$ rpki-client -vvvf rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft File: CBKglmLws-NPK1pRwz6OknA-Q2k.mft (raw, json) Hash identifier: YR/iwudcapqYNO6DhMT5vtdjMfbvqgwNCZqZsq9CDd0= Subject key identifier: 36:69:FA:ED:62:E9:53:00:1E:F1:F4:A1:B5:C3:95:26:A3:BE:4E:75 Authority key identifier: 08:12:A0:96:62:F0:B3:E3:4F:2B:5A:51:C3:3E:8E:92:70:3E:43:69 Certificate issuer: /CN=A91547EC/serialNumber=0812A09662F0B3E34F2B5A51C33E8E92703E4369 Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft Manifest number: D4 Signing time: Mon 19 Oct 2026 07:19:58 +0000 Manifest this update: Mon 19 Oct 2026 07:19:58 +0000 Manifest next update: Mon 26 Oct 2026 07:19:58 +0000 Files and hashes: 1: CBKglmLws-NPK1pRwz6OknA-Q2k.crl (hash: OggDOoGygF3n0WcWdV1T+hc+xovYX6R/CyurOJ6ciY4=) 2: 7CB1102487DD11F0A89FB377C4F9AE02.roa (hash: LJuHTr9dIvZYkAmMksiQJJP2qElg6VwwLMqlMwzQK3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.crl rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 07:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91547EC, serialNumber=0812A09662F0B3E34F2B5A51C33E8E92703E4369 Validity Not Before: Oct 19 07:19:58 2026 GMT Not After : Oct 26 07:19:58 2026 GMT Subject: CN=6ad5c49e-2ff8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ca:de:6d:66:36:42:3f:75:c6:60:dc:8d:f8: 00:f4:4c:d6:17:d7:e9:64:e3:7d:33:1b:b8:2d:9d: 06:67:a7:33:3c:d4:8e:c0:0c:84:d7:8d:7d:36:d9: 24:6a:b1:f0:be:c7:75:68:f2:4d:17:24:14:65:82: df:88:18:a0:18:71:35:34:6a:62:ee:c4:3c:c6:fc: cf:0c:db:87:7f:a9:6e:e9:b5:67:67:de:91:d4:a8: df:6f:88:43:cd:cf:e1:1c:fc:82:4e:0c:d3:ec:07: ba:6a:0c:3b:e6:56:11:d8:15:de:b0:8d:18:ca:9e: 41:1e:83:57:37:ab:d8:a6:20:d4:d1:50:d8:2c:6a: 0c:2f:45:40:ae:06:6d:7b:6f:7e:ea:4e:91:e3:14: 00:e2:e6:7b:b8:36:57:b8:c1:c7:4d:bc:50:b2:0f: d7:9a:c1:3b:f1:fe:97:1a:f9:ca:a4:33:ac:60:c7: 8a:ee:c0:81:db:d4:a1:ed:70:67:93:ea:9e:bd:18: b7:67:02:3d:0c:37:9e:39:57:6a:05:61:cc:07:26: 50:de:dc:b6:54:4e:0a:5b:7b:d4:88:4c:de:e6:13: 23:53:df:78:3c:50:3c:1f:65:2c:7a:2f:f6:de:57: 90:70:f9:b1:eb:10:e8:b0:a6:f8:bc:74:64:1a:f4: f3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:69:FA:ED:62:E9:53:00:1E:F1:F4:A1:B5:C3:95:26:A3:BE:4E:75 X509v3 Authority Key Identifier: keyid:08:12:A0:96:62:F0:B3:E3:4F:2B:5A:51:C3:3E:8E:92:70:3E:43:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:be:71:6a:f5:b0:d7:e1:e5:3d:65:cf:0a:2e:f2:e2:75:cd: 