$ rpki-client -vvvf rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft File: CBKglmLws-NPK1pRwz6OknA-Q2k.mft (raw, json) Hash identifier: 2xW6rEa9cTswJGkoDvj7vSwSxsyrf93gmgmayfmyTo0= Subject key identifier: 7E:B6:F4:5A:9E:07:CB:0B:FD:3A:D2:6B:C8:60:97:99:13:41:5C:1D Authority key identifier: 08:12:A0:96:62:F0:B3:E3:4F:2B:5A:51:C3:3E:8E:92:70:3E:43:69 Certificate issuer: /CN=A91547EC/serialNumber=0812A09662F0B3E34F2B5A51C33E8E92703E4369 Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft Manifest number: C7 Signing time: Wed 23 Sep 2026 06:34:59 +0000 Manifest this update: Wed 23 Sep 2026 06:34:59 +0000 Manifest next update: Wed 30 Sep 2026 06:34:59 +0000 Files and hashes: 1: CBKglmLws-NPK1pRwz6OknA-Q2k.crl (hash: 6jutWKnpBJFtIR4RKQs3F00s6OOtADtYVYfrnfPsd0Y=) 2: 7CB1102487DD11F0A89FB377C4F9AE02.roa (hash: LJuHTr9dIvZYkAmMksiQJJP2qElg6VwwLMqlMwzQK3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.crl rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 06:34:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91547EC, serialNumber=0812A09662F0B3E34F2B5A51C33E8E92703E4369 Validity Not Before: Sep 23 06:34:59 2026 GMT Not After : Sep 30 06:34:59 2026 GMT Subject: CN=6ab37313-ebe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2c:52:26:b1:9e:da:4c:3c:6a:9f:ba:40:52: fb:bf:08:d9:66:6f:05:08:c3:d8:51:b1:c5:4b:3b: b2:ce:4d:2e:f0:31:7b:7f:71:93:81:c9:c2:52:99: 27:f7:22:b9:09:d9:b8:8b:00:68:e7:e0:15:6e:c0: c8:86:bd:a2:f7:1c:98:88:ba:cc:3e:ce:73:9b:9c: e9:83:5e:66:34:2a:aa:c8:59:f0:07:09:53:40:86: 06:6d:17:19:4c:01:87:81:96:95:18:cf:1d:80:4a: 9d:1c:76:31:f5:22:66:10:7a:4c:b1:b2:48:34:e9: 5e:53:68:d9:2b:f6:c3:fb:db:67:6a:11:b4:82:9f: 95:07:b9:c9:8e:17:ee:6e:f4:48:a2:51:67:1f:5a: d3:a8:21:cf:ee:ad:45:99:0f:f2:5b:ac:3b:d4:2a: eb:02:a1:bf:d7:9e:4c:84:4e:cd:dc:71:4e:71:b5: 69:0a:6d:f4:7b:e6:4d:5c:4e:19:91:12:43:24:76: 97:ff:67:f1:e0:70:15:2d:f4:c0:11:53:5f:b5:76: e8:5a:ae:50:bf:1b:54:96:a0:36:fa:38:5f:09:b0: 38:7d:a9:6d:c5:5b:90:12:ec:66:5f:eb:f6:64:cc: bd:db:8e:bd:37:b0:f2:70:63:a4:71:6a:84:12:a7: b7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:B6:F4:5A:9E:07:CB:0B:FD:3A:D2:6B:C8:60:97:99:13:41:5C:1D X509v3 Authority Key Identifier: keyid:08:12:A0:96:62:F0:B3:E3:4F:2B:5A:51:C3:3E:8E:92:70:3E:43:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:41:14:ff:c7:67:21:9b:b3:ef:48:9a:73:a8:45:76:be:9a: e0:9e:7a:83:a2:a1:9e:81:ab:6e:aa:99:c1:f2:5f:9c:b2:a1: 7d:24:3a:4f:b5:1c:cd:7b:d0:e4:cf:bd:c8:58:6e:9b:4b:c2: 49:64:f0:ac:ad:3a:99:d1:7f:26:cf:ef:bd:28:5c:55:0d:76: 36:5f:ae:7d:0d:11:0f:4f:a5:13:e5:75:37:82:d6:9d:cf:fc: cb:72:91:38:69:2c:40:f1:a1:2b:c6:0a:cf:4f:45:cb:a5:26: 08:22:65:67:34:02:91:35:f2:4d:6c:7d:24:85:dc:b3:3f:73: 5a:7e:fb:35:0c:00:0d:f2:61:6e:b9:d6:75:b0:c9:af:3b:89: 17:fa:a7:4e:77:30:75:2e:71:de:0b:be:b8:93:0d:81:be:bc: 79:99:62:d8:85:8e:b4:dc:95:86:8d:42:cc:4a:54:9a:a4:84: b0:d8:31:fd:2b:fc:3e:ed:96:dd:c1:19:bd:0e:82:19:1a:bc: 36:6e:cf:52:45:f8:95:11:36:fc:c7:e5:95:c2:88:bc:4b:7c: 8e:e5:49:47:25:c6:f9:90:e5:df:07:a2:92:cf:fb:28:83:bf: 3e:5b:99:53:70:8c:bf:85:ef:e7:0c:da:57:48:31:a6:2c:36: 0e:2d:98:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ3RUMxMTAvBgNVBAUTKDA4MTJBMDk2NjJGMEIzRTM0RjJCNUE1MUMzM0U4RTky NzAzRTQzNjkwHhcNMjYwOTIzMDYzNDU5WhcNMjYwOTMwMDYzNDU5WjAYMRYwFAYD VQQDEw02YWIzNzMxMy1lYmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzSxSJrGe2kw8ap+6QFL7vwjZZm8FCMPYUbHFSzuyzk0u8DF7f3GTgcnCUpkn 9yK5Cdm4iwBo5+AVbsDIhr2i9xyYiLrMPs5zm5zpg15mNCqqyFnwBwlTQIYGbRcZ TAGHgZaVGM8dgEqdHHYx9SJmEHpMsbJINOleU2jZK/bD+9tnahG0gp+VB7nJjhfu bvRIolFnH1rTqCHP7q1FmQ/yW6w71CrrAqG/155MhE7N3HFOcbVpCm30e+ZNXE4Z kRJDJHaX/2fx4HAVLfTAEVNftXboWq5QvxtUlqA2+jhfCbA4faltxVuQEuxmX+v2 ZMy92469N7DycGOkcWqEEqe3GQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH629Fqe B8sL/TrSa8hgl5kTQVwdMB8GA1UdIwQYMBaAFAgSoJZi8LPjTytaUcM+jpJwPkNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDdFQy8yNTYzNTdDODg3 REQxMUYwQjc0Q0ZFNzZDNEY5QUUwMi9DQktnbG1Md3MtTlBLMXBSd3o2T2tuQS1R MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0NCS2dsbUx3cy1OUEsxcFJ3ejZPa25BLVEyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDdFQy8yNTYzNTdDODg3REQxMUYwQjc0Q0ZFNzZDNEY5QUUwMi9DQktnbG1Md3Mt TlBLMXBSd3o2T2tuQS1RMmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYUEU/8dnIZuz70iac6hFdr6a4J56g6KhnoGrbqqZwfJfnLKhfSQ6T7UczXvQ 5M+9yFhum0vCSWTwrK06mdF/Js/vvShcVQ12Nl+ufQ0RD0+lE+V1N4LWnc/8y3KR OGksQPGhK8YKz09Fy6UmCCJlZzQCkTXyTWx9JIXcsz9zWn77NQwADfJhbrnWdbDJ rzuJF/qnTncwdS5x3gu+uJMNgb68eZli2IWOtNyVho1CzEpUmqSEsNgx/Sv8Pu2W 3cEZvQ6CGRq8Nm7PUkX4lRE2/MfllcKIvEt8juVJRyXG+ZDl3weiks/7KIO/PluZ U3CMv4Xv5wzaV0gxpiw2Di2YRQ== -----END CERTIFICATE-----Generated at Wed Sep 23 19:09:17 2026 by rpki-client