$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft File: CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft (raw, json) Hash identifier: /9/tHENnHiPMzjJ7jAP5PMklZNLvDuxDPYdiwQ2ISl0= Subject key identifier: 9F:4C:56:9A:B2:CF:58:61:DD:9C:CF:E3:53:48:C2:11:A9:2D:18:E9 Authority key identifier: 0B:02:2B:1E:A3:4C:03:7C:51:F6:57:FC:3E:0D:84:A3:C6:18:68:22 Certificate issuer: /CN=A91D890E/serialNumber=0B022B1EA34C037C51F657FC3E0D84A3C6186822 Certificate serial: 0A31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft Manifest number: 0A27 Signing time: Mon 12 Oct 2026 19:51:36 +0000 Manifest this update: Mon 12 Oct 2026 19:51:36 +0000 Manifest next update: Mon 19 Oct 2026 19:51:36 +0000 Files and hashes: 1: CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl (hash: aXE/HniJW+dilAsIVhr+wzGjjn9M9Utq0iwmW+S16J4=) 2: FDAEEFB0A12A11EAB063A548C4F9AE02.roa (hash: F2o3bVfdgibRTgDe0DxEdoAWCoUl7F1g3jf5bWQpITQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 19:51:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2609 (0xa31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D890E, serialNumber=0B022B1EA34C037C51F657FC3E0D84A3C6186822 Validity Not Before: Oct 12 19:51:36 2026 GMT Not After : Oct 19 19:51:36 2026 GMT Subject: CN=6acd3a48-db13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f2:f4:87:94:c8:83:c9:b0:e1:0b:bd:c3:e1: ab:e8:2d:5c:61:70:28:bc:45:3a:43:2e:24:19:b8: 05:02:9e:64:07:f2:5a:ab:37:2f:cf:6b:ad:86:47: 62:c7:a6:83:7c:05:6f:61:e1:21:c6:42:1f:60:06: ca:1c:68:f2:a0:78:60:8e:14:36:d1:4c:67:69:f5: 38:ee:f8:88:04:ab:4d:d6:a3:df:3d:76:db:72:fb: 81:f7:8a:d9:83:18:6b:de:e2:ba:2b:52:44:d0:1d: 2a:7d:e4:6b:24:ba:0e:74:51:fd:d8:5a:db:6d:99: 91:04:e2:16:7b:e9:64:4d:d3:97:30:a1:3f:a2:70: 14:16:4b:9b:9b:9f:cb:03:9e:f6:9f:97:04:b0:d4: 4d:a9:2a:b3:35:b9:8e:15:f7:71:f5:94:41:a9:9d: 14:3b:a1:48:8f:45:19:27:d9:c2:ff:b8:a5:71:7e: 02:23:f8:fb:99:f7:e0:dc:86:fe:bb:8b:27:7c:d8: 08:83:67:85:da:51:9e:bd:51:9d:55:35:cd:9a:87: 05:78:88:57:86:80:6c:da:78:5e:1d:f5:1e:2e:53: 34:4b:d8:b8:7c:3a:22:0a:3a:7d:90:54:d6:74:62: 1b:43:a6:5d:41:32:d6:8e:de:56:53:02:31:f0:cf: 3d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:4C:56:9A:B2:CF:58:61:DD:9C:CF:E3:53:48:C2:11:A9:2D:18:E9 X509v3 Authority Key Identifier: keyid:0B:02:2B:1E:A3:4C:03:7C:51:F6:57:FC:3E:0D:84:A3:C6:18:68:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:41:0d:4d:3b:7f:9e:db:af:77:36:5a:46:e2:63:56:82:9d: 