$ rpki-client -vvvf rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft File: cEb4mD38NwS25c1-oSgP0PUpeaA.mft (raw, json) Hash identifier: pDbn9BhSAcx+o+zNDvYZX63z3Q8Ncp00yYSs3G3o/6U= Subject key identifier: 8A:AC:85:B1:B6:4A:86:EC:3B:A4:5E:BC:8F:E9:02:FF:78:BA:14:59 Authority key identifier: 70:46:F8:98:3D:FC:37:04:B6:E5:CD:7E:A1:28:0F:D0:F5:29:79:A0 Certificate issuer: /CN=A916320B/serialNumber=7046F8983DFC3704B6E5CD7EA1280FD0F52979A0 Certificate serial: 0CA8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft Manifest number: 0C91 Signing time: Sat 26 Sep 2026 18:42:43 +0000 Manifest this update: Sat 26 Sep 2026 18:42:43 +0000 Manifest next update: Sat 03 Oct 2026 18:42:43 +0000 Files and hashes: 1: cEb4mD38NwS25c1-oSgP0PUpeaA.crl (hash: R3O3Po+mx/76RcHc94LAuXHgg2Vfy8tRl7ALlJtgLUo=) 2: B9003CC84EE811EA8C045D52C4F9AE02.roa (hash: OjXelywDvs3PcA0G5eAXOiCmYLOHa7gJb/8woUyNMgM=) 3: 1B8483D04EEA11EA828FA155C4F9AE02.roa (hash: 6MBuRcB02GtiYUBvJ02SIBDjH2QM+fC5ns7ciouEVr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.crl rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 18:22:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3240 (0xca8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916320B, serialNumber=7046F8983DFC3704B6E5CD7EA1280FD0F52979A0 Validity Not Before: Sep 26 18:42:43 2026 GMT Not After : Oct 3 18:42:43 2026 GMT Subject: CN=6ab81223-8684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c0:31:ce:16:2e:d5:e1:0f:36:db:78:b7:4b: 95:e9:18:f1:b7:0b:cc:db:fb:d2:8c:4d:43:3d:5e: 55:6d:f8:05:e1:bf:ca:f4:e0:8a:8c:a7:fc:3e:ae: 8a:2a:4f:9b:a6:6f:e8:b5:14:89:e2:99:8c:f4:99: be:cf:40:da:e8:bc:7a:a7:e4:3e:dd:0e:d8:ed:d4: 53:24:4c:45:19:97:2b:d2:73:74:a5:4d:52:bd:0d: 52:35:c3:42:2a:a3:58:bf:2a:81:92:64:5d:f4:48: b0:75:88:99:06:96:fe:29:47:6e:8e:ca:de:6c:b8: a4:37:b6:62:cf:79:34:dd:7f:7a:89:66:a6:90:c8: 7b:d4:45:98:2f:57:57:cd:ff:30:f9:d6:66:9a:77: f9:c6:e7:cd:7d:e9:7a:8d:d6:09:b9:3c:45:23:77: f4:ca:33:39:bc:23:1e:55:44:4a:be:78:e2:bf:3b: 04:75:98:49:52:18:bd:fd:8b:52:22:e3:5d:97:23: 3e:5d:b2:0a:dd:cc:dd:18:db:31:03:85:1d:b7:b2: 05:7e:8d:15:f1:8c:2e:6f:3f:0a:ca:62:62:bf:7b: 5a:f6:eb:19:b0:9b:e9:0e:ad:47:6e:8e:6a:20:64: 89:03:12:67:e2:49:98:45:58:8f:e3:e4:be:42:75: 3d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:AC:85:B1:B6:4A:86:EC:3B:A4:5E:BC:8F:E9:02:FF:78:BA:14:59 X509v3 Authority Key Identifier: keyid:70:46:F8:98:3D:FC:37:04:B6:E5:CD:7E:A1:28:0F:D0:F5:29:79:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:0d:7b:e7:6e:f9:69:cb:26:c9:ad:cb:65:00:a8:c9:a9:6a: 55:ab:fa:43:4c:28:16:a2:b1:dc:18:34:c0:e7:9c:fe:67:c0: 67:5d:00:a0:10:0a:9d:f7:30:f5:0d:8f:9a:e9:ff:00:bf:2a: ce:05:68:46:de:78:f2:b9:72:a2:3e:a9:3f:d0:bd:e9:42:81: 1f:13:42:1e:1d:1c:4e:9b:92:52:14:9b:64:a4:bc:0a:df:da: fb:fd:15:88:fc:14:c7:f6:6b:7e:d2:c2:72:c5:c3:e1:f2:44: 17:9e:e5:04:5a:2f:ac:9b:a0:04:8c:5e:17:b0:43:50:3c:52: 91:be:e1:c9:2a:a5:bf:62:de:0f:b8:32:f5:13:fe:35:01:46: 5f:ef:7b:a2:65:38:79:39:e9:8a:5a:46:20:2f:85:73:de:ef: 6d:e0:73:dd:5d:7c:3c:4c:26:6f:ea:d5:40:38:45:8f:b7:62: c3:17:f5:e1:6c:d8:c6:4d:5c:89:06:7f:00:0e:2a:8e:01:af: b7:bd:14:ef:a3:d0:ef:17:12:3f:5c:a2:75:7c:28:37:f0:9d: c3:ce:7b:11:59:f2:29:e9:3f:b3:ea:78:25:50:77:af:2e:2a: ba:6b:95:fa:58:c5:0b:65:9d:e1:99:fd:5e:c2:5b:c9:26:d0: 28:15:00:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjMyMEIxMTAvBgNVBAUTKDcwNDZGODk4M0RGQzM3MDRCNkU1Q0Q3RUExMjgwRkQw RjUyOTc5QTAwHhcNMjYwOTI2MTg0MjQzWhcNMjYxMDAzMTg0MjQzWjAYMRYwFAYD VQQDEw02YWI4MTIyMy04Njg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo8AxzhYu1eEPNtt4t0uV6RjxtwvM2/vSjE1DPV5VbfgF4b/K9OCKjKf8Pq6K Kk+bpm/otRSJ4pmM9Jm+z0Da6Lx6p+Q+3Q7Y7dRTJExFGZcr0nN0pU1SvQ1SNcNC KqNYvyqBkmRd9EiwdYiZBpb+KUdujsrebLikN7Ziz3k03X96iWamkMh71EWYL1dX zf8w+dZmmnf5xufNfel6jdYJuTxFI3f0yjM5vCMeVURKvnjivzsEdZhJUhi9/YtS IuNdlyM+XbIK3czdGNsxA4Udt7IFfo0V8Ywubz8KymJiv3ta9usZsJvpDq1Hbo5q IGSJAxJn4kmYRViP4+S+QnU9XQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIqshbG2 SobsO6RevI/pAv94uhRZMB8GA1UdIwQYMBaAFHBG+Jg9/DcEtuXNfqEoD9D1KXmg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzIwQi8wRkZGN0FBQTI3 QUUxMUVBODU5NTZFNzhDNEY5QUUwMi9jRWI0bUQzOE53UzI1YzEtb1NnUDBQVXBl YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NFYjRtRDM4TndTMjVjMS1vU2dQMFBVcGVhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzIwQi8wRkZGN0FBQTI3QUUxMUVBODU5NTZFNzhDNEY5QUUwMi9jRWI0bUQzOE53 UzI1YzEtb1NnUDBQVXBlYUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZA175275acsmya3LZQCoyalqVav6Q0woFqKx3Bg0wOec/mfAZ10AoBAKnfcw 9Q2Pmun/AL8qzgVoRt548rlyoj6pP9C96UKBHxNCHh0cTpuSUhSbZKS8Ct/a+/0V iPwUx/ZrftLCcsXD4fJEF57lBFovrJugBIxeF7BDUDxSkb7hySqlv2LeD7gy9RP+ NQFGX+97omU4eTnpilpGIC+Fc97vbeBz3V18PEwmb+rVQDhFj7diwxf14WzYxk1c iQZ/AA4qjgGvt70U76PQ7xcSP1yidXwoN/Cdw857EVnyKek/s+p4JVB3ry4qumuV +ljFC2Wd4Zn9XsJbySbQKBUAQg== -----END CERTIFICATE-----Generated at Sat Sep 26 22:20:40 2026 by rpki-client