$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft File: ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft (raw, json) Hash identifier: 9SCFnpLMnbK51l4pO++sTNq90TuZjz3IDdnQH+AURwc= Subject key identifier: 01:B5:EA:89:CE:C3:08:35:02:2A:1B:50:6C:7C:59:01:84:90:1C:84 Authority key identifier: 71:C1:27:D1:C0:6A:FC:7C:45:4D:D1:09:3E:B2:CB:7E:12:D7:87:C0 Certificate issuer: /CN=A91DE570/serialNumber=71C127D1C06AFC7C454DD1093EB2CB7E12D787C0 Certificate serial: 02E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccEn0cBq_HxFTdEJPrLLfhLXh8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft Manifest number: 02D8 Signing time: Mon 21 Sep 2026 01:10:35 +0000 Manifest this update: Mon 21 Sep 2026 01:10:34 +0000 Manifest next update: Mon 28 Sep 2026 01:10:34 +0000 Files and hashes: 1: ccEn0cBq_HxFTdEJPrLLfhLXh8A.crl (hash: PcLjFOAt90Czry3FE6UcMer4ggxHtOnawBPGZJb4j2E=) 2: B46C8BFA89AD11ED93CAB75FC4F9AE02.roa (hash: CGlw2ssNfHPHMotdeBql7u15Li0tz079YSiw0LPLu/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.crl rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccEn0cBq_HxFTdEJPrLLfhLXh8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 01:10:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 740 (0x2e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE570, serialNumber=71C127D1C06AFC7C454DD1093EB2CB7E12D787C0 Validity Not Before: Sep 21 01:10:34 2026 GMT Not After : Sep 28 01:10:34 2026 GMT Subject: CN=6ab0840a-58c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4d:da:b3:8c:b4:2b:03:33:30:b4:c2:aa:9a: 2c:89:04:d7:db:82:f6:e5:5b:6e:6e:74:14:dd:3e: 72:71:21:c8:5a:d2:88:90:82:c8:b5:d3:73:14:6b: 7c:22:45:6c:9a:8b:da:6e:4f:5b:25:06:81:9b:c9: 21:d3:11:d4:0b:3e:97:7c:3c:ae:4a:22:83:96:b5: b2:fe:86:46:2f:36:5b:c7:fd:29:d0:b6:ce:ea:05: 84:33:9f:8a:a6:c1:34:b0:75:1f:9d:95:96:8c:f8: 12:33:0b:e9:78:c1:e1:45:f7:06:a6:d3:9f:1f:0b: dc:a3:e5:b1:e5:56:cc:e0:05:5c:fa:0e:d9:2b:ab: b0:4d:87:2c:fe:38:21:fc:cd:27:49:2f:db:c3:5e: a3:c6:6b:8d:71:d9:2e:cb:3e:3b:8a:70:dc:af:ec: dc:ac:e2:73:2c:32:23:98:a0:7d:2c:56:e1:d5:fb: 28:a2:7b:5b:7e:39:b7:ca:31:48:ee:6c:05:c8:a5: 46:46:e2:c1:16:5a:de:dc:f7:2d:54:83:51:b2:33: 56:4a:00:c2:62:e2:7f:b3:b7:53:39:ea:6a:dd:55: b0:40:6a:e6:8f:f2:6b:af:69:af:06:c6:c1:7f:77: 82:b6:31:35:05:a6:f1:83:aa:50:43:87:cd:23:ed: f2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B5:EA:89:CE:C3:08:35:02:2A:1B:50:6C:7C:59:01:84:90:1C:84 X509v3 Authority Key Identifier: keyid:71:C1:27:D1:C0:6A:FC:7C:45:4D:D1:09:3E:B2:CB:7E:12:D7:87:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccEn0cBq_HxFTdEJPrLLfhLXh8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:5c:b4:26:67:10:cb:ea:a6:b6:5e:6a:b0:de:47:07:d9:ee: 93:10:7a:47:54:26:12:a6:54:4e:0f:8e:2b:38:3d:36:25:8e: aa:96:15:af:1b:d3:c1:6a:49:dd:f3:f2:d7:bc:e7:c9:ad:e4: fd:d6:ad:6d:87:5e:6d:00:3c:59:a9:c2:8b:6a:7a:dd:23:16: 55:2f:3a:4b:a1:6d:07:9e:d3:e1:9f:69:7d:ae:c4:a5:1a:ea: 6d:c7:4a:e7:97:79:96:dc:75:0a:43:3e:d0:67:bc:b9:48:e1: e4:a4:99:88:7d:fb:c4:24:8c:c3:fc:21:27:76:dc:ee:ab:b2: ae:78:c2:e6:27:94:8c:d9:12:3f:33:61:03:16:0f:da:82:66: 2a:72:94:a7:10:23:06:b2:57:3a:01:f2:5c:36:17:dd:e0:f1: 79:b0:05:1e:3b:79:43:81:e7:46:f6:91:48:7d:d3:e8:8d:c5: 55:be:83:88:ec:21:85:b7:a1:2c:4b:2a:2e:d6:f2:c0:e1:9d: 26:1c:12:51:9b:d7:cc:5b:ba:d5:9a:4c:aa:24:61:3f:b7:38: 93:d9:de:03:b2:5f:77:17:4a:44:1d:c3:98:f7:d1:8e:52:ec: 2c:9a:f4:6a:e0:9f:3d:b2:f1:39:74:7a:b9:d0:40:98:9e:89: 25:5d:12:3c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAuQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU1NzAxMTAvBgNVBAUTKDcxQzEyN0QxQzA2QUZDN0M0NTRERDEwOTNFQjJDQjdF MTJENzg3QzAwHhcNMjYwOTIxMDExMDM0WhcNMjYwOTI4MDExMDM0WjAYMRYwFAYD VQQDEw02YWIwODQwYS01OGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu03as4y0KwMzMLTCqposiQTX24L25VtubnQU3T5ycSHIWtKIkILItdNzFGt8 IkVsmovabk9bJQaBm8kh0xHUCz6XfDyuSiKDlrWy/oZGLzZbx/0p0LbO6gWEM5+K psE0sHUfnZWWjPgSMwvpeMHhRfcGptOfHwvco+Wx5VbM4AVc+g7ZK6uwTYcs/jgh /M0nSS/bw16jxmuNcdkuyz47inDcr+zcrOJzLDIjmKB9LFbh1fsoontbfjm3yjFI 7mwFyKVGRuLBFlre3PctVINRsjNWSgDCYuJ/s7dTOepq3VWwQGrmj/Jrr2mvBsbB f3eCtjE1Babxg6pQQ4fNI+3ytwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAG16onO wwg1AiobUGx8WQGEkByEMB8GA1UdIwQYMBaAFHHBJ9HAavx8RU3RCT6yy34S14fA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTU3MC9DMkNCMTE5QzY1 ODMxMUVEOTYwMDJDMkNDNEY5QUUwMi9jY0VuMGNCcV9IeEZUZEVKUHJMTGZoTFho OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NjRW4wY0JxX0h4RlRkRUpQckxMZmhMWGg4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTU3MC9DMkNCMTE5QzY1ODMxMUVEOTYwMDJDMkNDNEY5QUUwMi9jY0VuMGNCcV9I eEZUZEVKUHJMTGZoTFhoOEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqly0JmcQy+qmtl5qsN5HB9nukxB6R1QmEqZUTg+OKzg9NiWOqpYVrxvTwWpJ 3fPy17znya3k/datbYdebQA8WanCi2p63SMWVS86S6FtB57T4Z9pfa7EpRrqbcdK 55d5ltx1CkM+0Ge8uUjh5KSZiH37xCSMw/whJ3bc7quyrnjC5ieUjNkSPzNhAxYP 2oJmKnKUpxAjBrJXOgHyXDYX3eDxebAFHjt5Q4HnRvaRSH3T6I3FVb6DiOwhhbeh LEsqLtbywOGdJhwSUZvXzFu61ZpMqiRhP7c4k9neA7JfdxdKRB3DmPfRjlLsLJr0 auCfPbLxOXR6udBAmJ6JJV0SPA== -----END CERTIFICATE-----Generated at Tue Sep 22 06:54:59 2026 by rpki-client