$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft File: cB88FPCtfu9l000APNwZJGSM3jc.mft (raw, json) Hash identifier: uTv98gH4QzPsv4JMCJdurJdTDW+Tq3uiAFFPSVHP89s= Subject key identifier: 79:67:78:7F:86:97:27:2B:7D:93:73:88:92:E4:21:3E:4B:BA:E9:4B Authority key identifier: 70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37 Certificate issuer: /CN=A91C63A6/serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37 Certificate serial: 04D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft Manifest number: 04A6 Signing time: Tue 22 Sep 2026 23:36:31 +0000 Manifest this update: Tue 22 Sep 2026 23:36:30 +0000 Manifest next update: Tue 29 Sep 2026 23:36:30 +0000 Files and hashes: 1: cB88FPCtfu9l000APNwZJGSM3jc.crl (hash: mPgl2fspY85l7Drq+u6p2SsyNhOuX+A+FAeh14WVFSc=) 2: 86550F680B4311EE8ABEE820C4F9AE02.roa (hash: l7DTtvHxD8US5fD+QSxEm5H3PVvZjXTvGP27QgToQ+E=) 3: 0CC86DF4FB5311F09CD98C1F476F56BC.roa (hash: NUGAPcQG3JutO9qEKwmx4ZtFctU4cvoVKH+jTCY6e9c=) 4: 0DB56636FB5311F09CD98C1F476F56BC.roa (hash: Bx/J/S8TWW2QQNpW8oZ/fMwuA/TbhW9uJ00ERz5Dobk=) 5: 2BF1D5F07E3511EE8CB63458C4F9AE02.roa (hash: I+xSYvR5vfpxBiIRAe84JarFe3Ja6Qu8IKK38QKP4g4=) 6: CDDEC562011711EEB15FDD2AC4F9AE02.roa (hash: mRQhgZ81M0Ts1pMOJw8D4F0g0lJj03RtR9EyLiUMZPc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 23:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1234 (0x4d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C63A6, serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37 Validity Not Before: Sep 22 23:36:30 2026 GMT Not After : Sep 29 23:36:30 2026 GMT Subject: CN=6ab310fe-52e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:61:b3:3a:3e:04:41:a3:ed:94:96:ec:97:df: 33:ba:8a:c2:01:c8:28:f1:ad:3e:f7:b4:0a:3a:20: 70:db:4b:bf:9f:e3:4c:96:5b:fc:f6:af:00:f8:20: 54:41:aa:13:8b:ba:06:93:08:f5:1d:a8:02:50:c2: ef:29:b0:44:58:26:ac:20:8c:f3:8e:75:3b:45:24: 08:46:cb:28:30:41:73:4b:e0:e2:b2:47:18:17:3d: 71:f2:51:6b:9b:be:26:e3:14:d1:56:8d:8a:2f:ef: 74:ce:48:44:39:72:59:1c:b5:6e:87:e8:dd:27:fe: 26:8b:2b:56:dd:ff:35:d7:ca:4f:f4:3c:e1:2c:39: d4:f9:51:22:be:ed:ca:c6:be:ad:94:e8:ec:3e:c3: 9c:86:f3:52:53:66:99:cf:ed:c4:55:58:c1:05:39: a6:40:27:00:f2:6e:98:cd:06:96:f4:5e:b7:b2:cb: db:17:96:e8:70:8a:71:71:4e:d7:58:f0:49:b6:1e: 70:4a:b4:be:ad:0e:46:5d:78:42:cd:94:8b:06:66: fe:e9:5d:95:c1:38:15:c9:19:34:73:a0:b0:80:e7: e5:a9:b7:07:25:1a:35:ea:0f:30:54:8d:68:4a:d0: 10:09:c0:46:bc:4a:1f:1c:29:bc:26:70:33:89:0e: f4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:67:78:7F:86:97:27:2B:7D:93:73:88:92:E4:21:3E:4B:BA:E9:4B