$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.mft File: cM9awmFE6NdDsVID4mwiBG-iQHo.mft (raw, json) Hash identifier: GCJU+oXGU5GBhgAXWvwG9vuxX2ONNraF+kR+flXmhPg= Subject key identifier: 8C:EF:A6:03:08:FA:6A:29:2A:3B:C6:2B:FC:F1:0C:7A:45:C9:3D:CA Authority key identifier: 70:CF:5A:C2:61:44:E8:D7:43:B1:52:03:E2:6C:22:04:6F:A2:40:7A Certificate issuer: /CN=A91DB128/serialNumber=70CF5AC26144E8D743B15203E26C22046FA2407A Certificate serial: 0292 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM9awmFE6NdDsVID4mwiBG-iQHo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.mft Manifest number: 0288 Signing time: Mon 21 Sep 2026 01:53:58 +0000 Manifest this update: Mon 21 Sep 2026 01:53:58 +0000 Manifest next update: Mon 28 Sep 2026 01:53:58 +0000 Files and hashes: 1: cM9awmFE6NdDsVID4mwiBG-iQHo.crl (hash: CZ+lEW454w5oqLjD9v0pTrzxKCFxLg36bnfTCR6xgyM=) 2: ABD7D9FCDDEC11EDB14EDA32C4F9AE02.roa (hash: 59GaugIUboIgNlDlRnXyjQ4DeYaCEIFAJ1XQPKcxrCA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.crl rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM9awmFE6NdDsVID4mwiBG-iQHo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 01:53:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 658 (0x292) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB128, serialNumber=70CF5AC26144E8D743B15203E26C22046FA2407A Validity Not Before: Sep 21 01:53:58 2026 GMT Not After : Sep 28 01:53:58 2026 GMT Subject: CN=6ab08e36-f43f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:cb:fc:b7:e8:09:53:7a:db:75:7c:d1:36:0e: 20:e1:36:9d:89:fd:7a:87:15:ef:b9:34:9d:4e:3f: 8c:d7:f3:c9:be:09:1a:fe:ec:8a:4b:4c:b0:69:76: ad:97:89:c5:a9:35:3f:8e:8d:5c:57:99:40:23:9e: 9b:4e:f3:53:16:c5:e9:c5:f8:90:28:48:3e:21:d6: 79:00:25:d4:02:4a:78:7b:ff:76:d8:fd:fa:bd:81: d0:48:9a:9d:b2:1a:78:f9:13:8f:1c:13:0c:60:2e: 1a:35:0b:8f:ce:c9:c6:6a:ab:ce:fa:68:2c:fa:32: 80:8a:4e:bd:9b:f3:fd:60:61:c8:c1:31:93:c9:d1: 90:e1:e1:96:0f:9b:68:fd:4f:86:7d:22:33:bb:b8: 29:d7:32:bd:6a:ea:ac:13:3b:bf:c5:e5:79:95:c0: f9:6b:cc:5d:61:5e:99:a2:53:0e:e3:08:cf:df:ff: 27:f0:8b:4c:44:53:c0:56:2c:20:ca:8e:2b:0b:fd: 04:82:95:02:1d:ca:75:cc:a7:5e:75:27:70:2c:a8: 82:ad:49:aa:6b:a7:8f:bb:38:9d:14:70:ab:9a:ba: b5:41:3e:8d:94:58:f8:83:49:13:cf:15:c7:f8:da: ab:04:e5:00:61:94:e2:d7:bf:29:5c:64:30:3f:de: 2e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:EF:A6:03:08:FA:6A:29:2A:3B:C6:2B:FC:F1:0C:7A:45:C9:3D:CA X509v3 Authority Key Identifier: keyid:70:CF:5A:C2:61:44:E8:D7:43:B1:52:03:E2:6C:22:04:6F:A2:40:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM9awmFE6NdDsVID4mwiBG-iQHo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:d7:d8:34:d5:bd:ef:2f:03:9b:87:68:bd:36:d0:ee:50:b4: c5:d2:19:b4:ce:69:c1:9b:fe:bc:34:fe:eb:27:7f:e7:48:f8: cf:12:bd:53:50:ae:32:0e:1b:70:0b:8d:c0:8a:aa:c5:7b:be: ba:a7:d2:92:b5:c4:22:35:ef:b7:ed:77:7c:24:64:cc:93:55: a2:36:7c:55:8d:e2:3d:1a:27:1e:f0:26:51:54:c5:29:dc:76: 26:88:72:b3:94:c0:f0:b3:b4:56:12:86:29:9d:8c:e1:4c:5f: a2:80:1d:73:5f:22:78:57:82:05:4d:8c:e8:de:6e:ed:e5:00: 54:4b:dd:58:3c:29:9c:33:ec:99:c9:86:c2:e8:42:c3:c6:9b: 8a:84:50:6c:3f:b8:6e:2d:9d:24:1b:b8:22:c0:6a:12:bb:9d: b8:c7:d8:3f:5a:9a:9c:9c:33:61:12:59:d6:98:73:54:3d:4e: 59:b6:99:43:fb:dd:61:1f:fe:30:77:df:97:dc:6b:78:54:4d: 7f:df:f9:81:1d:8f:fd:e0:f9:95:9a:98:e8:77:3a:d0:50:cf: 37:26:e5:c1:09:4c:bd:89:fc:00:bb:cc:0b:8a:01:a9:8f:8f: 48:04:05:54:42:a4:ac:90:47:10:42:bf:16:53:0b:72:48:69: 9a:03:0a:7f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIxMjgxMTAvBgNVBAUTKDcwQ0Y1QUMyNjE0NEU4RDc0M0IxNTIwM0UyNkMyMjA0 NkZBMjQwN0EwHhcNMjYwOTIxMDE1MzU4WhcNMjYwOTI4MDE1MzU4WjAYMRYwFAYD VQQDEw02YWIwOGUzNi1mNDNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn8v8t+gJU3rbdXzRNg4g4Tadif16hxXvuTSdTj+M1/PJvgka/uyKS0ywaXat l4nFqTU/jo1cV5lAI56bTvNTFsXpxfiQKEg+IdZ5ACXUAkp4e/922P36vYHQSJqd shp4+ROPHBMMYC4aNQuPzsnGaqvO+mgs+jKAik69m/P9YGHIwTGTydGQ4eGWD5to /U+GfSIzu7gp1zK9auqsEzu/xeV5lcD5a8xdYV6ZolMO4wjP3/8n8ItMRFPAViwg yo4rC/0EgpUCHcp1zKdedSdwLKiCrUmqa6ePuzidFHCrmrq1QT6NlFj4g0kTzxXH +NqrBOUAYZTi178pXGQwP94uvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIzvpgMI +mopKjvGK/zxDHpFyT3KMB8GA1UdIwQYMBaAFHDPWsJhROjXQ7FSA+JsIgRvokB6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjEyOC83QkYyM0FDNERE RTgxMUVEQkY4Qzk3M0FDNEY5QUUwMi9jTTlhd21GRTZOZERzVklENG13aUJHLWlR SG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NNOWF3bUZFNk5kRHNWSUQ0bXdpQkctaVFIby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjEyOC83QkYyM0FDNERERTgxMUVEQkY4Qzk3M0FDNEY5QUUwMi9jTTlhd21GRTZO ZERzVklENG13aUJHLWlRSG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXdfYNNW97y8Dm4dovTbQ7lC0xdIZtM5pwZv+vDT+6yd/50j4zxK9U1CuMg4b cAuNwIqqxXu+uqfSkrXEIjXvt+13fCRkzJNVojZ8VY3iPRonHvAmUVTFKdx2Johy s5TA8LO0VhKGKZ2M4UxfooAdc18ieFeCBU2M6N5u7eUAVEvdWDwpnDPsmcmGwuhC w8abioRQbD+4bi2dJBu4IsBqEruduMfYP1qanJwzYRJZ1phzVD1OWbaZQ/vdYR/+ MHffl9xreFRNf9/5gR2P/eD5lZqY6Hc60FDPNyblwQlMvYn8ALvMC4oBqY+PSAQF VEKkrJBHEEK/FlMLckhpmgMKfw== -----END CERTIFICATE-----Generated at Tue Sep 22 13:12:21 2026 by rpki-client