$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft File: CZyBX8poKm4oYE_pYv0QcVgn6V0.mft (raw, json) Hash identifier: YltqKhvqZ5U1DtzNTMHFGeMYP8oQOffLqQNq8dhgvXg= Subject key identifier: C2:38:EF:24:42:9B:4A:5F:9E:65:1A:D2:CE:5F:CC:DA:A8:5D:B2:E5 Authority key identifier: 09:9C:81:5F:CA:68:2A:6E:28:60:4F:E9:62:FD:10:71:58:27:E9:5D Certificate issuer: /CN=A91DEB2E/serialNumber=099C815FCA682A6E28604FE962FD10715827E95D Certificate serial: 02DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft Manifest number: 02D1 Signing time: Tue 27 Oct 2026 01:25:39 +0000 Manifest this update: Tue 27 Oct 2026 01:25:38 +0000 Manifest next update: Tue 03 Nov 2026 01:25:38 +0000 Files and hashes: 1: CZyBX8poKm4oYE_pYv0QcVgn6V0.crl (hash: BsE9RNl3K60bwFJ49AzQz9KOmCtBzr+ck33Stsn+cyc=) 2: 3CB103648C2511EDB64DB410C4F9AE02.roa (hash: iZ4HCtJL7rID/wZnZvAzs70hw+YNw3/gczs7CGb7Bb8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.crl rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 01:25:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 733 (0x2dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEB2E, serialNumber=099C815FCA682A6E28604FE962FD10715827E95D Validity Not Before: Oct 27 01:25:38 2026 GMT Not After : Nov 3 01:25:38 2026 GMT Subject: CN=6adffd93-f09d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:84:18:e2:f7:cd:88:a0:d8:df:b1:fd:48:b8: 4b:90:a9:10:09:23:ec:a2:b0:8b:c6:49:c6:bc:41: 8e:9d:f2:27:1d:6e:bb:d2:bd:08:57:f5:4c:6b:49: c0:bb:57:1e:20:7e:c9:5a:a4:0c:28:af:97:b1:99: fc:b4:1b:71:54:d7:ee:83:96:a6:f0:d6:a7:0a:b6: ec:6b:2e:60:ad:4e:e7:15:c2:22:1b:38:92:bb:69: d9:f9:c6:0e:df:d8:00:16:31:a1:46:d7:bd:c2:5a: 5b:21:4c:b0:0b:19:d4:3a:a8:02:67:12:1e:1a:89: d0:62:c1:b9:3b:26:a1:df:c9:a9:ea:65:89:1e:9d: 0a:29:6a:aa:2e:2c:7a:74:45:10:05:4d:af:54:9b: 79:ff:5e:de:27:39:57:36:aa:53:69:cb:97:44:fd: d1:79:10:96:82:17:f5:50:ae:c9:f8:f7:70:0c:90: ab:93:22:9a:bb:0a:06:6f:19:88:e1:e0:20:1f:30: 81:69:29:a8:c9:63:4b:fb:be:0e:da:c4:65:6a:14: 78:45:bf:c4:05:e6:0c:ab:09:25:0e:30:d7:f7:5a: 08:23:fe:09:be:23:26:9e:11:c5:9a:4d:92:48:c4: 5e:81:cd:cb:a6:1e:47:69:6f:61:2e:1c:99:54:7c: ae:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:38:EF:24:42:9B:4A:5F:9E:65:1A:D2:CE:5F:CC:DA:A8:5D:B2:E5 X509v3 Authority Key Identifier: keyid:09:9C:81:5F:CA:68:2A:6E:28:60:4F:E9:62:FD:10:71:58:27:E9:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:c5:c2:86:7b:28:20:78:e4:cd:1e:a4:d9:61:ae:08:85:72: f1:60:2a:05:76:5b:74:61:c9:ab:db:71:f7:7d:12:bb:e3:1f: b2:b0:4a:ad:08:a6:1a:55:8e:33:b1:32:b7:99:f3:ea:e2:8d: fb:0f:93:2d:ab:56:0a:6a:64:a9:d2:9f:da:38:e6:d1:49:b8: 88:0f:45:47:46:76:0e:f8:45:d1:34:e0:8d:36:f4:20:b5:ec: 40:03:4c:d0:c7:5c:ae:ec:ec:9e:be:f4:f4:5d:b9:e2:46:df: af:8a:e9:3b:b6:64:a0:45:dd:05:0f:8c:16:c0:63:4d:58:f3: 89:69:b7:a8:95:9a:c3:40:78:01:98:b6:0d:d0:cc:58:69:4d: 6b:6e:60:db:5f:70:8f:65:a8:f8:15:75:ff:23:d2:3e:15:87: d0:82:ec:15:4a:35:94:06:e8:8f:81:86:ae:18:f8:b3:e3:d6: 68:d9:b4:9a:f4:74:bc:9f:b2:e9:9b:fe:bc:02:21:bc:f0:54: 1e:39:b3:8a:83:dd:75:bb:73:26:70:5f:cd:da:9f:e6:35:4c: 7c:a3:ca:28:9c:10:7f:e8:be:01:98:47:4b:3d:91:73:42:b8: 74:37:53:25:8c:cf:d0:1f:0e:b3:91:90:d6:a4:e1:10:b5:50: e6:4d:94:d8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAt0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVCMkUxMTAvBgNVBAUTKDA5OUM4MTVGQ0E2ODJBNkUyODYwNEZFOTYyRkQxMDcx NTgyN0U5NUQwHhcNMjYxMDI3MDEyNTM4WhcNMjYxMTAzMDEyNTM4WjAYMRYwFAYD VQQDEw02YWRmZmQ5My1mMDlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYQY4vfNiKDY37H9SLhLkKkQCSPsorCLxknGvEGOnfInHW670r0IV/VMa0nA u1ceIH7JWqQMKK+XsZn8tBtxVNfug5am8NanCrbsay5grU7nFcIiGziSu2nZ+cYO 39gAFjGhRte9wlpbIUywCxnUOqgCZxIeGonQYsG5Oyah38mp6mWJHp0KKWqqLix6 dEUQBU2vVJt5/17eJzlXNqpTacuXRP3ReRCWghf1UK7J+PdwDJCrkyKauwoGbxmI 4eAgHzCBaSmoyWNL+74O2sRlahR4Rb/EBeYMqwklDjDX91oII/4JviMmnhHFmk2S SMRegc3Lph5HaW9hLhyZVHyumQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMI47yRC m0pfnmUa0s5fzNqoXbLlMB8GA1UdIwQYMBaAFAmcgV/KaCpuKGBP6WL9EHFYJ+ld MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUIyRS82RkM4QkZERThD MjExMUVEQjJCMkYzMEFDNEY5QUUwMi9DWnlCWDhwb0ttNG9ZRV9wWXYwUWNWZ242 VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NaeUJYOHBvS200b1lFX3BZdjBRY1ZnbjZWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUIyRS82RkM4QkZERThDMjExMUVEQjJCMkYzMEFDNEY5QUUwMi9DWnlCWDhwb0tt NG9ZRV9wWXYwUWNWZ242VjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAs8XChnsoIHjkzR6k2WGuCIVy8WAqBXZbdGHJq9tx930Su+MfsrBKrQimGlWO M7Eyt5nz6uKN+w+TLatWCmpkqdKf2jjm0Um4iA9FR0Z2DvhF0TTgjTb0ILXsQANM 0Mdcruzsnr709F254kbfr4rpO7ZkoEXdBQ+MFsBjTVjziWm3qJWaw0B4AZi2DdDM WGlNa25g219wj2Wo+BV1/yPSPhWH0ILsFUo1lAboj4GGrhj4s+PWaNm0mvR0vJ+y 6Zv+vAIhvPBUHjmzioPddbtzJnBfzdqf5jVMfKPKKJwQf+i+AZhHSz2Rc0K4dDdT JYzP0B8Os5GQ1qThELVQ5k2U2A== -----END CERTIFICATE-----Generated at Wed Oct 28 11:46:28 2026 by rpki-client