$ rpki-client -vvvf rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft File: CgFEnq6g-yiFx_PFZO6TMac_P_k.mft (raw, json) Hash identifier: zT3vJBrl6g2qWgd2W/4r6Wl90XnQN6Kv2VcJJNUirC8= Subject key identifier: E3:C3:EE:C0:A1:38:6F:29:68:F3:0E:A6:52:61:B7:07:29:49:8B:56 Authority key identifier: 0A:01:44:9E:AE:A0:FB:28:85:C7:F3:C5:64:EE:93:31:A7:3F:3F:F9 Certificate issuer: /CN=A91567D5/serialNumber=0A01449EAEA0FB2885C7F3C564EE9331A73F3FF9 Certificate serial: 02B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft Manifest number: 0449 Signing time: Mon 21 Sep 2026 01:37:46 +0000 Manifest this update: Mon 21 Sep 2026 01:37:45 +0000 Manifest next update: Mon 28 Sep 2026 01:37:45 +0000 Files and hashes: 1: CgFEnq6g-yiFx_PFZO6TMac_P_k.crl (hash: 6Ti7BOL8fRpJSo/Dk+1AnnQ57FJoxXFjTNzQkBGlsn0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.crl rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 01:37:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 689 (0x2b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91567D5, serialNumber=0A01449EAEA0FB2885C7F3C564EE9331A73F3FF9 Validity Not Before: Sep 21 01:37:45 2026 GMT Not After : Sep 28 01:37:45 2026 GMT Subject: CN=6ab08a6a-d880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:71:54:03:19:90:72:38:bb:95:2b:70:aa:20: 73:cd:38:6d:9d:df:a4:a9:80:e6:f0:49:7a:7f:2b: 1a:e9:70:8a:12:a3:88:03:08:8f:81:67:cb:cc:0c: db:c9:c7:03:fd:21:44:c9:a1:70:22:68:fa:cf:b8: b5:a5:ae:0d:f0:81:cf:5e:6f:b8:b5:21:15:b4:38: 97:82:08:74:6b:a1:36:1d:47:61:2f:50:bd:b5:c6: 7d:73:3c:24:74:de:ba:26:07:9f:2f:70:62:b2:d1: 7a:d8:1d:1b:08:42:8b:6f:c7:a6:a5:66:72:a6:1b: 4f:3d:01:7b:6d:6f:7c:01:37:5a:c9:9e:4c:23:e1: d6:7e:1d:d8:25:ad:48:bf:00:26:2f:7c:1d:7b:21: d4:46:b5:88:55:a1:16:c2:3c:b0:f2:6a:6f:f2:1e: b4:b6:ce:31:2c:0f:a4:8f:68:b2:4e:42:43:40:91: 6e:89:a8:56:44:27:2c:f5:44:14:c6:48:b7:d3:ef: 65:d5:77:ba:7e:ce:46:99:65:81:d8:c6:1a:5f:19: b3:9a:07:5f:2e:bd:f2:06:0e:b3:aa:ea:fb:97:0b: c7:30:dc:89:0b:b8:f2:b2:5f:62:e2:c4:55:87:f4: 09:69:f4:44:5d:15:5c:78:28:2f:77:9a:d5:b0:1d: 09:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:C3:EE:C0:A1:38:6F:29:68:F3:0E:A6:52:61:B7:07:29:49:8B:56 X509v3 Authority Key Identifier: keyid:0A:01:44:9E:AE:A0:FB:28:85:C7:F3:C5:64:EE:93:31:A7:3F:3F:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:7c:21:fd:9f:a8:79:63:d0:d4:17:8b:24:c7:8c:92:98:65: b2:52:e4:f7:4b:d8:49:9c:6a:16:1e:0f:b5:30:93:6a:bf:85: 69:15:02:f3:cd:b9:98:89:37:c1:0b:55:9f:4a:08:4c:b0:47: ae:0d:3b:71:38:2e:a3:0e:b6:18:87:59:11:9b:52:31:3f:ca: 3c:e0:37:46:ee:1a:43:64:99:7e:71:12:73:07:1b:9b:89:8d: 93:a0:77:fa:4c:fe:a5:a4:82:4d:e0:65:f3:bd:e7:d6:74:fb: da:1b:6d:f1:e4:6a:d5:2d:d7:e0:52:3e:ac:78:d9:25:38:9c: 90:fb:50:9f:15:09:fa:aa:17:0f:2c:46:dd:91:04:d9:21:70: b6:24:51:56:9f:d0:cd:e4:4d:d5:a7:7d:ee:50:5f:d7:99:4c: 4b:6f:78:bc:b8:a0:d6:2f:0e:3c:94:81:5c:7d:9e:1c:8a:b4: 44:09:9a:db:81:29:c3:d8:31:e0:82:32:ff:14:46:d3:1a:df: 34:3e:80:c0:28:c3:fd:ba:92:64:1b:23:b6:3a:36:7c:9d:66: 21:59:e6:12:93:16:63:65:4b:5f:40:47:97:b8:fa:d0:f9:e4: 9f:5b:37:28:3a:8b:62:59:c3:6c:33:b6:7e:1c:ee:e4:a9:90: 00:fe:49:9b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY3RDUxMTAvBgNVBAUTKDBBMDE0NDlFQUVBMEZCMjg4NUM3RjNDNTY0RUU5MzMx QTczRjNGRjkwHhcNMjYwOTIxMDEzNzQ1WhcNMjYwOTI4MDEzNzQ1WjAYMRYwFAYD VQQDEw02YWIwOGE2YS1kODgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2XFUAxmQcji7lStwqiBzzThtnd+kqYDm8El6fysa6XCKEqOIAwiPgWfLzAzb yccD/SFEyaFwImj6z7i1pa4N8IHPXm+4tSEVtDiXggh0a6E2HUdhL1C9tcZ9czwk dN66JgefL3BistF62B0bCEKLb8empWZyphtPPQF7bW98ATdayZ5MI+HWfh3YJa1I vwAmL3wdeyHURrWIVaEWwjyw8mpv8h60ts4xLA+kj2iyTkJDQJFuiahWRCcs9UQU xki30+9l1Xe6fs5GmWWB2MYaXxmzmgdfLr3yBg6zqur7lwvHMNyJC7jysl9i4sRV h/QJafREXRVceCgvd5rVsB0JnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOPD7sCh OG8paPMOplJhtwcpSYtWMB8GA1UdIwQYMBaAFAoBRJ6uoPsohcfzxWTukzGnPz/5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjdENS9ERUZDQTQ1MkI0 MUIxMUVEQjZDOERENjdDNEY5QUUwMi9DZ0ZFbnE2Zy15aUZ4X1BGWk82VE1hY19Q X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NnRkVucTZnLXlpRnhfUEZaTzZUTWFjX1Bfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjdENS9ERUZDQTQ1MkI0MUIxMUVEQjZDOERENjdDNEY5QUUwMi9DZ0ZFbnE2Zy15 aUZ4X1BGWk82VE1hY19QX2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcXwh/Z+oeWPQ1BeLJMeMkphlslLk90vYSZxqFh4PtTCTar+FaRUC8825mIk3 wQtVn0oITLBHrg07cTguow62GIdZEZtSMT/KPOA3Ru4aQ2SZfnEScwcbm4mNk6B3 +kz+paSCTeBl873n1nT72htt8eRq1S3X4FI+rHjZJTickPtQnxUJ+qoXDyxG3ZEE 2SFwtiRRVp/QzeRN1ad97lBf15lMS294vLig1i8OPJSBXH2eHIq0RAma24Epw9gx 4IIy/xRG0xrfND6AwCjD/bqSZBsjtjo2fJ1mIVnmEpMWY2VLX0BHl7j60Pnkn1s3 KDqLYlnDbDO2fhzu5KmQAP5Jmw== -----END CERTIFICATE-----Generated at Tue Sep 22 22:24:14 2026 by rpki-client