$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft File: CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft (raw, json) Hash identifier: beLcwFkpi/8ezYIyiS5tfpj9HyuNQFrYz4SB04r+NsA= Subject key identifier: 52:4C:63:B0:86:14:22:4A:46:CD:67:1E:22:FD:57:22:88:72:08:38 Authority key identifier: 08:D6:8C:F4:50:07:45:37:5F:F2:CC:58:4B:A5:FB:E5:77:BE:E3:3F Certificate issuer: /CN=A91B8D33/serialNumber=08D68CF4500745375FF2CC584BA5FBE577BEE33F Certificate serial: 025B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft Manifest number: 0248 Signing time: Fri 25 Sep 2026 02:32:15 +0000 Manifest this update: Fri 25 Sep 2026 02:32:15 +0000 Manifest next update: Fri 02 Oct 2026 02:32:15 +0000 Files and hashes: 1: CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl (hash: DsLRN2ceQvQThV7k1beFjHF+5I48irHySlKdKuDBBoU=) 2: 86D7DAE6D1C211EF9AA9410EC4F9AE02.roa (hash: w4ebJqxqcYTakZgYgczYh31d+UQ4emy9J0fYQLqlsn0=) 3: E62F8796D1BD11EFBCCC0B68C4F9AE02.roa (hash: C+zKPU7xS4ZOCm7vmpXaLXUhKiAqHKCATTbpyOC3iPI=) 4: C698E13ED1BD11EF9C00D867C4F9AE02.roa (hash: gcd1uORIwB588IprBp+ptXbcFbF7rS1AehPmjHP27TY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 02:32:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 603 (0x25b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8D33, serialNumber=08D68CF4500745375FF2CC584BA5FBE577BEE33F Validity Not Before: Sep 25 02:32:15 2026 GMT Not After : Oct 2 02:32:15 2026 GMT Subject: CN=6ab5dd2f-1952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f1:12:7d:ef:24:f6:f5:b5:c3:9f:a7:e4:0d: 78:64:dc:c9:60:3e:2b:4d:78:d8:26:f4:a0:d1:ab: 99:34:41:b6:bf:28:1b:87:ae:8d:45:3d:7e:9d:a5: a5:a3:5f:4d:6a:c7:de:42:43:34:fc:dc:e4:78:ae: 33:27:de:4a:4c:c0:4d:a1:6d:e5:73:f9:a9:5b:2c: 29:4e:f6:fc:23:f3:72:ab:08:d2:66:5d:bb:48:95: 16:56:ec:e3:26:78:bf:5f:f3:53:b0:b2:f3:50:a2: 29:7f:ef:91:1b:8c:41:ca:ea:74:bc:74:1e:96:bc: 79:71:47:9e:85:00:69:b4:96:14:c7:73:74:15:a9: e5:f1:2e:64:05:e2:d7:5d:0d:2c:60:c8:2a:91:70: 86:22:e2:2f:d2:fb:96:ac:fd:b2:61:be:7a:e3:cb: 81:70:98:d4:89:ca:b3:53:f2:57:84:53:29:98:c3: 8d:94:33:8a:19:24:25:2c:23:97:9f:ef:93:d2:43: 52:77:a1:80:ee:e8:48:b1:12:a3:22:d8:9e:74:39: 0e:d6:b0:50:fc:07:ed:4e:52:30:6e:74:23:92:b2: d5:bc:d9:55:32:fa:e2:e8:25:ad:97:40:db:5e:b8: f3:cb:06:d6:1d:03:41:8a:62:09:8c:e4:77:fb:28: b0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:4C:63:B0:86:14:22:4A:46:CD:67:1E:22:FD:57:22:88:72:08:38 X509v3 Authority Key Identifier: keyid:08:D6:8C:F4:50:07:45:37:5F:F2:CC:58:4B:A5:FB:E5:77:BE:E3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:bd:63:3b:ae:ab:1f:16:2a:13:4f:df:57:00:31:16:99:35: 31:66:7d:b4:d5:f6:1c:45:1d:1a:0f:4a:13:b4:46:dc:f0:8b: 52:83:19:e7:38:47:05:e4:47:90:6f:5c:af:64:d9:a1:60:34: 47:bd:9c:66:9f:17:0b:6e:90:b4:94:17:44:fb:6c:be:29:24: 63:f1:8d:12:4b:e9:44:6c:56:eb:b1:5f:fc:50:9f:7a:80:c4: 18:ed:ea:73:aa:dd:11:4d:64:6c:01:cb:b2:07:90:e7:71:ba: 8c:d6:93:b7:8e:ac:15:f4:a1:22:cf:f5:c7:e4:1a:05:75:84: 74:9d:8b:f1:8c:d4:ad:d1:75:12:92:72:62:a5:ab:32:a1:b5: ec:2d:d2:27:9d:d2:88:33:f5:00:2c:f1:93:6a:c6:77:68:2a: 50:ea:55:ca:e6:d9:59:56:4c:3a:47:88:f4:69:ee:bc:8a:34: dd:86:d2:62:f7:cd:e5:73:6d:fb:94:ea:10:2c:33:a8:56:b4: df:bb:af:b6:d6:bc:58:d5:b2:a1:dd:e2:4f:ae:88:70:5c:e0: 90:18:16:55:47:ba:55:2b:cb:f1:7d:1d:63:d5:16:c1:2d:e9: 87:66:c2:30:ec:b8:ef:bf:aa:9f:32:0f:24:e2:cd:d3:c3:be: df:96:49:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhEMzMxMTAvBgNVBAUTKDA4RDY4Q0Y0NTAwNzQ1Mzc1RkYyQ0M1ODRCQTVGQkU1 NzdCRUUzM0YwHhcNMjYwOTI1MDIzMjE1WhcNMjYxMDAyMDIzMjE1WjAYMRYwFAYD VQQDEw02YWI1ZGQyZi0xOTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyvESfe8k9vW1w5+n5A14ZNzJYD4rTXjYJvSg0auZNEG2vygbh66NRT1+naWl o19NasfeQkM0/NzkeK4zJ95KTMBNoW3lc/mpWywpTvb8I/NyqwjSZl27SJUWVuzj Jni/X/NTsLLzUKIpf++RG4xByup0vHQelrx5cUeehQBptJYUx3N0Fanl8S5kBeLX XQ0sYMgqkXCGIuIv0vuWrP2yYb5648uBcJjUicqzU/JXhFMpmMONlDOKGSQlLCOX n++T0kNSd6GA7uhIsRKjItiedDkO1rBQ/AftTlIwbnQjkrLVvNlVMvri6CWtl0Db XrjzywbWHQNBimIJjOR3+yiwLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFJMY7CG FCJKRs1nHiL9VyKIcgg4MB8GA1UdIwQYMBaAFAjWjPRQB0U3X/LMWEul++V3vuM/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEQzMy81OTYyNjcxMDQ3 NzcxMUVFQTZCRDUzN0VDNEY5QUUwMi9DTmFNOUZBSFJUZGY4c3hZUzZYNzVYZS00 ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NOYU05RkFIUlRkZjhzeFlTNlg3NVhlLTR6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEQzMy81OTYyNjcxMDQ3NzcxMUVFQTZCRDUzN0VDNEY5QUUwMi9DTmFNOUZBSFJU ZGY4c3hZUzZYNzVYZS00ejgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUb1jO66rHxYqE0/fVwAxFpk1MWZ9tNX2HEUdGg9KE7RG3PCLUoMZ5zhHBeRH kG9cr2TZoWA0R72cZp8XC26QtJQXRPtsvikkY/GNEkvpRGxW67Ff/FCfeoDEGO3q c6rdEU1kbAHLsgeQ53G6jNaTt46sFfShIs/1x+QaBXWEdJ2L8YzUrdF1EpJyYqWr MqG17C3SJ53SiDP1ACzxk2rGd2gqUOpVyubZWVZMOkeI9GnuvIo03YbSYvfN5XNt +5TqECwzqFa037uvtta8WNWyod3iT66IcFzgkBgWVUe6VSvL8X0dY9UWwS3ph2bC MOy477+qnzIPJOLN08O+35ZJ8A== -----END CERTIFICATE-----Generated at Fri Sep 25 21:43:54 2026 by rpki-client