65:0c:df:89:c0:1f:5d:c5:fd:0f:b2:fc: 2b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:44:50:84:88:BA:35:1B:41:35:50:0C:4A:68:39:31:83:2F:04:44 X509v3 Authority Key Identifier: keyid:72:62:20:D9:8B:CC:7D:C6:6A:3C:CF:37:67:7E:A0:A3:DB:09:0D:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmIg2YvMfcZqPM83Z36go9sJDaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:d9:6f:19:7e:27:4f:31:80:c3:be:b6:e1:96:55:99:72:40: 3e:95:80:a2:58:30:b2:6c:b4:01:9a:a8:0d:da:06:53:75:5a: 7c:c8:c9:d9:08:d2:9d:34:09:01:c4:28:2b:13:cc:c4:93:5f: c9:45:94:ef:84:51:bf:0c:77:b9:43:05:67:05:77:69:e3:b0: 83:e1:c9:a9:31:3d:a4:11:a9:26:bf:3d:0a:78:7a:4a:1e:48: a8:af:a2:3d:24:21:c6:0d:52:5e:8d:d4:85:d9:f6:23:37:a0: 37:21:e2:b3:38:f4:ae:79:6a:9f:6b:0f:06:00:f6:cc:a3:16: eb:c6:7c:26:ac:54:5f:bd:8b:8f:a8:01:75:d4:99:11:3d:86: 6d:0f:b7:73:4e:b0:0c:0d:2d:e9:5f:71:aa:23:28:7d:49:43: 23:4a:10:ff:b6:f1:d1:a8:40:7b:8a:99:b9:c0:22:59:f1:5f: 1e:bd:69:1b:64:87:37:f0:03:d7:1c:13:d1:34:2d:7d:b7:ff: 68:04:c0:a2:33:a2:ec:78:b8:d7:12:be:cc:7c:c8:8f:ec:0b: ab:ff:e9:f3:18:71:f2:18:9a:c8:24:7d:de:c8:82:76:be:49: 20:07:09:7f:f4:78:62:a9:2b:45:77:64:79:16:a3:ca:5c:35: 18:12:63:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEFFMjIxMTAvBgNVBAUTKDcyNjIyMEQ5OEJDQzdEQzY2QTNDQ0YzNzY3N0VBMEEz REIwOTBEQTQwHhcNMjYwOTI0MTgyNzI1WhcNMjYxMDAxMTgyNzI1WjAYMRYwFAYD VQQDEw02YWI1NmI4ZC04YTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApNJk+YwwiT8em6IjA93QU/YesCDyANP5QtJcoodART+9mjgEO88OKIQXX+LP 59qO8ykUUZVaJA+4CB83JtI3/FzOQV6T8v+UeIEE2veR5+pIS42Y8Rzu9mxmifx9 sdVD9UZ93iMJMxE9wmFKwSP8pghQUO/FjrB0mo6N6I1waZE86Ksj0yIcF1B3pNVZ 6EmZ9KPW41lego1g5PnWvOdoKH4+slIbJm4xvgHso1bC40f2NzIP585Y1X+cXZhE rkiPCTJx28Alj+6Y6rx9PQ6Dq1ZtVsHnzzFqRhk4M5qd9GEpof+VEPlmVoCf6TDp G1tc4AtlDN+JwB9dxf0PsvwrJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHFEUISI ujUbQTVQDEpoOTGDLwREMB8GA1UdIwQYMBaAFHJiINmLzH3GajzPN2d+oKPbCQ2k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QUUyMi9CMTc4NDM5RTFC QkYxMUVBQjZBNzRGNzFDNEY5QUUwMi9jbUlnMll2TWZjWnFQTTgzWjM2Z285c0pE YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NtSWcyWXZNZmNacVBNODNaMzZnbzlzSkRhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QUUyMi9CMTc4NDM5RTFCQkYxMUVBQjZBNzRGNzFDNEY5QUUwMi9jbUlnMll2TWZj WnFQTTgzWjM2Z285c0pEYVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmNlvGX4nTzGAw7624ZZVmXJAPpWAolgwsmy0AZqoDdoGU3VafMjJ2QjSnTQJ AcQoKxPMxJNfyUWU74RRvwx3uUMFZwV3aeOwg+HJqTE9pBGpJr89Cnh6Sh5IqK+i PSQhxg1SXo3Uhdn2IzegNyHiszj0rnlqn2sPBgD2zKMW68Z8JqxUX72Lj6gBddSZ ET2GbQ+3c06wDA0t6V9xqiMofUlDI0oQ/7bx0ahAe4qZucAiWfFfHr1pG2SHN/AD 1xwT0TQtfbf/aATAojOi7Hi41xK+zHzIj+wLq//p8xhx8hiayCR93siCdr5JIAcJ f/R4YqkrRXdkeRajylw1GBJjQw== -----END CERTIFICATE-----Generated at Sat Sep 26 01:55:24 2026 by rpki-client