$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft File: ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft (raw, json) Hash identifier: XZoTCSmAlAhe3YsBvhYnLUc6MqHz9k4rpAIBtq1qE50= Subject key identifier: D6:86:BE:0E:26:4D:35:C8:04:3C:9C:3A:C6:AA:5B:C4:0A:DE:1A:DB Authority key identifier: 72:D1:57:43:F5:9C:83:A5:C1:95:A5:E6:DB:1E:A4:64:76:34:BE:F7 Certificate issuer: /CN=A91CC1E9/serialNumber=72D15743F59C83A5C195A5E6DB1EA4647634BEF7 Certificate serial: 029B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft Manifest number: 0288 Signing time: Mon 21 Sep 2026 01:58:48 +0000 Manifest this update: Mon 21 Sep 2026 01:58:47 +0000 Manifest next update: Mon 28 Sep 2026 01:58:47 +0000 Files and hashes: 1: ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.crl (hash: I59A12T5XiEzc53ft80CD+sGYbMhkY2dJWUEzJ/f5V4=) 2: 2AB990CAF0A911ED80D2CB35C4F9AE02.roa (hash: vqGdVaaDYf6gNLNH5VIBJ2NRjMzmVVMM9ASsA3cNz2A=) 3: 1333404E5A0D11EF8810E217C4F9AE02.roa (hash: 4mVa0DqBaCflYNU9bhCT5eYUo2wiGhZvFPJW9PpsrbY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.crl rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 01:58:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 667 (0x29b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC1E9, serialNumber=72D15743F59C83A5C195A5E6DB1EA4647634BEF7 Validity Not Before: Sep 21 01:58:47 2026 GMT Not After : Sep 28 01:58:47 2026 GMT Subject: CN=6ab08f57-f7b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:61:b4:81:e0:5e:00:10:df:31:48:ff:23:0a: 0a:c3:52:c4:60:ee:5a:32:f7:71:be:39:9b:2f:d0: cd:7c:46:98:27:36:f9:8f:60:2c:fd:b8:7b:a5:32: 62:d7:b4:86:40:f1:fe:2c:dd:91:82:ae:f6:bf:c6: 2b:c7:a2:f1:af:10:42:82:21:93:b8:8a:3d:85:9f: 6b:08:c7:16:e4:40:f3:c4:c1:56:06:1f:6b:d0:64: 2f:7f:13:07:06:6f:99:16:70:e7:75:03:70:2a:c7: 94:e6:57:7a:f1:f2:78:76:6e:50:88:b0:39:3e:7b: 2c:38:b2:28:a0:d9:fb:dd:7c:e9:99:0d:d4:64:06: d4:aa:dc:37:57:e7:4a:9a:17:aa:f8:6b:a9:44:31: 95:cd:98:1f:78:40:ef:da:72:e5:9c:32:b6:9f:3f: 22:d2:d5:3e:e8:04:ec:a7:ee:9b:24:9a:f1:84:55: 13:8f:c4:b0:35:f0:0b:f7:9a:1c:9f:7b:d0:b8:f9: f2:38:23:8e:af:d5:4f:ab:2a:54:b3:a0:1c:a0:d5: d9:2a:2f:b3:12:29:5a:cc:bb:f2:85:f6:d7:bd:f1: d9:a6:94:f6:2d:31:be:72:b7:32:3f:8d:33:9d:d2: 39:aa:27:6d:d4:61:f1:8a:03:ce:d2:30:28:77:b0: 72:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:86:BE:0E:26:4D:35:C8:04:3C:9C:3A:C6:AA:5B:C4:0A:DE:1A:DB X509v3 Authority Key Identifier: