$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft File: CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft (raw, json) Hash identifier: 9V/A9wLAWgwzcTZLG7XRVc/70oMhynXn1THr5OeD5aM= Subject key identifier: D8:28:AB:A1:4B:BF:7C:02:74:EF:44:0E:09:B2:1B:A8:21:B4:9A:4F Authority key identifier: 08:02:5B:9B:44:EE:D8:AE:0B:76:F1:1E:03:72:CE:96:18:77:AD:9F Certificate issuer: /CN=A91C941B/serialNumber=08025B9B44EED8AE0B76F11E0372CE961877AD9F Certificate serial: 05F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft Manifest number: 05DE Signing time: Tue 22 Sep 2026 22:41:19 +0000 Manifest this update: Tue 22 Sep 2026 22:41:19 +0000 Manifest next update: Tue 29 Sep 2026 22:41:19 +0000 Files and hashes: 1: CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.crl (hash: m11IeuknM72EoS8VErs2KOR8iVx7uM6YPV4hH+qGHVc=) 2: F719961A1A8611ECB908E939C4F9AE02.roa (hash: L4+heFdChY3z9s7BEBGVcv7MYCBF/KrgUao3TApE1No=) 3: B3883EE61A8C11ECBD6CCF18C4F9AE02.roa (hash: 7v9JGXA5w6YmXUyZ7lVdaYNwrJ7RnKiLMnAVZDlhtMA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.crl rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 22:41:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1523 (0x5f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C941B, serialNumber=08025B9B44EED8AE0B76F11E0372CE961877AD9F Validity Not Before: Sep 22 22:41:19 2026 GMT Not After : Sep 29 22:41:19 2026 GMT Subject: CN=6ab3040f-d23d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:75:bd:9c:af:ba:cd:83:3a:d1:65:2c:33:e6: 38:8d:00:12:d9:9b:17:7a:e4:0f:17:df:07:4a:c6: eb:4c:19:3b:8e:0a:d4:04:fa:d9:3e:79:d1:0c:85: f7:1f:16:27:24:90:df:cd:6a:ac:b7:f6:2c:1d:24: b6:67:35:6b:7a:b6:1e:4b:6a:85:2a:fb:c2:80:49: 9d:ec:d6:e5:63:de:63:30:1a:11:42:07:90:60:77: 1a:03:1d:62:af:6f:c0:41:99:5b:4e:2c:2d:4f:d4: 30:ca:47:8d:f5:48:a5:01:04:4c:8f:6f:68:a0:7c: 7c:53:30:e1:de:2a:3f:0c:85:1d:f1:64:af:b7:fd: 02:d6:fb:20:45:f5:53:c8:94:f2:f5:2d:2d:7c:25: a4:88:c0:99:b9:8c:00:47:23:af:ad:2c:90:c4:55: 71:8a:26:46:5d:62:b7:88:bb:e1:dc:ed:6f:ea:c5: 6c:c9:5b:9a:8e:b5:12:52:7b:14:84:c1:f0:00:2c: f3:3c:e3:a9:5e:68:55:f2:1e:a6:b2:f0:45:9a:d2: 79:64:f4:ef:6c:0b:1f:56:54:f7:12:1e:75:e0:b8: 61:f6:34:78:81:15:3b:d3:95:c2:ab:be:5b:4b:c1: 40:59:f3:e0:d2:5a:ae:14:80:4c:08:5f:de:84:3d: 81:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:28:AB:A1:4B:BF:7C:02:74:EF:44:0E:09:B2:1B:A8:21:B4:9A:4F X509v3 Authority Key Identifier: keyid:08:02:5B:9B:44:EE:D8:AE:0B:76:F1:1E:03:72:CE:96:18:77:AD:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:28:e7:1f:62:bc:a8:5c:d7:70:0a:21:d5:b2:90:ef:19:d1: f6:b3:c8:b9:1b:5a:29:fc:4f:d1:7b:86:ed:8f:5d:0a:32:79: 28:17:7b:e1:72:1d:a6:91:c6:5d:92:f5:fd:f5:e9:02:b9:d7: 9f:e6:9c:f4:d2:39:5d:ff:9e:d7:c2:07:cb:ae:6d:fe:ae:9e: 1f:67:a6:4f:1f:54:fe:0a:38:52:08:eb:b1:0f:e3:67:54:da: 8c:ea:53:e0:fa:8e:b9:63:2a:6d:f2:5e:ce:a4:e4:08:c2:c7: 09:dc:26:ad:49:52:0d:1d:61:21:36:96:10:40:b8:55:f9:4d: a1:62:4d:0a:4d:3b:9c:1c:6e:9a:c4:69:ce:4e:25:f3:63:72: d7:f1:01:ad:a1:34:14:ac:f0:15:13:c0:2e:f9:c2:35:36:73: 65:ca:3c:42:ac:2f:7a:ed:01:18:cd:ab:11:f5:aa:15:ce:0f: c8:cf:cd:13:cb:6c:19:ae:81:e5:6a:c8:07:4c:77:da:e4:94: 3d:8a:08:c4:d7:33:bb:c7:91:dd:93:1b:d6:6e:b7:c2:b5:b1: 8a:7a:e9:ba:52:7b:8f:8d:84:66:5a:2b:8e:b8:1e:e0:83:9c: a0:50:e1:ee:6b:d2:96:9c:bc:89:17:76:85:2e:af:1d:10:e4: f0:fb:7c:35 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk0MUIxMTAvBgNVBAUTKDA4MDI1QjlCNDRFRUQ4QUUwQjc2RjExRTAzNzJDRTk2 MTg3N0FEOUYwHhcNMjYwOTIyMjI0MTE5WhcNMjYwOTI5MjI0MTE5WjAYMRYwFAYD VQQDEw02YWIzMDQwZi1kMjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArnW9nK+6zYM60WUsM+Y4jQAS2ZsXeuQPF98HSsbrTBk7jgrUBPrZPnnRDIX3 HxYnJJDfzWqst/YsHSS2ZzVrerYeS2qFKvvCgEmd7NblY95jMBoRQgeQYHcaAx1i r2/AQZlbTiwtT9QwykeN9UilAQRMj29ooHx8UzDh3io/DIUd8WSvt/0C1vsgRfVT yJTy9S0tfCWkiMCZuYwARyOvrSyQxFVxiiZGXWK3iLvh3O1v6sVsyVuajrUSUnsU hMHwACzzPOOpXmhV8h6msvBFmtJ5ZPTvbAsfVlT3Eh514Lhh9jR4gRU705XCq75b S8FAWfPg0lquFIBMCF/ehD2BAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNgoq6FL v3wCdO9EDgmyG6ghtJpPMB8GA1UdIwQYMBaAFAgCW5tE7tiuC3bxHgNyzpYYd62f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTQxQi82OUY2QjdERTFB ODMxMUVDOEM5MjIyMjlDNEY5QUUwMi9DQUpibTBUdTJLNExkdkVlQTNMT2xoaDNy WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NBSmJtMFR1Mks0TGR2RWVBM0xPbGhoM3JaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTQxQi82OUY2QjdERTFBODMxMUVDOEM5MjIyMjlDNEY5QUUwMi9DQUpibTBUdTJL NExkdkVlQTNMT2xoaDNyWjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACSjnH2K8qFzXcAoh1bKQ7xnR9rPIuRtaKfxP0XuG7Y9dCjJ5KBd74XIdppHG XZL1/fXpArnXn+ac9NI5Xf+e18IHy65t/q6eH2emTx9U/go4UgjrsQ/jZ1TajOpT 4PqOuWMqbfJezqTkCMLHCdwmrUlSDR1hITaWEEC4VflNoWJNCk07nBxumsRpzk4l 82Ny1/EBraE0FKzwFRPALvnCNTZzZco8Qqwveu0BGM2rEfWqFc4PyM/NE8tsGa6B 5WrIB0x32uSUPYoIxNczu8eR3ZMb1m63wrWxinrpulJ7j42EZlorjrge4IOcoFDh 7mvSlpy8iRd2hS6vHRDk8Pt8NQ== -----END CERTIFICATE-----Generated at Thu Sep 24 23:50:39 2026 by rpki-client