$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft File: cPEzmWaoGrwgfjvuM3CR2fLzydc.mft (raw, json) Hash identifier: KF2M46GuhRlYbCalggQTi16RIVJBeb/KYX8MP71yB6o= Subject key identifier: AB:77:01:7E:06:91:3A:23:EB:40:34:0F:E3:21:6C:FE:E5:E5:57:9A Authority key identifier: 70:F1:33:99:66:A8:1A:BC:20:7E:3B:EE:33:70:91:D9:F2:F3:C9:D7 Certificate issuer: /CN=A91C9324/serialNumber=70F1339966A81ABC207E3BEE337091D9F2F3C9D7 Certificate serial: 028F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft Manifest number: 028F Signing time: Mon 19 Oct 2026 00:27:41 +0000 Manifest this update: Mon 19 Oct 2026 00:27:41 +0000 Manifest next update: Mon 26 Oct 2026 00:27:41 +0000 Files and hashes: 1: cPEzmWaoGrwgfjvuM3CR2fLzydc.crl (hash: qvrUp6VYNZXVqXaMTzjIytHYVPlxF92A/OZS/xGczkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.crl rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 00:27:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 655 (0x28f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9324, serialNumber=70F1339966A81ABC207E3BEE337091D9F2F3C9D7 Validity Not Before: Oct 19 00:27:41 2026 GMT Not After : Oct 26 00:27:41 2026 GMT Subject: CN=6ad563fd-6bd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7f:73:bf:2c:32:07:84:9c:34:62:af:4e:81: c0:29:dd:5d:02:f6:e7:c7:a1:05:c1:1b:5f:f6:fd: 10:ab:b5:21:00:a7:70:1e:04:fd:39:bd:ec:2a:29: 55:fa:22:a4:c4:6e:e1:2e:16:b7:39:78:f8:e4:3e: 79:13:3d:02:9f:35:8c:29:ab:87:de:71:e5:b6:41: f1:a0:8a:6a:54:02:51:9b:fe:38:a6:d1:c0:b5:38: 1d:15:17:e4:6d:66:0e:de:f6:eb:82:d5:39:1b:70: 6f:d7:71:cd:5e:ff:cc:64:82:eb:a5:8f:e1:0f:e2: fa:0d:7a:a1:96:a1:c1:dd:d9:dd:91:d2:0d:9c:0d: 37:b8:ec:79:9b:cd:2f:54:31:04:99:1b:b4:7f:03: 6a:89:d1:ec:51:a9:9c:9b:3f:b0:46:10:ef:65:a4: cf:22:c6:5c:3d:d0:7f:a6:a9:22:18:5f:88:9a:ff: e0:e1:e4:95:90:6e:fe:47:2f:4a:38:d3:14:6f:1f: c3:1b:72:87:a5:12:ea:ac:9d:26:60:4f:b3:74:43: f3:45:39:35:8d:b0:5b:c8:51:9d:88:ed:53:1c:8b: 36:51:ff:af:0a:d4:a9:08:b3:42:02:16:40:1a:99: 0a:0b:13:f2:cf:a6:ff:4a:f0:ad:de:d2:a4:8e:f6: 2c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:77:01:7E:06:91:3A:23:EB:40:34:0F:E3:21:6C:FE:E5:E5:57:9A X509v3 Authority Key Identifier: keyid:70:F1:33:99:66:A8:1A:BC:20:7E:3B:EE:33:70:91:D9:F2:F3:C9:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:d4:7f:a1:46:a3:97:e2:12:38:2b:d7:5e:6e:c6:1a:6e:ff: d5:80:b9:04:66:38:73:0e:78:0f:8e:3e:ad:af:e2:ae:e6:d4: aa:de:c3:fa:8c:ee:7f:f1:30:9b:01:5a:80:06:a3:90:7c:b5: 65:5c:d4:d3:7d:f9:6b:e5:90:cc:c9:a3:90:3b:30:5b:4e:22: 6c:2e:b2:54:52:0e:55:9c:30:8b:f8:aa:75:49:30:47:4c:8c: f3:71:57:2e:39:16:74:1b:0b:b7:c6:a1:7b:92:ed:69:ca:79: 77:25:78:d6:6d:b2:98:4e:e3:e5:bd:e5:59:c7:7c:10:76:24: 42:90:d5:42:17:01:28:6a:f5:51:d2:12:a2:e7:fd:dc:94:45: b3:37:ef:83:22:92:8e:9a:2b:36:e5:63:15:8a:30:cd:91:b1: 44:60:1d:55:b5:14:29:7b:64:73:5f:89:6a:41:f6:f3:69:b6: c1:0b:04:57:19:7b:b6:6c:10:18:79:7e:0a:96:c0:5d:b6:17: 7b:ab:62:11:bf:32:09:84:0e:e4:3e:6a:65:ba:cd:58:11:d2: 8a:1b:3e:d3:f2:7d:1c:7a:11:8b:63:d0:55:4c:d5:67:5b:06: ea:85:11:e8:67:be:7e:51:4b:30:51:16:b0:5d:0a:75:1f:39: d2:5f:ed:2f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzMjQxMTAvBgNVBAUTKDcwRjEzMzk5NjZBODFBQkMyMDdFM0JFRTMzNzA5MUQ5 RjJGM0M5RDcwHhcNMjYxMDE5MDAyNzQxWhcNMjYxMDI2MDAyNzQxWjAYMRYwFAYD VQQDEw02YWQ1NjNmZC02YmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArH9zvywyB4ScNGKvToHAKd1dAvbnx6EFwRtf9v0Qq7UhAKdwHgT9Ob3sKilV +iKkxG7hLha3OXj45D55Ez0CnzWMKauH3nHltkHxoIpqVAJRm/44ptHAtTgdFRfk bWYO3vbrgtU5G3Bv13HNXv/MZILrpY/hD+L6DXqhlqHB3dndkdINnA03uOx5m80v VDEEmRu0fwNqidHsUamcmz+wRhDvZaTPIsZcPdB/pqkiGF+Imv/g4eSVkG7+Ry9K ONMUbx/DG3KHpRLqrJ0mYE+zdEPzRTk1jbBbyFGdiO1THIs2Uf+vCtSpCLNCAhZA GpkKCxPyz6b/SvCt3tKkjvYs1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKt3AX4G kToj60A0D+MhbP7l5VeaMB8GA1UdIwQYMBaAFHDxM5lmqBq8IH477jNwkdny88nX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTMyNC8yMkJGOEQzMkUw MkYxMUVEOTUxNTNEMzFDNEY5QUUwMi9jUEV6bVdhb0dyd2dmanZ1TTNDUjJmTHp5 ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NQRXptV2FvR3J3Z2ZqdnVNM0NSMmZMenlkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTMyNC8yMkJGOEQzMkUwMkYxMUVEOTUxNTNEMzFDNEY5QUUwMi9jUEV6bVdhb0dy d2dmanZ1TTNDUjJmTHp5ZGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX9R/oUajl+ISOCvXXm7GGm7/1YC5BGY4cw54D44+ra/irubUqt7D+ozuf/Ew mwFagAajkHy1ZVzU0335a+WQzMmjkDswW04ibC6yVFIOVZwwi/iqdUkwR0yM83FX LjkWdBsLt8ahe5Ltacp5dyV41m2ymE7j5b3lWcd8EHYkQpDVQhcBKGr1UdISouf9 3JRFszfvgyKSjporNuVjFYowzZGxRGAdVbUUKXtkc1+JakH282m2wQsEVxl7tmwQ GHl+CpbAXbYXe6tiEb8yCYQO5D5qZbrNWBHSihs+0/J9HHoRi2PQVUzVZ1sG6oUR 6Ge+flFLMFEWsF0KdR850l/tLw== -----END CERTIFICATE-----Generated at Mon Oct 19 04:15:45 2026 by rpki-client