$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft File: CHspwfvXREICrgAqSXEn_WbyStk.mft (raw, json) Hash identifier: f5+RuhtW2SyyP04NHJNNbG2T9OLpnP2n1zzUeSYsqHU= Subject key identifier: CE:C4:7E:81:BC:DB:0A:2C:37:07:F3:0B:F3:F5:38:F3:7F:F3:EF:30 Authority key identifier: 08:7B:29:C1:FB:D7:44:42:02:AE:00:2A:49:71:27:FD:66:F2:4A:D9 Certificate issuer: /CN=A91FAED9/serialNumber=087B29C1FBD7444202AE002A497127FD66F24AD9 Certificate serial: 057B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHspwfvXREICrgAqSXEn_WbyStk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft Manifest number: 0571 Signing time: Sun 20 Sep 2026 23:10:11 +0000 Manifest this update: Sun 20 Sep 2026 23:10:11 +0000 Manifest next update: Sun 27 Sep 2026 23:10:11 +0000 Files and hashes: 1: CHspwfvXREICrgAqSXEn_WbyStk.crl (hash: izPQeLNIkJr9ws1VxJw6ly7yKTkFkmuWJhfNICa0zxY=) 2: D3C965FA45F611EC9FB3BB49C4F9AE02.roa (hash: ux98ZA0wQgB4FkaCCMLS/K2q+Dgh8iXTzVCbgOOhli4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.crl rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHspwfvXREICrgAqSXEn_WbyStk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 23:10:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1403 (0x57b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAED9, serialNumber=087B29C1FBD7444202AE002A497127FD66F24AD9 Validity Not Before: Sep 20 23:10:11 2026 GMT Not After : Sep 27 23:10:11 2026 GMT Subject: CN=6ab067d3-b297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a8:d7:b0:8e:f3:3e:7e:f9:02:2d:be:ad:a4: 28:cd:df:83:9e:cd:db:f7:78:80:55:b5:a6:12:e1: fa:21:6b:e3:70:b4:2b:d8:32:7a:a8:25:92:4c:aa: 24:65:fa:08:ba:55:13:d3:71:7c:22:03:8a:62:26: f7:8f:65:c3:25:3b:f3:e7:39:bd:35:5e:07:22:b5: 59:61:f8:3e:3e:d3:69:3c:dd:e8:86:74:61:9d:51: 33:21:63:b3:4a:91:7b:be:c2:8e:1a:05:fb:50:58: ee:99:30:3a:ba:3b:fe:40:a8:93:99:c8:6f:a6:27: 5a:aa:e7:fa:86:aa:7c:27:e4:cd:dc:bd:1c:47:e0: 28:7f:eb:eb:68:96:28:09:05:44:d5:a5:c5:57:7f: 73:51:12:b7:9d:2c:07:35:4d:f1:49:12:89:94:0c: 13:42:35:59:fa:4f:b2:10:12:94:de:ab:78:86:53: 61:50:dd:cf:f0:58:96:88:fd:5c:57:07:1d:6c:45: 47:9e:60:5e:32:02:08:5a:9a:da:20:22:0e:f4:22: 2b:f5:be:36:12:08:50:7c:c8:aa:9c:48:e5:68:fb: bf:ec:cf:bb:7c:21:6a:44:c9:00:a1:aa:4a:08:3a: e7:02:19:af:ee:40:4c:31:13:b9:59:0a:20:e5:7a: 19:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:C4:7E:81:BC:DB:0A:2C:37:07:F3:0B:F3:F5:38:F3:7F:F3:EF:30 X509v3 Authority Key Identifier: keyid:08:7B:29:C1:FB:D7:44:42:02:AE:00:2A:49:71:27:FD:66:F2:4A:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHspwfvXREICrgAqSXEn_WbyStk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:48:31:49:bd:87:85:e6:89:6e:e4:43:c9:0a:37:28:62:88: 6d:ec:f0:ee:21:86:68:63:b9:7d:f1:f8:d8:c2:42:64:ac:24: 40:ed:ac:18:5f:76:f1:fe:01:19:c3:66:96:92:76:30:58:f8: fc:60:76:ed:51:f7:f4:87:68:29:0c:52:4b:d3:66:ca:81:35: 4d:c5:47:b3:a3:f8:e8:dd:fd:54:bb:2e:d3:e3:f3:f8:b1:c7: 30:7b:38:a3:b6:09:86:f2:ef:29:2e:18:79:51:0d:1c:88:d6: b3:14:bd:99:32:6b:de:90:4e:b7:b6:1a:56:ba:18:28:24:f8: 00:92:bc:c2:1e:71:6c:ba:5b:8a:66:72:ce:2e:5a:b5:08:22: a7:33:49:47:f0:f0:e9:56:d9:b8:38:56:80:3f:0f:d6:56:52: 18:8b:68:e5:d2:ea:f1:cf:11:71:cb:5e:58:b9:2d:b4:8a:77: bc:e5:30:cd:e7:81:c6:39:6e:e8:87:19:9b:24:e2:fd:36:54: 9b:47:66:bd:b2:3f:45:a2:46:e9:f2:47:2a:24:fd:10:87:df: 0f:55:c9:cc:7c:10:e4:61:5a:4b:47:8b:3e:b8:79:57:39:be: 1a:73:67:83:7a:e2:a6:dc:cc:3d:bb:ef:f2:96:1c:30:a3:4f: 65:d3:cf:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFFRDkxMTAvBgNVBAUTKDA4N0IyOUMxRkJENzQ0NDIwMkFFMDAyQTQ5NzEyN0ZE NjZGMjRBRDkwHhcNMjYwOTIwMjMxMDExWhcNMjYwOTI3MjMxMDExWjAYMRYwFAYD VQQDEw02YWIwNjdkMy1iMjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmajXsI7zPn75Ai2+raQozd+Dns3b93iAVbWmEuH6IWvjcLQr2DJ6qCWSTKok ZfoIulUT03F8IgOKYib3j2XDJTvz5zm9NV4HIrVZYfg+PtNpPN3ohnRhnVEzIWOz SpF7vsKOGgX7UFjumTA6ujv+QKiTmchvpidaquf6hqp8J+TN3L0cR+Aof+vraJYo CQVE1aXFV39zURK3nSwHNU3xSRKJlAwTQjVZ+k+yEBKU3qt4hlNhUN3P8FiWiP1c VwcdbEVHnmBeMgIIWpraICIO9CIr9b42EghQfMiqnEjlaPu/7M+7fCFqRMkAoapK CDrnAhmv7kBMMRO5WQog5XoZUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM7EfoG8 2wosNwfzC/P1OPN/8+8wMB8GA1UdIwQYMBaAFAh7KcH710RCAq4AKklxJ/1m8krZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUVEOS82QTc2NUFBQTQ1 REMxMUVDQThBMzE0NkRDNEY5QUUwMi9DSHNwd2Z2WFJFSUNyZ0FxU1hFbl9XYnlT dGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NIc3B3ZnZYUkVJQ3JnQXFTWEVuX1dieVN0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUVEOS82QTc2NUFBQTQ1REMxMUVDQThBMzE0NkRDNEY5QUUwMi9DSHNwd2Z2WFJF SUNyZ0FxU1hFbl9XYnlTdGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQEgxSb2HheaJbuRDyQo3KGKIbezw7iGGaGO5ffH42MJCZKwkQO2sGF928f4B GcNmlpJ2MFj4/GB27VH39IdoKQxSS9NmyoE1TcVHs6P46N39VLsu0+Pz+LHHMHs4 o7YJhvLvKS4YeVENHIjWsxS9mTJr3pBOt7YaVroYKCT4AJK8wh5xbLpbimZyzi5a tQgipzNJR/Dw6VbZuDhWgD8P1lZSGIto5dLq8c8RccteWLkttIp3vOUwzeeBxjlu 6IcZmyTi/TZUm0dmvbI/RaJG6fJHKiT9EIffD1XJzHwQ5GFaS0eLPrh5Vzm+GnNn g3riptzMPbvv8pYcMKNPZdPPkg== -----END CERTIFICATE-----Generated at Mon Sep 21 11:01:58 2026 by rpki-client