$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E60BE/9A009132AB3A11F18367D5166D11F970/CQyLgW7CLSTWcV6m09s0cv3SkY0.mft File: CQyLgW7CLSTWcV6m09s0cv3SkY0.mft (raw, json) Hash identifier: BvncD7ffD/1rRdFQU+vrlL9a7SVvsxmdBeqH8WBf9TE= Subject key identifier: 5D:D2:2A:D8:88:1D:2A:AA:BA:B3:E4:B0:85:36:4B:BE:17:57:09:2E Authority key identifier: 09:0C:8B:81:6E:C2:2D:24:D6:71:5E:A6:D3:DB:34:72:FD:D2:91:8D Certificate issuer: /CN=A91E60BE/serialNumber=090C8B816EC22D24D6715EA6D3DB3472FDD2918D Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CQyLgW7CLSTWcV6m09s0cv3SkY0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E60BE/9A009132AB3A11F18367D5166D11F970/CQyLgW7CLSTWcV6m09s0cv3SkY0.mft Manifest number: 0C Signing time: Wed 23 Sep 2026 08:56:27 +0000 Manifest this update: Wed 23 Sep 2026 08:56:27 +0000 Manifest next update: Wed 30 Sep 2026 08:56:27 +0000 Files and hashes: 1: CQyLgW7CLSTWcV6m09s0cv3SkY0.crl (hash: BrE3qv2oj33VyA1m1Vw4Hgsjys/LVAHoPnbF9BpN1JI=) 2: mU--buUUTmUNCuDGU6LmNbyW7jY.asa (hash: R1QnryZE+6vurfUuE0WUq4spgNvCBH4X3l8NtzsEP1g=) 3: 4-oiypFfIpguVhrn4YIqmnwHJho.asa (hash: nNsZolbMm357b3YPMufDx88k9OIE5utNMxj3ie7geC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E60BE/9A009132AB3A11F18367D5166D11F970/CQyLgW7CLSTWcV6m09s0cv3SkY0.crl rsync://rpki.apnic.net/member_repository/A91E60BE/9A009132AB3A11F18367D5166D11F970/CQyLgW7CLSTWcV6m09s0cv3SkY0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CQyLgW7CLSTWcV6m09s0cv3SkY0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:56:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E60BE, serialNumber=090C8B816EC22D24D6715EA6D3DB3472FDD2918D Validity Not Before: Sep 23 08:56:27 2026 GMT Not After : Sep 30 08:56:27 2026 GMT Subject: CN=6ab3943b-9c95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:be:09:48:8b:22:e8:99:25:f0:bf:9d:81:87: 4e:ff:c1:05:24:4c:3d:26:f3:ee:18:7b:eb:12:75: df:d5:e2:17:e3:5f:ae:ba:84:56:a8:78:cb:13:d7: a8:e6:d4:71:22:a6:72:57:41:38:3c:a1:9c:b4:3c: be:92:49:27:c9:27:cf:4c:9e:d4:17:51:3b:29:1a: f5:e9:d0:37:73:e6:fb:a5:d6:66:d6:f4:37:cb:26: 94:ac:59:08:45:40:f4:39:38:15:3a:0d:80:e1:a1: 3b:7a:aa:c8:f3:31:98:6c:6d:2a:b4:9d:7a:9b:2a: c1:a0:1d:84:3e:2c:ea:1c:78:e6:f8:86:b4:ab:5b: 14:17:40:02:21:9a:a7:7f:f3:65:7a:87:49:4c:23: 40:68:12:36:c4:b8:4c:a8:7e:f6:f1:45:e2:ae:1d: ec:76:f9:fc:62:9d:bc:36:4b:68:43:28:cb:7e:4d: 1d:50:66:77:3a:71:46:30:0b:de:86:a2:1f:91:76: ec:af:9e:25:e8:21:48:a5:b7:eb:0a:12:f9:97:dd: 98:95:6a:bc:de:71:7b:b8:bd:a0:b6:85:dc:ca:bd: d6:2c:a0:af:58:b4:29:40:e4:49:27:e9:e6:41:b9: 09:e4:78:5a:da:c0:f4:02:32:41:2e:80:32:20:d2: 53:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D2:2A:D8:88:1D:2A:AA:BA:B3:E4:B0:85:36:4B:BE:17:57:09:2E X509v3 Authority Key Identifier: keyid:09:0C:8B:81:6E:C2:2D:24:D6:71:5E:A6:D3:DB:34:72:FD:D2:91:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E60BE/9A009132AB3A11F18367D5166D11F970/CQyLgW7CLSTWcV6m09s0cv3SkY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CQyLgW7CLSTWcV6m09s0cv3SkY0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E60BE/9A009132AB3A11F18367D5166D11F970/CQyLgW7CLSTWcV6m09s0cv3SkY0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:00:2a:90:ba:e7:aa:93:af:92:20:89:58:83:43:10:4a:93: fa:71:c7:5a:32:65:45:60:a6:ca:aa:06:d7:02:28:d3:c3:9f: 8a:f2:a8:11:79:da:38:4e:09:b0:6a:f2:9c:15:1b:a2:c5:fe: 58:f7:e2:84:47:01:80:65:7a:5b:4b:9a:11:39:e9:95:43:31: c2:07:ef:4c:9b:a3:c1:8c:2f:00:02:9b:20:3e:79:89:9e:7f: bc:1a:b4:05:db:cc:07:7b:43:c8:e3:74:b5:b7:79:d9:73:28: 65:9f:fb:3c:76:56:e4:52:fd:8f:aa:46:fc:07:a3:fe:4d:64: bb:5e:fb:92:47:da:13:de:20:b3:09:2d:30:5e:00:89:d9:34: dc:68:ca:a5:ec:5f:a8:7e:3b:b4:e0:b6:17:2a:1b:ff:f5:f2: 73:ab:70:13:aa:1b:1b:eb:8d:65:a0:33:a7:57:11:98:99:e8: 16:9b:2e:db:21:6a:3f:1b:49:b5:50:3d:16:f5:55:83:cb:c7: 00:90:bb:e9:42:19:ef:0c:61:64:78:9c:eb:d4:79:ac:4a:bc: 63:1d:26:40:cf:46:02:6c:f9:b0:5a:95:6f:d3:bf:6c:9e:f9: f5:0e:b7:48:4e:13:7d:35:ca:86:cb:af:2b:85:7f:76:d8:9d: a5:a6:f2:47 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NjBCRTExMC8GA1UEBRMoMDkwQzhCODE2RUMyMkQyNEQ2NzE1RUE2RDNEQjM0NzJG REQyOTE4RDAeFw0yNjA5MjMwODU2MjdaFw0yNjA5MzAwODU2MjdaMBgxFjAUBgNV BAMTDTZhYjM5NDNiLTljOTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtvglIiyLomSXwv52Bh07/wQUkTD0m8+4Ye+sSdd/V4hfjX666hFaoeMsT16jm 1HEipnJXQTg8oZy0PL6SSSfJJ89MntQXUTspGvXp0Ddz5vul1mbW9DfLJpSsWQhF QPQ5OBU6DYDhoTt6qsjzMZhsbSq0nXqbKsGgHYQ+LOoceOb4hrSrWxQXQAIhmqd/ 82V6h0lMI0BoEjbEuEyofvbxReKuHex2+fxinbw2S2hDKMt+TR1QZnc6cUYwC96G oh+RduyvniXoIUilt+sKEvmX3ZiVarzecXu4vaC2hdzKvdYsoK9YtClA5Ekn6eZB uQnkeFrawPQCMkEugDIg0lM/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUXdIq2Igd Kqq6s+SwhTZLvhdXCS4wHwYDVR0jBBgwFoAUCQyLgW7CLSTWcV6m09s0cv3SkY0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2MEJFLzlBMDA5MTMyQUIz QTExRjE4MzY3RDUxNjZEMTFGOTcwL0NReUxnVzdDTFNUV2NWNm0wOXMwY3YzU2tZ MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ1F5TGdXN0NMU1RXY1Y2bTA5czBjdjNTa1kwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2 MEJFLzlBMDA5MTMyQUIzQTExRjE4MzY3RDUxNjZEMTFGOTcwL0NReUxnVzdDTFNU V2NWNm0wOXMwY3YzU2tZMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAVACqQuueqk6+SIIlYg0MQSpP6ccdaMmVFYKbKqgbXAijTw5+K8qgRedo4Tgmw avKcFRuixf5Y9+KERwGAZXpbS5oROemVQzHCB+9Mm6PBjC8AApsgPnmJnn+8GrQF 28wHe0PI43S1t3nZcyhln/s8dlbkUv2Pqkb8B6P+TWS7XvuSR9oT3iCzCS0wXgCJ 2TTcaMql7F+ofju04LYXKhv/9fJzq3ATqhsb641loDOnVxGYmegWmy7bIWo/G0m1 UD0W9VWDy8cAkLvpQhnvDGFkeJzr1HmsSrxjHSZAz0YCbPmwWpVv079snvn1DrdI ThN9NcqGy68rhX922J2lpvJH -----END CERTIFICATE-----Generated at Thu Sep 24 18:38:02 2026 by rpki-client