$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft File: CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft (raw, json) Hash identifier: m/CSf83W++aoHLXU15+ODjJOQbPSnKrCvmQ3042H8PE= Subject key identifier: E3:F5:20:72:11:6D:7A:59:0C:B2:10:64:4A:D2:2A:E5:C5:27:0F:15 Authority key identifier: 0B:02:2B:1E:A3:4C:03:7C:51:F6:57:FC:3E:0D:84:A3:C6:18:68:22 Certificate issuer: /CN=A91D890E/serialNumber=0B022B1EA34C037C51F657FC3E0D84A3C6186822 Certificate serial: 0A2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft Manifest number: 0A23 Signing time: Sun 04 Oct 2026 19:47:22 +0000 Manifest this update: Sun 04 Oct 2026 19:47:22 +0000 Manifest next update: Sun 11 Oct 2026 19:47:22 +0000 Files and hashes: 1: CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl (hash: wHmG+Bhp71yi2OG2sCDM7CrLPq6MD1T7bhM3t9S9mGY=) 2: FDAEEFB0A12A11EAB063A548C4F9AE02.roa (hash: F2o3bVfdgibRTgDe0DxEdoAWCoUl7F1g3jf5bWQpITQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 19:47:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2605 (0xa2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D890E, serialNumber=0B022B1EA34C037C51F657FC3E0D84A3C6186822 Validity Not Before: Oct 4 19:47:22 2026 GMT Not After : Oct 11 19:47:22 2026 GMT Subject: CN=6ac2ad4a-55c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6a:7f:ad:10:fc:34:da:f3:9f:c1:fc:a8:6a: ae:c2:8e:a8:68:ef:24:8d:bd:d8:80:b3:e2:aa:a9: 4f:74:23:55:5d:fc:2d:22:65:de:e6:25:5f:5f:d3: f7:e4:7d:a4:d4:69:f9:63:9a:ab:f4:07:5d:4f:65: bb:93:20:a6:9d:39:35:6e:98:21:67:24:7e:0c:2b: 11:e9:8f:be:e3:15:9f:4e:05:11:85:6b:82:0e:3b: bc:17:85:6b:13:87:a3:9c:0e:91:36:fc:11:28:b7: c3:22:05:6b:ca:c8:94:df:b2:66:a2:ae:d9:42:26: 64:3f:6b:b3:2c:3b:91:cf:97:9b:be:8b:05:37:39: f1:be:58:0f:1d:44:6d:aa:52:6d:f6:67:c8:8e:ff: e1:64:f4:96:2a:6f:83:e3:b3:72:b1:21:01:75:55: e2:cd:62:f3:27:e6:55:43:91:a7:29:c3:3b:9e:9c: f7:25:73:a2:6e:71:e6:f8:77:8e:bf:03:63:25:ac: df:49:61:a2:57:b4:43:2a:e2:5b:16:26:6a:76:27: 8f:9e:fa:07:ce:da:1b:cd:26:5e:49:f3:82:94:97: d9:bf:f8:c6:07:ef:49:41:e7:06:f3:c3:5d:b7:42: 28:7b:2f:2c:d4:a9:4e:49:ee:7a:5c:61:77:84:fb: 00:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:F5:20:72:11:6D:7A:59:0C:B2:10:64:4A:D2:2A:E5:C5:27:0F:15 X509v3 Authority Key Identifier: keyid:0B:02:2B:1E:A3:4C:03:7C:51:F6:57:FC:3E:0D:84:A3:C6:18:68:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:d1:19:06:01:5d:9d:29:94:f0:d9:9c:96:10:84:0b:6d:15: f0:f0:6e:01:d1:81:36:46:d4:8c:64:1a:bb:68:71:b5:6d:55: 68:b3:91:9f:a0:3c:67:e8:b3:a8:69:5e:36:3b:19:6c:bb:3e: 99:1c:e6:fc:92:42:05:31:9d:b4:9d:8b:66:cc:02:5f:2d:48: c3:7e:f1:57:57:de:1d:5d:83:ee:56:08:f5:29:92:2a:e2:3d: 2b:cb:d0:f8:a6:ae:bb:90:f9:23:e5:42:b5:7f:25:57:1c:95: 57:79:a8:6e:99:69:8d:3e:b5:52:2e:44:ef:fc:71:54:ff:a1: 52:5e:ad:c7:ef:b2:b0:bd:d2:ca:5e:32:85:77:02:9e:6d:06: 98:cc:b2:a5:9c:fd:e3:10:24:ee:67:35:82:8c:06:f5:53:d4: 2d:04:51:d4:98:88:07:0b:49:b4:f3:14:c4:08:04:ac:af:d4: 1c:11:d2:c5:0a:83:4c:67:4b:c9:3d:68:eb:56:f7:5f:ec:39: a8:9e:0a:b3:6d:d0:5a:92:c5:7e:8a:c2:c7:70:e5:ee:eb:93: b4:ca:38:0e:f4:07:7d:3b:e9:45:7b:f8:7c:b0:a4:f9:8a:a0: 46:79:a8:72:d1:75:5d:c1:a8:76:bf:4c:e8:ee:9d:e8:fd:72: 6a:f1:c5:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg5MEUxMTAvBgNVBAUTKDBCMDIyQjFFQTM0QzAzN0M1MUY2NTdGQzNFMEQ4NEEz QzYxODY4MjIwHhcNMjYxMDA0MTk0NzIyWhcNMjYxMDExMTk0NzIyWjAYMRYwFAYD VQQDEw02YWMyYWQ0YS01NWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt2p/rRD8NNrzn8H8qGquwo6oaO8kjb3YgLPiqqlPdCNVXfwtImXe5iVfX9P3 5H2k1Gn5Y5qr9AddT2W7kyCmnTk1bpghZyR+DCsR6Y++4xWfTgURhWuCDju8F4Vr E4ejnA6RNvwRKLfDIgVrysiU37Jmoq7ZQiZkP2uzLDuRz5ebvosFNznxvlgPHURt qlJt9mfIjv/hZPSWKm+D47NysSEBdVXizWLzJ+ZVQ5GnKcM7npz3JXOibnHm+HeO vwNjJazfSWGiV7RDKuJbFiZqdiePnvoHztobzSZeSfOClJfZv/jGB+9JQecG88Nd t0Ioey8s1KlOSe56XGF3hPsAdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOP1IHIR bXpZDLIQZErSKuXFJw8VMB8GA1UdIwQYMBaAFAsCKx6jTAN8UfZX/D4NhKPGGGgi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODkwRS84RDQxMzVGRUEx MjkxMUVBQTAyMjc3NDZDNEY5QUUwMi9Dd0lySHFOTUEzeFI5bGY4UGcyRW84WVlh Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N3SXJIcU5NQTN4UjlsZjhQZzJFbzhZWWFDSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODkwRS84RDQxMzVGRUExMjkxMUVBQTAyMjc3NDZDNEY5QUUwMi9Dd0lySHFOTUEz eFI5bGY4UGcyRW84WVlhQ0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuNEZBgFdnSmU8NmclhCEC20V8PBuAdGBNkbUjGQau2hxtW1VaLORn6A8Z+iz qGleNjsZbLs+mRzm/JJCBTGdtJ2LZswCXy1Iw37xV1feHV2D7lYI9SmSKuI9K8vQ +Kauu5D5I+VCtX8lVxyVV3mobplpjT61Ui5E7/xxVP+hUl6tx++ysL3Syl4yhXcC nm0GmMyypZz94xAk7mc1gowG9VPULQRR1JiIBwtJtPMUxAgErK/UHBHSxQqDTGdL yT1o61b3X+w5qJ4Ks23QWpLFforCx3Dl7uuTtMo4DvQHfTvpRXv4fLCk+YqgRnmo ctF1XcGodr9M6O6d6P1yavHFgg== -----END CERTIFICATE-----Generated at Tue Oct 6 05:55:37 2026 by rpki-client