$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft File: cz1KHp8pnM0_jnJKteer9Ci7GV0.mft (raw, json) Hash identifier: R1WQ1X446xAgJxBo2OqP0BSvNDH0kYLJXuWgxFE0NwE= Subject key identifier: 67:0A:07:B6:F1:84:73:56:CC:D7:9B:8B:D4:52:99:8D:FA:4C:0D:02 Authority key identifier: 73:3D:4A:1E:9F:29:9C:CD:3F:8E:72:4A:B5:E7:AB:F4:28:BB:19:5D Certificate issuer: /CN=A91DE500/serialNumber=733D4A1E9F299CCD3F8E724AB5E7ABF428BB195D Certificate serial: 0209 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft Manifest number: 0203 Signing time: Mon 19 Oct 2026 03:50:18 +0000 Manifest this update: Mon 19 Oct 2026 03:50:17 +0000 Manifest next update: Mon 26 Oct 2026 03:50:17 +0000 Files and hashes: 1: cz1KHp8pnM0_jnJKteer9Ci7GV0.crl (hash: QW40Do2NiKme7N+w02RB/N+02mvMyd3Mr0WDTDKfDuo=) 2: D035B7BE5BC711F097260D5EC4F9AE02.roa (hash: 4MonzweCLEnl+TnK4Sp/6IiK94a2qiwQ1O3fFdo89mM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.crl rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 03:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 521 (0x209) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE500, serialNumber=733D4A1E9F299CCD3F8E724AB5E7ABF428BB195D Validity Not Before: Oct 19 03:50:17 2026 GMT Not After : Oct 26 03:50:17 2026 GMT Subject: CN=6ad5937a-caf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f8:80:b5:e2:1e:24:82:e2:29:d6:f8:b5:c4: 3e:0f:55:5a:28:05:58:7d:1d:94:87:24:a3:e7:32: cc:db:75:12:0c:be:39:a4:6e:03:a8:fc:b9:75:cd: 4b:90:2a:5c:c3:ad:7b:03:26:e5:0d:7e:75:2c:e8: 02:ce:b0:ba:b5:bc:c3:ad:5a:e4:52:b3:63:3b:6d: 50:36:b1:fe:d7:3c:4f:e2:6a:4f:83:92:16:c6:3c: de:d8:62:fa:67:7a:8c:a8:35:72:4c:a9:ac:00:07: bd:8e:85:d5:da:24:b4:89:8f:29:20:1c:3d:6a:c3: de:7f:f7:78:99:34:d1:4a:6a:64:b0:51:37:13:91: 41:57:aa:b5:d5:4c:89:bd:b1:3a:9d:76:18:a2:55: d0:87:f9:3c:c4:48:57:86:6c:1b:4d:2c:96:ed:15: 84:7f:a8:31:55:20:3c:6b:4d:3d:b4:45:22:7f:04: 26:1a:60:11:86:99:fc:56:58:69:08:78:29:5f:40: 6f:2d:ad:11:5c:ae:c5:ab:ec:1c:d7:eb:62:b7:85: 92:f7:ca:51:71:fd:1a:cc:8c:1f:e3:08:79:e6:b8: cc:33:0d:5e:93:3b:3b:33:c7:0d:e9:be:01:57:02: d9:d0:d4:1d:e8:be:66:0a:87:30:6e:d1:02:87:61: 80:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:0A:07:B6:F1:84:73:56:CC:D7:9B:8B:D4:52:99:8D:FA:4C:0D:02 X509v3 Authority Key Identifier: keyid:73:3D:4A:1E:9F:29:9C:CD:3F:8E:72:4A:B5:E7:AB:F4:28:BB:19:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:59:a6:f8:4e:c8:b1:f0:7c:de:9c:9f:fe:e4:70:1a:c6:9f: b0:ef:af:43:2e:a7:40:b3:df:84:fe:b2:96:20:2e:7b:c0:9e: a3:8a:52:91:3a:83:51:29:b1:bc:ad:66:0f:db:34:12:af:38: 04:dc:3e:87:38:0f:3c:05:d0:9f:69:16:f1:64:2b:82:74:26: fb:cd:bf:b7:41:46:8b:15:38:3a:33:b8:61:81:d1:aa:c3:47: f9:1f:a6:a1:a6:ed:68:b0:bf:f8:b4:c9:f1:c3:06:f2:1d:ce: 89:a1:58:7e:7c:dc:f3:52:d6:9b:66:40:b7:28:fc:44:a4:83: 02:a1:14:a3:81:ce:86:5f:59:2a:6f:b2:1b:67:a9:ae:36:0e: 8f:9a:bf:86:ea:5f:ae:ee:af:91:e3:1f:82:e7:4f:0e:52:76: 4b:f1:c2:d4:90:23:97:1f:f7:81:92:c6:af:cb:a8:10:88:43: 05:75:7d:ec:63:d3:64:85:39:e6:67:df:d0:e0:97:dd:56:13: 12:3a:e4:09:38:0d:56:b0:bb:9a:de:e8:53:0e:a8:96:a2:dd: f3:a1:0c:9d:d9:72:55:61:28:70:2b:4e:16:b4:5e:ed:5d:25: 39:5c:e1:61:48:af:42:c2:c1:9a:8f:b9:5b:07:15:fd:ff:f3: e1:59:77:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU1MDAxMTAvBgNVBAUTKDczM0Q0QTFFOUYyOTlDQ0QzRjhFNzI0QUI1RTdBQkY0 MjhCQjE5NUQwHhcNMjYxMDE5MDM1MDE3WhcNMjYxMDI2MDM1MDE3WjAYMRYwFAYD VQQDEw02YWQ1OTM3YS1jYWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoviAteIeJILiKdb4tcQ+D1VaKAVYfR2UhySj5zLM23USDL45pG4DqPy5dc1L kCpcw617AyblDX51LOgCzrC6tbzDrVrkUrNjO21QNrH+1zxP4mpPg5IWxjze2GL6 Z3qMqDVyTKmsAAe9joXV2iS0iY8pIBw9asPef/d4mTTRSmpksFE3E5FBV6q11UyJ vbE6nXYYolXQh/k8xEhXhmwbTSyW7RWEf6gxVSA8a009tEUifwQmGmARhpn8Vlhp CHgpX0BvLa0RXK7Fq+wc1+tit4WS98pRcf0azIwf4wh55rjMMw1ekzs7M8cN6b4B VwLZ0NQd6L5mCocwbtECh2GAyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGcKB7bx hHNWzNebi9RSmY36TA0CMB8GA1UdIwQYMBaAFHM9Sh6fKZzNP45ySrXnq/Qouxld MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTUwMC80OUU2RkU0NkM3 MkQxMUVFOUM3QzM1MURDNEY5QUUwMi9jejFLSHA4cG5NMF9qbkpLdGVlcjlDaTdH VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N6MUtIcDhwbk0wX2puSkt0ZWVyOUNpN0dWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTUwMC80OUU2RkU0NkM3MkQxMUVFOUM3QzM1MURDNEY5QUUwMi9jejFLSHA4cG5N MF9qbkpLdGVlcjlDaTdHVjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB1mm+E7IsfB83pyf/uRwGsafsO+vQy6nQLPfhP6yliAue8Ceo4pSkTqDUSmx vK1mD9s0Eq84BNw+hzgPPAXQn2kW8WQrgnQm+82/t0FGixU4OjO4YYHRqsNH+R+m oabtaLC/+LTJ8cMG8h3OiaFYfnzc81LWm2ZAtyj8RKSDAqEUo4HOhl9ZKm+yG2ep rjYOj5q/hupfru6vkeMfgudPDlJ2S/HC1JAjlx/3gZLGr8uoEIhDBXV97GPTZIU5 5mff0OCX3VYTEjrkCTgNVrC7mt7oUw6olqLd86EMndlyVWEocCtOFrRe7V0lOVzh YUivQsLBmo+5WwcV/f/z4Vl30A== -----END CERTIFICATE-----Generated at Tue Oct 20 06:49:34 2026 by rpki-client