$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.mft File: CpU4Un2lMv4x11DRNpblzq8qm88.mft (raw, json) Hash identifier: t7fzUVs97Z/+t65XZ/+9x/g6Tmw3acsXEmecP/eKIBY= Subject key identifier: 01:72:5B:C3:44:D0:26:CA:61:B3:89:36:22:BF:7F:73:7A:53:83:3C Authority key identifier: 0A:95:38:52:7D:A5:32:FE:31:D7:50:D1:36:96:E5:CE:AF:2A:9B:CF Certificate issuer: /CN=A91C2677/serialNumber=0A9538527DA532FE31D750D13696E5CEAF2A9BCF Certificate serial: 0291 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CpU4Un2lMv4x11DRNpblzq8qm88.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.mft Manifest number: 028A Signing time: Mon 21 Sep 2026 01:52:12 +0000 Manifest this update: Mon 21 Sep 2026 01:52:12 +0000 Manifest next update: Mon 28 Sep 2026 01:52:12 +0000 Files and hashes: 1: CpU4Un2lMv4x11DRNpblzq8qm88.crl (hash: c3OZrDUuRymeARgqwzzAZyG8wYyAV8N6FrAhYlM6tCo=) 2: C9D1E34E3E6511F18329E1A9CD833773.roa (hash: YlAauxy525S9XOXs7fFMSeSVZDB92cfvJ9ujaExNVJk=) 3: 5A1F332618A211EEB9517111C4F9AE02.roa (hash: ZHpMs5xnHyrmGG6brYvpkf6EbiaHiV+pUJ+wJWuD338=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.crl rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CpU4Un2lMv4x11DRNpblzq8qm88.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 657 (0x291) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2677, serialNumber=0A9538527DA532FE31D750D13696E5CEAF2A9BCF Validity Not Before: Sep 21 01:52:12 2026 GMT Not After : Sep 28 01:52:12 2026 GMT Subject: CN=6ab08dcc-932e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3f:1f:1e:1c:4a:64:ef:af:d7:97:76:f7:1e: 73:40:15:80:29:32:f2:8f:f6:fe:8b:95:b9:3f:94: 82:21:0c:94:e5:11:03:0e:d3:0e:ad:ae:3e:3f:6b: e4:3c:6e:2e:5f:c6:9e:62:25:31:44:97:f5:b5:c4: 45:ae:3f:1e:22:02:44:77:83:89:11:a1:46:31:bc: bd:22:e3:9b:42:89:a6:42:4c:99:4a:5c:2e:64:72: 45:8f:eb:29:36:8b:4e:d8:b7:51:74:c2:47:c6:85: c6:4f:67:8d:07:2c:d2:26:44:b5:f5:44:f1:cc:f2: 0e:fa:9b:47:51:c0:18:d4:6d:f3:f5:fe:af:a8:b7: d8:bb:a9:8d:1f:4a:39:7d:7f:4c:bb:66:b6:fd:c7: 18:58:dd:03:75:d8:1f:51:c3:b6:1c:cb:ba:c8:2c: 40:34:b3:f2:ae:52:e9:7a:2f:96:60:66:81:9f:d9: ea:91:3e:c0:1f:b9:60:f0:60:44:c4:88:dc:f4:54: b7:28:93:9d:5c:02:a0:9b:8e:38:77:6e:f1:4c:6a: e6:5e:ac:c5:82:99:ab:07:e4:4d:c2:86:6a:5d:09: 36:84:47:e9:94:b7:1f:56:78:21:83:fb:08:04:06: 2a:98:83:4c:8d:8d:76:e1:6f:19:2d:91:71:ae:47: ee:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:72:5B:C3:44:D0:26:CA:61:B3:89:36:22:BF:7F:73:7A:53:83:3C X509v3 Authority Key Identifier: keyid:0A:95:38:52:7D:A5:32:FE:31:D7:50:D1:36:96:E5:CE:AF:2A:9B:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CpU4Un2lMv4x11DRNpblzq8qm88.