$ rpki-client -vvvf rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft File: cQovxyPTd706pfsnGkrolOV6dFQ.mft (raw, json) Hash identifier: 9lwutZElhAuDB060vlknuGSEeok8+6rXMhobm6kDiWY= Subject key identifier: 6F:45:77:98:0D:35:B7:84:83:4A:7B:93:9B:01:16:D6:B5:01:6A:36 Authority key identifier: 71:0A:2F:C7:23:D3:77:BD:3A:A5:FB:27:1A:4A:E8:94:E5:7A:74:54 Certificate issuer: /CN=A91976E2/serialNumber=710A2FC723D377BD3AA5FB271A4AE894E57A7454 Certificate serial: 047A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft Manifest number: 046C Signing time: Tue 22 Sep 2026 23:45:43 +0000 Manifest this update: Tue 22 Sep 2026 23:45:42 +0000 Manifest next update: Tue 29 Sep 2026 23:45:42 +0000 Files and hashes: 1: cQovxyPTd706pfsnGkrolOV6dFQ.crl (hash: Cst2N4DHkIcp2dItSwsT9HzLH1+At5Rn10a0CmLeDnY=) 2: ADDCA5F4BA2911F0B6E66A71C4F9AE02.roa (hash: YHAl4wyL5lBLADe3tYGJfQq5g48eFSMbVbWuT+BMPaQ=) 3: 61138FD0708111F1AFA81DDF7CA30FBC.roa (hash: UXuyg07q384x+vqE80NFlYLxxP2h+t2gXIe3OeSv7hI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.crl rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 23:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1146 (0x47a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91976E2, serialNumber=710A2FC723D377BD3AA5FB271A4AE894E57A7454 Validity Not Before: Sep 22 23:45:42 2026 GMT Not After : Sep 29 23:45:42 2026 GMT Subject: CN=6ab31327-378d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:17:37:fa:d3:9d:16:b4:2f:1f:51:2f:79:9b: 88:95:92:9c:4f:f8:b0:c9:ca:06:1e:1e:91:43:28: 16:80:16:da:df:5e:e9:74:38:f4:1d:d4:4b:8b:d5: e5:2a:51:de:e4:a4:30:ac:02:f6:5c:d0:d1:76:85: 85:a2:f5:e5:10:4e:2e:5f:0e:78:a6:85:2d:22:bd: 25:74:82:18:e2:da:7f:0c:95:a0:d0:1a:97:e8:f0: 99:51:8a:11:69:43:16:55:e7:9a:a3:de:17:a7:70: 42:34:ee:f6:11:95:49:b7:a9:56:cb:20:93:0b:a8: e8:17:11:bc:38:71:80:f4:6b:1f:f5:61:19:0e:1e: 76:fe:3b:b2:47:9e:73:02:27:a5:ad:77:4b:84:7e: 42:3c:29:77:ad:b2:a6:7b:51:3c:f3:47:b6:3c:ab: e3:16:a2:2c:df:d3:40:f9:6a:96:ad:c0:54:5b:a9: f6:d8:46:af:e0:d3:79:c7:cd:6d:0b:5c:d9:97:36: 17:b1:e5:63:4e:6f:56:d5:1a:0d:fc:3e:34:40:43: f7:16:28:fd:b1:7b:f5:b9:41:f6:3c:59:c2:0b:1f: f9:41:bc:d1:de:ee:5a:c1:c6:3c:a2:1f:94:db:66: bb:8c:7d:73:b0:5e:ff:62:f1:c1:2f:a9:5f:87:cb: 61:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:45:77:98:0D:35:B7:84:83:4A:7B:93:9B:01:16:D6:B5:01:6A:36 X509v3 Authority Key Identifier: keyid:71:0A:2F:C7:23:D3:77:BD:3A:A5:FB:27:1A:4A:E8:94:E5:7A:74:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:aa:61:3e:ba:c5:0f:8d:ee:e9:ef:6e:26:32:27:5c:6e:7b: 54:60:f4:b1:7b:4f:bc:97:1e:b5:e6:6e:42:1f:e5:54:2e:35: 4a:c6:92:0f:44:17:2d:be:77:d2:73:aa:ff:36:fa:16:7d:1f: 1f:87:e4:05:93:49:85:c9:d5:ab:85:41:7c:88:1a:24:40:82: 6e:bf:8f:7d:19:b6:8a:23:d0:ee:77:76:b8:b4:62:47:de:30: 91:15:d7:81:11:ef:15:90:56:a1:57:44:3a:af:c9:b8:ab:53: 8e:58:3f:c6:b8:c1:50:b3:1b:e1:00:a5:7f:65:f5:70:1a:07: f1:29:34:98:52:3a:6c:eb:3b:ee:42:ba:47:4c:ec:86:01:66: 38:9c:2f:c0:86:fa:60:64:87:08:3b:40:cd:23:5e:41:5e:b3: 24:31:26:99:96:d9:a4:d2:e2:d6:87:1a:8e:4f:e8:0b:78:cf: 5f:92:f7:c1:67:83:e2:a0:56:75:da:e7:e6:05:32:fe:d4:b9: 01:05:bb:2d:a9:1b:79:30:da:c9:3f:87:f0:a7:99:b7:d6:74: 07:5e:e3:2c:70:f4:a7:dc:f2:e9:e3:07:db:2f:ec:49:3f:51: f2:8a:dc:da:49:6c:14:a4:af:9e:de:3d:68:57:c0:3b:45:66: 71:fd:97:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBHowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc2RTIxMTAvBgNVBAUTKDcxMEEyRkM3MjNEMzc3QkQzQUE1RkIyNzFBNEFFODk0 RTU3QTc0NTQwHhcNMjYwOTIyMjM0NTQyWhcNMjYwOTI5MjM0NTQyWjAYMRYwFAYD VQQDEw02YWIzMTMyNy0zNzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArxc3+tOdFrQvH1EveZuIlZKcT/iwycoGHh6RQygWgBba317pdDj0HdRLi9Xl KlHe5KQwrAL2XNDRdoWFovXlEE4uXw54poUtIr0ldIIY4tp/DJWg0BqX6PCZUYoR aUMWVeeao94Xp3BCNO72EZVJt6lWyyCTC6joFxG8OHGA9Gsf9WEZDh52/juyR55z AielrXdLhH5CPCl3rbKme1E880e2PKvjFqIs39NA+WqWrcBUW6n22Eav4NN5x81t C1zZlzYXseVjTm9W1RoN/D40QEP3Fij9sXv1uUH2PFnCCx/5QbzR3u5awcY8oh+U 22a7jH1zsF7/YvHBL6lfh8thjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG9Fd5gN NbeEg0p7k5sBFta1AWo2MB8GA1UdIwQYMBaAFHEKL8cj03e9OqX7JxpK6JTlenRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzZFMi80N0M0NEFEOEFF ODkxMUVDOEE4RDMzNjhDNEY5QUUwMi9jUW92eHlQVGQ3MDZwZnNuR2tyb2xPVjZk RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NRb3Z4eVBUZDcwNnBmc25Ha3JvbE9WNmRGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzZFMi80N0M0NEFEOEFFODkxMUVDOEE4RDMzNjhDNEY5QUUwMi9jUW92eHlQVGQ3 MDZwZnNuR2tyb2xPVjZkRlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAaphPrrFD43u6e9uJjInXG57VGD0sXtPvJceteZuQh/lVC41SsaSD0QXLb53 0nOq/zb6Fn0fH4fkBZNJhcnVq4VBfIgaJECCbr+PfRm2iiPQ7nd2uLRiR94wkRXX gRHvFZBWoVdEOq/JuKtTjlg/xrjBULMb4QClf2X1cBoH8Sk0mFI6bOs77kK6R0zs hgFmOJwvwIb6YGSHCDtAzSNeQV6zJDEmmZbZpNLi1ocajk/oC3jPX5L3wWeD4qBW ddrn5gUy/tS5AQW7LakbeTDayT+H8KeZt9Z0B17jLHD0p9zy6eMH2y/sST9R8orc 2klsFKSvnt49aFfAO0Vmcf2Xvw== -----END CERTIFICATE-----Generated at Thu Sep 24 11:35:28 2026 by rpki-client