$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft File: CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft (raw, json) Hash identifier: BFUDHpojSeEX1g9fvSeP5yKGh385mCndHYii5NXHGOI= Subject key identifier: BF:51:24:D5:67:4E:B0:28:1E:51:FA:56:35:1B:BA:F3:30:E6:9C:C0 Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E Certificate issuer: /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E Certificate serial: 02DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft Manifest number: 0287 Signing time: Mon 21 Sep 2026 02:36:25 +0000 Manifest this update: Mon 21 Sep 2026 02:36:25 +0000 Manifest next update: Mon 28 Sep 2026 02:36:25 +0000 Files and hashes: 1: CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl (hash: nTl8fnPVZnEDgnezZ48tjfdRpizRk0w433eP+UY93NQ=) 2: 935296A6558B11F0BB2DB436C4F9AE02.roa (hash: oQTNR8UezgQA4tGlsLZvjgGgLBz+VcjntBI8Klr+/KA=) 3: 94BE094C7D0B11F0BC79D46DC4F9AE02.roa (hash: NEX3aRxV1Dqk6McmWh2C+0AJV5eYo9XBed68fWDSotg=) 4: 063FA6B25B2811F09B9A3A54C4F9AE02.roa (hash: COnh5OBflDrTiNerSPEVrAoEkIl/6x/Vx+xkw8ZayhI=) 5: E07CB68455A211F0B55F5674C4F9AE02.roa (hash: HGRofWCBztru2v6NUmwkl0HXWbLS28Izp3PDhbuMMv0=) 6: D0F8C1B2558E11F0AA71D85AC4F9AE02.roa (hash: 4xwuTIhwlGL5yXXna5at0wbo22dMaJaAc9+Xfqmd1Y8=) 7: F88F98EA55A211F0978C8774C4F9AE02.roa (hash: 1RLy8hwgWzmLWf1HsKCN7QGvSAK8fTD8LT1ZMd/TIQU=) 8: BACC6D0A4F7411F0A8124536C4F9AE02.roa (hash: /aJrSzZ6U1lc2HAZFype6jc3RKjfbA/DfLGY0OrC9MU=) 9: FBB6EA4E558B11F082FD5637C4F9AE02.roa (hash: 2FcVuaRaySm31VN4owwphmbBRzz94dcrhBnFrd+vqjo=) 10: DA6883FC0F8611F0955A002EC4F9AE02.roa (hash: vftcQ5vmTURf7Bgrq+lkXEdW/3ZqSPsCNqTs8qbLsJs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 734 (0x2de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F17AA, serialNumber=0947051EFA50429215750A48BC031ADA926EF66E Validity Not Before: Sep 21 02:36:25 2026 GMT Not After : Sep 28 02:36:25 2026 GMT Subject: CN=6ab09829-f13a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1f:dd:4c:62:92:0c:df:1a:ea:a1:41:41:98: 39:2e:c7:46:b2:c4:17:08:2d:ae:b1:35:6b:dc:b0: 77:6f:be:90:da:5e:ab:14:c0:4b:70:fe:27:3e:d6: 78:aa:4f:9f:47:3c:b1:da:89:cf:7f:eb:ff:af:43: 7f:e3:db:cf:20:35:f4:49:8c:71:a1:1c:c1:69:17: d3:a4:c8:44:41:d0:94:b2:12:09:e9:5b:0c:d9:56: 91:26:68:02:a2:74:90:a4:3b:21:f8:39:bd:38:d3: 1c:3f:2a:10:ff:f2:93:0e:74:cd:8f:dc:2d:1f:fe: c6:31:ec:64:24:fc:bb:67:ee:3e:26:af:7e:31:99: 82:bb:6c:9a:f1:47:77:1b:40:17:59:29:c0:58:31: f3:59:69:be:f6:48:58:59:7c:4f:da:50:1d:fd:46: 54:24:31:a8:75:77:5c:24:80:a2:b2:c5:92:dd:01: 96:89:12:37:16:ea:13:65:bd:91:5d:de:2a:58:52: b9:ff:9e:60:cc:e3:56:71:16:2b:7e:bb:12:fc:47: c5:9f:b1:27:57:94:f1:27:8d:8d:63:2b:b2:29:89: 