$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.mft File: CpU4Un2lMv4x11DRNpblzq8qm88.mft (raw, json) Hash identifier: sl6E2p5PNNLTAC7jxhFoJi8Sh8eB8Yei/YxznWawUiE= Subject key identifier: 8D:8A:D3:96:D0:42:F7:5C:1D:58:EB:F7:09:65:9C:90:65:00:17:7C Authority key identifier: 0A:95:38:52:7D:A5:32:FE:31:D7:50:D1:36:96:E5:CE:AF:2A:9B:CF Certificate issuer: /CN=A91C2677/serialNumber=0A9538527DA532FE31D750D13696E5CEAF2A9BCF Certificate serial: 0295 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CpU4Un2lMv4x11DRNpblzq8qm88.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.mft Manifest number: 028E Signing time: Tue 29 Sep 2026 02:13:05 +0000 Manifest this update: Tue 29 Sep 2026 02:13:04 +0000 Manifest next update: Tue 06 Oct 2026 02:13:04 +0000 Files and hashes: 1: CpU4Un2lMv4x11DRNpblzq8qm88.crl (hash: KlvZM0ID+d3cbH4DCwxE6SDEl8duUFdFwheN9IZuaio=) 2: C9D1E34E3E6511F18329E1A9CD833773.roa (hash: YlAauxy525S9XOXs7fFMSeSVZDB92cfvJ9ujaExNVJk=) 3: 5A1F332618A211EEB9517111C4F9AE02.roa (hash: ZHpMs5xnHyrmGG6brYvpkf6EbiaHiV+pUJ+wJWuD338=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.crl rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CpU4Un2lMv4x11DRNpblzq8qm88.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Oct 2026 02:13:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 661 (0x295) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2677, serialNumber=0A9538527DA532FE31D750D13696E5CEAF2A9BCF Validity Not Before: Sep 29 02:13:04 2026 GMT Not After : Oct 6 02:13:04 2026 GMT Subject: CN=6abb1eb1-bb98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:63:9f:2a:bb:2f:73:b6:e5:54:cc:14:1d:5f: 81:d0:40:f1:47:ad:32:15:63:3e:6b:5d:24:7b:e8: ba:12:53:72:b4:7d:6c:5e:84:0c:01:3a:a5:19:22: 2d:f5:f2:09:e8:02:2e:0f:93:82:14:b1:b6:5a:23: 46:7d:ad:5f:aa:d7:dd:99:19:ab:c3:8c:7d:eb:c3: 08:ab:d3:fc:ae:8e:8d:8e:a8:37:d1:b6:8d:33:ee: c7:1d:b4:73:20:6d:c7:54:36:af:f1:3b:8b:95:42: 1b:d4:f6:17:87:6d:e2:b2:9a:b3:4c:a0:80:ee:51: 5e:a1:78:ad:7b:ce:b6:df:9e:48:38:0d:c7:21:d6: b9:60:f7:43:52:62:06:bf:02:92:c9:d7:6f:96:8e: e4:5f:45:b2:37:2b:ab:bc:04:5f:dd:8a:77:46:82: 5c:29:16:3b:7d:05:35:a5:13:09:d6:98:91:96:af: be:ff:ee:5a:83:c1:2d:b0:de:f0:fa:1a:d3:da:28: cd:7d:3f:6e:f9:21:8d:69:e1:92:ca:f6:73:84:a1: 79:0c:fb:e5:6e:5a:cc:db:74:7a:7b:20:bb:63:68: 50:23:61:f4:34:b2:01:e9:80:de:d9:23:1b:d7:e0: 03:19:18:ca:28:be:ac:09:94:de:c7:59:7a:d3:56: 04:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:8A:D3:96:D0:42:F7:5C:1D:58:EB:F7:09:65:9C:90:65:00:17:7C X509v3 Authority Key Identifier: keyid:0A:95:38:52:7D:A5:32:FE:31:D7:50:D1:36:96:E5:CE:AF:2A:9B:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CpU4Un2lMv4x11DRNpblzq8qm88.