$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft File: CZyBX8poKm4oYE_pYv0QcVgn6V0.mft (raw, json) Hash identifier: XwXpOMezyMg0TCOAqGG/6RHh4+nyU1YcAHDyPQGN4jQ= Subject key identifier: 01:66:BF:71:15:F4:0D:7F:B2:DF:93:D9:7F:67:11:FC:6C:96:DE:C2 Authority key identifier: 09:9C:81:5F:CA:68:2A:6E:28:60:4F:E9:62:FD:10:71:58:27:E9:5D Certificate issuer: /CN=A91DEB2E/serialNumber=099C815FCA682A6E28604FE962FD10715827E95D Certificate serial: 02CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft Manifest number: 02C1 Signing time: Fri 25 Sep 2026 01:25:24 +0000 Manifest this update: Fri 25 Sep 2026 01:25:24 +0000 Manifest next update: Fri 02 Oct 2026 01:25:24 +0000 Files and hashes: 1: CZyBX8poKm4oYE_pYv0QcVgn6V0.crl (hash: oderBB0xLHPEJNHAJVmgJt3MfdKZ/9agw6gDKXZ2Kao=) 2: 3CB103648C2511EDB64DB410C4F9AE02.roa (hash: iZ4HCtJL7rID/wZnZvAzs70hw+YNw3/gczs7CGb7Bb8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.crl rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 01:25:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 717 (0x2cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEB2E, serialNumber=099C815FCA682A6E28604FE962FD10715827E95D Validity Not Before: Sep 25 01:25:24 2026 GMT Not After : Oct 2 01:25:24 2026 GMT Subject: CN=6ab5cd84-cb35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f3:f9:ee:58:f8:b2:1b:6b:dd:8a:48:e5:5c: 4c:ad:e2:a1:4d:2b:77:26:f9:dd:b2:17:41:f8:1a: 5c:a9:02:38:46:8a:5b:a7:7d:60:c8:e7:37:bc:62: 3e:88:f9:78:b8:e6:25:14:e0:c1:2d:88:8c:fa:a6: 3b:6e:54:e6:e3:de:2b:09:0d:36:55:9b:93:f6:16: 7f:4a:2c:d7:95:9a:50:26:92:6f:0b:bf:04:58:95: 30:47:16:af:77:4e:44:56:4e:8c:d6:c9:5a:39:28: b8:03:5f:0f:b0:6f:62:8e:1a:45:22:bf:29:e6:86: c7:3c:94:c0:5a:a7:be:49:78:e3:6a:d7:6d:c6:df: 3c:91:ea:00:54:cd:6d:bc:3e:8d:b0:58:e7:7d:e1: 81:b6:9a:cc:0a:ff:6a:8c:02:23:60:04:bb:8b:3c: 4d:82:3d:a6:85:a6:dd:1e:4a:84:fb:e6:24:88:0f: 19:db:26:a3:ba:c7:2a:4a:fd:75:bb:05:07:ed:b9: 55:d9:96:98:d8:15:3b:92:70:f5:64:6f:30:3b:bb: da:2f:7c:d8:17:0e:d9:1b:1c:15:1c:fc:30:87:33: b7:93:4e:24:96:37:b4:e9:16:a4:4d:58:ea:92:35: 21:fa:97:7d:d0:a0:35:cb:c4:a8:10:4c:f9:cc:06: 2e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:66:BF:71:15:F4:0D:7F:B2:DF:93:D9:7F:67:11:FC:6C:96:DE:C2 X509v3 Authority Key Identifier: keyid:09:9C:81:5F:CA:68:2A:6E:28:60:4F:E9:62:FD:10:71:58:27:E9:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:bb:b0:49:b1:8d:aa:5c:58:e1:b3:7c:f4:42:0d:d7:9c:c9: 