$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/ciYIDnxlJSNDlihmsxOfAjhyxAI.mft File: ciYIDnxlJSNDlihmsxOfAjhyxAI.mft (raw, json) Hash identifier: 1KxmEvDTp90dRYvZc2EVZyO86lMm+ekUgzwe7fqeNeY= Subject key identifier: 18:75:E1:2F:B0:0F:EE:F9:58:75:0D:9F:02:8E:55:08:7C:CC:12:21 Authority key identifier: 72:26:08:0E:7C:65:25:23:43:96:28:66:B3:13:9F:02:38:72:C4:02 Certificate issuer: /CN=A91ED596/serialNumber=7226080E7C65252343962866B3139F023872C402 Certificate serial: 019B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciYIDnxlJSNDlihmsxOfAjhyxAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/ciYIDnxlJSNDlihmsxOfAjhyxAI.mft Manifest number: 0190 Signing time: Fri 25 Sep 2026 04:28:56 +0000 Manifest this update: Fri 25 Sep 2026 04:28:56 +0000 Manifest next update: Fri 02 Oct 2026 04:28:56 +0000 Files and hashes: 1: ciYIDnxlJSNDlihmsxOfAjhyxAI.crl (hash: YSri6KbXqR/up/6agB9FG/FCUrBASWuMwjkpu419be8=) 2: C0C401905AE311EF90924C30C4F9AE02.roa (hash: pajsaklPf9gnqE7rNhlxP2QYoQHOLMvlb7QAvI9KQAk=) 3: -8xxWTTnJE42vNiitdoUFVOX8RU.asa (hash: 7XcAz8kDJIblwVgiMXAwVXb9A2Hx8ICB7PKXllxlYCo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/ciYIDnxlJSNDlihmsxOfAjhyxAI.crl rsync://rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/ciYIDnxlJSNDlihmsxOfAjhyxAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciYIDnxlJSNDlihmsxOfAjhyxAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 04:28:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 411 (0x19b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED596, serialNumber=7226080E7C65252343962866B3139F023872C402 Validity Not Before: Sep 25 04:28:56 2026 GMT Not After : Oct 2 04:28:56 2026 GMT Subject: CN=6ab5f888-1e54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:2f:59:ba:6f:97:51:19:a6:fd:0a:7d:ea:03: 1b:47:85:b9:07:47:cd:d9:4a:be:fa:45:4e:1b:ce: ef:7b:1d:ee:a4:d7:30:1f:57:35:a6:a2:c2:f9:85: c4:16:18:b3:07:f7:52:e8:e4:c6:95:2f:8b:a8:c9: 2b:01:b7:32:8d:d0:96:c5:36:10:e9:08:1a:0d:49: ef:fb:df:7c:47:57:dc:90:92:bd:07:3c:64:00:2c: c3:70:ae:41:c8:f4:a1:1c:66:84:59:60:25:7e:f1: be:b8:37:e3:60:04:69:8d:9e:cf:b2:a9:82:d9:d1: c5:74:4e:5b:00:6b:46:62:9a:55:73:d2:82:84:d5: 70:04:cd:36:f3:c5:19:88:3c:3d:72:95:b6:68:1e: ba:6e:fc:ce:bf:3b:dd:c8:ad:ea:fc:a7:34:86:48: 49:ca:52:04:6e:8a:1c:f6:e7:3a:d9:23:b9:b6:71: f1:a3:d5:ad:25:f1:c6:f4:1f:c1:9c:23:cd:2d:d5: f4:bd:9c:7c:cd:73:7b:bb:24:ba:54:51:72:89:38: fa:49:94:66:f9:a8:d8:c2:2a:b5:61:bf:83:80:77: 7c:96:d1:56:b2:6c:5d:81:59:ff:d9:5f:ba:a9:5b: 1e:b8:69:52:fd:66:de:ea:fa:97:e7:1b:3b:21:0b: ab:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:75:E1:2F:B0:0F:EE:F9:58:75:0D:9F:02:8E:55:08:7C:CC:12:21 X509v3 Authority Key Identifier: