$ rpki-client -vvvf rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.mft File: cmIg2YvMfcZqPM83Z36go9sJDaQ.mft (raw, json) Hash identifier: Xw1LHQKMt0TQ2CQTETDdyD/ORhhs1MOwKJsxWhTfspE= Subject key identifier: 0A:6D:A2:D2:A9:A6:F8:1C:EA:46:CF:6D:90:1B:7A:EF:D0:B0:4B:DE Authority key identifier: 72:62:20:D9:8B:CC:7D:C6:6A:3C:CF:37:67:7E:A0:A3:DB:09:0D:A4 Certificate issuer: /CN=A914AE22/serialNumber=726220D98BCC7DC66A3CCF37677EA0A3DB090DA4 Certificate serial: 0CD6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmIg2YvMfcZqPM83Z36go9sJDaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.mft Manifest number: 0CCA Signing time: Sun 20 Sep 2026 18:27:50 +0000 Manifest this update: Sun 20 Sep 2026 18:27:50 +0000 Manifest next update: Sun 27 Sep 2026 18:27:50 +0000 Files and hashes: 1: cmIg2YvMfcZqPM83Z36go9sJDaQ.crl (hash: j8YF0krZYYQ0UCQlLuzRPjBrm88GppYZws8p7tc6RkA=) 2: 021496F2A4EC11F0A8EB5F7EC4F9AE02.roa (hash: wgK4ZuIIb0twemfmKGJQ9J4VlAgOAeotYnSBFamHuz8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.crl rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmIg2YvMfcZqPM83Z36go9sJDaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3286 (0xcd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914AE22, serialNumber=726220D98BCC7DC66A3CCF37677EA0A3DB090DA4 Validity Not Before: Sep 20 18:27:50 2026 GMT Not After : Sep 27 18:27:50 2026 GMT Subject: CN=6ab025a6-6078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c7:98:e2:bc:f3:33:82:61:60:3c:85:72:f3: 67:37:cb:cc:fa:62:31:00:ec:d6:bb:9f:82:c7:42: 2d:43:bd:9e:64:a3:13:c3:8b:c7:a8:34:e3:21:40: f0:37:60:82:33:01:97:6a:f2:bb:8a:3a:a5:db:5e: 03:3c:ef:a5:de:bd:41:ff:cf:9f:76:f7:47:f9:43: ae:6b:7c:0f:06:c8:74:19:97:06:7e:ee:13:46:e9: ea:6a:20:5d:80:90:c3:28:20:62:77:1f:ac:7d:2a: ff:fd:77:10:c6:03:e7:db:3c:db:6c:1f:00:1c:f2: 71:4a:02:21:47:fb:94:c3:c6:fa:a7:9e:ab:e4:7c: 31:a8:46:bd:a8:7b:e6:8d:79:74:ef:25:07:85:6f: d1:8b:98:57:6a:eb:f3:1e:cb:72:07:d7:7d:63:15: 28:64:28:88:93:63:9d:34:ef:52:e2:1f:bd:24:4d: 46:8c:f9:06:b4:5f:6c:3e:03:9b:8c:af:38:0c:a0: 1e:34:54:7c:1d:7f:d5:fe:74:81:78:0b:41:eb:d1: 66:f1:62:5a:9f:6e:a5:51:af:75:55:db:0a:39:ae: 4f:5f:14:b9:1c:0c:7f:35:a1:79:b9:b3:99:93:60: 0d:94:99:dc:89:be:e7:69:1d:28:71:a6:b8:d9:62: 7f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:6D:A2:D2:A9:A6:F8:1C:EA:46:CF:6D:90:1B:7A:EF:D0:B0:4B:DE X509v3 Authority Key Identifier: keyid:72:62:20:D9:8B:CC:7D:C6:6A:3C:CF:37:67:7E:A0:A3:DB:09:0D:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmIg2YvMfcZqPM83Z36go9sJDaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:eb:b1:86:ec:9e:03:b9:10:71:24:45:3e:9d:bb:e4:de:29: f9:bd:63:31:f5:b0:d3:a4:a2:4e:3c:26:77:88:25:b5:7f:c3: b4:a9:00:fc:c3:ea:15:e0:58:f5:04:65:b2:61:e6:ad:4d:0a: c7:65:99:07:2b:30:30:13:f8:42:ac:92:95:e2:6a:44:b3:02: a5:ff:e0:93:54:8c:1a:06:a4:83:39:24:79:b0:e1:13:63:03: 89:bb:e5:82:14:e2:21:56:05:82:ff:c5:ee:e3:55:b6:63:17: 7a:c1:35:a7:3b:14:74:c4:f1:dd:38:d6:ff:cd:c6:48:f7:13: f1:a6:97:01:4c:8e:44:ba:0e:9a:54:3e:cf:8f:ba:37:4b:6f: c7:03:7a:b1:92:2a:33:e8:69:45:e0:fb:79:e6:6f:98:59:6e: 28:dd:67:d4:56:69:5a:15:79:29:13:88:0f:f5:c3:33:aa:3a: 03:5b:1b:fe:22:62:3b:18:64:45:b1:e8:9b:2d:18:49:f9:2d: c2:bd:a3:7d:39:d0:f9:a6:13:a8:80:60:35:08:f8:44:69:1c: 32:f6:a7:cc:b8:f2:c6:7a:4c:5c:5d:18:e6:07:79:e6:5f:2c: f6:a5:02:61:51:0b:73:48:ae:05:3d:85:5e:4d:8a:8a:83:4f: cd:c4:f5:b5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDNYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEFFMjIxMTAvBgNVBAUTKDcyNjIyMEQ5OEJDQzdEQzY2QTNDQ0YzNzY3N0VBMEEz REIwOTBEQTQwHhcNMjYwOTIwMTgyNzUwWhcNMjYwOTI3MTgyNzUwWjAYMRYwFAYD VQQDEw02YWIwMjVhNi02MDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArseY4rzzM4JhYDyFcvNnN8vM+mIxAOzWu5+Cx0ItQ72eZKMTw4vHqDTjIUDw N2CCMwGXavK7ijql214DPO+l3r1B/8+fdvdH+UOua3wPBsh0GZcGfu4TRunqaiBd gJDDKCBidx+sfSr//XcQxgPn2zzbbB8AHPJxSgIhR/uUw8b6p56r5HwxqEa9qHvm jXl07yUHhW/Ri5hXauvzHstyB9d9YxUoZCiIk2OdNO9S4h+9JE1GjPkGtF9sPgOb jK84DKAeNFR8HX/V/nSBeAtB69Fm8WJan26lUa91VdsKOa5PXxS5HAx/NaF5ubOZ k2ANlJncib7naR0ocaa42WJ/QQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAptotKp pvgc6kbPbZAbeu/QsEveMB8GA1UdIwQYMBaAFHJiINmLzH3GajzPN2d+oKPbCQ2k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QUUyMi9CMTc4NDM5RTFC QkYxMUVBQjZBNzRGNzFDNEY5QUUwMi9jbUlnMll2TWZjWnFQTTgzWjM2Z285c0pE YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NtSWcyWXZNZmNacVBNODNaMzZnbzlzSkRhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QUUyMi9CMTc4NDM5RTFCQkYxMUVBQjZBNzRGNzFDNEY5QUUwMi9jbUlnMll2TWZj WnFQTTgzWjM2Z285c0pEYVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbeuxhuyeA7kQcSRFPp275N4p+b1jMfWw06SiTjwmd4gltX/DtKkA/MPqFeBY 9QRlsmHmrU0Kx2WZByswMBP4QqySleJqRLMCpf/gk1SMGgakgzkkebDhE2MDibvl ghTiIVYFgv/F7uNVtmMXesE1pzsUdMTx3TjW/83GSPcT8aaXAUyORLoOmlQ+z4+6 N0tvxwN6sZIqM+hpReD7eeZvmFluKN1n1FZpWhV5KROID/XDM6o6A1sb/iJiOxhk RbHomy0YSfktwr2jfTnQ+aYTqIBgNQj4RGkcMvanzLjyxnpMXF0Y5gd55l8s9qUC YVELc0iuBT2FXk2KioNPzcT1tQ== -----END CERTIFICATE-----Generated at Sun Sep 20 22:02:20 2026 by rpki-client