$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft File: CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft (raw, json) Hash identifier: WJ0IWof0SiCMyY1qNwx10Iu1dZZFrk7KGg72qf3s2Hw= Subject key identifier: EC:B8:D2:F1:53:CF:2A:9C:E4:24:E4:EF:F4:C4:7D:1A:7B:D6:37:6F Authority key identifier: 0A:A5:DE:29:26:5A:08:E2:7A:58:1D:89:44:65:BD:CD:B7:37:09:BB Certificate issuer: /CN=A91DC017/serialNumber=0AA5DE29265A08E27A581D894465BDCDB73709BB Certificate serial: 02E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft Manifest number: 02C7 Signing time: Fri 25 Sep 2026 01:28:03 +0000 Manifest this update: Fri 25 Sep 2026 01:28:02 +0000 Manifest next update: Fri 02 Oct 2026 01:28:02 +0000 Files and hashes: 1: CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl (hash: zbKun1twd7wDnGdLYJMgFjda7ZlCwv8u8l2IZ0yH6DQ=) 2: C0C268B8441C11EF9E110F1EC4F9AE02.roa (hash: v5FOCrkT7bwg0TVjJC2RnsG6lxQLJwnHry99/PwnEBQ=) 3: 1B8DE01C641911EF83FFBF3CC4F9AE02.roa (hash: xDjn+cobUE2agLkdimK21R3Sdz0e7azaiAPMZg9qQro=) 4: 08A1C0B8DC5011EF9C212C5CC4F9AE02.roa (hash: 6sjpy6GriqELAPGgjJdFUt57xHCHCLQzT9kEpI0w6Mg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 01:28:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 740 (0x2e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC017, serialNumber=0AA5DE29265A08E27A581D894465BDCDB73709BB Validity Not Before: Sep 25 01:28:02 2026 GMT Not After : Oct 2 01:28:02 2026 GMT Subject: CN=6ab5ce23-3d8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b2:cc:f9:ed:b5:e8:2c:6e:cd:f8:33:26:10: 69:35:d4:3d:78:d3:76:d9:3f:34:07:67:a4:0f:63: af:61:58:67:75:5c:28:5e:ca:a6:5b:73:c7:4b:f3: 74:67:42:1a:11:0d:6c:e0:43:ab:5a:ea:52:ca:a6: fd:2f:5b:b2:73:a1:f5:93:0d:eb:c8:18:40:36:31: 4a:4e:99:3a:c7:f6:6d:22:85:86:f6:be:f7:c3:f7: 61:74:83:3e:1e:3b:a1:94:1f:2a:1d:3d:82:51:4c: 41:31:ad:b4:8f:3e:1b:1a:6c:37:1b:fb:f5:20:7e: b3:47:a1:e5:d7:ad:f4:4d:72:d5:da:17:dc:75:d5: e4:12:9d:07:92:d6:34:32:55:4f:5a:a8:06:c3:19: a8:ec:69:ab:75:92:df:b2:aa:2d:e8:1b:ce:23:38: dc:77:19:39:ce:0f:bf:9e:cc:8d:c0:b9:98:cd:ba: 44:8d:33:d1:35:7d:03:f2:a5:66:3e:1c:2d:ff:d6: 14:8e:c9:3a:76:cf:c0:73:e7:81:d0:a8:69:cb:08: 93:ad:5a:2d:f6:49:dd:c0:bb:a9:d9:38:d9:7e:f6: b8:87:ec:9d:8f:29:04:99:e3:ea:20:81:02:d4:37: a2:b5:17:2a:cd:2f:c3:db:ed:d4:12:26:cc:c8:e7: 32:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:B8:D2:F1:53:CF:2A:9C:E4:24:E4:EF:F4:C4:7D:1A:7B:D6:37:6F X509v3 Authority Key Identifier: keyid:0A:A5:DE:29:26:5A:08:E2:7A:58:1D:89:44:65:BD:CD:B7:37:09:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:5f:36:e8:40:8f:55:8c:75:c4:85:63:b8:d8:4c:2d:bf:8e: 17:a5:db:43:06:4e:80:e4:f9:9b:9d:47:db:82:64:89:ed:34: e0:52:83:4d:4d:17:61:58:dd:61:14:2e:4b:27:e8:72:11:fb: cd:a6:fe:d7:fa:e8:5b:16:0a:f1:2b:74:de:6f:8f:fc:2c:c0: 7a:91:55:99:69:e5:1f:f8:de:a9:5b:c9:4c:fa:44:8a:b4:32: f8:c0:33:ff:ca:cd:00:21:35:9c:a0:5e:70:3f:6b:c1:2b:f6: b2:65:2c:48:98:41:5c:2e:15:ac:7d:d5:dd:92:00:ef:a2:87: a0:ce:06:92:3b:d1:b1:65:87:5c:f6:a9:aa:8d:c9:aa:67:8c: 5d:9d:b3:0e:70:1b:da:86:b0:23:78:29:4a:92:f0:12:9c:6f: 98:9b:d3:87:e6:06:4f:ce:f9:17:2c:58:7b:ae:e3:13:53:d4: 7f:3c:a2:cd:05:b0:1b:db:2a:a3:ea:7f:75:2f:9f:b6:22:ae: 08:27:e6:cf:10:88:02:8e:34:ad:1f:ef:f3:f2:02:a2:e0:42: 3c:62:28:e1:2f:fb:f0:23:50:f5:51:48:e7:b6:fc:1b:31:3b: e8:6f:e0:82:0e:9f:8b:92:7b:cd:0c:82:95:f0:36:b6:eb:bf: 29:1d:57:41 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAuQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwMTcxMTAvBgNVBAUTKDBBQTVERTI5MjY1QTA4RTI3QTU4MUQ4OTQ0NjVCRENE QjczNzA5QkIwHhcNMjYwOTI1MDEyODAyWhcNMjYxMDAyMDEyODAyWjAYMRYwFAYD VQQDEw02YWI1Y2UyMy0zZDhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy7LM+e216CxuzfgzJhBpNdQ9eNN22T80B2ekD2OvYVhndVwoXsqmW3PHS/N0 Z0IaEQ1s4EOrWupSyqb9L1uyc6H1kw3ryBhANjFKTpk6x/ZtIoWG9r73w/dhdIM+ HjuhlB8qHT2CUUxBMa20jz4bGmw3G/v1IH6zR6Hl1630TXLV2hfcddXkEp0HktY0 MlVPWqgGwxmo7GmrdZLfsqot6BvOIzjcdxk5zg+/nsyNwLmYzbpEjTPRNX0D8qVm Phwt/9YUjsk6ds/Ac+eB0KhpywiTrVot9kndwLup2TjZfva4h+ydjykEmePqIIEC 1DeitRcqzS/D2+3UEibMyOcyxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOy40vFT zyqc5CTk7/TEfRp71jdvMB8GA1UdIwQYMBaAFAql3ikmWgjielgdiURlvc23Nwm7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzAxNy8xMDVBQzhGQzkw QzMxMUVEQkExRENDMjNDNEY5QUUwMi9DcVhlS1NaYUNPSjZXQjJKUkdXOXpiYzND YnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NxWGVLU1phQ09KNldCMkpSR1c5emJjM0Nicy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzAxNy8xMDVBQzhGQzkwQzMxMUVEQkExRENDMjNDNEY5QUUwMi9DcVhlS1NaYUNP SjZXQjJKUkdXOXpiYzNDYnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKV826ECPVYx1xIVjuNhMLb+OF6XbQwZOgOT5m51H24Jkie004FKDTU0XYVjd YRQuSyfochH7zab+1/roWxYK8St03m+P/CzAepFVmWnlH/jeqVvJTPpEirQy+MAz /8rNACE1nKBecD9rwSv2smUsSJhBXC4VrH3V3ZIA76KHoM4GkjvRsWWHXPapqo3J qmeMXZ2zDnAb2oawI3gpSpLwEpxvmJvTh+YGT875FyxYe67jE1PUfzyizQWwG9sq o+p/dS+ftiKuCCfmzxCIAo40rR/v8/ICouBCPGIo4S/78CNQ9VFI57b8GzE76G/g gg6fi5J7zQyClfA2tuu/KR1XQQ== -----END CERTIFICATE-----Generated at Sat Sep 26 02:57:56 2026 by rpki-client