$ rpki-client -vvvf rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft File: CViGFDhyEOi2mtPDGnNhnXVe0MA.mft (raw, json) Hash identifier: 1mlEwDNuWmVrl9Pq1LEqJN6i/W7r+Tuda6Z4GZey4RM= Subject key identifier: A4:D0:A7:A7:FA:D7:BD:F3:1D:E6:2B:E8:C7:7D:1B:D4:A3:A2:AA:86 Authority key identifier: 09:58:86:14:38:72:10:E8:B6:9A:D3:C3:1A:73:61:9D:75:5E:D0:C0 Certificate issuer: /CN=A914CB22/serialNumber=09588614387210E8B69AD3C31A73619D755ED0C0 Certificate serial: 021D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft Manifest number: 0217 Signing time: Sat 03 Oct 2026 03:33:36 +0000 Manifest this update: Sat 03 Oct 2026 03:33:36 +0000 Manifest next update: Sat 10 Oct 2026 03:33:36 +0000 Files and hashes: 1: CViGFDhyEOi2mtPDGnNhnXVe0MA.crl (hash: Ik5DH1YTgw8QUEnQXUAdOi2K4aHy8SU9ezaZWiXFT1c=) 2: 2F996DC6C77311EEBD6F2D2BC4F9AE02.roa (hash: AWmRUUuHw7qvkIYfsKHsasjQBa7Xv/yb5/iOLvXpkFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.crl rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 03:33:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 541 (0x21d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CB22, serialNumber=09588614387210E8B69AD3C31A73619D755ED0C0 Validity Not Before: Oct 3 03:33:36 2026 GMT Not After : Oct 10 03:33:36 2026 GMT Subject: CN=6ac07790-686e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:41:fc:65:7a:9e:36:5e:20:7b:12:f3:fe:fd: 5c:0a:d1:19:7d:2d:e6:8c:a4:ab:fb:3e:cf:ef:0c: 02:5e:13:2d:46:19:4e:5c:23:b2:f2:b9:5d:e6:b1: e5:ea:e9:b7:a7:d9:2f:f2:1a:fc:db:a0:65:25:f2: 50:b0:ca:0a:d7:92:2a:af:88:2e:84:4a:34:e3:ad: 6e:94:45:63:19:f9:1a:d2:c4:96:d0:4c:c8:5f:5e: 4c:35:6b:98:6d:ac:1e:80:69:1a:38:ab:57:3c:4c: fc:57:d1:a1:6b:a1:66:c4:62:09:14:8c:27:3c:0e: 51:1f:90:e1:ee:a4:b0:1d:a6:08:f8:af:0b:38:d4: 10:13:c9:43:33:1c:56:32:ad:ff:1b:bf:14:bc:4b: 9b:77:da:2e:4f:b8:06:2e:fc:a1:87:95:e1:51:fd: 86:6a:b5:56:ba:25:d0:83:84:af:14:fb:97:1f:92: e4:6e:30:78:7c:48:5d:2e:d9:b0:1e:8b:ee:c6:39: 4c:7e:ca:57:5b:f8:97:02:3c:df:ab:57:93:a5:78: 6c:93:e1:78:4f:97:5b:06:ac:44:15:48:b4:14:cf: 6f:80:67:21:c4:b5:6e:17:75:1e:8f:da:94:35:a3: 47:66:4b:f3:0c:8e:6e:86:81:18:88:a8:fd:f2:e3: 6c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:D0:A7:A7:FA:D7:BD:F3:1D:E6:2B:E8:C7:7D:1B:D4:A3:A2:AA:86 X509v3 Authority Key Identifier: keyid:09:58:86:14:38:72:10:E8:B6:9A:D3:C3:1A:73:61:9D:75:5E:D0:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:2c:d9:31:f1:1a:2d:bc:bf:68:bd:3b:22:c9:43:84:a6:1d: 