$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B4053/3640CB9450E111F091C4BB74C4F9AE02/cgqmbzbBRgrUvDrGkvlltxdKWOA.mft File: cgqmbzbBRgrUvDrGkvlltxdKWOA.mft (raw, json) Hash identifier: hoq2J7i3i6bVgsIQIDo+/YyiiMnIxCq0I8EZ5XLFDVA= Subject key identifier: 99:E1:16:76:9D:69:6D:FE:2A:3C:10:28:E1:A8:42:BF:8C:A7:1B:E1 Authority key identifier: 72:0A:A6:6F:36:C1:46:0A:D4:BC:3A:C6:92:F9:65:B7:17:4A:58:E0 Certificate issuer: /CN=A91B4053/serialNumber=720AA66F36C1460AD4BC3AC692F965B7174A58E0 Certificate serial: EA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cgqmbzbBRgrUvDrGkvlltxdKWOA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4053/3640CB9450E111F091C4BB74C4F9AE02/cgqmbzbBRgrUvDrGkvlltxdKWOA.mft Manifest number: E6 Signing time: Thu 03 Sep 2026 06:41:57 +0000 Manifest this update: Thu 03 Sep 2026 06:41:56 +0000 Manifest next update: Thu 10 Sep 2026 06:41:56 +0000 Files and hashes: 1: cgqmbzbBRgrUvDrGkvlltxdKWOA.crl (hash: V9UzVEBu9NN0c7z04ferhFfhNtRTbI8Eqhe0LvK42Xk=) 2: AC8BCC2E50E411F0B8E7D45DC4F9AE02.roa (hash: 0Xdlp+Jjf+yeb2d/P0L7IU19P+mYj01Gp9Tj8N+RxJQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4053/3640CB9450E111F091C4BB74C4F9AE02/cgqmbzbBRgrUvDrGkvlltxdKWOA.crl rsync://rpki.apnic.net/member_repository/A91B4053/3640CB9450E111F091C4BB74C4F9AE02/cgqmbzbBRgrUvDrGkvlltxdKWOA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cgqmbzbBRgrUvDrGkvlltxdKWOA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 06:41:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4053, serialNumber=720AA66F36C1460AD4BC3AC692F965B7174A58E0 Validity Not Before: Sep 3 06:41:56 2026 GMT Not After : Sep 10 06:41:56 2026 GMT Subject: CN=6a9916b5-4d9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:30:8b:d4:76:6a:1c:31:15:c5:77:25:7b:32: 93:8f:e1:1c:2c:3b:15:22:81:6b:0f:57:56:d5:33: 16:16:c6:6d:37:67:15:f7:73:ee:2c:8b:dd:ac:ee: d7:1a:f4:85:02:bf:56:6a:f7:72:98:bf:e9:07:b7: 3b:34:c3:3b:fc:42:0b:dd:43:2f:3d:df:13:21:34: 9f:44:a3:e3:98:21:8b:3f:ec:8d:11:18:da:38:be: 26:75:f1:9d:f0:ba:5a:0d:35:ef:bf:ca:85:e2:10: 0e:ec:57:41:9c:e0:86:88:65:f9:3a:69:b2:e9:40: d3:dc:9b:a4:3b:3e:8d:19:e7:9a:34:13:68:da:45: a9:aa:61:f8:86:c2:1f:1f:a3:58:09:9d:7e:33:d7: f8:1e:43:40:16:9b:76:9c:b5:f0:3c:d2:6a:cb:38: 99:34:3f:09:1c:10:52:12:90:51:73:c7:0f:b2:45: 58:1c:d4:a0:ff:8b:eb:87:91:5e:ed:07:f2:82:bc: 33:e7:82:ad:b6:70:77:68:40:e9:39:78:e1:4c:02: fd:8b:e2:4a:f2:be:dd:26:5b:0c:e0:14:1f:44:db: 78:39:3d:68:f6:76:e8:47:c9:a4:3c:ff:06:30:af: 24:18:ac:10:02:aa:30:e3:e4:51:03:ae:71:fc:54: 15:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:E1:16:76:9D:69:6D:FE:2A:3C:10:28:E1:A8:42:BF:8C:A7:1B:E1 X509v3 Authority Key Identifier: