$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E60BE/9A009132AB3A11F18367D5166D11F970/CQyLgW7CLSTWcV6m09s0cv3SkY0.mft File: CQyLgW7CLSTWcV6m09s0cv3SkY0.mft (raw, json) Hash identifier: IhEtfhcKxT+Mc1lEr7qgY7yXak0gy/mms08ClPmii/I= Subject key identifier: B6:DF:BA:16:8F:0E:6F:FD:5A:6E:0E:DB:CD:80:46:36:DB:D7:4F:71 Authority key identifier: 09:0C:8B:81:6E:C2:2D:24:D6:71:5E:A6:D3:DB:34:72:FD:D2:91:8D Certificate issuer: /CN=A91E60BE/serialNumber=090C8B816EC22D24D6715EA6D3DB3472FDD2918D Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CQyLgW7CLSTWcV6m09s0cv3SkY0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E60BE/9A009132AB3A11F18367D5166D11F970/CQyLgW7CLSTWcV6m09s0cv3SkY0.mft Manifest number: 0E Signing time: Sun 27 Sep 2026 09:45:47 +0000 Manifest this update: Sun 27 Sep 2026 09:45:47 +0000 Manifest next update: Sun 04 Oct 2026 09:45:47 +0000 Files and hashes: 1: CQyLgW7CLSTWcV6m09s0cv3SkY0.crl (hash: 2ju8RqKB2RF+OUJhLUyGO56wM9nFa65MhZGUgy47XT4=) 2: mU--buUUTmUNCuDGU6LmNbyW7jY.asa (hash: R1QnryZE+6vurfUuE0WUq4spgNvCBH4X3l8NtzsEP1g=) 3: 4-oiypFfIpguVhrn4YIqmnwHJho.asa (hash: nNsZolbMm357b3YPMufDx88k9OIE5utNMxj3ie7geC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E60BE/9A009132AB3A11F18367D5166D11F970/CQyLgW7CLSTWcV6m09s0cv3SkY0.crl rsync://rpki.apnic.net/member_repository/A91E60BE/9A009132AB3A11F18367D5166D11F970/CQyLgW7CLSTWcV6m09s0cv3SkY0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CQyLgW7CLSTWcV6m09s0cv3SkY0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 09:45:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E60BE, serialNumber=090C8B816EC22D24D6715EA6D3DB3472FDD2918D Validity Not Before: Sep 27 09:45:47 2026 GMT Not After : Oct 4 09:45:47 2026 GMT Subject: CN=6ab8e5cb-6ecf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f7:74:1d:07:ee:7e:6a:fb:e3:0f:03:af:04: cb:8f:1e:d5:2f:7c:7c:b3:b2:7b:86:92:73:e9:80: d6:79:74:fa:3d:55:3a:48:51:f2:f8:98:34:e2:9f: ef:7c:d8:a6:df:ac:49:95:85:90:a0:a4:a9:ca:14: 00:d8:13:79:44:ec:4e:b2:a9:1e:12:89:b5:bd:47: 66:cb:c7:91:d3:ca:8e:73:25:2d:0c:0b:a4:60:07: 11:2b:e0:65:da:8f:fb:95:60:06:a4:d6:e4:82:47: 99:b7:07:9f:6f:30:e9:44:7b:1b:1a:70:70:8b:2b: 17:c0:8e:30:8b:79:6f:f3:61:b7:f8:c9:fb:77:48: d5:73:74:98:6d:ba:91:4d:af:6e:5d:2b:73:07:38: a8:59:8b:aa:e5:e5:c7:34:a5:8c:42:24:df:c7:7b: 39:45:14:a3:96:ec:32:41:87:84:0b:fd:06:d3:df: 16:d7:a0:f2:68:6f:a9:9c:02:69:71:05:fe:8f:a4: 47:fd:d9:63:b5:c0:9a:f3:76:7b:b0:3e:1c:31:91: 17:d2:44:d7:17:52:b0:d2:7d:83:f0:6a:08:69:69: 82:eb:02:b7:1d:a0:f4:6d:c4:50:a1:cc:97:11:4c: 59:bd:1d:c6:b7:62:0e:6f:43:22:f5:54:82:4c:9a: 9c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:DF:BA:16:8F:0E:6F:FD:5A:6E:0E:DB:CD:80:46:36:DB:D7:4F:71 X509v3 Authority Key Identifier: keyid:09:0C:8B:81:6E:C2:2D:24:D6:71:5E:A6:D3:DB:34:72:FD:D2:91:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E60BE/9A009132AB3A11F18367D5166D11F970/CQyLgW7CLSTWcV6m09s0cv3SkY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CQyLgW7CLSTWcV6m09s0cv3SkY0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E60BE/9A009132AB3A11F18367D5166D11F970/CQyLgW7CLSTWcV6m09s0cv3SkY0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:b4:18:e7:6b:1b:d4:6a:60:ea:9c:36:26:59:61:a2:45:db: 80:23:08:93:98:f9:64:56:24:b4:96:96:ad:e9:90:64:f8:31: 06:3e:79:1c:0f:4e:05:6e:87:7a:1e:7e:e1:44:2c:0b:c1:e1: 67:21:12:48:52:f9:a4:df:9b:17:3d:48:07:e6:5d:cd:81:e7: 5c:99:fd:3a:57:e6:29:47:96:b6:7c:33:49:f4:7f:c9:e6:0f: e5:b0:ff:73:b3:4b:d8:44:79:b1:27:4d:1c:94:55:b7:f4:93: 5a:45:b1:d2:71:fe:35:d0:d2:2d:98:7e:98:b4:f1:5c:b5:af: 72:87:03:6a:b6:71:e4:3d:5f:69:66:54:75:97:eb:3d:9c:b0: b4:c1:20:35:63:0d:53:d1:96:c0:87:60:98:55:13:97:2a:ea: c9:55:b0:9f:23:12:7b:16:90:ba:5d:f0:41:7f:d2:bf:88:e2: 8a:4c:73:40:3b:d8:46:68:06:a7:e6:c1:eb:12:9d:26:cc:03: 52:bf:f6:b5:fe:7b:5a:cd:90:6f:4d:a3:48:b9:94:b4:8b:05: 40:75:9c:31:dd:f9:01:9a:c8:88:c2:a0:57:3b:79:db:42:13: 28:f4:9e:1f:3a:0e:62:3b:2e:08:85:4b:f9:88:46:bc:14:c9: fb:6e:70:97 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NjBCRTExMC8GA1UEBRMoMDkwQzhCODE2RUMyMkQyNEQ2NzE1RUE2RDNEQjM0NzJG REQyOTE4RDAeFw0yNjA5MjcwOTQ1NDdaFw0yNjEwMDQwOTQ1NDdaMBgxFjAUBgNV BAMTDTZhYjhlNWNiLTZlY2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCi93QdB+5+avvjDwOvBMuPHtUvfHyzsnuGknPpgNZ5dPo9VTpIUfL4mDTin+98 2KbfrEmVhZCgpKnKFADYE3lE7E6yqR4SibW9R2bLx5HTyo5zJS0MC6RgBxEr4GXa j/uVYAak1uSCR5m3B59vMOlEexsacHCLKxfAjjCLeW/zYbf4yft3SNVzdJhtupFN r25dK3MHOKhZi6rl5cc0pYxCJN/HezlFFKOW7DJBh4QL/QbT3xbXoPJob6mcAmlx Bf6PpEf92WO1wJrzdnuwPhwxkRfSRNcXUrDSfYPwaghpaYLrArcdoPRtxFChzJcR TFm9Hca3Yg5vQyL1VIJMmpwbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUtt+6Fo8O b/1abg7bzYBGNtvXT3EwHwYDVR0jBBgwFoAUCQyLgW7CLSTWcV6m09s0cv3SkY0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2MEJFLzlBMDA5MTMyQUIz QTExRjE4MzY3RDUxNjZEMTFGOTcwL0NReUxnVzdDTFNUV2NWNm0wOXMwY3YzU2tZ MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ1F5TGdXN0NMU1RXY1Y2bTA5czBjdjNTa1kwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2 MEJFLzlBMDA5MTMyQUIzQTExRjE4MzY3RDUxNjZEMTFGOTcwL0NReUxnVzdDTFNU V2NWNm0wOXMwY3YzU2tZMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAntBjnaxvUamDqnDYmWWGiRduAIwiTmPlkViS0lpat6ZBk+DEGPnkcD04Fbod6 Hn7hRCwLweFnIRJIUvmk35sXPUgH5l3Ngedcmf06V+YpR5a2fDNJ9H/J5g/lsP9z s0vYRHmxJ00clFW39JNaRbHScf410NItmH6YtPFcta9yhwNqtnHkPV9pZlR1l+s9 nLC0wSA1Yw1T0ZbAh2CYVROXKurJVbCfIxJ7FpC6XfBBf9K/iOKKTHNAO9hGaAan 5sHrEp0mzANSv/a1/ntazZBvTaNIuZS0iwVAdZwx3fkBmsiIwqBXO3nbQhMo9J4f Og5iOy4IhUv5iEa8FMn7bnCX -----END CERTIFICATE-----Generated at Mon Sep 28 01:48:29 2026 by rpki-client