$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft File: c1jmvCkIxoFAvzuKgV9pXcsqiks.mft (raw, json) Hash identifier: pMmKQ6Kv5U+pyulK3W2k4qeS6h0g+0bffWDmYf64tkQ= Subject key identifier: 53:5B:F2:4B:2E:3A:6D:2F:7F:53:4E:B3:FF:6E:52:98:AD:E9:CC:57 Authority key identifier: 73:58:E6:BC:29:08:C6:81:40:BF:3B:8A:81:5F:69:5D:CB:2A:8A:4B Certificate issuer: /CN=A91BB227/serialNumber=7358E6BC2908C68140BF3B8A815F695DCB2A8A4B Certificate serial: 0249 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft Manifest number: 023C Signing time: Fri 09 Oct 2026 03:05:01 +0000 Manifest this update: Fri 09 Oct 2026 03:05:00 +0000 Manifest next update: Fri 16 Oct 2026 03:05:00 +0000 Files and hashes: 1: c1jmvCkIxoFAvzuKgV9pXcsqiks.crl (hash: ta5BapsimaBS9goOuRQssKaSZ9KiSKvJUkbu0Om/j9k=) 2: 71014290D87411EE97234F5CC4F9AE02.roa (hash: s/cEOGRFX0DoGdQEqZyPvpLQpf664Lfa0cHYTU7MBgM=) 3: C01378B2D87411EE85EACB5CC4F9AE02.roa (hash: BtbKwISc0o5KoYEKwJEZQMnjZhmU53NuiaoFh10O9zg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.crl rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 03:05:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 585 (0x249) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB227, serialNumber=7358E6BC2908C68140BF3B8A815F695DCB2A8A4B Validity Not Before: Oct 9 03:05:00 2026 GMT Not After : Oct 16 03:05:00 2026 GMT Subject: CN=6ac859dd-3aa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ef:df:a7:54:62:c8:8e:6f:69:87:72:56:fc: 6e:1a:28:8a:2c:3c:23:1d:db:2f:43:5b:43:02:87: 44:fa:11:a1:54:46:99:fc:48:77:19:b1:b4:3a:42: 5c:c7:5f:fe:79:a1:0e:a7:0b:8d:b5:83:e5:01:85: bb:72:38:6e:63:c3:0f:93:ec:64:81:fa:ae:94:14: 97:10:6b:dd:69:3e:20:57:b0:c9:b5:3e:8a:51:fb: e0:97:b9:84:36:f2:f4:57:61:ee:ae:ea:e9:d1:27: 1d:0c:b2:26:4d:c1:25:27:e8:73:be:93:0a:c5:0a: 25:b5:a8:2f:b3:49:2b:60:8c:61:77:1b:6d:38:f1: 2e:6e:47:f7:dc:be:b1:ba:c3:35:c1:6b:9a:1e:d9: 0e:ce:31:c0:79:7f:a5:a8:3f:e4:f6:0b:7b:bd:f8: 14:b5:6a:30:72:2b:70:05:57:c2:af:f1:ca:41:31: d4:3f:a7:53:ea:8c:3d:16:88:ab:c0:21:f4:b9:24: 6b:94:29:cd:63:4f:a0:4f:6a:d8:70:33:df:ad:e8: 3f:d1:a4:ef:31:e3:50:97:4a:43:33:74:2c:1a:4f: d8:46:bc:aa:6d:ed:c6:f0:d7:87:45:3e:75:43:92: c2:f7:d8:bc:60:51:c0:16:81:0c:46:51:2f:ff:86: 1c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:5B:F2:4B:2E:3A:6D:2F:7F:53:4E:B3:FF:6E:52:98:AD:E9:CC:57 X509v3 Authority Key Identifier: keyid:73:58:E6:BC:29:08:C6:81:40:BF:3B:8A:81:5F:69:5D:CB:2A:8A:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:4f:55:99:9d:41:d4:b4:98:60:92:02:f5:29:f5:74:9c:3b: 4d:32:1f:03:ff:e2:67:5f:03:90:f1:71:ec:1f:e6:6e:e1:7b: e0:30:dc:28:b1:11:c9:90:0f:c7:8e:0b:08:52:20:d9:c0:b1: cf:1e:ab:29:ec:8f:43:c6:1c:9d:9c:a2:5b:61:18:6b:d4:da: 50:30:e6:39:0f:53:c4:57:3c:20:06:dd:5d:a2:85:d6:50:60: b2:df:d8:9e:7e:87:ac:ff:58:c5:68:54:91:a4:3f:9b:40:6f: 4e:65:1e:12:7c:bc:6d:07:26:20:c8:4c:e7:f6:e3:41:5e:14: 10:f6:33:ed:1a:99:66:13:e5:de:34:67:a1:26:e7:b8:2e:d6: c3:4f:bc:b5:de:81:28:a6:31:d5:57:ef:a5:69:af:c8:e1:90: 8b:ef:f7:32:33:23:cd:d5:3a:dc:2e:a8:ea:05:4b:76:13:9f: 87:02:f3:b8:e3:99:de:86:d2:b9:f9:66:2f:19:7e:ae:d8:40: da:d6:52:f1:a5:7f:07:33:48:8f:9a:96:d1:12:a3:45:7a:77: 4d:ee:8e:4d:d2:f1:ef:ce:19:d4:b0:97:41:84:d3:33:06:90: c3:7e:7c:8b:3b:f8:cf:1c:07:60:c8:ce:7e:ff:d5:d5:7b:0b: cb:c0:8c:5f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkIyMjcxMTAvBgNVBAUTKDczNThFNkJDMjkwOEM2ODE0MEJGM0I4QTgxNUY2OTVE Q0IyQThBNEIwHhcNMjYxMDA5MDMwNTAwWhcNMjYxMDE2MDMwNTAwWjAYMRYwFAYD VQQDEw02YWM4NTlkZC0zYWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwu/fp1RiyI5vaYdyVvxuGiiKLDwjHdsvQ1tDAodE+hGhVEaZ/Eh3GbG0OkJc x1/+eaEOpwuNtYPlAYW7cjhuY8MPk+xkgfqulBSXEGvdaT4gV7DJtT6KUfvgl7mE NvL0V2Hururp0ScdDLImTcElJ+hzvpMKxQoltagvs0krYIxhdxttOPEubkf33L6x usM1wWuaHtkOzjHAeX+lqD/k9gt7vfgUtWowcitwBVfCr/HKQTHUP6dT6ow9Foir wCH0uSRrlCnNY0+gT2rYcDPfreg/0aTvMeNQl0pDM3QsGk/YRryqbe3G8NeHRT51 Q5LC99i8YFHAFoEMRlEv/4YcrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFNb8ksu Om0vf1NOs/9uUpit6cxXMB8GA1UdIwQYMBaAFHNY5rwpCMaBQL87ioFfaV3LKopL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjIyNy9ENUE1NTM5ODVE MkQxMUVFQTNFMzlGNTdDNEY5QUUwMi9jMWptdkNrSXhvRkF2enVLZ1Y5cFhjc3Fp a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Mxam12Q2tJeG9GQXZ6dUtnVjlwWGNzcWlrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjIyNy9ENUE1NTM5ODVEMkQxMUVFQTNFMzlGNTdDNEY5QUUwMi9jMWptdkNrSXhv RkF2enVLZ1Y5cFhjc3Fpa3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgk9VmZ1B1LSYYJIC9Sn1dJw7TTIfA//iZ18DkPFx7B/mbuF74DDcKLERyZAP x44LCFIg2cCxzx6rKeyPQ8YcnZyiW2EYa9TaUDDmOQ9TxFc8IAbdXaKF1lBgst/Y nn6HrP9YxWhUkaQ/m0BvTmUeEny8bQcmIMhM5/bjQV4UEPYz7RqZZhPl3jRnoSbn uC7Ww0+8td6BKKYx1VfvpWmvyOGQi+/3MjMjzdU63C6o6gVLdhOfhwLzuOOZ3obS uflmLxl+rthA2tZS8aV/BzNIj5qW0RKjRXp3Te6OTdLx784Z1LCXQYTTMwaQw358 izv4zxwHYMjOfv/V1XsLy8CMXw== -----END CERTIFICATE-----Generated at Fri Oct 9 20:27:24 2026 by rpki-client