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:b8:88:20:4b:23:63:7a:5e:f5:da:d9:de:b8:13:7c:af:6c: bf:8d:ee:98:78:3f:f4:20:4c:55:57:09:88:a5:28:4a:4d:11: 02:34:36:03:49:53:f1:64:58:a5:24:65:e8:cd:be:97:50:46: ce:83:f8:23:77:68:a5:0b:e1:27:53:39:4f:9c:88:b8:c5:65: a3:54:7d:46:2f:3f:ef:2c:d1:ef:4a:26:08:29:a5:18:e9:8c: 18:c2:1a:2a:f3:56:b6:c0:00:86:19:4f:ee:20:c9:7c:7a:b4: 0d:57:1e:39:10:b2:80:04:b1:1a:62:c0:b7:c1:fa:ab:c9:70: 1a:c4:2d:ac:99:ca:45:64:b9:94:64:f6:9c:a7:7b:cb:9c:06: df:b3:42:58:a3:ab:f5:14:c3:fb:45:59:d4:6a:47:f3:46:89: 3e:60:ba:20:95:51:6d:bb:bb:67:9a:c9:5b:cd:e1:00:a5:79: 70:7a:d4:7b:11:e4:f7:1d:49:7d:b3:c0:42:68:22:cf:77:89: b8:c9:0a:5d:16:af:2d:24:9a:d3:ae:34:36:ca:c8:42:c4:fc: 45:84:45:cb:b5:52:40:4d:61:f0:f8:92:49:c3:4f:80:95:03: 9b:37:a1:72:9c:b6:96:d8:44:00:e2:23:32:d0:68:31:4d:f7: ae:c7:ad:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI2NzcxMTAvBgNVBAUTKDBBOTUzODUyN0RBNTMyRkUzMUQ3NTBEMTM2OTZFNUNF QUYyQTlCQ0YwHhcNMjYwOTI5MDIxMzA0WhcNMjYxMDA2MDIxMzA0WjAYMRYwFAYD VQQDEw02YWJiMWViMS1iYjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5WOfKrsvc7blVMwUHV+B0EDxR60yFWM+a10ke+i6ElNytH1sXoQMATqlGSIt 9fIJ6AIuD5OCFLG2WiNGfa1fqtfdmRmrw4x968MIq9P8ro6Njqg30baNM+7HHbRz IG3HVDav8TuLlUIb1PYXh23ispqzTKCA7lFeoXite862355IOA3HIda5YPdDUmIG vwKSyddvlo7kX0WyNyurvARf3Yp3RoJcKRY7fQU1pRMJ1piRlq++/+5ag8EtsN7w +hrT2ijNfT9u+SGNaeGSyvZzhKF5DPvlblrM23R6eyC7Y2hQI2H0NLIB6YDe2SMb 1+ADGRjKKL6sCZTex1l601YEBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI2K05bQ QvdcHVjr9wllnJBlABd8MB8GA1UdIwQYMBaAFAqVOFJ9pTL+MddQ0TaW5c6vKpvP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjY3Ny82NDU3REZEOEQ4 MzcxMUVEOEMwOTY2MjlDNEY5QUUwMi9DcFU0VW4ybE12NHgxMURSTnBibHpxOHFt ODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NwVTRVbjJsTXY0eDExRFJOcGJsenE4cW04OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjY3Ny82NDU3REZEOEQ4MzcxMUVEOEMwOTY2MjlDNEY5QUUwMi9DcFU0VW4ybE12 NHgxMURSTnBibHpxOHFtODgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlriIIEsjY3pe9drZ3rgTfK9sv43umHg/9CBMVVcJiKUoSk0RAjQ2A0lT8WRY pSRl6M2+l1BGzoP4I3dopQvhJ1M5T5yIuMVlo1R9Ri8/7yzR70omCCmlGOmMGMIa KvNWtsAAhhlP7iDJfHq0DVceORCygASxGmLAt8H6q8lwGsQtrJnKRWS5lGT2nKd7 y5wG37NCWKOr9RTD+0VZ1GpH80aJPmC6IJVRbbu7Z5rJW83hAKV5cHrUexHk9x1J fbPAQmgiz3eJuMkKXRavLSSa0640NsrIQsT8RYRFy7VSQE1h8PiSScNPgJUDmzeh cpy2lthEAOIjMtBoMU33rsetQg== -----END CERTIFICATE-----Generated at Tue Sep 29 06:46:42 2026 by rpki-client