$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft File: CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft (raw, json) Hash identifier: 2uqprpe97ywp6N7c9t0AwFmbZnWMZGR7+oahoQsTeS4= Subject key identifier: D0:65:5A:45:B7:22:C4:9A:1D:76:72:EA:27:95:AF:BD:63:5A:75:4A Authority key identifier: 0A:A5:DE:29:26:5A:08:E2:7A:58:1D:89:44:65:BD:CD:B7:37:09:BB Certificate issuer: /CN=A91DC017/serialNumber=0AA5DE29265A08E27A581D894465BDCDB73709BB Certificate serial: 02E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft Manifest number: 02C5 Signing time: Mon 21 Sep 2026 01:27:14 +0000 Manifest this update: Mon 21 Sep 2026 01:27:14 +0000 Manifest next update: Mon 28 Sep 2026 01:27:14 +0000 Files and hashes: 1: CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl (hash: RTMgzPLSYp0ZFyTfKnDqogH+eYKzH1ZKGPRhab2BVVE=) 2: 08A1C0B8DC5011EF9C212C5CC4F9AE02.roa (hash: 6sjpy6GriqELAPGgjJdFUt57xHCHCLQzT9kEpI0w6Mg=) 3: C0C268B8441C11EF9E110F1EC4F9AE02.roa (hash: v5FOCrkT7bwg0TVjJC2RnsG6lxQLJwnHry99/PwnEBQ=) 4: 1B8DE01C641911EF83FFBF3CC4F9AE02.roa (hash: xDjn+cobUE2agLkdimK21R3Sdz0e7azaiAPMZg9qQro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 01:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 738 (0x2e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC017, serialNumber=0AA5DE29265A08E27A581D894465BDCDB73709BB Validity Not Before: Sep 21 01:27:14 2026 GMT Not After : Sep 28 01:27:14 2026 GMT Subject: CN=6ab087f2-5a95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a2:bd:0e:58:4a:ec:9d:b0:48:80:95:3f:e7: 48:71:bc:e0:4d:68:0a:3b:2a:1e:4c:69:01:d1:40: 48:97:94:e1:c0:91:08:84:ad:10:c4:09:2a:58:11: f0:9d:2b:9f:15:b6:77:3c:71:f5:da:08:9c:7b:66: 82:17:96:ae:53:4e:9e:1b:b8:09:31:c1:9f:53:0f: 3c:24:96:8c:67:80:db:7a:78:32:08:7f:0a:cb:15: 44:b4:91:a0:c8:d4:30:cd:71:bf:1f:70:ec:b1:a3: 41:99:ad:38:65:b0:fd:5d:b0:64:0a:b4:12:d1:40: 3a:78:74:ce:96:a5:d2:16:8c:e6:c6:7d:b2:6c:3f: a1:e9:05:90:62:66:c2:a5:3d:2d:8e:27:ab:6d:67: a6:23:dc:93:df:0b:70:d0:0a:28:5f:b9:56:82:15: 07:c5:4c:1a:c8:80:5f:be:70:27:5c:16:fd:ef:01: 43:b9:1d:3b:fe:80:d1:cb:0d:5e:c8:36:0e:30:1f: ad:45:df:ce:56:9e:49:c6:07:ea:0e:3d:e1:d2:51: e0:a3:b9:01:72:51:87:d3:cd:73:46:09:3f:1d:b6: 6e:3b:9e:05:eb:48:ba:bf:3f:aa:c3:d8:22:1d:6e: a1:ab:b4:9a:93:68:c3:b5:82:72:a2:7d:67:d8:5a: 31:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:65:5A:45:B7:22:C4:9A:1D:76:72:EA:27:95:AF:BD:63:5A:75:4A X509v3 Authority Key Identifier: keyid:0A:A5:DE:29:26:5A:08:E2:7A:58:1D:89:44:65:BD:CD:B7:37:09:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:3e:76:95:55:dd:6a:75:4f:fe:5f:a1:79:87:5e:12:96:fd: 65:98:bd:37:91:b4:1f:00:a0:9b:04:2d:c5:30:e6:28:4b:85: 76:8f:af:b3:a2:79:c4:6e:2f:35:af:dc:00:79:62:0d:a3:6c: e2:7e:3f:4c:5b:03:9e:44:7b:b8:eb:ac:8b:94:df:d1:4c:67: 28:f8:c8:5f:5d:c7:cf:68:c7:ff:99:1c:da:85:4b:43:ad:44: ad:5a:c3:c5:24:85:4f:6c:cc:91:ad:bb:46:f4:ad:21:1f:f8: 14:4d:8e:04:cb:56:c4:26:dd:c8:2b:81:5b:7a:17:26:7d:2f: ab:59:97:ea:65:10:9d:b3:5b:32:a1:2d:0a:a0:ac:62:a1:25: 30:a8:cc:83:df:d9:94:d9:d3:1f:e9:b1:99:6f:55:35:b4:a9: fa:82:66:04:f9:30:7a:03:d5:ec:35:da:ef:ca:9c:47:50:98: b1:e4:3a:ee:0f:f3:93:8c:1e:43:bb:3c:12:fd:e9:4f:17:d0: fa:5c:62:16:80:00:13:7f:27:83:ab:a9:ae:dc:91:c3:a3:95: 5e:7a:75:55:c7:e6:18:94:44:cd:c8:c6:11:b0:a0:69:8a:70: 3a:30:bd:9d:64:8a:fc:d1:1d:fb:0b:20:7e:9a:28:8b:7f:53: c1:54:2f:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwMTcxMTAvBgNVBAUTKDBBQTVERTI5MjY1QTA4RTI3QTU4MUQ4OTQ0NjVCRENE QjczNzA5QkIwHhcNMjYwOTIxMDEyNzE0WhcNMjYwOTI4MDEyNzE0WjAYMRYwFAYD VQQDEw02YWIwODdmMi01YTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1aK9DlhK7J2wSICVP+dIcbzgTWgKOyoeTGkB0UBIl5ThwJEIhK0QxAkqWBHw nSufFbZ3PHH12gice2aCF5auU06eG7gJMcGfUw88JJaMZ4DbengyCH8KyxVEtJGg yNQwzXG/H3DssaNBma04ZbD9XbBkCrQS0UA6eHTOlqXSFozmxn2ybD+h6QWQYmbC pT0tjierbWemI9yT3wtw0AooX7lWghUHxUwayIBfvnAnXBb97wFDuR07/oDRyw1e yDYOMB+tRd/OVp5JxgfqDj3h0lHgo7kBclGH081zRgk/HbZuO54F60i6vz+qw9gi HW6hq7Sak2jDtYJyon1n2FoxSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNBlWkW3 IsSaHXZy6ieVr71jWnVKMB8GA1UdIwQYMBaAFAql3ikmWgjielgdiURlvc23Nwm7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzAxNy8xMDVBQzhGQzkw QzMxMUVEQkExRENDMjNDNEY5QUUwMi9DcVhlS1NaYUNPSjZXQjJKUkdXOXpiYzND YnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NxWGVLU1phQ09KNldCMkpSR1c5emJjM0Nicy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzAxNy8xMDVBQzhGQzkwQzMxMUVEQkExRENDMjNDNEY5QUUwMi9DcVhlS1NaYUNP SjZXQjJKUkdXOXpiYzNDYnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyj52lVXdanVP/l+heYdeEpb9ZZi9N5G0HwCgmwQtxTDmKEuFdo+vs6J5xG4v Na/cAHliDaNs4n4/TFsDnkR7uOusi5Tf0UxnKPjIX13Hz2jH/5kc2oVLQ61ErVrD xSSFT2zMka27RvStIR/4FE2OBMtWxCbdyCuBW3oXJn0vq1mX6mUQnbNbMqEtCqCs YqElMKjMg9/ZlNnTH+mxmW9VNbSp+oJmBPkwegPV7DXa78qcR1CYseQ67g/zk4we Q7s8Ev3pTxfQ+lxiFoAAE38ng6uprtyRw6OVXnp1VcfmGJREzcjGEbCgaYpwOjC9 nWSK/NEd+wsgfpooi39TwVQvUA== -----END CERTIFICATE-----Generated at Tue Sep 22 06:55:08 2026 by rpki-client