$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.mft File: cFWB1AyVgaJlHlMlI42zvcs6fQU.mft (raw, json) Hash identifier: On9MhK17wCrOtRz3Sk2lSbBchcIh/hpvXVMwLsgtS6I= Subject key identifier: DD:F9:24:8C:71:4D:DC:FF:31:BC:9F:07:C1:82:C6:3D:9A:A8:59:C1 Authority key identifier: 70:55:81:D4:0C:95:81:A2:65:1E:53:25:23:8D:B3:BD:CB:3A:7D:05 Certificate issuer: /CN=A91E1D91/serialNumber=705581D40C9581A2651E5325238DB3BDCB3A7D05 Certificate serial: 04A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFWB1AyVgaJlHlMlI42zvcs6fQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.mft Manifest number: 0499 Signing time: Sat 03 Oct 2026 00:20:09 +0000 Manifest this update: Sat 03 Oct 2026 00:20:08 +0000 Manifest next update: Sat 10 Oct 2026 00:20:08 +0000 Files and hashes: 1: cFWB1AyVgaJlHlMlI42zvcs6fQU.crl (hash: LLUtEmKq0zbL92wJBPwHeL5AQbQrTOgpkGdLCqPqsqw=) 2: qQKMj7mufvubqOBxlzgTv_MTy7E.asa (hash: cnWxrPBGq3u7cR+J5jct2rCoWApxFXgDzletqk7VGOM=) 3: 6CDC639EA04411EC8A7E5E2CC4F9AE02.roa (hash: ZgTDAqJuWTqg5a+cwxQv+P4kHAUdq+ZFgMxWzkPMWYc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.crl rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFWB1AyVgaJlHlMlI42zvcs6fQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 00:20:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1192 (0x4a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1D91, serialNumber=705581D40C9581A2651E5325238DB3BDCB3A7D05 Validity Not Before: Oct 3 00:20:08 2026 GMT Not After : Oct 10 00:20:08 2026 GMT Subject: CN=6ac04a38-b849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:32:d1:2e:31:9b:8e:47:05:fd:18:16:8c:10: 57:4b:ba:75:03:72:de:6e:dc:37:15:f7:12:32:8d: b0:5b:39:e7:20:76:f8:b2:64:75:2f:ff:a3:8a:1c: 2c:89:23:a8:0a:a4:31:ae:76:a2:a0:b4:5f:2b:fe: 64:26:9e:2f:71:e1:70:6e:b0:56:72:38:46:2a:f9: c1:35:5f:26:99:76:4e:d4:89:9f:6d:da:6f:a8:7e: ac:d1:e7:17:81:da:0a:bd:0e:b0:22:dd:a0:29:a8: c5:ad:34:7d:5a:52:c3:d9:cb:b0:d9:1c:32:6d:e5: 5b:1e:03:ff:12:29:4f:00:32:f6:58:ef:96:ff:62: f3:fc:97:a2:5f:ea:5b:7f:31:ab:2b:8c:c8:f7:5a: 41:e5:9a:41:14:30:f5:ec:a4:8c:f2:a6:cd:4e:42: e2:af:80:21:e9:c3:17:da:fd:a6:8d:c6:ed:38:31: 73:b9:86:3f:ff:ed:fe:64:68:ee:c9:aa:98:b5:99: 29:f3:31:6c:fc:47:48:f0:68:3b:1e:0a:69:8d:c2: 38:5a:48:f8:d8:90:46:88:31:ea:b2:92:c6:44:bc: 14:74:84:52:e6:c3:30:cb:f1:45:54:0f:0b:15:e6: 14:64:44:36:88:9f:46:a2:28:d5:2f:80:71:74:5e: f2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:F9:24:8C:71:4D:DC:FF:31:BC:9F:07:C1:82:C6:3D:9A:A8:59:C1 X509v3 Authority Key Identifier: keyid:70:55:81:D4:0C:95:81:A2:65:1E:53:25:23:8D:B3:BD:CB:3A:7D:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFWB1AyVgaJlHlMlI42zvcs6fQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:07:bf:83:6e:74:e9:70:52:d9:e4:d7:f3:ef:7e:60:03:7b: ea:ce:dc:d4:61:65:66:c0:e8:f4:e3:25:4c:cc:4d:e1:d8:84: 42:39:b3:0f:fc:a3:6c:e6:3f:48:ff:c1:84:d1:f5:ad:cf:32: ea:f8:1b:69:f2:10:7f:0b:37:96:a7:73:a4:1b:f0:2b:b4:05: 14:a2:79:86:62:c4:bc:cf:72:c1:5d:7a:9e:72:40:47:97:56: d3:fc:b8:c6:51:30:58:dc:ac:7a:80:e1:ff:05:18:02:7c:dd: 05:f3:8c:27:b5:cb:88:7a:bb:93:ef:ea:83:2a:05:0e:3d:4d: 6c:f3:56:d0:db:e9:d0:a6:e5:72:82:f8:d3:dc:c7:46:73:49: f6:85:5a:21:08:a6:56:9d:63:60:cd:f7:ae:eb:e9:87:f2:95: 51:3e:18:7e:78:12:92:96:83:f2:10:3f:a2:74:76:a5:8e:aa: 0a:94:56:e7:12:da:2e:2d:b0:b6:54:53:fc:74:29:c7:b7:fb: c0:16:45:5e:7a:9d:d3:82:c4:45:96:26:ff:c3:a6:43:88:15: f2:ba:c0:cc:60:84:3e:9a:6b:a3:68:0e:f8:28:8a:db:99:7e: aa:94:b4:83:f2:8f:47:6b:da:83:37:e8:34:39:27:c3:07:3b: bb:3b:3d:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFEOTExMTAvBgNVBAUTKDcwNTU4MUQ0MEM5NTgxQTI2NTFFNTMyNTIzOERCM0JE Q0IzQTdEMDUwHhcNMjYxMDAzMDAyMDA4WhcNMjYxMDEwMDAyMDA4WjAYMRYwFAYD VQQDEw02YWMwNGEzOC1iODQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmjLRLjGbjkcF/RgWjBBXS7p1A3Lebtw3FfcSMo2wWznnIHb4smR1L/+jihws iSOoCqQxrnaioLRfK/5kJp4vceFwbrBWcjhGKvnBNV8mmXZO1ImfbdpvqH6s0ecX gdoKvQ6wIt2gKajFrTR9WlLD2cuw2RwybeVbHgP/EilPADL2WO+W/2Lz/JeiX+pb fzGrK4zI91pB5ZpBFDD17KSM8qbNTkLir4Ah6cMX2v2mjcbtODFzuYY//+3+ZGju yaqYtZkp8zFs/EdI8Gg7HgppjcI4Wkj42JBGiDHqspLGRLwUdIRS5sMwy/FFVA8L FeYUZEQ2iJ9GoijVL4BxdF7y2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN35JIxx Tdz/MbyfB8GCxj2aqFnBMB8GA1UdIwQYMBaAFHBVgdQMlYGiZR5TJSONs73LOn0F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUQ5MS81RDhDMTcxMkEw NDAxMUVDODQ1QUU5MjZDNEY5QUUwMi9jRldCMUF5VmdhSmxIbE1sSTQyenZjczZm UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NGV0IxQXlWZ2FKbEhsTWxJNDJ6dmNzNmZRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUQ5MS81RDhDMTcxMkEwNDAxMUVDODQ1QUU5MjZDNEY5QUUwMi9jRldCMUF5Vmdh SmxIbE1sSTQyenZjczZmUVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASge/g2506XBS2eTX8+9+YAN76s7c1GFlZsDo9OMlTMxN4diEQjmzD/yjbOY/ SP/BhNH1rc8y6vgbafIQfws3lqdzpBvwK7QFFKJ5hmLEvM9ywV16nnJAR5dW0/y4 xlEwWNyseoDh/wUYAnzdBfOMJ7XLiHq7k+/qgyoFDj1NbPNW0Nvp0KblcoL409zH RnNJ9oVaIQimVp1jYM33ruvph/KVUT4YfngSkpaD8hA/onR2pY6qCpRW5xLaLi2w tlRT/HQpx7f7wBZFXnqd04LERZYm/8OmQ4gV8rrAzGCEPppro2gO+CiK25l+qpS0 g/KPR2vagzfoNDknwwc7uzs9aQ== -----END CERTIFICATE-----Generated at Sat Oct 3 15:30:14 2026 by rpki-client