X509v3 Authority Key Identifier: keyid:70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:08:12:de:e2:d1:52:1f:44:91:b8:f7:8e:3d:8a:15:7f:f6: 98:f5:90:88:69:81:a4:16:c9:c4:33:d0:14:8b:68:ba:72:5e: e5:a0:06:ca:2f:a8:cf:36:ef:bd:d7:c2:32:9a:0e:57:41:8c: 44:dd:81:a2:3c:0c:16:14:fa:46:b3:6f:05:b8:b8:35:87:a0: bd:b6:e0:1d:8d:04:cb:a5:ea:c2:c9:55:63:08:69:21:c2:ff: c3:21:e0:d0:85:3c:c9:22:fc:ad:fa:62:34:9e:7f:71:6d:d1: 4e:03:a7:0a:b1:fc:17:3c:67:b2:c5:b8:0f:3b:11:f6:bd:bb: 1c:cb:d7:e2:03:eb:bd:24:bd:99:49:48:08:bd:f3:d3:c9:41: 27:ec:c0:7b:6f:a6:8d:e3:8c:af:ff:0d:f5:ed:58:3f:ed:ce: 6b:85:1c:e3:bd:13:e2:a0:4e:52:86:60:3e:a6:de:e2:fc:6f: 0c:be:e9:6c:1f:9b:c5:a2:97:d8:98:51:fe:4c:35:0f:6f:c9: 7f:17:2d:3a:8c:59:d6:74:40:71:69:0c:04:63:f7:e3:2c:47: 5a:94:1a:12:80:6d:1a:56:67:42:53:c1:7a:33:61:cc:87:5a: cf:dd:85:43:48:8e:90:c0:17:1b:6e:bb:8c:6f:93:b1:91:52: 41:36:ae:06 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYzQTYxMTAvBgNVBAUTKDcwMUYzQzE0RjBBRDdFRUY2NUQzNEQwMDNDREMxOTI0 NjQ4Q0RFMzcwHhcNMjYwOTIyMjMzNjMwWhcNMjYwOTI5MjMzNjMwWjAYMRYwFAYD VQQDEw02YWIzMTBmZS01MmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqWGzOj4EQaPtlJbsl98zuorCAcgo8a0+97QKOiBw20u/n+NMllv89q8A+CBU QaoTi7oGkwj1HagCUMLvKbBEWCasIIzzjnU7RSQIRssoMEFzS+DiskcYFz1x8lFr m74m4xTRVo2KL+90zkhEOXJZHLVuh+jdJ/4miytW3f8118pP9DzhLDnU+VEivu3K xr6tlOjsPsOchvNSU2aZz+3EVVjBBTmmQCcA8m6YzQaW9F63ssvbF5bocIpxcU7X WPBJth5wSrS+rQ5GXXhCzZSLBmb+6V2VwTgVyRk0c6CwgOflqbcHJRo16g8wVI1o StAQCcBGvEofHCm8JnAziQ70wQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHlneH+G lycrfZNziJLkIT5LuulLMB8GA1UdIwQYMBaAFHAfPBTwrX7vZdNNADzcGSRkjN43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjNBNi8wRDM5QzRFNDlB OUIxMUVDODJDNzBCMjBDNEY5QUUwMi9jQjg4RlBDdGZ1OWwwMDBBUE53WkpHU00z amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NCODhGUEN0ZnU5bDAwMEFQTndaSkdTTTNqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjNBNi8wRDM5QzRFNDlBOUIxMUVDODJDNzBCMjBDNEY5QUUwMi9jQjg4RlBDdGZ1 OWwwMDBBUE53WkpHU00zamMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEggS3uLRUh9Ekbj3jj2KFX/2mPWQiGmBpBbJxDPQFItounJe5aAGyi+ozzbv vdfCMpoOV0GMRN2BojwMFhT6RrNvBbi4NYegvbbgHY0Ey6XqwslVYwhpIcL/wyHg 0IU8ySL8rfpiNJ5/cW3RTgOnCrH8FzxnssW4DzsR9r27HMvX4gPrvSS9mUlICL3z 08lBJ+zAe2+mjeOMr/8N9e1YP+3Oa4Uc470T4qBOUoZgPqbe4vxvDL7pbB+bxaKX 2JhR/kw1D2/JfxctOoxZ1nRAcWkMBGP34yxHWpQaEoBtGlZnQlPBejNhzIdaz92F Q0iOkMAXG267jG+TsZFSQTauBg== -----END CERTIFICATE-----Generated at Thu Sep 24 23:54:29 2026 by rpki-client