$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft File: CuIi7F4XpuYytVnUnFse8zLaQ8s.mft (raw, json) Hash identifier: yaWJStDhae7xQ0MDj+VoeD/rfPo8nkllSMHcA+31dP0= Subject key identifier: C7:DB:89:86:30:75:70:3E:79:FE:05:92:1E:EC:93:27:26:1A:4D:C5 Authority key identifier: 0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB Certificate issuer: /CN=A91C7C04/serialNumber=0AE222EC5E17A6E632B559D49C5B1EF332DA43CB Certificate serial: 0809 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft Manifest number: 07D8 Signing time: Thu 24 Sep 2026 21:21:33 +0000 Manifest this update: Thu 24 Sep 2026 21:21:33 +0000 Manifest next update: Thu 01 Oct 2026 21:21:33 +0000 Files and hashes: 1: CuIi7F4XpuYytVnUnFse8zLaQ8s.crl (hash: FmnFsG7wtgT2O77dj4T36UnEf7QCc/aHpXvDfkqALBg=) 2: DA45147EB35E11EE8EED0E37C4F9AE02.roa (hash: Bluwv17U0E3bQxLMX6DjEXL7fkRDMsWwu/v38ekvil0=) 3: C707808A7C0211F1B99BE3648FA30FBC.roa (hash: 9ssE+0/Wd9/Zy6emzy+4Q/4vapOHX+2nKdVogJqzems=) 4: F097281C169A11EF8927EC2DC4F9AE02.roa (hash: 0sgsytXNSBVA8tI+B+np2QJiF5EYk7ItL5UWLy6dAWE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.crl rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 21:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2057 (0x809) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7C04, serialNumber=0AE222EC5E17A6E632B559D49C5B1EF332DA43CB Validity Not Before: Sep 24 21:21:33 2026 GMT Not After : Oct 1 21:21:33 2026 GMT Subject: CN=6ab5945d-ed08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:09:86:28:50:66:61:a8:a5:bc:b8:80:0b:b7: 9f:43:96:48:af:8d:f0:72:ea:99:7e:71:22:91:ef: 51:ac:0b:91:5b:d4:60:9c:3c:42:86:18:19:91:50: 47:5e:44:99:d6:cd:2d:92:cd:87:a8:1e:48:12:bc: ee:76:1e:e0:19:bb:f5:e4:45:11:d5:e6:03:a8:c9: bb:e8:9e:2d:9e:a3:0e:07:6d:3e:80:02:61:cb:e2: 8f:e2:46:75:2c:e6:2a:7c:92:61:b8:f8:99:9c:fe: 8a:db:0d:50:0c:fd:f2:52:e1:01:79:c3:62:4e:59: 4e:1c:47:bd:88:75:9a:f5:9d:6c:4d:b0:4c:74:30: 88:73:7a:e3:8b:36:ca:5a:81:f3:bb:5f:da:30:a8: a6:df:69:07:7f:3a:a7:ee:ed:f1:e7:30:df:ec:c7: 47:93:82:02:98:53:b7:bb:43:85:31:c0:02:1e:12: 11:26:42:9d:c9:2f:cf:9d:bf:40:e7:e0:9e:96:59: d1:1e:42:55:e2:12:d7:26:db:5a:71:8f:7d:87:99: 1f:e1:ec:73:b3:b2:79:65:ce:b6:fb:a5:28:7c:83: df:cb:d2:70:7a:92:2c:5a:5e:a2:22:66:c5:c4:13: 0c:87:75:b7:d6:33:30:b0:ac:2e:bf:15:62:45:43: c5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:DB:89:86:30:75:70:3E:79:FE:05:92:1E:EC:93:27:26:1A:4D:C5 X509v3 Authority Key