$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.mft File: CJy1orM7eG11SgfWgKnElBQmGeE.mft (raw, json) Hash identifier: XG9+7nX5yWNkDLRPcCdY8m4z0C9bHxg1RFisKSqUykc= Subject key identifier: 66:53:04:C6:B8:3F:E5:19:E5:C3:08:95:5B:05:BF:5E:71:8D:82:1A Authority key identifier: 08:9C:B5:A2:B3:3B:78:6D:75:4A:07:D6:80:A9:C4:94:14:26:19:E1 Certificate issuer: /CN=A91D0C18/serialNumber=089CB5A2B33B786D754A07D680A9C494142619E1 Certificate serial: 0192 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CJy1orM7eG11SgfWgKnElBQmGeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.mft Manifest number: 0189 Signing time: Sun 27 Sep 2026 04:58:12 +0000 Manifest this update: Sun 27 Sep 2026 04:58:12 +0000 Manifest next update: Sun 04 Oct 2026 04:58:12 +0000 Files and hashes: 1: CJy1orM7eG11SgfWgKnElBQmGeE.crl (hash: gfOae9HV3KKMVHNB/YSqb/MQLIvCI7p4UzAMOYqlWeE=) 2: EEE0092A646611EFA25D167EC4F9AE02.roa (hash: /xBEhjFYaty4e00WWfiVcrTVHTi4dEl3w+IvJBJnwpM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.crl rsync://rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CJy1orM7eG11SgfWgKnElBQmGeE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 04:58:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 402 (0x192) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0C18, serialNumber=089CB5A2B33B786D754A07D680A9C494142619E1 Validity Not Before: Sep 27 04:58:12 2026 GMT Not After : Oct 4 04:58:12 2026 GMT Subject: CN=6ab8a264-de4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:16:f6:12:2b:58:a9:bf:14:a4:c3:00:8d:2b: ce:cd:28:8b:97:50:41:4e:bd:58:b6:fb:4e:0d:cf: 50:17:c6:9a:7c:b3:dc:a0:9f:9b:37:61:7d:fe:27: 17:49:63:d9:0e:0e:2a:19:d9:73:73:9f:de:c1:bc: 53:a7:86:5d:6d:fd:6f:66:87:42:7f:e1:e4:85:78: e4:05:7a:18:90:20:21:cd:de:ec:d3:46:27:f2:ee: 62:77:94:c0:31:5e:d9:7d:e0:6f:bb:b3:32:82:a7: 8f:46:d2:8f:9e:99:e0:dd:8a:d7:7b:86:5a:cc:13: 89:2b:bc:2c:ec:6f:a1:07:92:cf:02:c7:49:ad:c6: 1e:4c:54:e6:c5:43:89:b2:b5:41:98:7c:69:38:89: 6d:e5:d8:3b:47:f2:2d:70:fc:43:2e:0c:4f:e0:18: 3b:d4:e3:b8:d2:d8:9e:dd:ce:f8:32:e1:1b:e1:65: 80:9b:7c:f5:ae:bd:c5:53:87:d7:53:bb:4b:68:4d: f1:90:41:75:b6:16:b8:e2:71:80:ea:37:be:d7:bd: 41:c0:e2:84:bb:12:9f:f9:2a:7b:a9:48:2f:f9:eb: a1:20:43:5e:8c:1c:47:7e:05:ee:ad:5f:46:01:d3: e5:51:fd:3c:18:5d:e6:85:d4:be:24:22:a5:7b:eb: 39:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:53:04:C6:B8:3F:E5:19:E5:C3:08:95:5B:05:BF:5E:71:8D:82:1A X509v3 Authority Key Identifier: keyid:08:9C:B5:A2:B3:3B:78:6D:75:4A:07:D6:80:A9:C4:94:14:26:19:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CJy1orM7eG11SgfWgKnElBQmGeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:49:01:f6:8c:1d:47:56:18:c2:78:5b:e6:a1:52:7b:bf:40: 09:79:ce:88:7b:8c:27:a2:59:83:c0:ef:6e:6c:29:0b:56:39: 70:d8:57:09:ff:30:76:a6:c0:bb:75:35:a4:68:28:60:62:52: 97:5e:d4:9d:60:24:73:8f:b4:85:f9:22:56:bd:e2:1a:ee:5b: a1:4f:32:db:1a:e8:3a:c4:09:54:75:92:58:55:65:cb:c8:fe: 80:54:67:ba:69:79:3c:2e:cf:5b:d0:f8:39:f4:b7:27:e2:73: 54:8f:5a:e2:6c:6e:ff:4e:8b:7e:5a:89:03:cd:72:34:6b:8a: a4:c4:6b:d2:1a:1a:f5:15:e9:07:80:1f:88:16:1e:ef:dd:53: 09:c5:42:c3:52:ca:84:84:92:58:23:b6:dc:c6:b4:67:58:34: f4:12:2c:4a:56:2d:6c:47:e0:e1:17:8a:f7:c9:a9:cc:05:5c: ac:8c:17:fe:9f:93:f4:25:d6:9a:f2:a6:16:74:c3:f0:6c:a1: 40:22:bb:50:14:b0:fa:fb:dc:f1:16:12:32:bb:63:e4:a5:49: 99:47:7d:b1:9c:a8:5f:63:c6:09:5b:8e:f8:29:d9:54:74:e9: 7c:06:93:be:fc:14:96:dc:fb:39:98:87:1f:c1:72:2f:3c:54: 66:1d:45:bc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBDMTgxMTAvBgNVBAUTKDA4OUNCNUEyQjMzQjc4NkQ3NTRBMDdENjgwQTlDNDk0 MTQyNjE5RTEwHhcNMjYwOTI3MDQ1ODEyWhcNMjYxMDA0MDQ1ODEyWjAYMRYwFAYD VQQDEw02YWI4YTI2NC1kZTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArRb2EitYqb8UpMMAjSvOzSiLl1BBTr1YtvtODc9QF8aafLPcoJ+bN2F9/icX SWPZDg4qGdlzc5/ewbxTp4Zdbf1vZodCf+HkhXjkBXoYkCAhzd7s00Yn8u5id5TA MV7ZfeBvu7MygqePRtKPnpng3YrXe4ZazBOJK7ws7G+hB5LPAsdJrcYeTFTmxUOJ srVBmHxpOIlt5dg7R/ItcPxDLgxP4Bg71OO40tie3c74MuEb4WWAm3z1rr3FU4fX U7tLaE3xkEF1tha44nGA6je+171BwOKEuxKf+Sp7qUgv+euhIENejBxHfgXurV9G AdPlUf08GF3mhdS+JCKle+s5rQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGZTBMa4 P+UZ5cMIlVsFv15xjYIaMB8GA1UdIwQYMBaAFAictaKzO3htdUoH1oCpxJQUJhnh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEMxOC82ODNCQTA5NjY0 NjYxMUVGOEUxOEY4N0FDNEY5QUUwMi9DSnkxb3JNN2VHMTFTZ2ZXZ0tuRWxCUW1H ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0NKeTFvck03ZUcxMVNnZldnS25FbEJRbUdlRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEMxOC82ODNCQTA5NjY0NjYxMUVGOEUxOEY4N0FDNEY5QUUwMi9DSnkxb3JNN2VH MTFTZ2ZXZ0tuRWxCUW1HZUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVUkB9owdR1YYwnhb5qFSe79ACXnOiHuMJ6JZg8DvbmwpC1Y5cNhXCf8wdqbA u3U1pGgoYGJSl17UnWAkc4+0hfkiVr3iGu5boU8y2xroOsQJVHWSWFVly8j+gFRn uml5PC7PW9D4OfS3J+JzVI9a4mxu/06LflqJA81yNGuKpMRr0hoa9RXpB4AfiBYe 791TCcVCw1LKhISSWCO23Ma0Z1g09BIsSlYtbEfg4ReK98mpzAVcrIwX/p+T9CXW mvKmFnTD8GyhQCK7UBSw+vvc8RYSMrtj5KVJmUd9sZyoX2PGCVuO+CnZVHTpfAaT vvwUltz7OZiHH8FyLzxUZh1FvA== -----END CERTIFICATE-----Generated at Mon Sep 28 04:47:13 2026 by rpki-client