$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft File: cPEzmWaoGrwgfjvuM3CR2fLzydc.mft (raw, json) Hash identifier: 6BXack+ZtNwS1MpONj1FUEooPe1IwJZT1+dlDgAitgo= Subject key identifier: 68:B5:C2:98:8E:AD:2E:B0:E5:C1:F8:5C:36:8E:6D:A1:3A:E5:91:3C Authority key identifier: 70:F1:33:99:66:A8:1A:BC:20:7E:3B:EE:33:70:91:D9:F2:F3:C9:D7 Certificate issuer: /CN=A91C9324/serialNumber=70F1339966A81ABC207E3BEE337091D9F2F3C9D7 Certificate serial: 0281 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft Manifest number: 0281 Signing time: Mon 21 Sep 2026 00:11:43 +0000 Manifest this update: Mon 21 Sep 2026 00:11:42 +0000 Manifest next update: Mon 28 Sep 2026 00:11:42 +0000 Files and hashes: 1: cPEzmWaoGrwgfjvuM3CR2fLzydc.crl (hash: P/RVztT5IqdyxnCQSGKWljj/AF5kQZYHfFnYPu1QZ8U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.crl rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:11:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 641 (0x281) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9324, serialNumber=70F1339966A81ABC207E3BEE337091D9F2F3C9D7 Validity Not Before: Sep 21 00:11:42 2026 GMT Not After : Sep 28 00:11:42 2026 GMT Subject: CN=6ab0763e-bee9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ac:b3:f4:0a:cd:91:0f:12:5d:d7:33:1e:63: 2c:55:39:fc:60:b9:0e:18:92:7d:4c:4f:d1:5b:f7: 32:c7:22:13:3b:e3:f7:bd:7f:0f:09:f0:d6:df:df: 4b:73:79:44:16:4b:cd:16:09:da:ac:55:a3:05:1a: 09:8b:64:c3:cb:d5:fe:16:f0:ee:85:94:55:1f:2a: f7:08:5d:f8:1d:f5:d0:20:88:da:f3:c5:5b:56:26: 2c:89:7e:89:2b:9c:8c:39:4f:62:53:76:d4:02:0d: f4:8b:6b:a4:d7:91:3d:98:01:1c:f2:15:12:68:07: f6:33:6f:75:26:61:79:8c:e3:ae:28:9c:d2:d0:b8: 9d:9c:0a:d2:f9:8d:58:3b:4b:fc:45:b7:9c:7f:f7: 1a:cf:97:7f:50:a8:a7:34:39:fd:4c:bb:10:1f:a4: b3:03:8d:89:17:49:cb:a4:97:b3:d5:4c:6c:80:1b: 06:0f:3c:63:84:cb:aa:fe:bc:a4:6b:d1:c8:4d:28: fa:36:12:67:b0:a8:43:7e:25:bc:48:62:c7:46:6b: 5d:4c:58:5e:c5:5c:ad:00:71:8b:27:3f:86:2b:12: bb:9f:39:84:b5:21:20:ff:e6:f0:e9:16:61:40:b9: cc:cb:0f:06:49:02:b6:17:99:2e:71:98:41:41:fa: 25:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B5:C2:98:8E:AD:2E:B0:E5:C1:F8:5C:36:8E:6D:A1:3A:E5:91:3C X509v3 Authority Key Identifier: keyid:70:F1:33:99:66:A8:1A:BC:20:7E:3B:EE:33:70:91:D9:F2:F3:C9:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:25:bf:ea:9c:f1:ac:bd:db:b6:e8:4e:99:1a:90:eb:a8:e7: dc:20:09:4a:c1:c5:c7:94:71:b8:ab:3f:c9:87:2a:5e:ac:fd: c2:77:f8:62:58:6e:d5:2f:ad:00:64:f0:66:06:6c:7d:21:58: cc:f9:77:5e:d8:57:c7:45:21:f6:cd:05:eb:4b:d5:b4:eb:21: c5:30:ad:fb:9e:97:af:7e:ac:b0:db:94:42:87:24:bc:ba:d1: a6:ac:d5:57:af:0d:42:e8:7c:c6:c6:00:28:69:cc:5e:cb:b3: 6e:dd:9b:b2:00:86:6a:81:0e:97:c1:f9:c5:34:7e:1d:21:29: 90:0b:bd:48:64:dd:d9:56:86:c2:f2:4e:63:8c:d7:fd:53:b2: 1a:2d:ac:a0:d8:5e:87:c5:6c:e6:cf:10:8b:7f:f8:bd:2d:4d: 22:6a:83:44:7f:f5:fd:61:50:b1:dc:69:ee:2a:9a:90:6e:46: 54:82:82:97:70:ed:b9:2c:5e:00:b5:23:f6:1a:bd:27:1f:63: 2e:14:58:a4:94:6d:a5:92:80:d3:54:35:99:86:08:93:aa:2a: a7:f4:ae:f2:f4:8c:a4:86:20:52:11:38:08:75:86:1f:96:44: 3f:fd:6b:96:2a:ed:39:66:45:f1:a6:aa:e2:58:a8:c3:53:2c: 14:c1:69:24 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzMjQxMTAvBgNVBAUTKDcwRjEzMzk5NjZBODFBQkMyMDdFM0JFRTMzNzA5MUQ5 RjJGM0M5RDcwHhcNMjYwOTIxMDAxMTQyWhcNMjYwOTI4MDAxMTQyWjAYMRYwFAYD VQQDEw02YWIwNzYzZS1iZWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq6yz9ArNkQ8SXdczHmMsVTn8YLkOGJJ9TE/RW/cyxyITO+P3vX8PCfDW399L c3lEFkvNFgnarFWjBRoJi2TDy9X+FvDuhZRVHyr3CF34HfXQIIja88VbViYsiX6J K5yMOU9iU3bUAg30i2uk15E9mAEc8hUSaAf2M291JmF5jOOuKJzS0LidnArS+Y1Y O0v8Rbecf/caz5d/UKinNDn9TLsQH6SzA42JF0nLpJez1UxsgBsGDzxjhMuq/ryk a9HITSj6NhJnsKhDfiW8SGLHRmtdTFhexVytAHGLJz+GKxK7nzmEtSEg/+bw6RZh QLnMyw8GSQK2F5kucZhBQfolgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGi1wpiO rS6w5cH4XDaObaE65ZE8MB8GA1UdIwQYMBaAFHDxM5lmqBq8IH477jNwkdny88nX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTMyNC8yMkJGOEQzMkUw MkYxMUVEOTUxNTNEMzFDNEY5QUUwMi9jUEV6bVdhb0dyd2dmanZ1TTNDUjJmTHp5 ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NQRXptV2FvR3J3Z2ZqdnVNM0NSMmZMenlkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTMyNC8yMkJGOEQzMkUwMkYxMUVEOTUxNTNEMzFDNEY5QUUwMi9jUEV6bVdhb0dy d2dmanZ1TTNDUjJmTHp5ZGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQSW/6pzxrL3btuhOmRqQ66jn3CAJSsHFx5RxuKs/yYcqXqz9wnf4Ylhu1S+t AGTwZgZsfSFYzPl3XthXx0Uh9s0F60vVtOshxTCt+56Xr36ssNuUQockvLrRpqzV V68NQuh8xsYAKGnMXsuzbt2bsgCGaoEOl8H5xTR+HSEpkAu9SGTd2VaGwvJOY4zX /VOyGi2soNheh8Vs5s8Qi3/4vS1NImqDRH/1/WFQsdxp7iqakG5GVIKCl3DtuSxe ALUj9hq9Jx9jLhRYpJRtpZKA01Q1mYYIk6oqp/Su8vSMpIYgUhE4CHWGH5ZEP/1r lirtOWZF8aaq4liow1MsFMFpJA== -----END CERTIFICATE-----Generated at Mon Sep 21 17:20:19 2026 by rpki-client