$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft File: ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft (raw, json) Hash identifier: nunaeEbi0xyJw5WxOlSh7/uxRH5F6IMy0+HTrvnZefU= Subject key identifier: DF:44:1B:1A:E0:D3:3F:B2:09:BD:25:30:62:61:E2:84:07:C2:D2:96 Authority key identifier: 72:D1:57:43:F5:9C:83:A5:C1:95:A5:E6:DB:1E:A4:64:76:34:BE:F7 Certificate issuer: /CN=A91CC1E9/serialNumber=72D15743F59C83A5C195A5E6DB1EA4647634BEF7 Certificate serial: 029D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft Manifest number: 028A Signing time: Fri 25 Sep 2026 01:58:46 +0000 Manifest this update: Fri 25 Sep 2026 01:58:45 +0000 Manifest next update: Fri 02 Oct 2026 01:58:45 +0000 Files and hashes: 1: ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.crl (hash: FHmDLqUhfzLWsPgSrrqiUrPdAUPcc4DSSDlhwJ9tMgk=) 2: 2AB990CAF0A911ED80D2CB35C4F9AE02.roa (hash: vqGdVaaDYf6gNLNH5VIBJ2NRjMzmVVMM9ASsA3cNz2A=) 3: 1333404E5A0D11EF8810E217C4F9AE02.roa (hash: 4mVa0DqBaCflYNU9bhCT5eYUo2wiGhZvFPJW9PpsrbY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.crl rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 01:58:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 669 (0x29d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC1E9, serialNumber=72D15743F59C83A5C195A5E6DB1EA4647634BEF7 Validity Not Before: Sep 25 01:58:45 2026 GMT Not After : Oct 2 01:58:45 2026 GMT Subject: CN=6ab5d556-314a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:03:1d:60:54:be:ec:2f:b9:85:ac:b4:b4:2d: 1d:92:9d:73:d5:d3:03:af:94:08:6a:10:b1:31:95: 22:ba:46:80:db:97:19:d6:19:98:47:60:e6:4c:35: 2a:5d:fe:c9:22:76:7c:80:28:75:c0:82:19:23:0f: c4:cc:35:11:51:f7:20:91:6d:59:b7:ef:51:13:52: c9:92:e7:7d:86:98:eb:be:d2:97:ef:e9:c3:6d:28: 32:ad:7f:2b:b3:b1:a1:55:92:b9:26:09:27:1d:10: 7e:b4:73:04:68:e8:47:1a:28:28:03:4a:ab:4f:9b: 27:ff:4c:d5:79:60:9c:71:ac:1c:0a:e8:68:24:44: 6b:21:d0:f9:d4:4e:78:cb:09:73:23:70:94:8c:d2: f2:12:9a:68:cf:d6:d6:86:e0:50:ef:18:cb:55:60: 1f:8f:9c:0f:83:f0:14:b2:9f:1f:71:f1:9a:a6:b5: 3e:89:3c:78:c4:70:f9:b1:a6:fa:58:21:d9:8a:a8: 35:5d:93:fa:96:f8:d6:84:0b:fd:2d:49:83:5f:a3: d1:0c:de:8c:e9:ba:86:5d:cc:3f:29:cc:a7:6f:e2: 9b:07:77:b5:4c:bd:8a:4c:40:97:b0:5e:fd:2d:9c: 7c:0b:a3:6f:c9:41:63:9b:d4:e8:93:ef:4c:c7:b3: b1:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:44:1B:1A:E0:D3:3F:B2:09:BD:25:30:62:61:E2:84:07:C2:D2:96 X509v3 Authority Key Identifier: keyid:72:D1:57:43:F5:9C:83:A5:C1:95:A5:E6:DB:1E:A4:64:76:34:BE:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:32:14:1b:ff:3c:96:ae:79:ca:26:ea:c2:8a:e4:51:95:a5: 8a:58:41:44:9f:eb:c8:3f:d5:e5:ac:0c:62:6b:5a:48:ba:0b: ae:09:7d:28:32:0a:d4:22:11:c5:78:87:d2:6d:16:1c:52:ca: 2b:5c:02:8f:2d:f7:8e:9f:b8:f1:ea:25:0f:d0:b8:dc:ba:dd: e5:6d:14:0e:90:5d:94:97:35:6d:56:69:18:6d:07:d0:f7:13: d1:e0:ac:17:99:0c:4b:11:bf:f3:dd:37:c5:a7:58:6d:a9:95: 06:c5:d4:db:6c:55:bf:65:b5:ab:66:12:cc:a1:40:7d:ef:4b: 2c:92:53:e4:f9:fa:0b:e6:03:d8:ef:a0:2d:13:13:5d:0d:12: 20:ba:a5:30:32:2c:54:27:60:8b:7b:c9:c6:71:6e:c6:21:95: 51:d5:5d:b3:c1:d8:97:d9:bf:02:c0:64:66:62:f8:1e:07:42: e0:38:8f:04:8e:6e:ec:be:10:1e:2b:07:6c:b1:70:05:5b:06: 13:08:81:53:9a:82:01:a2:47:f7:32:6e:9d:31:bf:50:cc:70: 13:fc:5c:8b:f3:8b:8b:04:c5:df:6a:a1:c5:f7:fc:aa:08:78: 77:e4:4b:1f:38:bd:e9:17:d8:c7:c4:fe:0e:b5:7e:27:cd:be: a2:4d:c0:f8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0MxRTkxMTAvBgNVBAUTKDcyRDE1NzQzRjU5QzgzQTVDMTk1QTVFNkRCMUVBNDY0 NzYzNEJFRjcwHhcNMjYwOTI1MDE1ODQ1WhcNMjYxMDAyMDE1ODQ1WjAYMRYwFAYD VQQDEw02YWI1ZDU1Ni0zMTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApQMdYFS+7C+5hay0tC0dkp1z1dMDr5QIahCxMZUiukaA25cZ1hmYR2DmTDUq Xf7JInZ8gCh1wIIZIw/EzDURUfcgkW1Zt+9RE1LJkud9hpjrvtKX7+nDbSgyrX8r s7GhVZK5JgknHRB+tHMEaOhHGigoA0qrT5sn/0zVeWCccawcCuhoJERrIdD51E54 ywlzI3CUjNLyEppoz9bWhuBQ7xjLVWAfj5wPg/AUsp8fcfGaprU+iTx4xHD5sab6 WCHZiqg1XZP6lvjWhAv9LUmDX6PRDN6M6bqGXcw/Kcynb+KbB3e1TL2KTECXsF79 LZx8C6NvyUFjm9Tok+9Mx7OxyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN9EGxrg 0z+yCb0lMGJh4oQHwtKWMB8GA1UdIwQYMBaAFHLRV0P1nIOlwZWl5tsepGR2NL73 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzFFOS9CQkNENUQyQ0VG Q0MxMUVEQjI5QkIwNkNDNEY5QUUwMi9jdEZYUV9XY2c2WEJsYVhtMng2a1pIWTB2 dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N0RlhRX1djZzZYQmxhWG0yeDZrWkhZMHZ2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzFFOS9CQkNENUQyQ0VGQ0MxMUVEQjI5QkIwNkNDNEY5QUUwMi9jdEZYUV9XY2c2 WEJsYVhtMng2a1pIWTB2dmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAazIUG/88lq55yibqworkUZWlilhBRJ/ryD/V5awMYmtaSLoLrgl9KDIK1CIR xXiH0m0WHFLKK1wCjy33jp+48eolD9C43Lrd5W0UDpBdlJc1bVZpGG0H0PcT0eCs F5kMSxG/8903xadYbamVBsXU22xVv2W1q2YSzKFAfe9LLJJT5Pn6C+YD2O+gLRMT XQ0SILqlMDIsVCdgi3vJxnFuxiGVUdVds8HYl9m/AsBkZmL4HgdC4DiPBI5u7L4Q HisHbLFwBVsGEwiBU5qCAaJH9zJunTG/UMxwE/xci/OLiwTF32qhxff8qgh4d+RL Hzi96RfYx8T+DrV+J82+ok3A+A== -----END CERTIFICATE-----Generated at Sat Sep 26 14:46:47 2026 by rpki-client