$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/cpJMv-NjcwP3sTdsjPca22H7bDk.mft File: cpJMv-NjcwP3sTdsjPca22H7bDk.mft (raw, json) Hash identifier: lgTqxwd2YzOjEU39zXSY+oASPqZeD9qt4sz3pM7NW68= Subject key identifier: 9A:75:73:83:6F:60:C0:A0:3E:28:EE:34:A8:3D:4B:29:34:7D:D6:20 Authority key identifier: 72:92:4C:BF:E3:63:73:03:F7:B1:37:6C:8C:F7:1A:DB:61:FB:6C:39 Certificate issuer: /CN=A91D09BC/serialNumber=72924CBFE3637303F7B1376C8CF71ADB61FB6C39 Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cpJMv-NjcwP3sTdsjPca22H7bDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/cpJMv-NjcwP3sTdsjPca22H7bDk.mft Manifest number: 01BA Signing time: Mon 21 Sep 2026 05:08:40 +0000 Manifest this update: Mon 21 Sep 2026 05:08:40 +0000 Manifest next update: Mon 28 Sep 2026 05:08:40 +0000 Files and hashes: 1: cpJMv-NjcwP3sTdsjPca22H7bDk.crl (hash: +NTC+pTIeaevyPW/AmGiPIAbLhMhorMpG1ya3zvszpo=) 2: 526AF16A3C7B11F1B0CB2EC97EEE528E.roa (hash: /a4QOETR5wBQx4lL0BfTBrG9hDYCg/Ec1yCZX3YiOH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/cpJMv-NjcwP3sTdsjPca22H7bDk.crl rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/cpJMv-NjcwP3sTdsjPca22H7bDk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cpJMv-NjcwP3sTdsjPca22H7bDk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 05:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D09BC, serialNumber=72924CBFE3637303F7B1376C8CF71ADB61FB6C39 Validity Not Before: Sep 21 05:08:40 2026 GMT Not After : Sep 28 05:08:40 2026 GMT Subject: CN=6ab0bbd8-e996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7e:e0:2e:71:92:a1:ca:57:7d:60:0b:05:5e: a0:a7:b8:5e:b8:ee:e0:4c:dd:6d:08:37:47:11:7f: f2:1a:46:58:b4:05:bc:d9:45:92:2b:2c:8b:c2:b4: ae:51:ec:c0:e6:a5:b1:54:30:f4:5f:b9:8f:df:d6: da:7f:d4:a1:61:cd:54:78:22:60:27:45:a4:f3:8a: 0c:f3:c1:a7:96:b0:1a:10:35:57:8d:2c:a1:1f:3d: 86:a0:62:cc:bf:a7:39:e7:ad:ba:7c:03:c4:24:06: 00:cf:ee:58:a0:a7:19:bb:b6:7b:30:38:b9:3d:7b: d0:ce:e9:fd:d4:2a:16:7c:15:24:22:f7:ea:9b:98: 88:47:15:99:57:fd:c2:36:43:76:99:fe:53:24:f0: be:94:3b:3f:af:13:cb:ee:8f:cd:ce:7a:1b:dc:8c: d5:6d:50:42:95:f5:78:99:5e:ec:0f:e5:f3:4a:bc: 61:e8:e0:e3:6f:4f:d0:e2:3f:c8:f9:a1:70:76:53: 53:3f:de:1e:b6:35:35:bf:64:1e:dd:a7:3b:b2:bb: 25:71:69:63:63:db:bc:4e:75:3e:c1:eb:94:58:44: 33:25:94:7f:b2:60:cf:01:58:8a:ff:89:52:0f:c2: 57:34:74:6e:26:50:eb:d1:71:5e:e3:97:0e:e7:d8: ba:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:75:73:83:6F:60:C0:A0:3E:28:EE:34:A8:3D:4B:29:34:7D:D6:20 X509v3 Authority Key Identifier: keyid:72:92:4C:BF:E3:63:73:03:F7:B1:37:6C:8C:F7:1A:DB:61:FB:6C:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/cpJMv-NjcwP3sTdsjPca22H7bDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cpJMv-NjcwP3sTdsjPca22H7bDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/cpJMv-NjcwP3sTdsjPca22H7bDk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:2e:27:a5:ec:77:af:19:39:73:fe:da:88:d5:7d:fe:49:6c: f0:d3:1a:af:5a:1f:dd:58:5b:7d:4c:dd:d3:14:a9:f0:1a:c4: 5e:26:30:67:b4:d9:8a:97:30:1f:1e:ed:ab:9e:82:99:82:50: 30:60:3a:e2:2e:24:70:71:cc:74:70:e3:41:03:77:3d:f7:38: 12:fa:dd:e4:ca:02:a9:a8:0d:af:2c:97:09:2a:f5:8f:f1:20: 81:d4:ac:46:99:f7:5d:21:d5:f6:cc:48:ea:44:fb:00:04:14: 38:15:c4:8e:40:5e:a6:2a:aa:82:8a:47:13:53:42:4f:6d:d9: 61:fd:ff:60:cf:da:12:c2:45:60:37:e7:3d:a0:82:e9:75:d5: 42:52:22:d5:36:f6:35:4a:97:31:b0:ce:a2:d2:04:2c:51:c8: a1:86:4a:5a:a8:c9:41:8c:8b:85:b9:74:d7:38:a9:41:19:82: 0c:13:6f:26:75:c4:fe:10:83:99:22:db:d9:d3:91:a8:78:00: f7:05:c1:0a:52:69:93:59:e4:38:51:dc:03:a5:b9:56:f1:32: 0e:09:66:3c:e7:da:e6:24:e2:57:bb:b1:ca:d3:42:a2:f6:f7: c4:81:8a:54:a8:35:e0:71:8f:d4:40:8b:22:c9:ba:f4:ae:c8: 18:e0:26:03 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MDlCQzExMC8GA1UEBRMoNzI5MjRDQkZFMzYzNzMwM0Y3QjEzNzZDOENGNzFBREI2 MUZCNkMzOTAeFw0yNjA5MjEwNTA4NDBaFw0yNjA5MjgwNTA4NDBaMBgxFjAUBgNV BAMTDTZhYjBiYmQ4LWU5OTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIfuAucZKhyld9YAsFXqCnuF647uBM3W0IN0cRf/IaRli0BbzZRZIrLIvCtK5R 7MDmpbFUMPRfuY/f1tp/1KFhzVR4ImAnRaTzigzzwaeWsBoQNVeNLKEfPYagYsy/ pznnrbp8A8QkBgDP7ligpxm7tnswOLk9e9DO6f3UKhZ8FSQi9+qbmIhHFZlX/cI2 Q3aZ/lMk8L6UOz+vE8vuj83OehvcjNVtUEKV9XiZXuwP5fNKvGHo4ONvT9DiP8j5 oXB2U1M/3h62NTW/ZB7dpzuyuyVxaWNj27xOdT7B65RYRDMllH+yYM8BWIr/iVIP wlc0dG4mUOvRcV7jlw7n2LprAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUmnVzg29g wKA+KO40qD1LKTR91iAwHwYDVR0jBBgwFoAUcpJMv+NjcwP3sTdsjPca22H7bDkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwOUJDL0NCODgyRTdFQTcw NzExRUY5OUE1Nzc0MUM0RjlBRTAyL2NwSk12LU5qY3dQM3NUZHNqUGNhMjJIN2JE ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvY3BKTXYtTmpjd1Azc1Rkc2pQY2EyMkg3YkRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQw OUJDL0NCODgyRTdFQTcwNzExRUY5OUE1Nzc0MUM0RjlBRTAyL2NwSk12LU5qY3dQ M3NUZHNqUGNhMjJIN2JEay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCfLiel7HevGTlz/tqI1X3+SWzw0xqvWh/dWFt9TN3TFKnwGsReJjBntNmKlzAf Hu2rnoKZglAwYDriLiRwccx0cONBA3c99zgS+t3kygKpqA2vLJcJKvWP8SCB1KxG mfddIdX2zEjqRPsABBQ4FcSOQF6mKqqCikcTU0JPbdlh/f9gz9oSwkVgN+c9oILp ddVCUiLVNvY1SpcxsM6i0gQsUcihhkpaqMlBjIuFuXTXOKlBGYIME28mdcT+EIOZ ItvZ05GoeAD3BcEKUmmTWeQ4UdwDpblW8TIOCWY859rmJOJXu7HK00Ki9vfEgYpU qDXgcY/UQIsiybr0rsgY4CYD -----END CERTIFICATE-----Generated at Tue Sep 22 10:58:39 2026 by rpki-client