$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft File: CNJW1CbKIXH86BfGRSP4MqNpF70.mft (raw, json) Hash identifier: 34hUp1SgjfPeIabEuIBSCATgkmxVBDgntc2yc9uceJI= Subject key identifier: 6C:92:98:D3:74:9D:CD:74:76:EB:32:8B:2E:42:E5:D0:40:58:E1:20 Authority key identifier: 08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD Certificate issuer: /CN=A91C1FCC/serialNumber=08D256D426CA2171FCE817C64523F832A36917BD Certificate serial: 0B74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft Manifest number: 0B41 Signing time: Mon 26 Oct 2026 19:17:47 +0000 Manifest this update: Mon 26 Oct 2026 19:17:46 +0000 Manifest next update: Mon 02 Nov 2026 19:17:46 +0000 Files and hashes: 1: CNJW1CbKIXH86BfGRSP4MqNpF70.crl (hash: AdePq2xa8XsQ2AMKmO4XxGyCqrP4HNqmdgCZCHtCeGA=) 2: 54098620A37B11EFAC4F8E3CC4F9AE02.roa (hash: EEToEwILYbsl8GqN1bkw26ymGXwnVFNMe/KMqvFHVTY=) 3: 41F66AE4CA3D11F1969D92815611F970.roa (hash: 9CpJWupTyTXh0UyY+flgAhOlt46sYM8wDCtKaS8zdnE=) 4: 5040F876CA3D11F1957F2AC55611F970.roa (hash: nqBzNzVUyJHUgVVQaGP5kgRZOOGhF7qxORcfqd20tbg=) 5: F15AD62031FA11EE96640F3EC4F9AE02.roa (hash: hOTfDBRJ9QfUK/rKfDPevW6q1jqnJPqcLBV4za1Ryww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 19:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2932 (0xb74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1FCC, serialNumber=08D256D426CA2171FCE817C64523F832A36917BD Validity Not Before: Oct 26 19:17:46 2026 GMT Not After : Nov 2 19:17:46 2026 GMT Subject: CN=6adfa75b-2572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:65:b3:be:c0:7b:16:bf:c7:52:2b:da:d3:f3: 49:03:57:58:81:02:28:c5:14:43:1d:08:3b:ae:b2: 83:ae:f7:22:25:41:6f:b4:05:84:9d:a9:75:21:99: 25:02:0b:2a:db:24:26:29:0b:21:64:4a:81:79:4f: 5a:dd:a0:01:44:0d:d6:2c:92:da:06:11:5c:a6:4e: 49:ea:2d:cb:73:84:a5:ba:e4:32:72:c7:0e:1f:a7: 27:32:90:aa:94:81:ea:cb:4f:58:54:c7:55:b0:b4: 46:ee:f4:f5:46:fc:b0:89:b4:35:71:72:95:1b:65: d3:e6:8a:7e:ad:91:87:b1:f6:34:ac:bf:6c:e4:7d: 10:1e:99:d3:a9:2c:8a:29:81:6f:3b:df:cc:c5:78: 51:21:7c:23:d0:19:a2:76:0d:7e:48:bd:cc:8f:7f: 5b:ee:b2:22:20:d8:e1:b5:26:d6:2d:82:8d:56:15: 8d:43:78:fa:ec:f0:cf:cb:e6:b8:b9:1e:ea:2e:25: ac:94:d8:c1:b1:6b:90:07:b6:88:17:c8:5f:d2:e0: c5:4a:4b:d7:f9:9e:49:2e:d4:1d:7f:b9:43:71:b9: 17:b5:49:d1:5a:ac:c7:7f:cd:71:84:da:4b:69:a1: e7:9e:0b:e7:28:04:74:2b:c1:74:a4:e5:d7:97:88: 84:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:92:98:D3:74:9D:CD:74:76:EB:32:8B:2E:42:E5:D0:40:58:E1:20 X509v3 Authority Key Identifier: keyid:08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:51:68:aa:fe:84:ad:30:0d:9e:e4:0b:7e:d2:fd:3b:62:3b: 1e:e2:e3:11:d5:81:e5:7b:48:e8:9a:0a:1e:d2:95:1f:21:37: fe:b1:53:0b:9d:63:39:d8:00:4c:7e:db:43:1b:2a:a1:14:27: d8:c5:83:40:be:68:ba:c1:62:b7:9c:f2:62:eb:35:b8:b3:62: 48:70:fa:67:7b:70:ef:1f:a4:3b:a4:64:19:ec:6e:62:48:27: 59:1b:ce:fd:b0:88:03:da:26:12:33:2c:e9:8d:27:eb:90:8d: 72:31:ae:52:68:e6:4b:38:d8:4f:4e:41:be:ea:13:fe:f3:18: 47:83:f3:6d:80:b2:48:7b:3b:bb:b3:3d:b6:bf:6e:c3:d0:28: fd:3a:fe:83:95:b5:61:d3:60:a2:7b:37:4e:b1:0d:19:2e:08: 06:d2:03:8a:3b:50:67:d8:5d:31:96:5e:83:f2:32:82:0d:7a: 47:9b:55:52:5e:dc:51:1e:78:f0:4f:66:38:fd:c5:e6:97:a8: 20:f8:03:ce:56:04:32:2e:ea:a9:7d:6b:df:06:2e:9b:c0:be: e0:0d:dc:78:d4:8c:cf:fc:07:c3:14:02:3b:fd:d4:fa:05:5f: d2:4d:9c:3f:5b:49:fd:4e:9f:3e:7c:79:14:a4:91:db:17:14: df:a5:9e:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC3QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFGQ0MxMTAvBgNVBAUTKDA4RDI1NkQ0MjZDQTIxNzFGQ0U4MTdDNjQ1MjNGODMy QTM2OTE3QkQwHhcNMjYxMDI2MTkxNzQ2WhcNMjYxMTAyMTkxNzQ2WjAYMRYwFAYD VQQDEw02YWRmYTc1Yi0yNTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0mWzvsB7Fr/HUiva0/NJA1dYgQIoxRRDHQg7rrKDrvciJUFvtAWEnal1IZkl Agsq2yQmKQshZEqBeU9a3aABRA3WLJLaBhFcpk5J6i3Lc4SluuQycscOH6cnMpCq lIHqy09YVMdVsLRG7vT1RvywibQ1cXKVG2XT5op+rZGHsfY0rL9s5H0QHpnTqSyK KYFvO9/MxXhRIXwj0Bmidg1+SL3Mj39b7rIiINjhtSbWLYKNVhWNQ3j67PDPy+a4 uR7qLiWslNjBsWuQB7aIF8hf0uDFSkvX+Z5JLtQdf7lDcbkXtUnRWqzHf81xhNpL aaHnngvnKAR0K8F0pOXXl4iEoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGySmNN0 nc10dusyiy5C5dBAWOEgMB8GA1UdIwQYMBaAFAjSVtQmyiFx/OgXxkUj+DKjaRe9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUZDQy9DREJDNTk4Njcz MDkxMUVBQTg4MjAwMzBDNEY5QUUwMi9DTkpXMUNiS0lYSDg2QmZHUlNQNE1xTnBG NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NOSlcxQ2JLSVhIODZCZkdSU1A0TXFOcEY3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUZDQy9DREJDNTk4NjczMDkxMUVBQTg4MjAwMzBDNEY5QUUwMi9DTkpXMUNiS0lY SDg2QmZHUlNQNE1xTnBGNzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHFFoqv6ErTANnuQLftL9O2I7HuLjEdWB5XtI6JoKHtKVHyE3/rFTC51jOdgA TH7bQxsqoRQn2MWDQL5ousFit5zyYus1uLNiSHD6Z3tw7x+kO6RkGexuYkgnWRvO /bCIA9omEjMs6Y0n65CNcjGuUmjmSzjYT05BvuoT/vMYR4PzbYCySHs7u7M9tr9u w9Ao/Tr+g5W1YdNgons3TrENGS4IBtIDijtQZ9hdMZZeg/Iygg16R5tVUl7cUR54 8E9mOP3F5peoIPgDzlYEMi7qqX1r3wYum8C+4A3ceNSMz/wHwxQCO/3U+gVf0k2c P1tJ/U6fPnx5FKSR2xcU36WeSw== -----END CERTIFICATE-----Generated at Wed Oct 28 14:53:56 2026 by rpki-client