Identifier: keyid:0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:ef:f3:5a:53:f2:3e:2b:80:b0:4c:be:ff:c4:e6:50:46:d0: ca:22:79:c6:b6:35:83:5e:c2:1b:a0:eb:91:08:05:04:b6:ee: 75:70:b7:95:1a:e3:08:d7:78:b4:51:9b:92:0c:3e:4f:77:3b: 16:86:f9:29:68:ab:70:a5:09:f3:2a:2f:6e:bd:43:0d:c9:a4: 79:c0:3b:7c:4e:89:a2:39:f2:d2:f0:c1:d5:b1:ce:88:ed:9d: 99:00:d7:1c:fc:c1:14:78:85:d3:54:dd:ee:b1:21:d4:3d:cd: 61:d8:a5:f3:aa:57:a0:03:53:6d:3a:ec:55:a4:8b:5a:86:3a: a6:60:ff:da:f1:46:d0:ff:73:d3:f6:3d:a1:3f:d9:f6:5b:f0: bc:62:9b:ef:30:a5:bc:9b:54:04:38:84:83:bc:ac:63:6d:9c: 1e:3d:0b:5a:dc:b2:57:11:81:ab:f4:9c:7a:d7:26:65:6d:fa: 85:73:66:17:74:09:d6:71:40:29:f4:06:8b:ed:e0:9c:8a:71: e8:c8:28:ec:89:78:a0:74:bc:03:bf:6e:a8:93:a6:a6:02:c1: 75:2d:a1:bd:73:8a:81:0d:b7:e3:79:5c:e4:57:6c:0f:8f:39: 1c:ca:14:79:bc:3a:99:21:e6:1a:90:9a:24:f6:eb:01:50:e6: b4:c7:41:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdDMDQxMTAvBgNVBAUTKDBBRTIyMkVDNUUxN0E2RTYzMkI1NTlENDlDNUIxRUYz MzJEQTQzQ0IwHhcNMjYwOTI0MjEyMTMzWhcNMjYxMDAxMjEyMTMzWjAYMRYwFAYD VQQDEw02YWI1OTQ1ZC1lZDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlQmGKFBmYailvLiAC7efQ5ZIr43wcuqZfnEike9RrAuRW9RgnDxChhgZkVBH XkSZ1s0tks2HqB5IErzudh7gGbv15EUR1eYDqMm76J4tnqMOB20+gAJhy+KP4kZ1 LOYqfJJhuPiZnP6K2w1QDP3yUuEBecNiTllOHEe9iHWa9Z1sTbBMdDCIc3rjizbK WoHzu1/aMKim32kHfzqn7u3x5zDf7MdHk4ICmFO3u0OFMcACHhIRJkKdyS/Pnb9A 5+CellnRHkJV4hLXJttacY99h5kf4exzs7J5Zc62+6UofIPfy9JwepIsWl6iImbF xBMMh3W31jMwsKwuvxViRUPFfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMfbiYYw dXA+ef4Fkh7skycmGk3FMB8GA1UdIwQYMBaAFAriIuxeF6bmMrVZ1JxbHvMy2kPL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0MwNC9BMERCMzU1MjVG QjQxMUVCQUI3QzZBMjNDNEY5QUUwMi9DdUlpN0Y0WHB1WXl0Vm5VbkZzZTh6TGFR OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N1SWk3RjRYcHVZeXRWblVuRnNlOHpMYVE4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0MwNC9BMERCMzU1MjVGQjQxMUVCQUI3QzZBMjNDNEY5QUUwMi9DdUlpN0Y0WHB1 WXl0Vm5VbkZzZTh6TGFROHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh+/zWlPyPiuAsEy+/8TmUEbQyiJ5xrY1g17CG6DrkQgFBLbudXC3lRrjCNd4 tFGbkgw+T3c7Fob5KWircKUJ8yovbr1DDcmkecA7fE6Jojny0vDB1bHOiO2dmQDX HPzBFHiF01Td7rEh1D3NYdil86pXoANTbTrsVaSLWoY6pmD/2vFG0P9z0/Y9oT/Z 9lvwvGKb7zClvJtUBDiEg7ysY22cHj0LWtyyVxGBq/ScetcmZW36hXNmF3QJ1nFA KfQGi+3gnIpx6Mgo7Il4oHS8A79uqJOmpgLBdS2hvXOKgQ2343lc5FdsD485HMoU ebw6mSHmGpCaJPbrAVDmtMdB0g== -----END CERTIFICATE-----Generated at Sat Sep 26 06:08:25 2026 by rpki-client