$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B4053/3640CB9450E111F091C4BB74C4F9AE02/cgqmbzbBRgrUvDrGkvlltxdKWOA.mft File: cgqmbzbBRgrUvDrGkvlltxdKWOA.mft (raw, json) Hash identifier: ewM0rTCQDnTD1Dfum6ofWa9XsV8F0xIATSic5xghEGI= Subject key identifier: 03:47:0C:04:9B:AD:53:C7:2F:67:66:3F:74:C1:48:7E:C9:18:AD:39 Authority key identifier: 72:0A:A6:6F:36:C1:46:0A:D4:BC:3A:C6:92:F9:65:B7:17:4A:58:E0 Certificate issuer: /CN=A91B4053/serialNumber=720AA66F36C1460AD4BC3AC692F965B7174A58E0 Certificate serial: F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cgqmbzbBRgrUvDrGkvlltxdKWOA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4053/3640CB9450E111F091C4BB74C4F9AE02/cgqmbzbBRgrUvDrGkvlltxdKWOA.mft Manifest number: F5 Signing time: Sat 03 Oct 2026 07:03:15 +0000 Manifest this update: Sat 03 Oct 2026 07:03:15 +0000 Manifest next update: Sat 10 Oct 2026 07:03:15 +0000 Files and hashes: 1: cgqmbzbBRgrUvDrGkvlltxdKWOA.crl (hash: A59BCp99+OKX61FW6bADnZO9D4uZryfp3wljdbEhmsM=) 2: AC8BCC2E50E411F0B8E7D45DC4F9AE02.roa (hash: 0Xdlp+Jjf+yeb2d/P0L7IU19P+mYj01Gp9Tj8N+RxJQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4053/3640CB9450E111F091C4BB74C4F9AE02/cgqmbzbBRgrUvDrGkvlltxdKWOA.crl rsync://rpki.apnic.net/member_repository/A91B4053/3640CB9450E111F091C4BB74C4F9AE02/cgqmbzbBRgrUvDrGkvlltxdKWOA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cgqmbzbBRgrUvDrGkvlltxdKWOA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 07:03:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4053, serialNumber=720AA66F36C1460AD4BC3AC692F965B7174A58E0 Validity Not Before: Oct 3 07:03:15 2026 GMT Not After : Oct 10 07:03:15 2026 GMT Subject: CN=6ac0a8b3-a0cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:2b:6f:75:40:c4:ea:37:de:7c:5f:94:93:69: bd:57:4f:4e:a1:1b:e8:64:96:7b:4a:72:03:5d:55: 5b:a1:00:17:29:1d:0c:ad:5e:20:89:d8:b3:10:9e: 7b:45:c3:8a:f9:77:7a:13:e7:74:56:f8:90:55:56: 5b:27:f6:03:f3:51:9e:c4:a7:bc:89:ff:ac:55:be: 3b:9a:45:9c:49:3c:ed:f2:48:cd:91:97:3c:9b:19: 7d:39:76:1f:15:75:18:6e:b8:b2:88:a9:13:f3:ad: 25:b2:9b:1b:5d:b4:04:ea:6f:0a:d3:42:1d:8d:2a: 0d:4b:d6:38:9f:b9:04:92:30:6b:12:12:e6:5f:ae: 38:bf:1e:a7:5a:26:06:35:b9:59:09:66:3f:3a:ea: f8:62:fa:be:0a:c7:0f:93:e3:1e:31:1c:b4:47:0d: 39:c1:23:24:4e:f4:ae:d0:b7:ac:f6:fd:70:b4:f5: 46:e6:89:5c:55:72:76:73:b2:86:30:6d:be:7f:9a: f1:6c:27:4b:c3:e2:a6:52:0d:f8:45:e6:8e:2a:d8: 42:44:e4:f3:66:fb:31:c3:65:fd:d0:31:d4:0a:68: 44:93:0b:97:13:ee:d3:6d:98:82:9c:8e:f2:43:f6: c9:7a:79:34:d9:ac:61:84:86:e3:a5:73:81:1b:94: 08:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:47:0C:04:9B:AD:53:C7:2F:67:66:3F:74:C1:48:7E:C9:18:AD:39 X509v3 Authority Key Identifier: keyid:72:0A:A6:6F:36:C1:46:0A:D4:BC:3A:C6:92:F9:65:B7:17:4A:58:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4053/3640CB9450E111F091C4BB74C4F9AE02/cgqmbzbBRgrUvDrGkvlltxdKWOA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cgqmbzbBRgrUvDrGkvlltxdKWOA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4053/3640CB9450E111F091C4BB74C4F9AE02/cgqmbzbBRgrUvDrGkvlltxdKWOA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:e3:bf:d3:f4:52:29:2d:bf:55:44:6d:c5:4a:83:f1:c0:74: dd:b9:34:4a:a4:d8:77:6a:f6:b8:18:cc:10:dd:8f:b2:79:1a: f3:67:da:1e:1d:64:b1:3f:ed:e6:ad:08:81:7b:e7:aa:64:25: 2d:48:7c:10:38:09:2d:7b:db:e1:11:1d:79:2d:d7:27:77:98: 33:86:d4:ae:49:be:c6:e6:03:f1:df:50:d6:90:8b:31:c8:dc: 8d:da:44:e0:27:2f:9f:30:e0:f2:48:98:90:a8:b3:3f:ad:0c: 79:04:72:33:9e:f3:c9:c4:c5:bd:0e:38:89:c9:a8:db:8e:76: 1b:d6:2f:68:26:f7:78:4b:d9:60:c6:2b:5c:5c:c7:7b:d8:2d: df:04:64:45:71:30:df:cf:25:81:76:4b:a1:8e:a7:96:fe:35: 0b:f5:33:be:41:8a:97:12:b5:ec:ac:50:cf:da:99:b9:a8:67: c6:f2:10:db:cb:05:ef:ba:c6:c2:fe:78:7b:47:be:da:48:13: b7:16:03:07:c5:d7:50:fa:9e:ac:c1:90:d0:5e:4c:16:8f:52: 1b:6a:2f:db:23:4e:ab:4c:6c:d0:e1:15:93:e3:8f:3d:0b:98: 2a:67:bd:88:51:65:a3:76:a5:22:6e:c0:b6:55:e4:98:a1:2f: 4c:8b:3a:04 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQwNTMxMTAvBgNVBAUTKDcyMEFBNjZGMzZDMTQ2MEFENEJDM0FDNjkyRjk2NUI3 MTc0QTU4RTAwHhcNMjYxMDAzMDcwMzE1WhcNMjYxMDEwMDcwMzE1WjAYMRYwFAYD VQQDEw02YWMwYThiMy1hMGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ytvdUDE6jfefF+Uk2m9V09OoRvoZJZ7SnIDXVVboQAXKR0MrV4gidizEJ57 RcOK+Xd6E+d0VviQVVZbJ/YD81GexKe8if+sVb47mkWcSTzt8kjNkZc8mxl9OXYf FXUYbriyiKkT860lspsbXbQE6m8K00IdjSoNS9Y4n7kEkjBrEhLmX644vx6nWiYG NblZCWY/Our4Yvq+CscPk+MeMRy0Rw05wSMkTvSu0Les9v1wtPVG5olcVXJ2c7KG MG2+f5rxbCdLw+KmUg34ReaOKthCROTzZvsxw2X90DHUCmhEkwuXE+7TbZiCnI7y Q/bJenk02axhhIbjpXOBG5QIWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFANHDASb rVPHL2dmP3TBSH7JGK05MB8GA1UdIwQYMBaAFHIKpm82wUYK1Lw6xpL5ZbcXSljg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDA1My8zNjQwQ0I5NDUw RTExMUYwOTFDNEJCNzRDNEY5QUUwMi9jZ3FtYnpiQlJnclV2RHJHa3ZsbHR4ZEtX T0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NncW1iemJCUmdyVXZEckdrdmxsdHhkS1dPQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDA1My8zNjQwQ0I5NDUwRTExMUYwOTFDNEJCNzRDNEY5QUUwMi9jZ3FtYnpiQlJn clV2RHJHa3ZsbHR4ZEtXT0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAW+O/0/RSKS2/VURtxUqD8cB03bk0SqTYd2r2uBjMEN2Psnka82faHh1ksT/t 5q0IgXvnqmQlLUh8EDgJLXvb4REdeS3XJ3eYM4bUrkm+xuYD8d9Q1pCLMcjcjdpE 4CcvnzDg8kiYkKizP60MeQRyM57zycTFvQ44icmo2452G9YvaCb3eEvZYMYrXFzH e9gt3wRkRXEw388lgXZLoY6nlv41C/UzvkGKlxK17KxQz9qZuahnxvIQ28sF77rG wv54e0e+2kgTtxYDB8XXUPqerMGQ0F5MFo9SG2ov2yNOq0xs0OEVk+OPPQuYKme9 iFFlo3alIm7AtlXkmKEvTIs6BA== -----END CERTIFICATE-----Generated at Sun Oct 4 18:35:09 2026 by rpki-client