$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft File: CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft (raw, json) Hash identifier: CZkry1uvCaFXu4PP1AqvDOBZ/0gL8jJyIZjFHJ5SJHw= Subject key identifier: 23:80:7D:D4:6C:73:B4:FF:8E:D5:EE:9C:0E:0A:62:CE:49:46:BF:08 Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E Certificate issuer: /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E Certificate serial: 02E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft Manifest number: 0289 Signing time: Fri 25 Sep 2026 02:36:48 +0000 Manifest this update: Fri 25 Sep 2026 02:36:47 +0000 Manifest next update: Fri 02 Oct 2026 02:36:47 +0000 Files and hashes: 1: CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl (hash: YGWAv6z1LBnTXsAVyqtSvsD+NuZ6m0LKKBKX/z8MBrk=) 2: E07CB68455A211F0B55F5674C4F9AE02.roa (hash: HGRofWCBztru2v6NUmwkl0HXWbLS28Izp3PDhbuMMv0=) 3: D0F8C1B2558E11F0AA71D85AC4F9AE02.roa (hash: 4xwuTIhwlGL5yXXna5at0wbo22dMaJaAc9+Xfqmd1Y8=) 4: F88F98EA55A211F0978C8774C4F9AE02.roa (hash: 1RLy8hwgWzmLWf1HsKCN7QGvSAK8fTD8LT1ZMd/TIQU=) 5: 94BE094C7D0B11F0BC79D46DC4F9AE02.roa (hash: NEX3aRxV1Dqk6McmWh2C+0AJV5eYo9XBed68fWDSotg=) 6: 063FA6B25B2811F09B9A3A54C4F9AE02.roa (hash: COnh5OBflDrTiNerSPEVrAoEkIl/6x/Vx+xkw8ZayhI=) 7: DA6883FC0F8611F0955A002EC4F9AE02.roa (hash: vftcQ5vmTURf7Bgrq+lkXEdW/3ZqSPsCNqTs8qbLsJs=) 8: BACC6D0A4F7411F0A8124536C4F9AE02.roa (hash: /aJrSzZ6U1lc2HAZFype6jc3RKjfbA/DfLGY0OrC9MU=) 9: 935296A6558B11F0BB2DB436C4F9AE02.roa (hash: oQTNR8UezgQA4tGlsLZvjgGgLBz+VcjntBI8Klr+/KA=) 10: FBB6EA4E558B11F082FD5637C4F9AE02.roa (hash: 2FcVuaRaySm31VN4owwphmbBRzz94dcrhBnFrd+vqjo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 02:36:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 736 (0x2e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F17AA, serialNumber=0947051EFA50429215750A48BC031ADA926EF66E Validity Not Before: Sep 25 02:36:47 2026 GMT Not After : Oct 2 02:36:47 2026 GMT Subject: CN=6ab5de40-42be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d7:df:e3:24:0e:04:cb:71:3f:5f:b5:a0:89: 7a:1c:94:63:52:f7:c6:b9:68:f8:5d:c6:be:b7:f0: 9f:67:33:5f:4a:0a:d0:a5:29:8a:00:6e:20:23:66: 36:ac:a8:af:fc:9a:00:eb:e7:e2:a2:68:a0:9f:59: a7:7b:c0:da:15:7c:ac:cb:97:c8:e8:c2:6a:3c:b9: 17:cc:bb:de:e3:77:b6:66:4c:64:f3:00:41:b6:40: 0c:eb:09:27:63:44:6d:87:ad:4a:b8:08:59:29:95: 50:63:63:33:cc:57:1d:77:40:46:09:dc:e7:63:b6: 20:32:48:2b:f0:a8:ab:37:56:38:cf:83:dd:6a:59: f2:98:40:d1:b3:f6:4f:93:14:6a:4d:64:e8:61:1e: c3:9b:d8:e9:cd:bc:88:88:3d:49:cd:ce:7e:0b:41: c7:59:6d:97:42:91:08:1b:77:ea:cd:9a:87:f7:9f: 09:36:97:32:f8:b3:19:cb:38:30:aa:e3:d2:8f:23: 7b:20:58:da:1c:92:02:49:d3:ec:6c:d7:06:cf:0b: fd:83:07:cc:e9:df:4c:41:20:9c:38:37:1f:59:36: ec:9d:e8:75:64:b6:a6:66:56:41:b7:a4:d6:00:a1: a6:31:9a:a4:ce:e0:73:75:d3:6c:b2:46:7f:8c:14: 36:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:80:7D:D4:6C:73:B4:FF:8E:D5:EE:9C:0E:0A:62:CE:49:46:BF:08 X509v3 Authority Key Identifier: keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:00:6d:3b:f5:3b:b1:19:53:30:82:cb:57:00:9a:d9:a5:2e: b7:82:ee:b1:58:7e:22:fc:52:ef:82:13:b6:2e:fd:9d:31:d6: 7c:a2:0f:6b:5d:66:32:b7:79:18:1b:fc:68:a5:ab:fc:36:77: df:14:af:68:2d:f5:eb:1c:88:e0:69:cc:d1:ef:e8:9c:dc:be: de:06:6d:6b:85:72:18:16:f5:9e:12:53:63:f6:f1:c0:16:bb: f6:1b:6c:48:ed:6f:e5:e2:74:70:d1:a1:e2:d9:eb:b0:89:16: 42:82:28:be:58:ce:f6:d1:7d:43:c8:52:00:2e:d3:e9:a0:c3: a7:0c:3e:76:66:34:bf:10:ed:f8:20:a2:22:53:8e:34:31:15: fd:ad:3d:f7:3c:2b:b6:ac:dc:85:b9:4a:b8:f5:98:6f:72:6b: 4a:25:be:c6:c7:ac:93:38:2b:67:52:11:25:cf:eb:49:97:29: 9c:9d:ad:91:0d:3f:0e:25:e1:56:62:54:3e:2b:1d:76:80:dd: ec:19:66:59:57:7a:5d:c6:1a:3d:d4:fd:17:59:dc:93:92:9f: d4:2d:46:7e:6a:49:62:4f:5a:cb:4a:ae:38:49:04:e3:a9:47: 98:38:0d:0d:e0:72:74:3a:d0:bc:5e:ad:32:48:bd:c6:be:91: 8d:c3:a5:ed -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAuAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE3QUExMTAvBgNVBAUTKDA5NDcwNTFFRkE1MDQyOTIxNTc1MEE0OEJDMDMxQURB OTI2RUY2NkUwHhcNMjYwOTI1MDIzNjQ3WhcNMjYxMDAyMDIzNjQ3WjAYMRYwFAYD VQQDEw02YWI1ZGU0MC00MmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0dff4yQOBMtxP1+1oIl6HJRjUvfGuWj4Xca+t/CfZzNfSgrQpSmKAG4gI2Y2 rKiv/JoA6+fiomign1mne8DaFXysy5fI6MJqPLkXzLve43e2Zkxk8wBBtkAM6wkn Y0Rth61KuAhZKZVQY2MzzFcdd0BGCdznY7YgMkgr8KirN1Y4z4PdalnymEDRs/ZP kxRqTWToYR7Dm9jpzbyIiD1Jzc5+C0HHWW2XQpEIG3fqzZqH958JNpcy+LMZyzgw quPSjyN7IFjaHJICSdPsbNcGzwv9gwfM6d9MQSCcODcfWTbsneh1ZLamZlZBt6TW AKGmMZqkzuBzddNsskZ/jBQ23QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCOAfdRs c7T/jtXunA4KYs5JRr8IMB8GA1UdIwQYMBaAFAlHBR76UEKSFXUKSLwDGtqSbvZu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdBQS80MUYwRjk3RTUy QjgxMUVFOEU0MzAwMERDNEY5QUUwMi9DVWNGSHZwUVFwSVZkUXBJdkFNYTJwSnU5 bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NVY0ZIdnBRUXBJVmRRcEl2QU1hMnBKdTltNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTdBQS80MUYwRjk3RTUyQjgxMUVFOEU0MzAwMERDNEY5QUUwMi9DVWNGSHZwUVFw SVZkUXBJdkFNYTJwSnU5bTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADABtO/U7sRlTMILLVwCa2aUut4LusVh+IvxS74ITti79nTHWfKIPa11mMrd5 GBv8aKWr/DZ33xSvaC316xyI4GnM0e/onNy+3gZta4VyGBb1nhJTY/bxwBa79hts SO1v5eJ0cNGh4tnrsIkWQoIovljO9tF9Q8hSAC7T6aDDpww+dmY0vxDt+CCiIlOO NDEV/a099zwrtqzchblKuPWYb3JrSiW+xseskzgrZ1IRJc/rSZcpnJ2tkQ0/DiXh VmJUPisddoDd7BlmWVd6XcYaPdT9F1nck5Kf1C1GfmpJYk9ay0quOEkE46lHmDgN DeBydDrQvF6tMki9xr6RjcOl7Q== -----END CERTIFICATE-----Generated at Fri Sep 25 09:19:22 2026 by rpki-client