06:eb:f2:54:24:df:94:f8:9e:2b:51:d2:fa:8e:36:15:24:1a: f3:5a:6b:a1:21:94:47:68:7f:7e:ca:bd:c9:d8:a6:93:12:e2: f6:4c:54:be:a5:da:5c:38:e3:7d:bb:c5:73:be:8c:c7:4f:f3: 67:ce:e8:cb:0e:bf:8a:e4:14:6a:ba:f6:93:8f:cd:45:f6:a2: 56:64:e4:6d:1e:30:56:be:66:ef:4c:1b:e2:06:a4:83:4d:17: f8:4e:f0:b8:70:81:d0:ff:65:cd:72:e4:29:7f:be:dd:47:91: ca:95:28:4f:25:9b:5b:a8:2e:5b:99:f4:49:39:74:f7:77:6f: 57:9e:37:ac:f2:a6:64:76:f4:56:43:a1:4d:43:e4:4c:54:79: 0b:05:83:61:81:46:04:a7:8e:6e:33:27:77:0b:9e:d6:0a:47: fe:96:c6:5f:9d:5b:01:65:fb:05:db:0b:12:75:e0:33:1d:77: e3:ec:76:d0:b9:e1:d4:dc:6b:9e:b1:07:74:4b:af:f9:f4:e5: 2c:83:2c:2d:4b:5e:df:ef:49:80:87:90:b5:70:de:7d:6b:89: 0d:4b:c9:f0:6a:ed:4d:b8:cc:82:25:99:25:0a:1c:0f:b2:b4: 9e:ca:82:74 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ3RUMxMTAvBgNVBAUTKDA4MTJBMDk2NjJGMEIzRTM0RjJCNUE1MUMzM0U4RTky NzAzRTQzNjkwHhcNMjYxMDE5MDcxOTU4WhcNMjYxMDI2MDcxOTU4WjAYMRYwFAYD VQQDEw02YWQ1YzQ5ZS0yZmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsMrebWY2Qj91xmDcjfgA9EzWF9fpZON9Mxu4LZ0GZ6czPNSOwAyE1419Ntkk arHwvsd1aPJNFyQUZYLfiBigGHE1NGpi7sQ8xvzPDNuHf6lu6bVnZ96R1Kjfb4hD zc/hHPyCTgzT7Ae6agw75lYR2BXesI0Yyp5BHoNXN6vYpiDU0VDYLGoML0VArgZt e29+6k6R4xQA4uZ7uDZXuMHHTbxQsg/XmsE78f6XGvnKpDOsYMeK7sCB29Sh7XBn k+qevRi3ZwI9DDeeOVdqBWHMByZQ3ty2VE4KW3vUiEze5hMjU994PFA8H2Usei/2 3leQcPmx6xDosKb4vHRkGvTz2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDZp+u1i 6VMAHvH0obXDlSajvk51MB8GA1UdIwQYMBaAFAgSoJZi8LPjTytaUcM+jpJwPkNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDdFQy8yNTYzNTdDODg3 REQxMUYwQjc0Q0ZFNzZDNEY5QUUwMi9DQktnbG1Md3MtTlBLMXBSd3o2T2tuQS1R MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0NCS2dsbUx3cy1OUEsxcFJ3ejZPa25BLVEyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDdFQy8yNTYzNTdDODg3REQxMUYwQjc0Q0ZFNzZDNEY5QUUwMi9DQktnbG1Md3Mt TlBLMXBSd3o2T2tuQS1RMmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFL5xavWw1+HlPWXPCi7y4nXNBuvyVCTflPieK1HS+o42FSQa81proSGUR2h/ fsq9ydimkxLi9kxUvqXaXDjjfbvFc76Mx0/zZ87oyw6/iuQUarr2k4/NRfaiVmTk bR4wVr5m70wb4gakg00X+E7wuHCB0P9lzXLkKX++3UeRypUoTyWbW6guW5n0STl0 93dvV543rPKmZHb0VkOhTUPkTFR5CwWDYYFGBKeObjMndwue1gpH/pbGX51bAWX7 BdsLEnXgMx134+x20Lnh1NxrnrEHdEuv+fTlLIMsLUte3+9JgIeQtXDefWuJDUvJ 8GrtTbjMgiWZJQocD7K0nsqCdA== -----END CERTIFICATE-----Generated at Tue Oct 20 05:05:14 2026 by rpki-client