$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft File: cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft (raw, json) Hash identifier: Db2p0+iU6d5l0U1FYPeBuoGA3m/8IlvtsZnnsjzFttQ= Subject key identifier: CB:8E:25:AA:B7:31:EC:5C:F7:E0:0D:B1:24:89:6F:5A:6D:06:FA:35 Authority key identifier: 70:4B:FF:4E:CA:A9:DC:8A:8B:72:09:26:4C:60:7D:B5:F2:2F:24:82 Certificate issuer: /CN=A91B1DCF/serialNumber=704BFF4ECAA9DC8A8B7209264C607DB5F22F2482 Certificate serial: 05B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft Manifest number: 05A7 Signing time: Tue 22 Sep 2026 22:50:58 +0000 Manifest this update: Tue 22 Sep 2026 22:50:58 +0000 Manifest next update: Tue 29 Sep 2026 22:50:58 +0000 Files and hashes: 1: cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl (hash: qHnw2iz/WoJ6+9a59CeMSmjqFdxEWlVf9iAoTM8yhOs=) 2: 40565FA23C8311ECA86D031EC4F9AE02.roa (hash: AcOK+or8IBRyx2MYpgbbtYCs/ZUAEOaOnVDcLAu/Hbk=) 3: 2894A350705F11F1A7A1ED8F70A30FBC.roa (hash: f5hXdnbfoOJMTROR6C6aBv/K1AhGm1KG2D4JAjNeBYA=) 4: 3F3532743C8311ECA86D031EC4F9AE02.roa (hash: baibuYWIpr+G/3yWYzUEd75gq0D9onuWC061QPJtxB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 22:50:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1464 (0x5b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1DCF, serialNumber=704BFF4ECAA9DC8A8B7209264C607DB5F22F2482 Validity Not Before: Sep 22 22:50:58 2026 GMT Not After : Sep 29 22:50:58 2026 GMT Subject: CN=6ab30652-ff40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:29:c5:67:11:03:0d:6b:36:bc:2a:56:ab:0b: 02:a7:26:e5:b1:55:b9:c4:07:52:29:06:9b:b7:36: 31:75:85:dc:16:de:12:e4:96:23:b8:7c:86:97:d6: af:8f:3c:1f:2f:07:ea:0a:bf:69:cb:19:aa:5b:49: 2a:4e:5f:fc:6e:dd:29:e7:a3:3f:a9:8a:d8:ff:41: 63:f4:5f:0a:8f:2c:16:92:02:f2:a6:93:45:d7:8f: 10:3c:ea:bb:d1:78:b1:e8:9d:c9:55:76:6e:2d:82: 53:1a:dd:ed:20:4f:81:52:da:fd:a2:46:dc:04:fa: c9:7d:62:23:ef:e3:0a:08:17:21:75:10:3c:d6:39: 59:3a:3d:29:3f:7a:03:fe:a0:0a:2f:91:44:8b:39: 76:ee:aa:fb:5b:31:cd:95:b1:65:84:df:2d:2c:97: 01:17:d7:f5:8c:4d:4c:60:b1:64:0e:93:2f:3f:3a: 16:65:c6:66:fc:1b:9a:bc:0f:b8:ac:71:4f:af:21: 9c:aa:07:72:87:5e:46:4d:d2:cf:99:b2:0c:ee:49: b3:c6:40:9a:b9:5e:50:4b:dc:47:42:07:af:19:ea: 0d:9d:48:24:36:76:01:ad:c0:8d:c3:f1:c2:cc:d3: c3:fb:d3:d6:ac:e4:26:11:ee:b6:65:19:ff:47:16: ec:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:8E:25:AA:B7:31:EC:5C:F7:E0:0D:B1:24:89:6F:5A:6D:06:FA:35 X509v3 Authority Key Identifier: keyid:70:4B:FF:4E:CA:A9:DC:8A:8B:72:09:26:4C:60:7D:B5:F2:2F:24:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:e5:be:17:da:9a:27:b1:cc:da:3a:0a:ad:9c:e9:65:1c:06: 2e:a6:4a:61:24:c2:3b:e2:d0:e2:92:1a:74:d9:ef:53:f5:b2: 97:a5:69:1f:e5:e8:e1:f0:23:e2:f5:20:8d:2d:30:07:0c:87: 1a:8f:3d:a0:5e:76:fa:73:02:68:4e:45:0d:db:40:04:86:e3: 60:e2:be:d8:4e:64:04:3a:fb:ed:59:b8:ee:f9:c2:ea:40:cb: e0:bc:65:da:93:1c:69:81:a7:1e:b6:6e:9f:20:a5:f0:bc:87: ba:f8:57:90:00:b1:49:1b:45:ab:47:3d:4e:5c:b9:3c:69:90: d5:3f:ee:1b:cb:83:8c:ab:71:4e:cf:1b:e0:9d:53:01:ec:fc: 9b:2b:3c:40:2a:e4:ab:f6:35:8d:de:f7:90:e0:ee:57:c9:05: 9e:29:18:a5:44:cb:ac:16:61:f1:01:6a:45:48:8e:51:9f:5d: d5:66:6d:bf:b6:78:da:93:fa:f8:b9:7e:76:5c:86:3d:1f:8a: d6:34:6d:9d:53:30:38:dc:00:86:ce:d4:df:dd:fb:c6:0b:d9: 35:42:16:50:00:f6:38:bb:16:31:34:9b:21:3a:32:11:7a:03: 61:16:ac:b4:a2:6f:7f:ea:50:c8:65:13:0e:b7:54:e8:4e:94: bf:0c:a6:e3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFEQ0YxMTAvBgNVBAUTKDcwNEJGRjRFQ0FBOURDOEE4QjcyMDkyNjRDNjA3REI1 RjIyRjI0ODIwHhcNMjYwOTIyMjI1MDU4WhcNMjYwOTI5MjI1MDU4WjAYMRYwFAYD VQQDEw02YWIzMDY1Mi1mZjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjynFZxEDDWs2vCpWqwsCpyblsVW5xAdSKQabtzYxdYXcFt4S5JYjuHyGl9av jzwfLwfqCr9pyxmqW0kqTl/8bt0p56M/qYrY/0Fj9F8KjywWkgLyppNF148QPOq7 0Xix6J3JVXZuLYJTGt3tIE+BUtr9okbcBPrJfWIj7+MKCBchdRA81jlZOj0pP3oD /qAKL5FEizl27qr7WzHNlbFlhN8tLJcBF9f1jE1MYLFkDpMvPzoWZcZm/BuavA+4 rHFPryGcqgdyh15GTdLPmbIM7kmzxkCauV5QS9xHQgevGeoNnUgkNnYBrcCNw/HC zNPD+9PWrOQmEe62ZRn/RxbsFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMuOJaq3 Mexc9+ANsSSJb1ptBvo1MB8GA1UdIwQYMBaAFHBL/07KqdyKi3IJJkxgfbXyLySC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMURDRi8zNjk3OEE3QzMw QkMxMUVDQTMwM0VGODZDNEY5QUUwMi9jRXZfVHNxcDNJcUxjZ2ttVEdCOXRmSXZK SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NFdl9Uc3FwM0lxTGNna21UR0I5dGZJdkpJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MURDRi8zNjk3OEE3QzMwQkMxMUVDQTMwM0VGODZDNEY5QUUwMi9jRXZfVHNxcDNJ cUxjZ2ttVEdCOXRmSXZKSUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ+W+F9qaJ7HM2joKrZzpZRwGLqZKYSTCO+LQ4pIadNnvU/Wyl6VpH+Xo4fAj 4vUgjS0wBwyHGo89oF52+nMCaE5FDdtABIbjYOK+2E5kBDr77Vm47vnC6kDL4Lxl 2pMcaYGnHrZunyCl8LyHuvhXkACxSRtFq0c9Tly5PGmQ1T/uG8uDjKtxTs8b4J1T Aez8mys8QCrkq/Y1jd73kODuV8kFnikYpUTLrBZh8QFqRUiOUZ9d1WZtv7Z42pP6 +Ll+dlyGPR+K1jRtnVMwONwAhs7U3937xgvZNUIWUAD2OLsWMTSbIToyEXoDYRas tKJvf+pQyGUTDrdU6E6Uvwym4w== -----END CERTIFICATE-----Generated at Thu Sep 24 11:00:44 2026 by rpki-client