$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft File: cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft (raw, json) Hash identifier: Mm2rtF6qzCn4rIGPaX7tTBM2IKpIKFTshcqTF0PlvAY= Subject key identifier: 79:29:B0:04:C3:20:F8:14:ED:BF:B9:76:D2:1D:96:75:5A:4D:54:8E Authority key identifier: 70:4B:FF:4E:CA:A9:DC:8A:8B:72:09:26:4C:60:7D:B5:F2:2F:24:82 Certificate issuer: /CN=A91B1DCF/serialNumber=704BFF4ECAA9DC8A8B7209264C607DB5F22F2482 Certificate serial: 05B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft Manifest number: 05A8 Signing time: Thu 24 Sep 2026 23:02:16 +0000 Manifest this update: Thu 24 Sep 2026 23:02:15 +0000 Manifest next update: Thu 01 Oct 2026 23:02:15 +0000 Files and hashes: 1: cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl (hash: 7zaHTOH8w5gJ7ahrhI6FBhUCcfJrJHFOy+AlmlVn7J0=) 2: 40565FA23C8311ECA86D031EC4F9AE02.roa (hash: AcOK+or8IBRyx2MYpgbbtYCs/ZUAEOaOnVDcLAu/Hbk=) 3: 2894A350705F11F1A7A1ED8F70A30FBC.roa (hash: f5hXdnbfoOJMTROR6C6aBv/K1AhGm1KG2D4JAjNeBYA=) 4: 3F3532743C8311ECA86D031EC4F9AE02.roa (hash: baibuYWIpr+G/3yWYzUEd75gq0D9onuWC061QPJtxB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 23:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1465 (0x5b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1DCF, serialNumber=704BFF4ECAA9DC8A8B7209264C607DB5F22F2482 Validity Not Before: Sep 24 23:02:15 2026 GMT Not After : Oct 1 23:02:15 2026 GMT Subject: CN=6ab5abf8-65fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:fb:b0:8f:db:06:eb:cd:9c:12:f8:12:49:6d: 90:a8:e9:ae:7f:bc:37:e0:57:58:1f:6f:0a:2d:43: f1:66:2b:4b:0b:0d:20:69:27:0b:5c:6b:32:a8:f4: a6:0f:0c:3f:93:33:ef:50:85:5d:a9:e6:f5:28:60: 1b:55:42:59:80:1c:3f:54:30:47:93:9c:a6:73:45: 22:25:24:fd:99:87:b7:ba:11:1c:8b:46:3f:d9:ce: 68:21:c7:c9:fd:db:fd:4a:c6:0f:e7:94:24:a8:3a: e7:b1:4e:e5:f1:93:98:0d:f9:5f:4b:ee:ef:6a:44: 3f:1c:e0:81:d0:cd:60:8f:0b:2b:96:57:6e:89:b5: 68:f1:2b:42:cc:9b:72:fe:7b:f9:9e:09:10:d7:5b: b8:f4:27:27:a0:88:e5:26:21:a3:71:6a:17:59:49: 41:44:f3:1b:41:f4:2a:af:b9:36:87:86:8b:c9:59: 39:ae:cd:93:28:19:f8:2b:8b:07:22:f3:f1:63:54: 4a:c7:4f:1d:6e:6a:6d:e7:77:11:8e:2b:52:4a:43: 46:38:8a:b2:be:1a:e8:52:06:20:4b:94:01:de:92: 90:32:b2:9c:7b:ae:3d:2a:15:b0:0c:7c:9e:0f:1d: aa:3e:ba:9b:da:3a:98:86:ff:ab:39:e1:e3:8a:63: df:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:29:B0:04:C3:20:F8:14:ED:BF:B9:76:D2:1D:96:75:5A:4D:54:8E X509v3 Authority Key Identifier: keyid:70:4B:FF:4E:CA:A9:DC:8A:8B:72:09:26:4C:60:7D:B5:F2:2F:24:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:b7:6f:8c:3b:64:d8:c1:a4:30:2c:a2:00:d8:12:ea:2b:67: 7d:b3:2d:f5:ec:36:0a:c4:dc:b1:ea:05:97:50:09:8c:cd:12: 72:61:b6:2f:b9:81:8b:1d:90:c9:9b:e0:15:48:c4:4b:8a:46: 62:4d:42:57:6f:ad:ef:2e:76:26:91:c6:2d:d1:fc:b5:a3:1b: ff:38:66:70:92:6c:4b:3e:68:db:0f:de:0f:27:61:f0:bc:93: 0f:91:5c:7e:9a:a9:39:3c:69:29:89:98:8f:21:57:d1:36:68: b6:8c:5a:34:42:5f:0f:df:90:76:c3:02:d3:6e:45:03:3f:14: e0:f9:89:60:3a:44:f6:b4:37:20:be:eb:03:a5:ac:2d:e0:b5: 3d:38:6b:2d:15:18:02:0f:8b:c4:a5:ff:1e:a3:cd:8f:07:85: 49:53:1d:c2:47:b3:8e:78:84:3c:ca:50:4f:a8:31:0b:12:81: b3:b7:a5:3e:71:19:5b:cf:b3:3a:b2:b8:93:ea:03:52:97:e3: 81:b9:72:b7:d4:95:20:16:21:46:c1:ff:af:83:f4:ec:df:60: 2f:8b:b0:a0:79:2d:22:39:35:0f:08:fe:51:3c:c7:37:68:f9: b9:f4:de:47:f5:08:c7:87:6a:0d:e3:8a:76:c2:44:d4:8a:1e: 37:ae:fc:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFEQ0YxMTAvBgNVBAUTKDcwNEJGRjRFQ0FBOURDOEE4QjcyMDkyNjRDNjA3REI1 RjIyRjI0ODIwHhcNMjYwOTI0MjMwMjE1WhcNMjYxMDAxMjMwMjE1WjAYMRYwFAYD VQQDEw02YWI1YWJmOC02NWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Puwj9sG682cEvgSSW2QqOmuf7w34FdYH28KLUPxZitLCw0gaScLXGsyqPSm Dww/kzPvUIVdqeb1KGAbVUJZgBw/VDBHk5ymc0UiJST9mYe3uhEci0Y/2c5oIcfJ /dv9SsYP55QkqDrnsU7l8ZOYDflfS+7vakQ/HOCB0M1gjwsrllduibVo8StCzJty /nv5ngkQ11u49CcnoIjlJiGjcWoXWUlBRPMbQfQqr7k2h4aLyVk5rs2TKBn4K4sH IvPxY1RKx08dbmpt53cRjitSSkNGOIqyvhroUgYgS5QB3pKQMrKce649KhWwDHye Dx2qPrqb2jqYhv+rOeHjimPf5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHkpsATD IPgU7b+5dtIdlnVaTVSOMB8GA1UdIwQYMBaAFHBL/07KqdyKi3IJJkxgfbXyLySC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMURDRi8zNjk3OEE3QzMw QkMxMUVDQTMwM0VGODZDNEY5QUUwMi9jRXZfVHNxcDNJcUxjZ2ttVEdCOXRmSXZK SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NFdl9Uc3FwM0lxTGNna21UR0I5dGZJdkpJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MURDRi8zNjk3OEE3QzMwQkMxMUVDQTMwM0VGODZDNEY5QUUwMi9jRXZfVHNxcDNJ cUxjZ2ttVEdCOXRmSXZKSUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg7dvjDtk2MGkMCyiANgS6itnfbMt9ew2CsTcseoFl1AJjM0ScmG2L7mBix2Q yZvgFUjES4pGYk1CV2+t7y52JpHGLdH8taMb/zhmcJJsSz5o2w/eDydh8LyTD5Fc fpqpOTxpKYmYjyFX0TZotoxaNEJfD9+QdsMC025FAz8U4PmJYDpE9rQ3IL7rA6Ws LeC1PThrLRUYAg+LxKX/HqPNjweFSVMdwkezjniEPMpQT6gxCxKBs7elPnEZW8+z OrK4k+oDUpfjgblyt9SVIBYhRsH/r4P07N9gL4uwoHktIjk1Dwj+UTzHN2j5ufTe R/UIx4dqDeOKdsJE1IoeN678hQ== -----END CERTIFICATE-----Generated at Fri Sep 25 08:59:39 2026 by rpki-client