$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft File: cPEzmWaoGrwgfjvuM3CR2fLzydc.mft (raw, json) Hash identifier: JWws9okfY0PropGnpLxTVNywYzP/yTcZJ5L0ZWFOguA= Subject key identifier: 68:58:20:EB:A7:67:C6:7A:33:02:11:A6:6C:8A:EB:73:C6:1A:CD:C0 Authority key identifier: 70:F1:33:99:66:A8:1A:BC:20:7E:3B:EE:33:70:91:D9:F2:F3:C9:D7 Certificate issuer: /CN=A91C9324/serialNumber=70F1339966A81ABC207E3BEE337091D9F2F3C9D7 Certificate serial: 0282 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft Manifest number: 0282 Signing time: Tue 22 Sep 2026 23:59:13 +0000 Manifest this update: Tue 22 Sep 2026 23:59:13 +0000 Manifest next update: Tue 29 Sep 2026 23:59:13 +0000 Files and hashes: 1: cPEzmWaoGrwgfjvuM3CR2fLzydc.crl (hash: PSBrhY7GgMyL/Ulx+gFQFqrBAs8wXvC8hM8U+CSdogU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.crl rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 23:59:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 642 (0x282) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9324, serialNumber=70F1339966A81ABC207E3BEE337091D9F2F3C9D7 Validity Not Before: Sep 22 23:59:13 2026 GMT Not After : Sep 29 23:59:13 2026 GMT Subject: CN=6ab31651-1f01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5d:69:a5:1c:7e:e1:2a:96:8b:07:17:e2:36: 76:ed:eb:c0:a8:91:7b:44:dd:05:0f:94:fc:48:d4: 7d:e9:25:0c:f9:ad:69:67:02:aa:b0:72:ad:60:13: f0:7e:73:b8:d4:be:ac:ee:62:2b:7b:95:45:8c:b6: 2b:1f:c3:66:0f:00:82:ad:79:6b:4b:5d:ab:6b:61: 7d:75:57:ef:52:20:e8:b4:1d:69:bf:5d:19:6c:98: 0f:99:5d:31:37:f0:bd:20:99:40:c6:ab:05:2b:ac: 9c:16:35:2d:fa:75:f4:8a:a9:29:d0:64:a2:a0:e8: a9:b8:55:88:de:fb:7a:9e:ce:73:9c:2a:f2:be:e0: c1:a4:21:70:ef:f1:5c:b8:e0:91:a5:f6:ba:51:84: fd:4b:4f:35:d3:75:e1:e5:bb:24:62:9c:88:64:44: 02:1a:e0:81:bc:af:fd:b2:15:7c:cf:32:c4:42:80: 2a:f9:c5:6e:89:15:fd:e7:1b:c5:b0:01:9a:e7:ee: 1e:a3:f7:61:8e:a1:c5:ab:22:ce:e6:a8:b8:49:c9: 0b:08:1f:68:47:e2:eb:a7:02:7d:e5:76:12:05:94: f6:3e:c8:dd:e2:44:54:6a:0c:fa:e7:e7:bb:1b:89: 5b:93:25:85:35:10:c8:05:28:0e:12:cd:73:4d:3d: ba:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:58:20:EB:A7:67:C6:7A:33:02:11:A6:6C:8A:EB:73:C6:1A:CD:C0 X509v3 Authority Key Identifier: keyid:70:F1:33:99:66:A8:1A:BC:20:7E:3B:EE:33:70:91:D9:F2:F3:C9:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:0a:ba:8f:be:5e:86:6c:c2:1f:35:ad:69:82:6b:71:c9:4b: fc:d3:13:b7:bf:4d:a1:56:65:7f:05:40:bb:c5:3d:84:fa:da: b1:c0:2d:5b:c5:21:50:28:ec:70:83:7e:d4:1a:c8:e1:14:aa: a3:56:04:bd:d5:b1:48:70:09:9b:f7:9c:d1:0d:0d:01:07:e1: 6f:8a:0e:6e:a1:2f:d1:97:12:43:92:a8:71:37:9b:51:5c:46: 9d:f5:40:65:71:f7:ab:d5:cf:06:f1:7d:5b:c2:a2:ca:be:be: e6:7c:16:10:02:5b:21:5e:96:cd:d8:dd:e2:89:69:ba:36:66: 0a:4b:33:ed:d7:d2:70:e0:9c:02:7b:49:59:de:00:30:6e:a4: 45:4d:77:60:1e:79:3e:d4:74:a4:47:88:4d:11:99:16:aa:65: 4c:7e:f8:37:1c:9c:73:54:b8:9d:8a:09:d3:54:62:de:91:18: 3a:f1:24:be:25:f2:01:c7:09:9d:7c:0d:d5:d3:75:ab:b0:1b: 78:f6:4e:89:14:02:18:fa:e2:36:9d:d4:7e:8b:57:e1:2a:45: 86:fe:03:d3:04:ce:bb:31:c8:52:8e:ee:55:27:16:6d:d1:d0: be:6d:5d:f8:29:eb:a4:60:66:36:6a:71:c0:ba:19:da:17:eb: 22:b4:74:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzMjQxMTAvBgNVBAUTKDcwRjEzMzk5NjZBODFBQkMyMDdFM0JFRTMzNzA5MUQ5 RjJGM0M5RDcwHhcNMjYwOTIyMjM1OTEzWhcNMjYwOTI5MjM1OTEzWjAYMRYwFAYD VQQDEw02YWIzMTY1MS0xZjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvV1ppRx+4SqWiwcX4jZ27evAqJF7RN0FD5T8SNR96SUM+a1pZwKqsHKtYBPw fnO41L6s7mIre5VFjLYrH8NmDwCCrXlrS12ra2F9dVfvUiDotB1pv10ZbJgPmV0x N/C9IJlAxqsFK6ycFjUt+nX0iqkp0GSioOipuFWI3vt6ns5znCryvuDBpCFw7/Fc uOCRpfa6UYT9S08103Xh5bskYpyIZEQCGuCBvK/9shV8zzLEQoAq+cVuiRX95xvF sAGa5+4eo/dhjqHFqyLO5qi4SckLCB9oR+LrpwJ95XYSBZT2Psjd4kRUagz65+e7 G4lbkyWFNRDIBSgOEs1zTT260QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGhYIOun Z8Z6MwIRpmyK63PGGs3AMB8GA1UdIwQYMBaAFHDxM5lmqBq8IH477jNwkdny88nX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTMyNC8yMkJGOEQzMkUw MkYxMUVEOTUxNTNEMzFDNEY5QUUwMi9jUEV6bVdhb0dyd2dmanZ1TTNDUjJmTHp5 ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NQRXptV2FvR3J3Z2ZqdnVNM0NSMmZMenlkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTMyNC8yMkJGOEQzMkUwMkYxMUVEOTUxNTNEMzFDNEY5QUUwMi9jUEV6bVdhb0dy d2dmanZ1TTNDUjJmTHp5ZGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlwq6j75ehmzCHzWtaYJrcclL/NMTt79NoVZlfwVAu8U9hPrascAtW8UhUCjs cIN+1BrI4RSqo1YEvdWxSHAJm/ec0Q0NAQfhb4oObqEv0ZcSQ5KocTebUVxGnfVA ZXH3q9XPBvF9W8Kiyr6+5nwWEAJbIV6Wzdjd4olpujZmCksz7dfScOCcAntJWd4A MG6kRU13YB55PtR0pEeITRGZFqplTH74Nxycc1S4nYoJ01Ri3pEYOvEkviXyAccJ nXwN1dN1q7AbePZOiRQCGPriNp3UfotX4SpFhv4D0wTOuzHIUo7uVScWbdHQvm1d +CnrpGBmNmpxwLoZ2hfrIrR0dw== -----END CERTIFICATE-----Generated at Wed Sep 23 23:58:39 2026 by rpki-client