$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.mft File: CB6icKn0s2sOyJai0hSO5Ok-Xys.mft (raw, json) Hash identifier: gT5TG53Ow1Wjwy088FOgAqTAHy+W5bkoaPxLjn76Pz8= Subject key identifier: FF:42:35:1E:9F:3C:F9:1E:D7:04:9F:66:FF:4E:FC:A2:15:9A:18:57 Authority key identifier: 08:1E:A2:70:A9:F4:B3:6B:0E:C8:96:A2:D2:14:8E:E4:E9:3E:5F:2B Certificate issuer: /CN=A91BB921/serialNumber=081EA270A9F4B36B0EC896A2D2148EE4E93E5F2B Certificate serial: 022F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CB6icKn0s2sOyJai0hSO5Ok-Xys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.mft Manifest number: 0228 Signing time: Mon 05 Oct 2026 03:05:59 +0000 Manifest this update: Mon 05 Oct 2026 03:05:58 +0000 Manifest next update: Mon 12 Oct 2026 03:05:58 +0000 Files and hashes: 1: CB6icKn0s2sOyJai0hSO5Ok-Xys.crl (hash: klLpGC89zVZ2YEekdSZE123snDNJxladW6CJblk+g4I=) 2: 5A387584756311EEA256FD57C4F9AE02.roa (hash: vSlu+TQyxpav2ADnDaaL7eQcjqlvG5DFjhy5XTFprbE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.crl rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CB6icKn0s2sOyJai0hSO5Ok-Xys.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 03:05:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 559 (0x22f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB921, serialNumber=081EA270A9F4B36B0EC896A2D2148EE4E93E5F2B Validity Not Before: Oct 5 03:05:58 2026 GMT Not After : Oct 12 03:05:58 2026 GMT Subject: CN=6ac31416-e2da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ed:2d:0c:44:ad:c7:6a:e6:5a:e6:f7:b2:56: 98:f9:af:79:66:38:1e:05:12:15:cb:65:d0:98:4a: 81:5a:ca:b0:ab:48:8b:87:19:15:fb:fb:38:bf:e5: 6e:a6:bc:cd:8b:fe:c0:07:16:49:2b:01:60:47:83: cb:9e:ed:ed:69:13:fa:ad:83:ba:e8:44:f4:d2:96: 7e:44:93:a8:08:82:df:4b:29:fa:68:fa:dd:1c:4e: 51:4e:d7:7a:62:f2:de:d0:76:b9:a8:32:93:76:67: 4f:93:05:cc:3e:ec:ac:5d:26:fe:3e:14:96:27:0a: 6e:f8:6b:39:6d:a5:24:a9:54:c7:e8:48:23:24:35: 0b:78:86:77:d2:1a:85:7d:42:6f:00:9a:82:4d:29: 3b:4c:09:a7:d0:ae:94:b7:08:1d:b8:b9:ed:33:63: 40:30:9d:3b:02:37:04:ca:1a:fd:6c:19:53:71:d2: b7:ae:f0:5b:be:b0:a5:06:e8:dd:c9:8d:29:f6:53: a0:33:0a:1e:2c:e4:37:95:e6:33:53:87:4f:4e:9d: fd:cf:cb:d7:2f:71:94:48:6c:c5:3e:6d:71:08:a4: 4a:a7:44:b6:1c:66:8a:bf:a6:32:2e:76:7e:8c:30: dc:67:12:78:0e:a3:f5:1a:64:cb:92:14:e0:6d:40: 1d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:42:35:1E:9F:3C:F9:1E:D7:04:9F:66:FF:4E:FC:A2:15:9A:18:57 X509v3 Authority Key Identifier: keyid:08:1E:A2:70:A9:F4:B3:6B:0E:C8:96:A2:D2:14:8E:E4:E9:3E:5F:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CB6icKn0s2sOyJai0hSO5Ok-Xys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:af:63:e1:40:75:01:a0:b0:36:db:e6:18:5f:91:b7:04:50: d7:26:70:6c:e6:83:58:d7:aa:b4:4d:ec:61:1a:8c:61:28:25: e8:db:60:7b:34:2c:f7:73:74:b0:c2:9f:5b:6f:92:25:99:62: ed:a9:9b:d7:b5:34:51:52:57:22:bc:ba:83:18:c9:cb:54:b3: aa:28:0a:2f:11:8b:b0:a3:5e:c1:1a:9b:26:ef:4d:05:e1:9c: f4:f9:ee:b9:f5:0a:5e:32:4e:fc:ca:9c:58:09:6c:a1:49:91: 3c:f5:5d:c9:ca:0d:78:e8:88:29:43:1a:37:c2:c8:11:c4:dd: ec:69:1b:dc:44:d4:35:a5:bc:93:bf:c9:e9:d1:b6:2e:e3:69: 01:d3:9b:52:bc:78:c9:77:05:06:22:01:96:4a:03:d7:76:2a: b9:d5:ea:a0:07:20:6e:9f:f7:71:18:75:aa:a1:43:77:00:96: 19:1f:f1:a9:74:c8:51:f4:d3:47:bc:fc:ad:01:89:ac:2f:8e: c6:50:49:d9:e6:06:0c:49:1a:11:05:fe:7b:c8:a4:27:3b:5f: 3d:ed:d8:77:c2:4d:d1:16:8c:9a:fe:2a:11:a3:70:31:e2:1f: 01:cb:44:e9:36:12:cf:84:b5:0a:92:3a:78:b8:31:e1:bc:c6: 97:35:98:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI5MjExMTAvBgNVBAUTKDA4MUVBMjcwQTlGNEIzNkIwRUM4OTZBMkQyMTQ4RUU0 RTkzRTVGMkIwHhcNMjYxMDA1MDMwNTU4WhcNMjYxMDEyMDMwNTU4WjAYMRYwFAYD VQQDEw02YWMzMTQxNi1lMmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3e0tDEStx2rmWub3slaY+a95ZjgeBRIVy2XQmEqBWsqwq0iLhxkV+/s4v+Vu przNi/7ABxZJKwFgR4PLnu3taRP6rYO66ET00pZ+RJOoCILfSyn6aPrdHE5RTtd6 YvLe0Ha5qDKTdmdPkwXMPuysXSb+PhSWJwpu+Gs5baUkqVTH6EgjJDULeIZ30hqF fUJvAJqCTSk7TAmn0K6UtwgduLntM2NAMJ07AjcEyhr9bBlTcdK3rvBbvrClBujd yY0p9lOgMwoeLOQ3leYzU4dPTp39z8vXL3GUSGzFPm1xCKRKp0S2HGaKv6YyLnZ+ jDDcZxJ4DqP1GmTLkhTgbUAdSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP9CNR6f PPke1wSfZv9O/KIVmhhXMB8GA1UdIwQYMBaAFAgeonCp9LNrDsiWotIUjuTpPl8r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjkyMS9EREI4RTE0Qzc1 NjIxMUVFQkI4MjUyNTdDNEY5QUUwMi9DQjZpY0tuMHMyc095SmFpMGhTTzVPay1Y eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NCNmljS24wczJzT3lKYWkwaFNPNU9rLVh5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjkyMS9EREI4RTE0Qzc1NjIxMUVFQkI4MjUyNTdDNEY5QUUwMi9DQjZpY0tuMHMy c095SmFpMGhTTzVPay1YeXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIK9j4UB1AaCwNtvmGF+RtwRQ1yZwbOaDWNeqtE3sYRqMYSgl6NtgezQs93N0 sMKfW2+SJZli7amb17U0UVJXIry6gxjJy1SzqigKLxGLsKNewRqbJu9NBeGc9Pnu ufUKXjJO/MqcWAlsoUmRPPVdycoNeOiIKUMaN8LIEcTd7Gkb3ETUNaW8k7/J6dG2 LuNpAdObUrx4yXcFBiIBlkoD13YqudXqoAcgbp/3cRh1qqFDdwCWGR/xqXTIUfTT R7z8rQGJrC+OxlBJ2eYGDEkaEQX+e8ikJztfPe3Yd8JN0RaMmv4qEaNwMeIfActE 6TYSz4S1CpI6eLgx4bzGlzWYRA== -----END CERTIFICATE-----Generated at Tue Oct 6 11:34:49 2026 by rpki-client