07:d7:a9:d6:0f:32:9b:cf:6e:d5:a3:0b:0a:33:3e:38:b5:e6: 05:f8:ed:32:f5:0b:e4:9d:f2:51:8d:ef:d5:a6:a8:ca:ca:f8: 53:61:45:50:44:f1:e9:d3:d8:b9:09:f4:cf:f5:93:2c:fc:a8: 0e:5b:44:e0:3c:b7:41:38:7a:91:cb:f7:c4:db:af:8a:82:50: 45:be:cb:c6:5e:12:a8:79:7e:3a:b6:e0:d5:ed:ce:e2:5a:f3: 29:2f:8b:7d:7b:9a:82:2c:b5:ad:4d:af:da:9b:3e:c2:e7:f2: 97:fa:37:79:4e:51:6d:76:61:86:e1:93:41:31:48:01:53:cb: 5b:9e:4b:98:a4:ff:ee:83:6a:f4:e5:7b:a7:68:9b:01:7c:ec: 33:f2:2f:82:c3:a0:c3:e0:d1:2b:08:92:90:83:76:42:c8:a9: ee:b0:53:36:11:36:18:5f:fd:f6:f7:78:d9:00:9d:02:05:8b: 78:d2:61:03:8e:2d:65:7a:b6:3d:d6:3a:0e:a3:8a:30:79:2f: 9c:66:f4:7f:5b:61:6b:cf:04:53:01:cd:18:95:ee:0f:0d:00: 54:b3:26:09:80:0b:5b:e8:92:ca:49:52:e4:65:dd:36:98:4d: 16:2e:e6:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAs0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVCMkUxMTAvBgNVBAUTKDA5OUM4MTVGQ0E2ODJBNkUyODYwNEZFOTYyRkQxMDcx NTgyN0U5NUQwHhcNMjYwOTI1MDEyNTI0WhcNMjYxMDAyMDEyNTI0WjAYMRYwFAYD VQQDEw02YWI1Y2Q4NC1jYjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr/P57lj4shtr3YpI5VxMreKhTSt3JvndshdB+BpcqQI4Ropbp31gyOc3vGI+ iPl4uOYlFODBLYiM+qY7blTm494rCQ02VZuT9hZ/SizXlZpQJpJvC78EWJUwRxav d05EVk6M1slaOSi4A18PsG9ijhpFIr8p5obHPJTAWqe+SXjjatdtxt88keoAVM1t vD6NsFjnfeGBtprMCv9qjAIjYAS7izxNgj2mhabdHkqE++YkiA8Z2yajuscqSv11 uwUH7blV2ZaY2BU7knD1ZG8wO7vaL3zYFw7ZGxwVHPwwhzO3k04klje06RakTVjq kjUh+pd90KA1y8SoEEz5zAYuLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAFmv3EV 9A1/st+T2X9nEfxslt7CMB8GA1UdIwQYMBaAFAmcgV/KaCpuKGBP6WL9EHFYJ+ld MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUIyRS82RkM4QkZERThD MjExMUVEQjJCMkYzMEFDNEY5QUUwMi9DWnlCWDhwb0ttNG9ZRV9wWXYwUWNWZ242 VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NaeUJYOHBvS200b1lFX3BZdjBRY1ZnbjZWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUIyRS82RkM4QkZERThDMjExMUVEQjJCMkYzMEFDNEY5QUUwMi9DWnlCWDhwb0tt NG9ZRV9wWXYwUWNWZ242VjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYbuwSbGNqlxY4bN89EIN15zJB9ep1g8ym89u1aMLCjM+OLXmBfjtMvUL5J3y UY3v1aaoysr4U2FFUETx6dPYuQn0z/WTLPyoDltE4Dy3QTh6kcv3xNuvioJQRb7L xl4SqHl+Orbg1e3O4lrzKS+LfXuagiy1rU2v2ps+wufyl/o3eU5RbXZhhuGTQTFI AVPLW55LmKT/7oNq9OV7p2ibAXzsM/IvgsOgw+DRKwiSkIN2Qsip7rBTNhE2GF/9 9vd42QCdAgWLeNJhA44tZXq2PdY6DqOKMHkvnGb0f1tha88EUwHNGJXuDw0AVLMm CYALW+iSyklS5GXdNphNFi7mkA== -----END CERTIFICATE-----Generated at Sat Sep 26 16:12:10 2026 by rpki-client