keyid:72:0A:A6:6F:36:C1:46:0A:D4:BC:3A:C6:92:F9:65:B7:17:4A:58:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4053/3640CB9450E111F091C4BB74C4F9AE02/cgqmbzbBRgrUvDrGkvlltxdKWOA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cgqmbzbBRgrUvDrGkvlltxdKWOA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4053/3640CB9450E111F091C4BB74C4F9AE02/cgqmbzbBRgrUvDrGkvlltxdKWOA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:11:7c:d4:85:19:60:0d:ac:5d:42:f8:97:3d:ed:cc:c5:c8: 89:af:46:d2:43:fa:1c:55:79:2d:c1:b5:a2:04:2f:7f:cc:1c: 8e:1b:39:8c:e9:15:c6:c3:3c:ac:f3:54:df:4b:51:4f:52:ba: 86:35:68:61:e2:b3:13:a5:2f:ec:3e:e7:08:81:3d:8c:14:05: 9f:88:44:18:bf:2b:c9:74:76:70:61:f8:fc:33:17:f2:d9:c2: b9:0e:d7:9a:fa:78:15:92:f3:e0:27:fe:e6:ae:b3:06:0a:bb: 2d:56:91:50:8d:60:3c:db:e3:d5:d3:c5:07:01:db:c3:d7:2f: 15:42:92:9b:c1:dc:5e:81:2d:19:ee:eb:ea:34:b7:76:1d:7a: a8:8e:db:aa:86:d8:4e:ff:e6:f6:96:3e:92:8b:77:8a:7d:b7: b2:11:a3:32:ac:c1:1f:ba:64:fe:fa:23:9a:27:50:ff:79:63: e4:9b:ea:96:52:68:1d:c5:61:79:46:5e:f2:cc:75:3a:01:36: c9:3e:89:44:ac:01:db:15:89:ec:fa:f2:ba:68:45:ce:08:44: 02:bf:a8:34:33:2c:63:c0:fc:47:d8:22:fa:0d:71:52:48:45: 12:bc:4d:54:f7:c2:1b:1f:5c:c7:6b:aa:f2:bf:55:a7:e4:12: 03:12:c6:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQwNTMxMTAvBgNVBAUTKDcyMEFBNjZGMzZDMTQ2MEFENEJDM0FDNjkyRjk2NUI3 MTc0QTU4RTAwHhcNMjYwOTAzMDY0MTU2WhcNMjYwOTEwMDY0MTU2WjAYMRYwFAYD VQQDEw02YTk5MTZiNS00ZDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnTCL1HZqHDEVxXclezKTj+EcLDsVIoFrD1dW1TMWFsZtN2cV93PuLIvdrO7X GvSFAr9WavdymL/pB7c7NMM7/EIL3UMvPd8TITSfRKPjmCGLP+yNERjaOL4mdfGd 8LpaDTXvv8qF4hAO7FdBnOCGiGX5Ommy6UDT3JukOz6NGeeaNBNo2kWpqmH4hsIf H6NYCZ1+M9f4HkNAFpt2nLXwPNJqyziZND8JHBBSEpBRc8cPskVYHNSg/4vrh5Fe 7Qfygrwz54KttnB3aEDpOXjhTAL9i+JK8r7dJlsM4BQfRNt4OT1o9nboR8mkPP8G MK8kGKwQAqow4+RRA65x/FQV2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJnhFnad aW3+KjwQKOGoQr+MpxvhMB8GA1UdIwQYMBaAFHIKpm82wUYK1Lw6xpL5ZbcXSljg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDA1My8zNjQwQ0I5NDUw RTExMUYwOTFDNEJCNzRDNEY5QUUwMi9jZ3FtYnpiQlJnclV2RHJHa3ZsbHR4ZEtX T0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NncW1iemJCUmdyVXZEckdrdmxsdHhkS1dPQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDA1My8zNjQwQ0I5NDUwRTExMUYwOTFDNEJCNzRDNEY5QUUwMi9jZ3FtYnpiQlJn clV2RHJHa3ZsbHR4ZEtXT0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOBF81IUZYA2sXUL4lz3tzMXIia9G0kP6HFV5LcG1ogQvf8wcjhs5jOkVxsM8 rPNU30tRT1K6hjVoYeKzE6Uv7D7nCIE9jBQFn4hEGL8ryXR2cGH4/DMX8tnCuQ7X mvp4FZLz4Cf+5q6zBgq7LVaRUI1gPNvj1dPFBwHbw9cvFUKSm8HcXoEtGe7r6jS3 dh16qI7bqobYTv/m9pY+kot3in23shGjMqzBH7pk/vojmidQ/3lj5JvqllJoHcVh eUZe8sx1OgE2yT6JRKwB2xWJ7PryumhFzghEAr+oNDMsY8D8R9gi+g1xUkhFErxN VPfCGx9cx2uq8r9Vp+QSAxLG1w== -----END CERTIFICATE-----Generated at Thu Sep 3 20:48:11 2026 by rpki-client