4b:3b:b8:8b:d4:a6:45:b4:2a:fb:4a:44:14:ea:55:45:a9:fb: 2b:97:a4:d5:58:88:50:30:a1:d0:28:06:09:cd:46:60:d9:0f: 65:62:17:1b:b2:89:2b:b4:04:6f:eb:46:91:c7:1e:9b:65:71: 70:8c:fd:35:a1:39:28:47:3b:d2:6d:c3:e8:e4:01:de:5d:5e: 93:f0:4f:0f:47:f5:ec:22:33:16:33:b0:20:a3:eb:4a:12:e4: 28:d8:90:df:65:f6:5a:e5:19:98:30:3b:1c:33:e6:49:ce:c1: 8c:ab:db:b6:27:d1:bc:bd:7b:06:6f:9f:60:0c:0f:6d:9c:b6: 17:9f:d8:8a:b8:f1:63:fb:b8:ad:7b:1b:ef:91:58:a2:14:56: 35:9d:ac:d6:d0:81:43:38:dc:52:21:0f:60:1e:7d:12:85:8c: fb:86:c2:a6:a6:52:e1:a5:b9:32:34:3e:44:fc:cc:ad:33:15: 12:aa:d7:69:c6:9f:b2:95:3c:3d:0c:88:71:c0:6e:62:71:18: 4c:18:ef:3e:a3:19:49:b4:9d:3e:34:54:d6:53:8d:a9:2d:d8: 4b:6a:b1:31:c8:b0:da:ab:5c:49:61:bd:95:1b:f8:bc:11:89: a5:96:e6:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENCMjIxMTAvBgNVBAUTKDA5NTg4NjE0Mzg3MjEwRThCNjlBRDNDMzFBNzM2MTlE NzU1RUQwQzAwHhcNMjYxMDAzMDMzMzM2WhcNMjYxMDEwMDMzMzM2WjAYMRYwFAYD VQQDEw02YWMwNzc5MC02ODZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtkH8ZXqeNl4gexLz/v1cCtEZfS3mjKSr+z7P7wwCXhMtRhlOXCOy8rld5rHl 6um3p9kv8hr826BlJfJQsMoK15Iqr4guhEo0461ulEVjGfka0sSW0EzIX15MNWuY bawegGkaOKtXPEz8V9Gha6FmxGIJFIwnPA5RH5Dh7qSwHaYI+K8LONQQE8lDMxxW Mq3/G78UvEubd9ouT7gGLvyhh5XhUf2GarVWuiXQg4SvFPuXH5LkbjB4fEhdLtmw HovuxjlMfspXW/iXAjzfq1eTpXhsk+F4T5dbBqxEFUi0FM9vgGchxLVuF3Uej9qU NaNHZkvzDI5uhoEYiKj98uNsQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKTQp6f6 173zHeYr6Md9G9SjoqqGMB8GA1UdIwQYMBaAFAlYhhQ4chDotprTwxpzYZ11XtDA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0IyMi82NjAyRTk3ODhD RDExMUVFQjYxRkM2MzhDNEY5QUUwMi9DVmlHRkRoeUVPaTJtdFBER25OaG5YVmUw TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NWaUdGRGh5RU9pMm10UERHbk5oblhWZTBNQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0IyMi82NjAyRTk3ODhDRDExMUVFQjYxRkM2MzhDNEY5QUUwMi9DVmlHRkRoeUVP aTJtdFBER25OaG5YVmUwTUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvCzZMfEaLby/aL07IslDhKYdSzu4i9SmRbQq+0pEFOpVRan7K5ek1ViIUDCh 0CgGCc1GYNkPZWIXG7KJK7QEb+tGkccem2VxcIz9NaE5KEc70m3D6OQB3l1ek/BP D0f17CIzFjOwIKPrShLkKNiQ32X2WuUZmDA7HDPmSc7BjKvbtifRvL17Bm+fYAwP bZy2F5/YirjxY/u4rXsb75FYohRWNZ2s1tCBQzjcUiEPYB59EoWM+4bCpqZS4aW5 MjQ+RPzMrTMVEqrXacafspU8PQyIccBuYnEYTBjvPqMZSbSdPjRU1lONqS3YS2qx Mciw2qtcSWG9lRv4vBGJpZbmxQ== -----END CERTIFICATE-----Generated at Sun Oct 4 16:57:54 2026 by rpki-client