$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.mft File: Cd0OotIDEfeT5HQ_CGXISgJHP9s.mft (raw, json) Hash identifier: xFXmTsMyMHQ9I5PyqxyuVjwXLQbfPxZFBlzuE17DTSI= Subject key identifier: 6B:62:85:80:87:82:AB:34:65:CE:4D:92:1B:66:3B:35:88:26:77:54 Authority key identifier: 09:DD:0E:A2:D2:03:11:F7:93:E4:74:3F:08:65:C8:4A:02:47:3F:DB Certificate issuer: /CN=A91CBF47/serialNumber=09DD0EA2D20311F793E4743F0865C84A02473FDB Certificate serial: 88 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Cd0OotIDEfeT5HQ_CGXISgJHP9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.mft Manifest number: 88 Signing time: Tue 22 Sep 2026 14:32:33 +0000 Manifest this update: Tue 22 Sep 2026 14:32:33 +0000 Manifest next update: Tue 29 Sep 2026 14:32:33 +0000 Files and hashes: 1: Cd0OotIDEfeT5HQ_CGXISgJHP9s.crl (hash: MOxsMTPH3k/MWGOONaDW3Ni2D7ditqZMfadqkuOcfAA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.crl rsync://rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Cd0OotIDEfeT5HQ_CGXISgJHP9s.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:32:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBF47, serialNumber=09DD0EA2D20311F793E4743F0865C84A02473FDB Validity Not Before: Sep 22 14:32:33 2026 GMT Not After : Sep 29 14:32:33 2026 GMT Subject: CN=6ab29181-0652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1a:ed:4a:53:fa:c2:a6:84:02:ab:d8:ac:2e: 21:9d:e1:2d:34:e5:76:0a:fb:a4:55:cf:1e:00:43: a2:53:91:40:06:47:f5:e5:eb:56:f6:b1:dd:69:a6: 57:25:a8:08:a1:8a:4a:f9:d8:fe:f8:44:cd:33:44: 1a:c5:c2:fc:49:1a:19:c6:07:16:7d:f3:e9:ec:73: 36:95:7c:da:d6:ae:b2:a6:da:ad:bf:f5:cb:41:82: 22:24:d5:64:cf:56:5f:e7:53:ad:07:49:36:df:a3: f9:c3:50:ef:a0:7b:7c:66:88:89:e3:2c:8c:53:36: 93:7f:56:f4:9a:ef:d7:32:c2:db:78:02:85:f2:06: fa:dd:c8:78:25:6d:78:ce:c1:2d:fa:3e:a5:ef:f9: bb:40:79:64:39:28:cc:5d:5e:8f:5f:d7:25:80:16: 39:51:6e:3b:96:a3:0e:cd:1e:7e:9d:14:4c:e4:38: bd:87:c7:a7:38:b9:ab:82:97:11:8e:6b:d7:56:35: 7f:c7:6a:2b:0d:94:b2:1c:7c:72:4c:fc:31:7c:3d: 4f:38:36:92:82:d3:ba:d8:24:0c:35:d3:a6:a0:1b: fb:15:9a:52:f3:ec:77:9c:60:27:30:97:f3:18:4c: 51:96:3c:f4:fe:4e:c2:38:40:65:1d:ca:7c:35:b5: 91:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:62:85:80:87:82:AB:34:65:CE:4D:92:1B:66:3B:35:88:26:77:54 X509v3 Authority Key Identifier: keyid:09:DD:0E:A2:D2:03:11:F7:93:E4:74:3F:08:65:C8:4A:02:47:3F:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Cd0OotIDEfeT5HQ_CGXISgJHP9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:ac:89:bf:7c:f7:2a:ed:cf:6d:a5:73:99:97:08:c6:dc:40: 