$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/CUoNzYAqBb91c_96buCnqXIFUNE.mft File: CUoNzYAqBb91c_96buCnqXIFUNE.mft (raw, json) Hash identifier: YvjDpiue+MLjyOmco2JfUQ3pEOj7fEwJHpAYJp4wVBU= Subject key identifier: 14:6C:7D:C3:8E:3F:5D:9F:7D:AD:34:90:ED:E5:81:1C:F7:84:0B:DD Authority key identifier: 09:4A:0D:CD:80:2A:05:BF:75:73:FF:7A:6E:E0:A7:A9:72:05:50:D1 Certificate issuer: /CN=A91EC93F/serialNumber=094A0DCD802A05BF7573FF7A6EE0A7A9720550D1 Certificate serial: 028D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUoNzYAqBb91c_96buCnqXIFUNE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/CUoNzYAqBb91c_96buCnqXIFUNE.mft Manifest number: 0288 Signing time: Sat 03 Oct 2026 02:25:17 +0000 Manifest this update: Sat 03 Oct 2026 02:25:16 +0000 Manifest next update: Sat 10 Oct 2026 02:25:16 +0000 Files and hashes: 1: CUoNzYAqBb91c_96buCnqXIFUNE.crl (hash: tpYBVceCThl2tn3TGeRI/+A3kpkhcDrXGSpZOt7UPd8=) 2: 5BA557A6DEB011EDB7B0C04EC4F9AE02.roa (hash: 8cUM0au80MU9Tjqjfps+vVqGEEJxxFt3AWIioxEjBfg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/CUoNzYAqBb91c_96buCnqXIFUNE.crl rsync://rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/CUoNzYAqBb91c_96buCnqXIFUNE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUoNzYAqBb91c_96buCnqXIFUNE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 02:25:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 653 (0x28d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC93F, serialNumber=094A0DCD802A05BF7573FF7A6EE0A7A9720550D1 Validity Not Before: Oct 3 02:25:16 2026 GMT Not After : Oct 10 02:25:16 2026 GMT Subject: CN=6ac0678c-efee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7d:fe:75:fe:9d:de:4e:82:31:0a:b1:31:1d: ff:5b:73:da:fd:7c:42:9d:b1:73:55:5d:31:29:93: 27:09:41:da:86:0f:7c:03:24:eb:e0:50:7b:a5:44: 5b:2e:9d:b8:ee:07:a5:dc:fd:50:d2:a1:d6:09:fa: 6a:8a:10:97:dc:54:92:61:b2:56:7c:f1:bd:d1:c2: 66:99:06:d6:44:42:0d:60:cf:ae:14:78:d9:22:96: b6:a1:de:32:bf:54:11:97:0d:51:5e:a4:47:9d:81: aa:12:e4:95:4d:2c:a8:84:8a:3b:bb:ce:91:39:41: f5:db:ec:cd:63:2d:3b:88:a0:a5:a2:9b:40:92:87: b9:c7:7c:6e:8c:db:2d:d0:7e:fa:7e:80:12:94:8f: ff:d9:96:66:34:07:e7:d3:70:dd:67:04:38:af:90: 7d:dc:a5:0f:b5:44:48:dc:80:11:bd:a6:3c:d8:c3: 92:5f:da:6d:9f:52:5d:72:87:07:eb:54:39:d5:62: 77:46:81:6a:13:c0:da:7c:e2:1e:1a:cb:bd:7c:c1: 5f:03:05:ee:ca:a4:c8:ed:08:43:9b:7e:65:b4:16: ca:58:9e:6f:e4:e0:f2:2d:16:76:a6:da:fd:3c:61: 35:f1:5f:9d:80:47:2d:64:e1:ff:97:b4:e1:36:23: fa:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:6C:7D:C3:8E:3F:5D:9F:7D:AD:34:90:ED:E5:81:1C:F7:84:0B:DD X509v3 Authority Key Identifier: keyid:09:4A:0D:CD:80:2A:05:BF:75:73:FF:7A:6E:E0:A7:A9:72:05:50:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/CUoNzYAqBb91c_96buCnqXIFUNE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUoNzYAqBb91c_96buCnqXIFUNE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/CUoNzYAqBb91c_96buCnqXIFUNE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:e9:62:91:36:57:1b:12:62:e0:92:90:ac:0f:b7:54:10:de: ba:1e:1c:2b:af:1e:58:e0:40:dc:2b:0a:16:e0:52:66:0d:c3: 56:43:a4:ca:c7:fd:fa:41:c5:41:a6:3c:97:f8:4f:20:e9:7a: 2e:ad:ec:48:a6:88:55:72:ca:04:3c:8d:f5:9d:72:ef:a7:b7: 6b:ec:be:7f:2a:5d:d3:65:c2:37:21:df:81:05:95:19:4f:29: 55:87:bf:2a:f7:d0:ca:8f:41:2d:dd:86:15:26:f1:33:6f:f3: 87:e0:c8:6f:0e:95:fd:1d:9f:5b:f7:50:fc:d7:1f:a8:8e:2f: 39:9c:34:6e:1e:0d:11:05:cc:d4:4b:fe:fd:ec:ed:51:81:84: c8:11:a0:2a:19:4a:bf:b1:c8:3c:7f:fa:29:37:66:59:5c:ea: c2:db:37:8e:41:0a:bd:73:f0:f3:4e:bf:6f:d1:c4:2f:4f:0e: cf:bb:56:81:b3:05:9e:9b:f0:5d:d0:64:2a:63:48:0d:a4:ef: 7d:e7:38:84:7c:8f:f4:1f:5b:91:0a:b5:35:3a:5e:2d:00:b0: bc:af:3c:24:29:6a:a0:9b:3b:1d:42:b4:0e:c8:6d:d8:eb:76: 4f:91:3e:81:78:1d:e7:7f:7f:b6:06:b8:83:95:59:60:7c:f4: 79:ab:93:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM5M0YxMTAvBgNVBAUTKDA5NEEwRENEODAyQTA1QkY3NTczRkY3QTZFRTBBN0E5 NzIwNTUwRDEwHhcNMjYxMDAzMDIyNTE2WhcNMjYxMDEwMDIyNTE2WjAYMRYwFAYD VQQDEw02YWMwNjc4Yy1lZmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwn3+df6d3k6CMQqxMR3/W3Pa/XxCnbFzVV0xKZMnCUHahg98AyTr4FB7pURb Lp247gel3P1Q0qHWCfpqihCX3FSSYbJWfPG90cJmmQbWREINYM+uFHjZIpa2od4y v1QRlw1RXqRHnYGqEuSVTSyohIo7u86ROUH12+zNYy07iKCloptAkoe5x3xujNst 0H76foASlI//2ZZmNAfn03DdZwQ4r5B93KUPtURI3IARvaY82MOSX9ptn1JdcocH 61Q51WJ3RoFqE8DafOIeGsu9fMFfAwXuyqTI7QhDm35ltBbKWJ5v5ODyLRZ2ptr9 PGE18V+dgEctZOH/l7ThNiP6eQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBRsfcOO P12ffa00kO3lgRz3hAvdMB8GA1UdIwQYMBaAFAlKDc2AKgW/dXP/em7gp6lyBVDR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzkzRi82MEE4Rjg4Q0RF QUQxMUVEOEE2REYxNERDNEY5QUUwMi9DVW9OellBcUJiOTFjXzk2YnVDbnFYSUZV TkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NVb056WUFxQmI5MWNfOTZidUNucVhJRlVORS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzkzRi82MEE4Rjg4Q0RFQUQxMUVEOEE2REYxNERDNEY5QUUwMi9DVW9OellBcUJi OTFjXzk2YnVDbnFYSUZVTkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh+likTZXGxJi4JKQrA+3VBDeuh4cK68eWOBA3CsKFuBSZg3DVkOkysf9+kHF QaY8l/hPIOl6Lq3sSKaIVXLKBDyN9Z1y76e3a+y+fypd02XCNyHfgQWVGU8pVYe/ KvfQyo9BLd2GFSbxM2/zh+DIbw6V/R2fW/dQ/NcfqI4vOZw0bh4NEQXM1Ev+/ezt UYGEyBGgKhlKv7HIPH/6KTdmWVzqwts3jkEKvXPw806/b9HEL08Oz7tWgbMFnpvw XdBkKmNIDaTvfec4hHyP9B9bkQq1NTpeLQCwvK88JClqoJs7HUK0Dsht2Ot2T5E+ gXgd539/tga4g5VZYHz0eauTkQ== -----END CERTIFICATE-----Generated at Sun Oct 4 17:38:02 2026 by rpki-client