$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft File: CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft (raw, json) Hash identifier: JXW2Gd4QWtGRbjPInwGHER44ey/0uYPzHeiUXx3vL98= Subject key identifier: CA:40:FF:06:71:34:53:1B:F7:DC:2C:E6:4E:FB:84:F2:3F:B3:03:D3 Authority key identifier: 0A:A5:DE:29:26:5A:08:E2:7A:58:1D:89:44:65:BD:CD:B7:37:09:BB Certificate issuer: /CN=A91DC017/serialNumber=0AA5DE29265A08E27A581D894465BDCDB73709BB Certificate serial: 02E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft Manifest number: 02CC Signing time: Mon 05 Oct 2026 01:39:50 +0000 Manifest this update: Mon 05 Oct 2026 01:39:50 +0000 Manifest next update: Mon 12 Oct 2026 01:39:50 +0000 Files and hashes: 1: CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl (hash: xLrrUDL+i9yMrUV1M7ePcwlBbW+cn9b2coZXG8RDtRg=) 2: C0C268B8441C11EF9E110F1EC4F9AE02.roa (hash: v5FOCrkT7bwg0TVjJC2RnsG6lxQLJwnHry99/PwnEBQ=) 3: 1B8DE01C641911EF83FFBF3CC4F9AE02.roa (hash: xDjn+cobUE2agLkdimK21R3Sdz0e7azaiAPMZg9qQro=) 4: 08A1C0B8DC5011EF9C212C5CC4F9AE02.roa (hash: 6sjpy6GriqELAPGgjJdFUt57xHCHCLQzT9kEpI0w6Mg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 01:39:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 745 (0x2e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC017, serialNumber=0AA5DE29265A08E27A581D894465BDCDB73709BB Validity Not Before: Oct 5 01:39:50 2026 GMT Not After : Oct 12 01:39:50 2026 GMT Subject: CN=6ac2ffe6-e9a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8f:5d:fb:ee:d1:c1:e3:66:d8:d6:04:b2:b6: 41:21:c9:97:9f:88:fa:40:55:ce:66:b7:64:5a:08: 79:c8:25:a7:13:03:18:e9:5b:38:c3:90:a1:6a:0c: 5f:e1:d3:7e:9d:ab:66:fe:a4:11:5b:f7:20:65:98: cc:15:de:55:b7:9b:d6:1c:e7:11:11:f6:7a:b1:d8: 5e:13:47:67:45:74:61:7e:69:c0:6d:1f:0c:87:2b: e9:cc:2d:22:74:21:3f:e0:82:0e:e6:c0:6e:0a:15: 8a:48:e6:ee:bf:03:0a:e4:39:cd:f7:9a:94:32:f4: 7d:d9:2e:6f:18:7b:5f:dc:a4:c5:ca:0c:91:d6:e9: 02:98:f0:b8:58:6d:8c:11:48:64:f8:1d:b3:75:ac: 4a:be:85:5e:e8:81:c9:0d:cc:09:7b:b4:71:4a:5d: e2:cf:47:bc:67:93:bf:70:0f:5c:6b:03:b0:b1:21: 98:5b:84:17:69:a5:1a:b7:83:ec:41:0b:56:5b:a4: a4:ff:e4:b9:91:96:af:b2:87:ba:55:98:c2:c6:90: 90:36:7c:f8:15:49:e0:51:a9:1b:fb:df:e3:fc:ec: 5b:3e:3e:95:8d:80:c9:e8:3a:05:3d:a2:00:d7:e1: 30:9d:6f:7c:f1:0d:87:a9:43:cf:9f:d0:c2:29:59: 6b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:40:FF:06:71:34:53:1B:F7:DC:2C:E6:4E:FB:84:F2:3F:B3:03:D3 X509v3 Authority Key Identifier: keyid:0A:A5:DE:29:26:5A:08:E2:7A:58:1D:89:44:65:BD:CD:B7:37:09:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:ad:1d:e9:33:7b:35:9b:65:c1:2a:cc:23:37:34:77:3c:ea: e2:f9:12:9e:88:0d:d9:ae:96:33:cc:d3:9c:24:7a:73:b9:c5: 34:b5:49:d1:8b:12:62:c8:94:fd:53:dd:3f:20:2b:8f:06:b0: 9b:5c:e8:02:6a:e5:4b:da:69:a5:17:d5:e1:47:d8:85:e8:93: cf:78:0e:4c:0d:64:43:e1:f9:89:b6:52:b3:b1:38:2e:f0:4b: 1d:74:6b:aa:5d:97:db:99:1f:40:0e:f7:86:b8:e6:73:62:af: 5c:ef:0e:c2:52:4b:19:a8:17:c4:09:55:b4:23:20:ed:21:aa: 2b:3c:3e:18:1a:b0:8a:a4:22:7d:94:29:45:39:4b:0a:9e:3e: 3b:7a:fc:4a:6d:b1:68:6c:48:9d:9f:70:84:04:20:fe:7b:98: 91:99:7c:78:f6:5d:3a:49:e7:bf:49:45:af:74:47:ec:a8:d1: 56:25:c8:ce:75:9c:ae:9d:00:ba:b9:bd:4f:cc:51:e9:26:cf: a2:7c:80:5c:c0:cd:4e:5b:72:6c:c8:c8:cd:2c:a0:55:62:9a: 6f:af:53:55:7f:af:ed:70:6f:c4:47:a4:01:ee:56:14:a8:c3: b1:cb:e6:4e:f2:34:f5:d4:96:8f:4e:81:ac:64:c7:2d:57:a5: 7c:8d:ca:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAukwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwMTcxMTAvBgNVBAUTKDBBQTVERTI5MjY1QTA4RTI3QTU4MUQ4OTQ0NjVCRENE QjczNzA5QkIwHhcNMjYxMDA1MDEzOTUwWhcNMjYxMDEyMDEzOTUwWjAYMRYwFAYD VQQDEw02YWMyZmZlNi1lOWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp49d++7RweNm2NYEsrZBIcmXn4j6QFXOZrdkWgh5yCWnEwMY6Vs4w5Chagxf 4dN+natm/qQRW/cgZZjMFd5Vt5vWHOcREfZ6sdheE0dnRXRhfmnAbR8MhyvpzC0i dCE/4IIO5sBuChWKSObuvwMK5DnN95qUMvR92S5vGHtf3KTFygyR1ukCmPC4WG2M EUhk+B2zdaxKvoVe6IHJDcwJe7RxSl3iz0e8Z5O/cA9cawOwsSGYW4QXaaUat4Ps QQtWW6Sk/+S5kZavsoe6VZjCxpCQNnz4FUngUakb+9/j/OxbPj6VjYDJ6DoFPaIA 1+EwnW988Q2HqUPPn9DCKVlr8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMpA/wZx NFMb99ws5k77hPI/swPTMB8GA1UdIwQYMBaAFAql3ikmWgjielgdiURlvc23Nwm7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzAxNy8xMDVBQzhGQzkw QzMxMUVEQkExRENDMjNDNEY5QUUwMi9DcVhlS1NaYUNPSjZXQjJKUkdXOXpiYzND YnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NxWGVLU1phQ09KNldCMkpSR1c5emJjM0Nicy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzAxNy8xMDVBQzhGQzkwQzMxMUVEQkExRENDMjNDNEY5QUUwMi9DcVhlS1NaYUNP SjZXQjJKUkdXOXpiYzNDYnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZq0d6TN7NZtlwSrMIzc0dzzq4vkSnogN2a6WM8zTnCR6c7nFNLVJ0YsSYsiU /VPdPyArjwawm1zoAmrlS9pppRfV4UfYheiTz3gOTA1kQ+H5ibZSs7E4LvBLHXRr ql2X25kfQA73hrjmc2KvXO8OwlJLGagXxAlVtCMg7SGqKzw+GBqwiqQifZQpRTlL Cp4+O3r8Sm2xaGxInZ9whAQg/nuYkZl8ePZdOknnv0lFr3RH7KjRViXIznWcrp0A urm9T8xR6SbPonyAXMDNTltybMjIzSygVWKab69TVX+v7XBvxEekAe5WFKjDscvm TvI09dSWj06BrGTHLVelfI3KpQ== -----END CERTIFICATE-----Generated at Tue Oct 6 18:45:43 2026 by rpki-client