29:d0:b7:4e:57:d9:ba:47:67:d7:32:c0:83:38:66:d7:e9:5b: ee:7c:c7:17:51:3d:ce:87:f1:1e:97:65:22:eb:a4:ab:9b:45: da:d5:01:55:f2:c6:74:4f:14:4e:4c:98:4b:74:20:da:15:c1: a4:b8:43:71:f7:31:d0:4a:ca:42:ad:2b:09:f6:da:da:59:39: f0:3e:1d:fc:4f:dc:54:fa:fb:cd:64:34:9b:02:76:70:67:e7: 9f:29:48:07:fa:3b:a1:e0:3b:d2:b8:0f:b7:49:87:2f:fa:12: 5c:d6:81:d9:ef:09:bc:47:df:fb:4b:42:1a:59:0a:2c:b8:77: 19:9f:9d:40:ee:fd:06:35:cf:86:cf:4d:30:c7:76:98:48:8a: 77:37:2e:d7:62:77:1e:eb:a4:b9:60:87:75:df:8c:15:3a:8a: 55:e5:d8:8a:11:a1:c3:9b:6d:f0:ac:21:8e:66:10:50:80:1a: 6a:e4:23:f5:36:8c:be:49:f5:5d:4e:c1:7a:1d:a3:e6:aa:3e: 35:4e:b4:ff:d8:74:bf:1f:90:c2:49:fd:3d:3e:5a:3e:62:e4: 24:11:c7:f4:2a:01:3d:8f:5f:0e:b8:b4:a7:48:9d:5e:e5:18: 10:34:51:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JGNDcxMTAvBgNVBAUTKDA5REQwRUEyRDIwMzExRjc5M0U0NzQzRjA4NjVDODRB MDI0NzNGREIwHhcNMjYwOTIyMTQzMjMzWhcNMjYwOTI5MTQzMjMzWjAYMRYwFAYD VQQDEw02YWIyOTE4MS0wNjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3xrtSlP6wqaEAqvYrC4hneEtNOV2CvukVc8eAEOiU5FABkf15etW9rHdaaZX JagIoYpK+dj++ETNM0QaxcL8SRoZxgcWffPp7HM2lXza1q6yptqtv/XLQYIiJNVk z1Zf51OtB0k236P5w1DvoHt8ZoiJ4yyMUzaTf1b0mu/XMsLbeAKF8gb63ch4JW14 zsEt+j6l7/m7QHlkOSjMXV6PX9clgBY5UW47lqMOzR5+nRRM5Di9h8enOLmrgpcR jmvXVjV/x2orDZSyHHxyTPwxfD1PODaSgtO62CQMNdOmoBv7FZpS8+x3nGAnMJfz GExRljz0/k7COEBlHcp8NbWRxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGtihYCH gqs0Zc5NkhtmOzWIJndUMB8GA1UdIwQYMBaAFAndDqLSAxH3k+R0PwhlyEoCRz/b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkY0Ny8wREZBRUU0OEYy OEIxMUYwQjNGREZFNDI2QjZGNTZCQy9DZDBPb3RJREVmZVQ1SFFfQ0dYSVNnSkhQ OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0NkME9vdElERWZlVDVIUV9DR1hJU2dKSFA5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkY0Ny8wREZBRUU0OEYyOEIxMUYwQjNGREZFNDI2QjZGNTZCQy9DZDBPb3RJREVm ZVQ1SFFfQ0dYSVNnSkhQOXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhayJv3z3Ku3PbaVzmZcIxtxAKdC3TlfZukdn1zLAgzhm1+lb7nzHF1E9zofx HpdlIuukq5tF2tUBVfLGdE8UTkyYS3Qg2hXBpLhDcfcx0ErKQq0rCfba2lk58D4d /E/cVPr7zWQ0mwJ2cGfnnylIB/o7oeA70rgPt0mHL/oSXNaB2e8JvEff+0tCGlkK LLh3GZ+dQO79BjXPhs9NMMd2mEiKdzcu12J3HuukuWCHdd+MFTqKVeXYihGhw5tt 8KwhjmYQUIAaauQj9TaMvkn1XU7Beh2j5qo+NU60/9h0vx+Qwkn9PT5aPmLkJBHH 9CoBPY9fDri0p0idXuUYEDRR4Q== -----END CERTIFICATE-----Generated at Wed Sep 23 07:22:30 2026 by rpki-client