keyid:72:26:08:0E:7C:65:25:23:43:96:28:66:B3:13:9F:02:38:72:C4:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/ciYIDnxlJSNDlihmsxOfAjhyxAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciYIDnxlJSNDlihmsxOfAjhyxAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/ciYIDnxlJSNDlihmsxOfAjhyxAI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:05:40:9a:9b:7f:b9:ee:0b:44:5a:58:df:9a:e1:21:fc:08: a2:ed:27:a4:2f:c2:79:2c:44:8e:18:71:e6:3e:41:a7:3d:89: 90:a3:c3:cf:d3:93:09:f2:68:36:11:f1:d9:df:fb:a6:b9:af: 8e:b1:44:fa:f7:f0:90:49:85:b5:e3:27:9d:95:f7:12:2b:c4: 84:6a:c1:af:d1:29:1e:36:36:fb:92:c7:42:48:a3:fb:89:b6: 97:52:43:ad:3d:2e:dd:66:5f:84:95:77:2a:26:ff:98:59:ad: ff:40:c1:58:3a:9f:8e:b5:5b:ad:90:d8:3e:ec:6f:87:b4:c7: 5b:1b:75:43:df:d4:e3:7d:5f:79:eb:73:07:c7:f8:55:d6:58: cf:fb:59:ba:2d:42:44:7e:80:05:51:71:3e:ee:0f:d3:b3:a9: c8:a1:ab:3d:52:0c:de:7f:57:71:ba:75:39:a0:de:f3:81:6c: 40:50:4f:e3:40:d1:c3:20:c8:bc:3b:a5:0d:d9:2c:db:16:77: 5f:12:3f:bb:b8:02:88:66:42:64:e9:91:81:f3:d4:e3:76:ff: 60:d7:96:3e:47:8c:de:99:72:58:e2:34:0e:ab:29:f5:db:b1: cb:35:2e:09:b4:2e:bf:6b:96:b2:76:ee:cc:a7:cb:49:f3:ae: 8c:32:1d:4e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ1OTYxMTAvBgNVBAUTKDcyMjYwODBFN0M2NTI1MjM0Mzk2Mjg2NkIzMTM5RjAy Mzg3MkM0MDIwHhcNMjYwOTI1MDQyODU2WhcNMjYxMDAyMDQyODU2WjAYMRYwFAYD VQQDEw02YWI1Zjg4OC0xZTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2S9Zum+XURmm/Qp96gMbR4W5B0fN2Uq++kVOG87vex3upNcwH1c1pqLC+YXE FhizB/dS6OTGlS+LqMkrAbcyjdCWxTYQ6QgaDUnv+998R1fckJK9BzxkACzDcK5B yPShHGaEWWAlfvG+uDfjYARpjZ7PsqmC2dHFdE5bAGtGYppVc9KChNVwBM0288UZ iDw9cpW2aB66bvzOvzvdyK3q/Kc0hkhJylIEbooc9uc62SO5tnHxo9WtJfHG9B/B nCPNLdX0vZx8zXN7uyS6VFFyiTj6SZRm+ajYwiq1Yb+DgHd8ltFWsmxdgVn/2V+6 qVseuGlS/Wbe6vqX5xs7IQurDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBh14S+w D+75WHUNnwKOVQh8zBIhMB8GA1UdIwQYMBaAFHImCA58ZSUjQ5YoZrMTnwI4csQC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDU5Ni8wREUyM0UxNjVB RTMxMUVGOTMyQzIzMkZDNEY5QUUwMi9jaVlJRG54bEpTTkRsaWhtc3hPZkFqaHl4 QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NpWUlEbnhsSlNORGxpaG1zeE9mQWpoeXhBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDU5Ni8wREUyM0UxNjVBRTMxMUVGOTMyQzIzMkZDNEY5QUUwMi9jaVlJRG54bEpT TkRsaWhtc3hPZkFqaHl4QUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKwVAmpt/ue4LRFpY35rhIfwIou0npC/CeSxEjhhx5j5Bpz2JkKPDz9OTCfJo NhHx2d/7prmvjrFE+vfwkEmFteMnnZX3EivEhGrBr9EpHjY2+5LHQkij+4m2l1JD rT0u3WZfhJV3Kib/mFmt/0DBWDqfjrVbrZDYPuxvh7THWxt1Q9/U431feetzB8f4 VdZYz/tZui1CRH6ABVFxPu4P07OpyKGrPVIM3n9Xcbp1OaDe84FsQFBP40DRwyDI vDulDdks2xZ3XxI/u7gCiGZCZOmRgfPU43b/YNeWPkeM3plyWOI0Dqsp9duxyzUu CbQuv2uWsnbuzKfLSfOujDIdTg== -----END CERTIFICATE-----Generated at Sat Sep 26 04:53:25 2026 by rpki-client