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:32:f3:02:5d:bd:8c:45:4e:c0:0d:6c:47:3c:ff:4d:2c:20: 03:4b:4c:12:a9:36:ff:de:c2:4f:b6:76:65:d8:87:cd:ad:e0: 82:76:d2:67:87:e9:c1:ca:96:94:ea:04:6e:7b:a9:03:b5:2a: cc:4b:2c:a4:40:d1:88:a6:91:52:58:d9:fe:e2:06:76:7d:af: 25:34:4a:59:b9:fc:ee:4c:c0:de:2b:a3:57:34:6f:7d:29:ba: 46:1d:7e:20:e8:27:d3:d2:82:f4:18:20:bc:c3:1d:00:80:21: 4a:92:1d:49:5d:04:8b:0f:0a:15:7d:d8:fe:f9:56:20:a4:f6: 84:ee:ce:fd:53:7d:a7:01:f0:93:86:35:01:a6:43:1f:8b:0a: e2:4c:9d:8e:dc:43:a5:37:e6:b7:d6:39:9e:6f:38:1a:04:56: 3a:03:a8:cf:cd:4c:91:f2:c1:2f:6d:b6:cc:0d:c7:76:ea:1a: 78:37:ff:11:13:5d:b5:b5:f8:c9:51:1f:08:16:a2:32:9b:8a: 75:33:0f:b8:b4:84:e2:bf:c4:6c:0a:3f:5b:c3:cf:85:da:fc: 44:51:4a:2e:1d:69:17:25:44:a6:9a:02:f7:f4:aa:9d:57:be: 6d:3f:63:a8:50:1d:21:5c:95:50:c5:ad:30:b4:3c:5b:2b:c1: 2a:82:dd:5b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI2NzcxMTAvBgNVBAUTKDBBOTUzODUyN0RBNTMyRkUzMUQ3NTBEMTM2OTZFNUNF QUYyQTlCQ0YwHhcNMjYwOTIxMDE1MjEyWhcNMjYwOTI4MDE1MjEyWjAYMRYwFAYD VQQDEw02YWIwOGRjYy05MzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuD8fHhxKZO+v15d29x5zQBWAKTLyj/b+i5W5P5SCIQyU5REDDtMOra4+P2vk PG4uX8aeYiUxRJf1tcRFrj8eIgJEd4OJEaFGMby9IuObQommQkyZSlwuZHJFj+sp NotO2LdRdMJHxoXGT2eNByzSJkS19UTxzPIO+ptHUcAY1G3z9f6vqLfYu6mNH0o5 fX9Mu2a2/ccYWN0DddgfUcO2HMu6yCxANLPyrlLpei+WYGaBn9nqkT7AH7lg8GBE xIjc9FS3KJOdXAKgm444d27xTGrmXqzFgpmrB+RNwoZqXQk2hEfplLcfVnghg/sI BAYqmINMjY124W8ZLZFxrkfuIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAFyW8NE 0CbKYbOJNiK/f3N6U4M8MB8GA1UdIwQYMBaAFAqVOFJ9pTL+MddQ0TaW5c6vKpvP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjY3Ny82NDU3REZEOEQ4 MzcxMUVEOEMwOTY2MjlDNEY5QUUwMi9DcFU0VW4ybE12NHgxMURSTnBibHpxOHFt ODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NwVTRVbjJsTXY0eDExRFJOcGJsenE4cW04OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjY3Ny82NDU3REZEOEQ4MzcxMUVEOEMwOTY2MjlDNEY5QUUwMi9DcFU0VW4ybE12 NHgxMURSTnBibHpxOHFtODgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGTLzAl29jEVOwA1sRzz/TSwgA0tMEqk2/97CT7Z2ZdiHza3ggnbSZ4fpwcqW lOoEbnupA7UqzEsspEDRiKaRUljZ/uIGdn2vJTRKWbn87kzA3iujVzRvfSm6Rh1+ IOgn09KC9BggvMMdAIAhSpIdSV0Eiw8KFX3Y/vlWIKT2hO7O/VN9pwHwk4Y1AaZD H4sK4kydjtxDpTfmt9Y5nm84GgRWOgOoz81MkfLBL222zA3HduoaeDf/ERNdtbX4 yVEfCBaiMpuKdTMPuLSE4r/EbAo/W8PPhdr8RFFKLh1pFyVEppoC9/SqnVe+bT9j qFAdIVyVUMWtMLQ8WyvBKoLdWw== -----END CERTIFICATE-----Generated at Mon Sep 21 07:03:19 2026 by rpki-client