$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft File: cri4zRAwexYyTYeYJ98ypKqNaqE.mft (raw, json) Hash identifier: SbRuDKFKvHPebXVvIq4wwM1AxZgBl1R6Fh0+MujTgdE= Subject key identifier: B3:19:13:E2:D9:86:24:A3:70:A9:3E:A5:B3:E7:7A:7A:D3:B9:6E:CA Authority key identifier: 72:B8:B8:CD:10:30:7B:16:32:4D:87:98:27:DF:32:A4:AA:8D:6A:A1 Certificate issuer: /CN=A91FF19B/serialNumber=72B8B8CD10307B16324D879827DF32A4AA8D6AA1 Certificate serial: 0534 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cri4zRAwexYyTYeYJ98ypKqNaqE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft Manifest number: 0527 Signing time: Fri 02 Oct 2026 23:53:44 +0000 Manifest this update: Fri 02 Oct 2026 23:53:44 +0000 Manifest next update: Fri 09 Oct 2026 23:53:44 +0000 Files and hashes: 1: cri4zRAwexYyTYeYJ98ypKqNaqE.crl (hash: SLU0qEgmtyTWArYtDTNFdwg68QTtva3/r+71TCrtVT8=) 2: 0C023160C4C911EE9278E261C4F9AE02.roa (hash: Bqm0LBQ1QxgmzQ67GzN6T9VVJw3twyV0J98hBbifjyw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.crl rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cri4zRAwexYyTYeYJ98ypKqNaqE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 23:53:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1332 (0x534) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF19B, serialNumber=72B8B8CD10307B16324D879827DF32A4AA8D6AA1 Validity Not Before: Oct 2 23:53:44 2026 GMT Not After : Oct 9 23:53:44 2026 GMT Subject: CN=6ac04408-7d2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2c:01:38:bb:71:4c:2c:8a:5d:13:1b:2a:0b: 42:4e:91:ee:eb:5b:b3:64:1f:37:0d:2a:4a:5d:8e: 26:7e:74:01:19:9c:b0:6d:b1:92:3b:f3:e1:9b:91: b4:da:cb:96:b0:96:b9:c9:87:3d:ab:07:b7:a9:c3: e7:bc:a3:ee:de:0e:26:87:3f:4d:c0:56:94:6d:59: 2f:9f:55:e5:12:b0:57:5c:3e:f9:4c:85:af:9b:f1: f3:72:50:ec:a1:a4:23:b4:d2:c7:2d:e2:8e:e4:e9: 3b:23:f5:70:e1:51:36:6b:f5:1e:6b:5c:bc:9a:9d: 67:eb:f5:4e:83:a2:dc:96:bb:38:99:eb:1b:40:49: b1:05:c3:5e:5f:48:d2:a1:40:99:1b:9f:2e:11:46: bf:2a:6f:bc:0e:de:c7:41:3b:39:90:36:d7:dd:1d: a4:d1:eb:60:d7:82:ec:3a:84:18:d6:b0:73:be:05: c9:a0:76:df:39:44:12:10:d3:bf:40:ac:d7:4b:d9: 48:ff:b0:e9:87:38:1b:5b:be:d8:6a:fa:79:5f:dd: 28:b4:12:04:af:0e:43:f4:db:63:0a:c6:a8:b0:f6: 9f:f9:b7:d5:dd:2e:03:dd:f6:04:6e:d7:56:96:4a: 84:9f:76:ed:7d:85:4c:5c:aa:34:06:f8:39:96:3c: 5f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:19:13:E2:D9:86:24:A3:70:A9:3E:A5:B3:E7:7A:7A:D3:B9:6E:CA X509v3 Authority Key Identifier: keyid:72:B8:B8:CD:10:30:7B:16:32:4D:87:98:27:DF:32:A4:AA:8D:6A:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cri4zRAwexYyTYeYJ98ypKqNaqE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:a3:30:dc:93:69:47:ae:99:1d:90:20:1c:87:24:1d:bf:bc: 4c:8e:53:b7:e8:8c:49:19:e0:bf:27:69:f8:ad:8e:ec:16:3b: 42:ee:71:a6:ce:7e:3c:12:24:28:2d:6e:5c:84:47:63:d2:a5: 37:b0:71:a1:a3:78:38:cc:b5:af:55:42:ec:65:e0:6d:c4:68: 6a:aa:6d:a3:34:e8:e2:ab:86:56:92:ad:0c:bf:cd:2e:e0:7f: b8:81:ab:c3:d6:41:2d:55:aa:f6:fd:67:10:fe:cb:c3:d4:a0: 57:a4:28:c4:86:2a:ac:b6:65:b8:e4:27:0b:bb:0c:1c:dc:c9: c0:2d:43:32:06:f7:68:f5:86:ca:98:44:59:1f:be:00:88:75: 80:5c:67:dc:b8:99:d8:c9:8a:18:33:3c:8b:89:2e:83:ba:e6: 29:04:28:a7:e8:2f:76:ce:3e:5e:42:f0:7a:24:10:b7:9d:af: 48:9d:83:f2:c0:43:23:34:1c:f3:f5:c7:d5:d0:64:17:9e:fd: 9c:89:23:c5:61:cb:3a:b9:80:1d:a1:8a:0b:5b:e3:80:52:ca: 56:77:3a:68:b0:a8:96:ca:94:1e:df:33:64:da:ea:18:1d:75: 52:dc:af:32:6e:2b:73:87:e5:25:03:4f:88:89:43:a9:cc:60: e2:90:80:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBTQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkYxOUIxMTAvBgNVBAUTKDcyQjhCOENEMTAzMDdCMTYzMjREODc5ODI3REYzMkE0 QUE4RDZBQTEwHhcNMjYxMDAyMjM1MzQ0WhcNMjYxMDA5MjM1MzQ0WjAYMRYwFAYD VQQDEw02YWMwNDQwOC03ZDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwywBOLtxTCyKXRMbKgtCTpHu61uzZB83DSpKXY4mfnQBGZywbbGSO/Phm5G0 2suWsJa5yYc9qwe3qcPnvKPu3g4mhz9NwFaUbVkvn1XlErBXXD75TIWvm/HzclDs oaQjtNLHLeKO5Ok7I/Vw4VE2a/Uea1y8mp1n6/VOg6Lclrs4mesbQEmxBcNeX0jS oUCZG58uEUa/Km+8Dt7HQTs5kDbX3R2k0etg14LsOoQY1rBzvgXJoHbfOUQSENO/ QKzXS9lI/7DphzgbW77Yavp5X90otBIErw5D9NtjCsaosPaf+bfV3S4D3fYEbtdW lkqEn3btfYVMXKo0Bvg5ljxfVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLMZE+LZ hiSjcKk+pbPnenrTuW7KMB8GA1UdIwQYMBaAFHK4uM0QMHsWMk2HmCffMqSqjWqh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjE5Qi8zNjQ4OEQ4MDY2 NUIxMUVDODg4NUE0ODBDNEY5QUUwMi9jcmk0elJBd2V4WXlUWWVZSjk4eXBLcU5h cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NyaTR6UkF3ZXhZeVRZZVlKOTh5cEtxTmFxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjE5Qi8zNjQ4OEQ4MDY2NUIxMUVDODg4NUE0ODBDNEY5QUUwMi9jcmk0elJBd2V4 WXlUWWVZSjk4eXBLcU5hcUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOKMw3JNpR66ZHZAgHIckHb+8TI5Tt+iMSRngvydp+K2O7BY7Qu5xps5+PBIk KC1uXIRHY9KlN7BxoaN4OMy1r1VC7GXgbcRoaqptozTo4quGVpKtDL/NLuB/uIGr w9ZBLVWq9v1nEP7Lw9SgV6QoxIYqrLZluOQnC7sMHNzJwC1DMgb3aPWGyphEWR++ AIh1gFxn3LiZ2MmKGDM8i4kug7rmKQQop+gvds4+XkLweiQQt52vSJ2D8sBDIzQc 8/XH1dBkF579nIkjxWHLOrmAHaGKC1vjgFLKVnc6aLColsqUHt8zZNrqGB11Utyv Mm4rc4flJQNPiIlDqcxg4pCARA== -----END CERTIFICATE-----Generated at Sat Oct 3 11:15:19 2026 by rpki-client