8d:39:cf:69:90:3b:64:50:0a:13:03:56:51:bb:aa:95:e0:6e: bf:6a:fe:02:de:c1:b1:dd:ae:ec:e0:58:d7:35:2d:50:89:2e: 97:1d:3c:83:ca:33:91:a0:dd:e9:47:a3:3a:5d:73:7a:33:a2: 20:9e:4f:3d:a7:2a:c1:9a:67:87:79:d7:1f:1a:bd:20:c6:00: 2f:c8:26:03:b1:18:fe:c1:b9:1d:f8:34:76:42:97:b4:e3:c6: df:4c:5a:2c:8e:c4:86:be:5c:e0:44:45:c1:cd:78:4a:07:11: 7c:08:35:30:32:1d:e5:e0:69:ec:f8:01:fe:eb:87:87:b1:ab: 7b:ce:c6:f6:26:65:c3:c0:af:27:76:b4:1d:9e:4b:d7:58:b2: 61:67:d0:1c:b3:6d:43:e8:2e:fa:d6:24:90:11:26:0c:36:dc: 74:dd:7f:ce:a7:06:39:a5:f8:98:ea:cf:04:00:b6:7e:47:90: 70:34:04:dc:aa:4a:a8:16:fd:4f:9c:d0:f8:13:6b:01:ae:5f: e9:27:01:4e:11:bc:5c:83:7b:e1:80:a6:41:e0:4a:cf:60:9a: 41:24:37:e9:e3:49:5e:a6:84:86:36:55:96:bb:a9:2f:ff:ec: fc:3a:05:67 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg5MEUxMTAvBgNVBAUTKDBCMDIyQjFFQTM0QzAzN0M1MUY2NTdGQzNFMEQ4NEEz QzYxODY4MjIwHhcNMjYxMDEyMTk1MTM2WhcNMjYxMDE5MTk1MTM2WjAYMRYwFAYD VQQDEw02YWNkM2E0OC1kYjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqfL0h5TIg8mw4Qu9w+Gr6C1cYXAovEU6Qy4kGbgFAp5kB/Jaqzcvz2uthkdi x6aDfAVvYeEhxkIfYAbKHGjyoHhgjhQ20UxnafU47viIBKtN1qPfPXbbcvuB94rZ gxhr3uK6K1JE0B0qfeRrJLoOdFH92FrbbZmRBOIWe+lkTdOXMKE/onAUFkubm5/L A572n5cEsNRNqSqzNbmOFfdx9ZRBqZ0UO6FIj0UZJ9nC/7ilcX4CI/j7mffg3Ib+ u4snfNgIg2eF2lGevVGdVTXNmocFeIhXhoBs2nheHfUeLlM0S9i4fDoiCjp9kFTW dGIbQ6ZdQTLWjt5WUwIx8M89dQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ9MVpqy z1hh3ZzP41NIwhGpLRjpMB8GA1UdIwQYMBaAFAsCKx6jTAN8UfZX/D4NhKPGGGgi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODkwRS84RDQxMzVGRUEx MjkxMUVBQTAyMjc3NDZDNEY5QUUwMi9Dd0lySHFOTUEzeFI5bGY4UGcyRW84WVlh Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N3SXJIcU5NQTN4UjlsZjhQZzJFbzhZWWFDSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODkwRS84RDQxMzVGRUExMjkxMUVBQTAyMjc3NDZDNEY5QUUwMi9Dd0lySHFOTUEz eFI5bGY4UGcyRW84WVlhQ0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmEENTTt/ntuvdzZaRuJjVoKdjTnPaZA7ZFAKEwNWUbuqleBuv2r+At7Bsd2u 7OBY1zUtUIkulx08g8ozkaDd6UejOl1zejOiIJ5PPacqwZpnh3nXHxq9IMYAL8gm A7EY/sG5Hfg0dkKXtOPG30xaLI7Ehr5c4ERFwc14SgcRfAg1MDId5eBp7PgB/uuH h7Gre87G9iZlw8CvJ3a0HZ5L11iyYWfQHLNtQ+gu+tYkkBEmDDbcdN1/zqcGOaX4 mOrPBAC2fkeQcDQE3KpKqBb9T5zQ+BNrAa5f6ScBThG8XIN74YCmQeBKz2CaQSQ3 6eNJXqaEhjZVlrupL//s/DoFZw== -----END CERTIFICATE-----Generated at Wed Oct 14 13:06:40 2026 by rpki-client