$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft File: CuIi7F4XpuYytVnUnFse8zLaQ8s.mft (raw, json) Hash identifier: BD3D3Wtx8HXWrjw+65tGs5NqL9JDFbgwN/h2WcuUPpE= Subject key identifier: 03:01:F6:B8:12:FE:05:07:FE:99:CB:F8:56:08:47:32:A1:F2:43:BC Authority key identifier: 0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB Certificate issuer: /CN=A91C7C04/serialNumber=0AE222EC5E17A6E632B559D49C5B1EF332DA43CB Certificate serial: 0807 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft Manifest number: 07D6 Signing time: Sun 20 Sep 2026 21:21:40 +0000 Manifest this update: Sun 20 Sep 2026 21:21:39 +0000 Manifest next update: Sun 27 Sep 2026 21:21:39 +0000 Files and hashes: 1: CuIi7F4XpuYytVnUnFse8zLaQ8s.crl (hash: AKS30ndtm9z2H/f+nQaSY25nBl4eKymkLHzrfOc9bOc=) 2: C707808A7C0211F1B99BE3648FA30FBC.roa (hash: 9ssE+0/Wd9/Zy6emzy+4Q/4vapOHX+2nKdVogJqzems=) 3: DA45147EB35E11EE8EED0E37C4F9AE02.roa (hash: Bluwv17U0E3bQxLMX6DjEXL7fkRDMsWwu/v38ekvil0=) 4: F097281C169A11EF8927EC2DC4F9AE02.roa (hash: 0sgsytXNSBVA8tI+B+np2QJiF5EYk7ItL5UWLy6dAWE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.crl rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 21:21:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2055 (0x807) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7C04, serialNumber=0AE222EC5E17A6E632B559D49C5B1EF332DA43CB Validity Not Before: Sep 20 21:21:39 2026 GMT Not After : Sep 27 21:21:39 2026 GMT Subject: CN=6ab04e64-68aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8b:e0:57:6f:b5:e7:f1:8b:45:3d:28:82:af: b1:f6:ec:fd:e3:67:34:28:e9:3c:84:61:69:a4:10: be:a7:62:ca:f3:d8:0e:9c:00:b3:5b:e7:67:e3:88: 38:82:11:fd:8f:62:8d:24:10:13:32:8d:cc:fa:73: ae:11:88:e0:04:50:b1:6b:d7:2d:65:e0:af:e2:2a: 02:0e:e0:66:7d:7d:4f:d9:ca:07:eb:25:8c:e4:b0: 6c:7d:ac:0a:ea:82:d2:1a:f5:67:c7:65:73:0c:17: 85:b6:75:ef:6d:9b:69:4b:19:24:41:8d:c3:7c:6a: 99:aa:05:82:97:67:6f:20:b7:d5:0b:77:0b:a6:5d: ea:fa:e9:55:b4:89:c7:26:4a:8f:f4:98:69:a2:da: e1:6e:1f:39:7a:af:ac:e2:7c:71:f6:d1:2c:25:8b: a4:ee:3d:cd:55:cc:2c:28:c8:9f:6e:dd:a5:71:ed: 82:1b:f2:a1:8a:d7:db:04:0e:4a:55:a8:18:4d:56: 81:11:a3:91:c2:2e:21:91:da:f0:88:c1:23:b2:0c: 8d:90:87:59:1b:36:3f:f0:ab:e2:4a:c1:d4:87:06: 2f:7c:1e:e9:e5:a7:21:10:c2:40:de:a8:1b:a9:d7: 40:1c:ed:95:be:36:6e:d3:97:0c:eb:98:08:83:0f: 45:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:01:F6:B8:12:FE:05:07:FE:99:CB:F8:56:08:47:32:A1:F2:43:BC X509v3 Authority Key Identifier: keyid:0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:b0:ae:c8:75:1d:eb:d2:92:5b:4f:50:18:87:9f:8c:90:ba: dc:5d:ca:a9:cd:dc:b2:8e:51:29:64:f1:e5:e9:32:a7:2f:a9: dd:1b:2e:b5:1f:09:9f:d7:24:3f:30:89:23:87:19:0f:76:d1: 63:16:02:5a:3c:18:de:ec:f9:86:0b:cd:3c:9b:b8:64:8a:00: b5:10:8f:1a:78:4e:17:69:a9:53:a2:c0:c5:c2:6b:f2:62:cc: 42:85:db:62:36:72:ba:83:b7:5c:4d:64:ba:e2:18:cd:2e:0b: c2:d6:1c:75:50:2e:ee:60:bc:99:40:d9:c4:e7:f3:87:81:4a: 4b:8e:12:0d:dd:df:5f:09:ba:00:6a:8f:71:40:75:74:e5:91: 8a:3b:e4:96:20:a6:9c:a6:87:55:b2:38:04:72:c8:3c:6b:c7: 0b:e7:58:2b:ba:01:1a:9c:7c:e9:98:4a:45:8f:3c:33:1e:d0: a3:cd:cf:d2:a7:64:74:db:3d:9e:f3:64:82:34:c4:d7:30:96: 2d:6b:71:bc:3f:8c:4a:e6:35:96:8e:53:53:7f:6b:85:23:86: 0f:55:e1:09:eb:48:13:6a:d7:9c:71:88:c2:3d:10:56:d2:2c: d0:8a:6a:53:a7:e2:c5:f5:40:30:68:55:73:d1:48:01:0d:1d: fb:95:d7:e2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCAcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdDMDQxMTAvBgNVBAUTKDBBRTIyMkVDNUUxN0E2RTYzMkI1NTlENDlDNUIxRUYz MzJEQTQzQ0IwHhcNMjYwOTIwMjEyMTM5WhcNMjYwOTI3MjEyMTM5WjAYMRYwFAYD VQQDEw02YWIwNGU2NC02OGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApovgV2+15/GLRT0ogq+x9uz942c0KOk8hGFppBC+p2LK89gOnACzW+dn44g4 ghH9j2KNJBATMo3M+nOuEYjgBFCxa9ctZeCv4ioCDuBmfX1P2coH6yWM5LBsfawK 6oLSGvVnx2VzDBeFtnXvbZtpSxkkQY3DfGqZqgWCl2dvILfVC3cLpl3q+ulVtInH JkqP9Jhpotrhbh85eq+s4nxx9tEsJYuk7j3NVcwsKMifbt2lce2CG/KhitfbBA5K VagYTVaBEaORwi4hkdrwiMEjsgyNkIdZGzY/8KviSsHUhwYvfB7p5achEMJA3qgb qddAHO2VvjZu05cM65gIgw9FlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAMB9rgS /gUH/pnL+FYIRzKh8kO8MB8GA1UdIwQYMBaAFAriIuxeF6bmMrVZ1JxbHvMy2kPL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0MwNC9BMERCMzU1MjVG QjQxMUVCQUI3QzZBMjNDNEY5QUUwMi9DdUlpN0Y0WHB1WXl0Vm5VbkZzZTh6TGFR OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N1SWk3RjRYcHVZeXRWblVuRnNlOHpMYVE4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0MwNC9BMERCMzU1MjVGQjQxMUVCQUI3QzZBMjNDNEY5QUUwMi9DdUlpN0Y0WHB1 WXl0Vm5VbkZzZTh6TGFROHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAI7CuyHUd69KSW09QGIefjJC63F3Kqc3cso5RKWTx5ekypy+p3RsutR8Jn9ck PzCJI4cZD3bRYxYCWjwY3uz5hgvNPJu4ZIoAtRCPGnhOF2mpU6LAxcJr8mLMQoXb YjZyuoO3XE1kuuIYzS4LwtYcdVAu7mC8mUDZxOfzh4FKS44SDd3fXwm6AGqPcUB1 dOWRijvkliCmnKaHVbI4BHLIPGvHC+dYK7oBGpx86ZhKRY88Mx7Qo83P0qdkdNs9 nvNkgjTE1zCWLWtxvD+MSuY1lo5TU39rhSOGD1XhCetIE2rXnHGIwj0QVtIs0Ipq U6fixfVAMGhVc9FIAQ0d+5XX4g== -----END CERTIFICATE-----Generated at Tue Sep 22 11:13:48 2026 by rpki-client