$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B4053/3640CB9450E111F091C4BB74C4F9AE02/cgqmbzbBRgrUvDrGkvlltxdKWOA.mft File: cgqmbzbBRgrUvDrGkvlltxdKWOA.mft (raw, json) Hash identifier: koWJjQ5DYftCItqz+I1T6aJu4UqoNNGGrv1JQeqOq/8= Subject key identifier: 66:B7:70:1A:22:E2:0F:5E:23:F9:A5:E1:F6:93:DF:87:6E:A3:8B:CC Authority key identifier: 72:0A:A6:6F:36:C1:46:0A:D4:BC:3A:C6:92:F9:65:B7:17:4A:58:E0 Certificate issuer: /CN=A91B4053/serialNumber=720AA66F36C1460AD4BC3AC692F965B7174A58E0 Certificate serial: 0103 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cgqmbzbBRgrUvDrGkvlltxdKWOA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4053/3640CB9450E111F091C4BB74C4F9AE02/cgqmbzbBRgrUvDrGkvlltxdKWOA.mft Manifest number: FF Signing time: Fri 23 Oct 2026 06:48:11 +0000 Manifest this update: Fri 23 Oct 2026 06:48:10 +0000 Manifest next update: Fri 30 Oct 2026 06:48:10 +0000 Files and hashes: 1: cgqmbzbBRgrUvDrGkvlltxdKWOA.crl (hash: uWcrwLSsAb0LBl8U7A73FBP6bDsNIyV/OEPC5abJvrY=) 2: AC8BCC2E50E411F0B8E7D45DC4F9AE02.roa (hash: 0Xdlp+Jjf+yeb2d/P0L7IU19P+mYj01Gp9Tj8N+RxJQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4053/3640CB9450E111F091C4BB74C4F9AE02/cgqmbzbBRgrUvDrGkvlltxdKWOA.crl rsync://rpki.apnic.net/member_repository/A91B4053/3640CB9450E111F091C4BB74C4F9AE02/cgqmbzbBRgrUvDrGkvlltxdKWOA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cgqmbzbBRgrUvDrGkvlltxdKWOA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 06:48:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 259 (0x103) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4053, serialNumber=720AA66F36C1460AD4BC3AC692F965B7174A58E0 Validity Not Before: Oct 23 06:48:10 2026 GMT Not After : Oct 30 06:48:10 2026 GMT Subject: CN=6adb032a-8627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:93:63:e5:c4:4b:66:3f:e7:ae:36:c7:45:93: e9:56:70:d1:48:a0:de:17:f3:46:83:a5:0f:b4:0e: 41:d7:99:65:1a:20:f0:b7:27:58:90:a7:e7:83:c4: 0e:af:fb:a7:4e:48:2c:2c:01:d5:56:41:6c:ac:f1: c9:2c:0a:29:26:b4:cd:a5:2d:89:aa:7a:e9:ad:c6: 17:c5:cc:79:a9:96:f8:dd:6e:fb:63:a4:cb:12:80: ab:a8:47:80:4a:8a:6e:2d:90:94:56:ed:ef:65:cc: 6e:a4:34:3f:b3:5c:ed:d6:ce:5c:55:fb:b0:5f:11: 0b:50:ca:0f:88:40:61:d1:90:ca:b6:8c:ec:62:26: 2a:91:96:02:d5:33:4b:c1:65:81:01:7c:c9:33:21: cb:a0:59:46:c8:21:84:09:e9:9b:e1:88:92:bf:4d: 25:bb:46:6a:fb:d7:ab:4d:b5:6d:a2:d5:6b:75:ca: c1:29:ab:f6:48:68:a7:bd:c5:46:06:37:9c:38:e8: 0b:26:ca:a0:a8:fa:fe:1a:62:03:59:0a:45:6b:eb: 82:99:67:d0:bf:89:d0:c2:cd:aa:00:0f:66:b3:b7: 64:7b:95:78:9f:d2:d8:0c:53:a7:37:52:bc:3a:41: e1:a4:bb:04:5c:35:8b:fc:ef:65:6d:7f:23:b7:3f: 72:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:B7:70:1A:22:E2:0F:5E:23:F9:A5:E1:F6:93:DF:87:6E:A3:8B:CC X509v3 Authority Key Identifier: keyid:72:0A:A6:6F:36:C1:46:0A:D4:BC:3A:C6:92:F9:65:B7:17:4A:58:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4053/3640CB9450E111F091C4BB74C4F9AE02/cgqmbzbBRgrUvDrGkvlltxdKWOA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cgqmbzbBRgrUvDrGkvlltxdKWOA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4053/3640CB9450E111F091C4BB74C4F9AE02/cgqmbzbBRgrUvDrGkvlltxdKWOA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e2:45:74:ab:72:18:b0:02:93:86:37:44:fa:65:59:74:bd:85: 02:ce:6b:4f:af:cf:55:f4:65:8a:ad:a7:6b:2b:e3:41:f0:13: bf:d6:9e:28:4d:17:70:41:19:80:88:d4:71:aa:f7:ef:fb:df: 6f:55:21:2b:3d:ff:1c:a7:10:a6:76:5e:04:ec:b2:4a:83:6f: c5:05:d7:0a:0f:1a:bd:fb:06:e6:46:14:3e:91:c2:66:34:5a: eb:b4:a4:b3:51:65:1c:bd:6f:25:67:a6:cb:9d:02:5c:33:55: 84:3d:b6:75:47:a6:4a:2b:b9:1e:bb:22:31:e9:98:55:fb:53: 92:f6:a0:3e:c4:7f:79:58:e0:b8:db:1c:3b:9f:73:da:e5:f0: a7:9a:ab:2c:86:89:25:69:41:9b:bb:0d:36:9c:6b:d7:5b:12: 47:80:1d:98:1e:7b:28:f4:f3:84:39:12:a0:0d:a3:a9:47:f6: dd:eb:46:7d:0f:e8:b1:22:88:32:a4:4f:fb:41:cf:e6:dc:cc: 5b:4a:22:9c:f6:8a:f4:eb:3b:bc:05:05:18:10:b5:7f:6b:2e: 55:79:43:98:da:f0:86:d4:fa:05:11:92:94:2e:7a:4d:d0:55: da:d6:14:02:67:5b:e4:45:41:fc:9e:d5:4c:cc:05:06:82:67: 5a:38:d8:15 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQwNTMxMTAvBgNVBAUTKDcyMEFBNjZGMzZDMTQ2MEFENEJDM0FDNjkyRjk2NUI3 MTc0QTU4RTAwHhcNMjYxMDIzMDY0ODEwWhcNMjYxMDMwMDY0ODEwWjAYMRYwFAYD VQQDEw02YWRiMDMyYS04NjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqJNj5cRLZj/nrjbHRZPpVnDRSKDeF/NGg6UPtA5B15llGiDwtydYkKfng8QO r/unTkgsLAHVVkFsrPHJLAopJrTNpS2JqnrprcYXxcx5qZb43W77Y6TLEoCrqEeA SopuLZCUVu3vZcxupDQ/s1zt1s5cVfuwXxELUMoPiEBh0ZDKtozsYiYqkZYC1TNL wWWBAXzJMyHLoFlGyCGECemb4YiSv00lu0Zq+9erTbVtotVrdcrBKav2SGinvcVG BjecOOgLJsqgqPr+GmIDWQpFa+uCmWfQv4nQws2qAA9ms7dke5V4n9LYDFOnN1K8 OkHhpLsEXDWL/O9lbX8jtz9yfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGa3cBoi 4g9eI/ml4faT34duo4vMMB8GA1UdIwQYMBaAFHIKpm82wUYK1Lw6xpL5ZbcXSljg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDA1My8zNjQwQ0I5NDUw RTExMUYwOTFDNEJCNzRDNEY5QUUwMi9jZ3FtYnpiQlJnclV2RHJHa3ZsbHR4ZEtX T0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NncW1iemJCUmdyVXZEckdrdmxsdHhkS1dPQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDA1My8zNjQwQ0I5NDUwRTExMUYwOTFDNEJCNzRDNEY5QUUwMi9jZ3FtYnpiQlJn clV2RHJHa3ZsbHR4ZEtXT0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA4kV0q3IYsAKThjdE+mVZdL2FAs5rT6/PVfRliq2nayvjQfATv9aeKE0XcEEZ gIjUcar37/vfb1UhKz3/HKcQpnZeBOyySoNvxQXXCg8avfsG5kYUPpHCZjRa67Sk s1FlHL1vJWemy50CXDNVhD22dUemSiu5HrsiMemYVftTkvagPsR/eVjguNscO59z 2uXwp5qrLIaJJWlBm7sNNpxr11sSR4AdmB57KPTzhDkSoA2jqUf23etGfQ/osSKI MqRP+0HP5tzMW0oinPaK9Os7vAUFGBC1f2suVXlDmNrwhtT6BRGSlC56TdBV2tYU Amdb5EVB/J7VTMwFBoJnWjjYFQ== -----END CERTIFICATE-----Generated at Sun Oct 25 06:04:17 2026 by rpki-client