keyid:72:D1:57:43:F5:9C:83:A5:C1:95:A5:E6:DB:1E:A4:64:76:34:BE:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:48:23:03:a4:53:42:01:f7:bf:22:33:e3:6f:bf:9a:c8:c9: 90:91:6d:59:dd:61:aa:4e:11:71:3d:2d:13:76:8a:1b:1a:57: a7:eb:1f:89:42:96:4f:5b:e1:f3:f1:25:be:df:9e:c7:bc:1f: 33:e9:90:78:a1:93:0d:8c:33:f1:b6:30:8e:31:9f:b5:0c:aa: fc:c9:f9:b9:0a:da:4b:e4:5f:85:c5:0c:d9:b7:33:55:45:92: 04:ce:7a:c9:6f:7f:39:d0:64:58:3f:0a:d3:20:30:13:f3:31: 5f:16:0f:5a:8d:64:f9:49:51:15:a0:f3:ae:fd:8c:94:21:30: 7e:0d:f0:45:ab:c7:dc:67:bb:cd:6f:45:74:91:05:bf:f0:3c: bb:fe:8f:70:e7:f0:57:c7:6f:d2:4b:a8:5a:15:1e:e6:6c:3c: 40:7c:7e:9f:ef:b0:9a:02:2e:9f:72:37:db:ec:52:e2:a0:8f: 6f:d7:0d:d9:ce:b0:85:d0:85:98:d9:dd:52:ce:8d:c4:ad:40: a6:cd:49:36:6c:a9:17:f8:74:ed:67:b6:40:e4:99:de:9a:27: 76:c3:b8:50:96:da:09:f8:ca:f1:02:37:54:1b:b3:11:a7:95: c8:97:b9:a2:ad:bc:15:b6:3f:e7:fa:77:0e:31:dd:91:58:f3: 9a:ac:55:eb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0MxRTkxMTAvBgNVBAUTKDcyRDE1NzQzRjU5QzgzQTVDMTk1QTVFNkRCMUVBNDY0 NzYzNEJFRjcwHhcNMjYwOTIxMDE1ODQ3WhcNMjYwOTI4MDE1ODQ3WjAYMRYwFAYD VQQDEw02YWIwOGY1Ny1mN2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuGG0geBeABDfMUj/IwoKw1LEYO5aMvdxvjmbL9DNfEaYJzb5j2As/bh7pTJi 17SGQPH+LN2Rgq72v8Yrx6LxrxBCgiGTuIo9hZ9rCMcW5EDzxMFWBh9r0GQvfxMH Bm+ZFnDndQNwKseU5ld68fJ4dm5QiLA5PnssOLIooNn73XzpmQ3UZAbUqtw3V+dK mheq+GupRDGVzZgfeEDv2nLlnDK2nz8i0tU+6ATsp+6bJJrxhFUTj8SwNfAL95oc n3vQuPnyOCOOr9VPqypUs6AcoNXZKi+zEilazLvyhfbXvfHZppT2LTG+crcyP40z ndI5qidt1GHxigPO0jAod7ByoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNaGvg4m TTXIBDycOsaqW8QK3hrbMB8GA1UdIwQYMBaAFHLRV0P1nIOlwZWl5tsepGR2NL73 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzFFOS9CQkNENUQyQ0VG Q0MxMUVEQjI5QkIwNkNDNEY5QUUwMi9jdEZYUV9XY2c2WEJsYVhtMng2a1pIWTB2 dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N0RlhRX1djZzZYQmxhWG0yeDZrWkhZMHZ2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzFFOS9CQkNENUQyQ0VGQ0MxMUVEQjI5QkIwNkNDNEY5QUUwMi9jdEZYUV9XY2c2 WEJsYVhtMng2a1pIWTB2dmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAW0gjA6RTQgH3vyIz42+/msjJkJFtWd1hqk4RcT0tE3aKGxpXp+sfiUKWT1vh 8/Elvt+ex7wfM+mQeKGTDYwz8bYwjjGftQyq/Mn5uQraS+RfhcUM2bczVUWSBM56 yW9/OdBkWD8K0yAwE/MxXxYPWo1k+UlRFaDzrv2MlCEwfg3wRavH3Ge7zW9FdJEF v/A8u/6PcOfwV8dv0kuoWhUe5mw8QHx+n++wmgIun3I32+xS4qCPb9cN2c6whdCF mNndUs6NxK1Aps1JNmypF/h07We2QOSZ3pondsO4UJbaCfjK8QI3VBuzEaeVyJe5 oq28FbY/5/p3DjHdkVjzmqxV6w== -----END CERTIFICATE-----Generated at Mon Sep 21 18:27:09 2026 by rpki-client