1e:f5:b1:c8:0c:27:9a:81:78:c2:b5:33:95:90:7f: 82:67:2a:57:02:7c:95:40:86:54:7c:6d:2c:0e:29: fe:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:51:24:D5:67:4E:B0:28:1E:51:FA:56:35:1B:BA:F3:30:E6:9C:C0 X509v3 Authority Key Identifier: keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:ab:cd:63:92:dc:88:51:bb:a0:f1:61:64:c3:d6:e9:11:a8: 5d:27:fb:43:27:ea:87:97:bb:d6:96:92:75:da:50:4e:d8:06: fd:f9:b7:89:22:43:d7:72:0b:77:ec:3b:c9:98:9b:6d:6e:c2: 0f:86:b1:1b:6a:bb:56:36:bb:11:9b:57:08:91:fb:c8:be:a5: ad:7e:d2:ef:1c:7a:28:8e:21:61:98:ae:0f:6c:45:c6:ad:41: 52:af:ed:25:de:ad:5a:eb:90:88:fc:e5:97:32:3a:20:35:2a: 23:5a:6c:aa:06:01:9b:f4:6c:41:c5:ff:4c:43:05:c2:a3:29: e7:98:f3:c7:e7:6b:7d:c0:2a:06:6a:d9:e7:22:d9:95:00:49: 95:8a:90:95:21:92:2b:68:76:2e:59:96:27:8d:60:45:46:7e: 07:a4:64:f9:c5:6e:6f:8c:42:47:65:0a:e2:d7:4c:e4:fa:e8: df:91:df:b2:04:fa:0c:e4:7e:75:ce:34:ec:da:da:71:93:a7: 8c:94:ba:92:7b:cd:6f:6b:7c:a2:35:af:48:4a:6f:3f:fa:b8: a7:3d:8a:72:b6:f3:d8:18:8a:63:10:47:4c:a9:5b:e5:90:5b: c9:86:b0:c3:1c:ce:19:e7:51:de:76:8e:da:88:cc:2b:e6:69: a2:22:f1:ef -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE3QUExMTAvBgNVBAUTKDA5NDcwNTFFRkE1MDQyOTIxNTc1MEE0OEJDMDMxQURB OTI2RUY2NkUwHhcNMjYwOTIxMDIzNjI1WhcNMjYwOTI4MDIzNjI1WjAYMRYwFAYD VQQDEw02YWIwOTgyOS1mMTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtx/dTGKSDN8a6qFBQZg5LsdGssQXCC2usTVr3LB3b76Q2l6rFMBLcP4nPtZ4 qk+fRzyx2onPf+v/r0N/49vPIDX0SYxxoRzBaRfTpMhEQdCUshIJ6VsM2VaRJmgC onSQpDsh+Dm9ONMcPyoQ//KTDnTNj9wtH/7GMexkJPy7Z+4+Jq9+MZmCu2ya8Ud3 G0AXWSnAWDHzWWm+9khYWXxP2lAd/UZUJDGodXdcJICissWS3QGWiRI3FuoTZb2R Xd4qWFK5/55gzONWcRYrfrsS/EfFn7EnV5TxJ42NYyuyKYke9bHIDCeagXjCtTOV kH+CZypXAnyVQIZUfG0sDin+ZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL9RJNVn TrAoHlH6VjUbuvMw5pzAMB8GA1UdIwQYMBaAFAlHBR76UEKSFXUKSLwDGtqSbvZu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdBQS80MUYwRjk3RTUy QjgxMUVFOEU0MzAwMERDNEY5QUUwMi9DVWNGSHZwUVFwSVZkUXBJdkFNYTJwSnU5 bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NVY0ZIdnBRUXBJVmRRcEl2QU1hMnBKdTltNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTdBQS80MUYwRjk3RTUyQjgxMUVFOEU0MzAwMERDNEY5QUUwMi9DVWNGSHZwUVFw SVZkUXBJdkFNYTJwSnU5bTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdKvNY5LciFG7oPFhZMPW6RGoXSf7Qyfqh5e71paSddpQTtgG/fm3iSJD13IL d+w7yZibbW7CD4axG2q7Vja7EZtXCJH7yL6lrX7S7xx6KI4hYZiuD2xFxq1BUq/t Jd6tWuuQiPzllzI6IDUqI1psqgYBm/RsQcX/TEMFwqMp55jzx+drfcAqBmrZ5yLZ lQBJlYqQlSGSK2h2LlmWJ41gRUZ+B6Rk+cVub4xCR2UK4tdM5Pro35HfsgT6DOR+ dc407NracZOnjJS6knvNb2t8ojWvSEpvP/q4pz2Kcrbz2BiKYxBHTKlb5ZBbyYaw wxzOGedR3naO2ojMK+ZpoiLx7w== -----END CERTIFICATE-----Generated at Mon Sep 21 05:38:58 2026 by rpki-client