$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.mft File: CJy1orM7eG11SgfWgKnElBQmGeE.mft (raw, json) Hash identifier: y1XQ+oAHpqyouxGRaMQH7Odv2O5OCS82KVvSVl/eVfE= Subject key identifier: FF:75:46:00:B0:89:06:A3:1E:76:E8:98:4E:86:55:AD:0F:12:E6:8F Authority key identifier: 08:9C:B5:A2:B3:3B:78:6D:75:4A:07:D6:80:A9:C4:94:14:26:19:E1 Certificate issuer: /CN=A91D0C18/serialNumber=089CB5A2B33B786D754A07D680A9C494142619E1 Certificate serial: 0191 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CJy1orM7eG11SgfWgKnElBQmGeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.mft Manifest number: 0188 Signing time: Fri 25 Sep 2026 04:35:57 +0000 Manifest this update: Fri 25 Sep 2026 04:35:57 +0000 Manifest next update: Fri 02 Oct 2026 04:35:57 +0000 Files and hashes: 1: CJy1orM7eG11SgfWgKnElBQmGeE.crl (hash: m2PnE5taUB4QooBZhqb1i7pUK78DOnoAIU4uvIf97FA=) 2: EEE0092A646611EFA25D167EC4F9AE02.roa (hash: /xBEhjFYaty4e00WWfiVcrTVHTi4dEl3w+IvJBJnwpM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.crl rsync://rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CJy1orM7eG11SgfWgKnElBQmGeE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 04:35:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 401 (0x191) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0C18, serialNumber=089CB5A2B33B786D754A07D680A9C494142619E1 Validity Not Before: Sep 25 04:35:57 2026 GMT Not After : Oct 2 04:35:57 2026 GMT Subject: CN=6ab5fa2d-ac6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0c:ed:16:3f:41:a8:db:81:86:04:63:3d:79: 7e:62:88:de:cb:24:03:c2:95:c1:2d:3d:75:36:d5: 77:1b:e1:0f:39:60:e8:ff:fb:68:fd:2f:4a:6a:3e: 02:ec:48:45:1c:ad:14:eb:93:29:47:4f:36:5a:b6: 37:7b:8d:25:36:70:1c:61:c8:25:e4:64:99:62:65: 91:83:41:03:30:48:d2:b6:d5:7d:9d:29:35:25:10: 97:f0:9a:0c:3b:e5:ce:32:10:83:e6:71:9f:bc:6d: 6b:26:60:45:31:00:d5:4f:4e:fe:1b:ef:0c:28:2a: f0:81:37:50:08:89:11:71:a7:4b:c0:fe:90:4e:69: b3:6d:e0:8d:7d:8b:74:e8:bd:1f:1e:fd:ce:81:19: 95:36:30:00:cb:a5:54:ad:15:d2:54:73:92:2c:fc: 33:a2:52:74:8a:3a:89:de:03:4f:4b:d1:73:cd:75: 8a:68:0c:b8:b3:1c:ba:f7:2e:34:ab:f5:da:11:7c: 36:6c:89:64:e1:94:ba:4f:94:99:cf:0d:fe:34:46: 58:e7:b8:36:6b:33:6b:af:00:3a:e4:c2:52:60:57: 80:84:c8:2c:ad:11:ba:e5:10:42:8d:27:61:a4:24: 1e:b9:83:e1:bd:da:aa:33:43:4b:e0:09:68:ef:51: 7a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:75:46:00:B0:89:06:A3:1E:76:E8:98:4E:86:55:AD:0F:12:E6:8F X509v3 Authority Key Identifier: keyid:08:9C:B5:A2:B3:3B:78:6D:75:4A:07:D6:80:A9:C4:94:14:26:19:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CJy1orM7eG11SgfWgKnElBQmGeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:cb:51:c7:90:3f:40:5e:60:14:f8:74:bc:0c:85:3f:c9:fd: 54:83:9e:bf:69:77:af:c3:17:eb:eb:ad:e6:5b:38:60:ea:43: 4b:e9:69:16:b8:67:09:2e:15:b1:05:39:cc:04:e1:93:75:e1: 2a:a7:49:a5:36:b0:0c:a6:11:2d:0c:57:c8:54:4f:97:1e:2d: bf:5a:30:f3:35:56:15:13:9f:23:ad:58:53:7b:97:33:79:43: 33:af:48:1a:44:2b:ef:e7:8a:f0:9f:ec:38:59:c6:12:04:0c: c6:09:e3:ce:b2:7c:e8:af:47:08:ce:c5:9c:36:c3:ad:97:de: de:6b:00:9d:a7:c1:66:9b:13:0b:81:20:74:73:b9:33:86:13: 2a:a4:99:18:fe:ff:91:77:fc:a6:f5:da:ff:e5:1b:43:47:e5: b0:fd:be:e4:59:7c:47:44:14:b9:f8:a1:d6:6d:85:70:b7:b7: 02:26:42:d4:9e:cd:9d:ab:50:ed:a8:39:12:b7:76:9d:8a:ca: 0c:0a:a9:dd:2e:54:55:f4:e0:37:bd:42:c7:f2:29:c3:54:7f: 19:8a:8e:8a:88:ff:b6:43:b3:3a:f3:66:f7:5a:e0:48:00:ab: b9:02:62:0c:2a:dd:7b:6e:a5:12:4a:16:eb:e2:59:19:b6:3e: 37:c3:5c:6d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBDMTgxMTAvBgNVBAUTKDA4OUNCNUEyQjMzQjc4NkQ3NTRBMDdENjgwQTlDNDk0 MTQyNjE5RTEwHhcNMjYwOTI1MDQzNTU3WhcNMjYxMDAyMDQzNTU3WjAYMRYwFAYD VQQDEw02YWI1ZmEyZC1hYzZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3gztFj9BqNuBhgRjPXl+YojeyyQDwpXBLT11NtV3G+EPOWDo//to/S9Kaj4C 7EhFHK0U65MpR082WrY3e40lNnAcYcgl5GSZYmWRg0EDMEjSttV9nSk1JRCX8JoM O+XOMhCD5nGfvG1rJmBFMQDVT07+G+8MKCrwgTdQCIkRcadLwP6QTmmzbeCNfYt0 6L0fHv3OgRmVNjAAy6VUrRXSVHOSLPwzolJ0ijqJ3gNPS9FzzXWKaAy4sxy69y40 q/XaEXw2bIlk4ZS6T5SZzw3+NEZY57g2azNrrwA65MJSYFeAhMgsrRG65RBCjSdh pCQeuYPhvdqqM0NL4Alo71F6mQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP91RgCw iQajHnbomE6GVa0PEuaPMB8GA1UdIwQYMBaAFAictaKzO3htdUoH1oCpxJQUJhnh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEMxOC82ODNCQTA5NjY0 NjYxMUVGOEUxOEY4N0FDNEY5QUUwMi9DSnkxb3JNN2VHMTFTZ2ZXZ0tuRWxCUW1H ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0NKeTFvck03ZUcxMVNnZldnS25FbEJRbUdlRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEMxOC82ODNCQTA5NjY0NjYxMUVGOEUxOEY4N0FDNEY5QUUwMi9DSnkxb3JNN2VH MTFTZ2ZXZ0tuRWxCUW1HZUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWctRx5A/QF5gFPh0vAyFP8n9VIOev2l3r8MX6+ut5ls4YOpDS+lpFrhnCS4V sQU5zAThk3XhKqdJpTawDKYRLQxXyFRPlx4tv1ow8zVWFROfI61YU3uXM3lDM69I GkQr7+eK8J/sOFnGEgQMxgnjzrJ86K9HCM7FnDbDrZfe3msAnafBZpsTC4EgdHO5 M4YTKqSZGP7/kXf8pvXa/+UbQ0flsP2+5Fl8R0QUufih1m2FcLe3AiZC1J7NnatQ 7ag5Erd2nYrKDAqp3S5UVfTgN71Cx/Ipw1R/GYqOioj/tkOzOvNm91rgSACruQJi DCrde26lEkoW6+JZGbY+N8NcbQ== -----END CERTIFICATE-----Generated at Fri Sep 25 23:34:44 2026 by rpki-client