$ rpki-client -vvvf rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft File: CBKglmLws-NPK1pRwz6OknA-Q2k.mft (raw, json) Hash identifier: pOIbFVURNGUoB7o8U5i8ZomCMzBSH5aMXd5FkFpvxSQ= Subject key identifier: 90:84:6B:64:07:DD:6D:1C:11:73:C4:3B:9F:D9:3F:D0:EE:C8:F7:91 Authority key identifier: 08:12:A0:96:62:F0:B3:E3:4F:2B:5A:51:C3:3E:8E:92:70:3E:43:69 Certificate issuer: /CN=A91547EC/serialNumber=0812A09662F0B3E34F2B5A51C33E8E92703E4369 Certificate serial: C8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft Manifest number: C5 Signing time: Sat 19 Sep 2026 06:53:58 +0000 Manifest this update: Sat 19 Sep 2026 06:53:57 +0000 Manifest next update: Sat 26 Sep 2026 06:53:57 +0000 Files and hashes: 1: CBKglmLws-NPK1pRwz6OknA-Q2k.crl (hash: V0pcbKs2Ioy+KGIlwb6Da+RQD1U+NI4aPm0h3BfT5TA=) 2: 7CB1102487DD11F0A89FB377C4F9AE02.roa (hash: LJuHTr9dIvZYkAmMksiQJJP2qElg6VwwLMqlMwzQK3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.crl rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91547EC, serialNumber=0812A09662F0B3E34F2B5A51C33E8E92703E4369 Validity Not Before: Sep 19 06:53:57 2026 GMT Not After : Sep 26 06:53:57 2026 GMT Subject: CN=6aae3185-4111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:00:bc:e5:57:3c:22:85:df:85:a3:7c:a9:84: 9e:73:ae:43:02:e0:77:a9:25:de:b0:91:86:39:d8: 94:0f:d7:f2:a8:7d:32:d5:53:74:db:95:29:db:af: 32:a3:05:26:57:25:9b:f9:7e:26:ea:f1:2f:73:bf: a9:a4:87:15:57:e4:b2:c2:81:a4:b7:a5:92:4d:ff: 0f:dd:d7:1f:d4:b1:ef:05:40:16:1d:e0:f1:de:cb: 01:ba:3b:a9:0a:7a:21:28:1a:f6:c7:ec:b3:29:5d: 6b:db:26:c8:36:b4:fc:b3:01:97:9a:63:4c:36:33: ce:c1:49:60:3a:6b:c6:aa:48:02:7d:9d:86:21:e0: 69:73:8c:13:ee:7c:65:fd:fc:a1:6e:98:0e:d0:5b: 9e:33:92:d1:24:93:d5:00:4a:66:82:7f:79:b9:e3: 9a:87:05:23:4b:06:ed:36:71:76:e8:56:b8:89:d8: 32:85:d1:ac:ce:a3:ae:50:e3:b5:5b:37:5c:79:6c: 31:db:6b:ef:6c:56:e9:37:f2:b2:a1:1a:21:d9:0d: a7:83:ed:c3:ac:c6:40:b5:c2:e4:0b:18:cd:5a:d3: f9:b2:45:2b:30:61:0a:b1:58:c9:75:23:fa:87:48: e1:b9:9d:1f:61:5f:f0:a8:61:96:40:f3:d3:1d:96: 6b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:84:6B:64:07:DD:6D:1C:11:73:C4:3B:9F:D9:3F:D0:EE:C8:F7:91 X509v3 Authority Key Identifier: keyid:08:12:A0:96:62:F0:B3:E3:4F:2B:5A:51:C3:3E:8E:92:70:3E:43:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:83:79:9a:5c:60:c5:0f:3d:86:8f:4f:5c:81:7e:2a:d5:a2: e9:92:d2:18:37:5d:3c:f1:34:cb:ca:a4:f6:08:46:d7:9b:67: d2:e4:ae:9c:42:21:54:8f:76:0a:09:d0:72:bf:e0:45:c0:e2: 39:43:44:8c:2d:59:79:72:a0:1a:76:73:04:d3:1c:c5:37:f8: 76:d0:ab:e6:b5:4f:cc:ff:1c:10:38:fb:01:25:07:ef:a3:d9: ca:ab:96:44:c2:fd:32:0e:2b:7a:cf:15:5d:9d:c2:6f:21:0b: 1f:f7:5f:9c:93:ff:ab:e0:dd:fa:66:4d:0e:dc:24:26:84:68: 76:3a:59:c0:07:75:08:39:11:87:79:b8:27:3c:41:4e:fd:1c: fb:8d:94:61:38:b7:9c:ab:d9:2c:98:52:80:a4:50:5f:71:a0: 36:ec:05:95:0a:0a:98:3b:d5:c4:a2:2a:ba:f8:69:0e:a3:c4: c8:0b:9f:45:ce:86:25:29:eb:6b:d8:da:b3:06:13:f7:e8:2a: c1:c2:b7:fc:4c:23:e2:1f:69:c2:8f:f1:2b:70:2b:e7:53:10: f2:47:b0:6e:e8:81:fe:2f:98:dc:ca:e9:3a:58:cf:d6:87:ba: 7b:a2:93:f7:f1:43:e2:4a:f6:93:d8:96:2f:c4:7a:04:6d:5f: 00:4b:ef:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ3RUMxMTAvBgNVBAUTKDA4MTJBMDk2NjJGMEIzRTM0RjJCNUE1MUMzM0U4RTky NzAzRTQzNjkwHhcNMjYwOTE5MDY1MzU3WhcNMjYwOTI2MDY1MzU3WjAYMRYwFAYD VQQDEw02YWFlMzE4NS00MTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAywC85Vc8IoXfhaN8qYSec65DAuB3qSXesJGGOdiUD9fyqH0y1VN025Up268y owUmVyWb+X4m6vEvc7+ppIcVV+SywoGkt6WSTf8P3dcf1LHvBUAWHeDx3ssBujup CnohKBr2x+yzKV1r2ybINrT8swGXmmNMNjPOwUlgOmvGqkgCfZ2GIeBpc4wT7nxl /fyhbpgO0FueM5LRJJPVAEpmgn95ueOahwUjSwbtNnF26Fa4idgyhdGszqOuUOO1 WzdceWwx22vvbFbpN/KyoRoh2Q2ng+3DrMZAtcLkCxjNWtP5skUrMGEKsVjJdSP6 h0jhuZ0fYV/wqGGWQPPTHZZrJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJCEa2QH 3W0cEXPEO5/ZP9DuyPeRMB8GA1UdIwQYMBaAFAgSoJZi8LPjTytaUcM+jpJwPkNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDdFQy8yNTYzNTdDODg3 REQxMUYwQjc0Q0ZFNzZDNEY5QUUwMi9DQktnbG1Md3MtTlBLMXBSd3o2T2tuQS1R MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0NCS2dsbUx3cy1OUEsxcFJ3ejZPa25BLVEyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDdFQy8yNTYzNTdDODg3REQxMUYwQjc0Q0ZFNzZDNEY5QUUwMi9DQktnbG1Md3Mt TlBLMXBSd3o2T2tuQS1RMmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXoN5mlxgxQ89ho9PXIF+KtWi6ZLSGDddPPE0y8qk9ghG15tn0uSunEIhVI92 CgnQcr/gRcDiOUNEjC1ZeXKgGnZzBNMcxTf4dtCr5rVPzP8cEDj7ASUH76PZyquW RML9Mg4res8VXZ3CbyELH/dfnJP/q+Dd+mZNDtwkJoRodjpZwAd1CDkRh3m4JzxB Tv0c+42UYTi3nKvZLJhSgKRQX3GgNuwFlQoKmDvVxKIquvhpDqPEyAufRc6GJSnr a9jaswYT9+gqwcK3/Ewj4h9pwo/xK3Ar51MQ8kewbuiB/i+Y3MrpOljP1oe6e6KT 9/FD4kr2k9iWL8R6BG1fAEvv0A== -----END CERTIFICATE-----Generated at Sun Sep 20 19:28:50 2026 by rpki-client