$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F89DB/C3EA0662639711F198FA81586E47A888/CbHIYEI0FyJ0uoSU60JmdI9VAp8.mft File: CbHIYEI0FyJ0uoSU60JmdI9VAp8.mft (raw, json) Hash identifier: gjmMM25J3RS+yp/rdoi6gYSMlze/dWDDVs489BAQ+Ow= Subject key identifier: 26:3E:97:21:92:D8:50:F5:A1:17:D5:BE:3B:37:66:A2:D3:88:3A:0C Authority key identifier: 09:B1:C8:60:42:34:17:22:74:BA:84:94:EB:42:66:74:8F:55:02:9F Certificate issuer: /CN=A91F89DB/serialNumber=09B1C8604234172274BA8494EB4266748F55029F Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CbHIYEI0FyJ0uoSU60JmdI9VAp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89DB/C3EA0662639711F198FA81586E47A888/CbHIYEI0FyJ0uoSU60JmdI9VAp8.mft Manifest number: 3C Signing time: Sat 03 Oct 2026 09:16:39 +0000 Manifest this update: Sat 03 Oct 2026 09:16:39 +0000 Manifest next update: Sat 10 Oct 2026 09:16:39 +0000 Files and hashes: 1: CbHIYEI0FyJ0uoSU60JmdI9VAp8.crl (hash: CcZPEHmpBeMvMbvIba2jQSpIH965tgfJFByyZidOT0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89DB/C3EA0662639711F198FA81586E47A888/CbHIYEI0FyJ0uoSU60JmdI9VAp8.crl rsync://rpki.apnic.net/member_repository/A91F89DB/C3EA0662639711F198FA81586E47A888/CbHIYEI0FyJ0uoSU60JmdI9VAp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CbHIYEI0FyJ0uoSU60JmdI9VAp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 09:16:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89DB, serialNumber=09B1C8604234172274BA8494EB4266748F55029F Validity Not Before: Oct 3 09:16:39 2026 GMT Not After : Oct 10 09:16:39 2026 GMT Subject: CN=6ac0c7f7-910c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:b8:d1:6c:e4:1c:ae:b5:69:5b:7e:80:86:68: e7:58:26:bd:a0:48:fc:40:fd:5d:de:61:3a:d8:75: 8f:2b:49:bd:1e:ef:c1:05:ae:d3:06:77:aa:5a:e8: cc:86:df:1d:25:ce:c4:1f:63:5f:54:1d:fd:ce:fd: 21:e4:2a:1b:9f:43:8f:d0:72:ec:4e:6e:ca:88:fc: de:f4:5a:a6:6d:98:cf:5a:3e:57:2d:98:bc:74:82: 78:8a:e5:f7:99:e6:67:85:ed:11:8c:b7:a5:58:3b: fe:33:15:6e:b8:c7:ad:01:20:1c:bf:a2:09:09:f4: 78:c0:d9:d4:a9:26:64:ea:f4:dc:7f:cf:54:9a:9f: d2:b8:8a:9c:54:d7:95:1f:86:ff:8a:2a:e2:29:c0: 98:54:86:60:bc:cc:9c:3b:a1:f6:82:29:8b:d5:6a: e6:db:89:0f:db:16:a3:9b:bd:3e:31:d3:e8:ae:cd: ed:85:41:e7:a8:d7:54:93:3a:b2:ff:8a:49:69:5c: 1e:5c:bd:11:84:a2:e6:c9:87:4a:99:b7:20:90:51: c6:7e:dc:15:7b:50:51:57:ab:99:73:5e:3b:6c:dc: 7e:c0:0d:15:e4:05:d7:6c:66:af:a0:e2:0f:0c:94: 0c:9d:11:13:98:69:1d:e9:40:b3:13:97:c4:44:42: 9b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:3E:97:21:92:D8:50:F5:A1:17:D5:BE:3B:37:66:A2:D3:88:3A:0C X509v3 Authority Key Identifier: keyid:09:B1:C8:60:42:34:17:22:74:BA:84:94:EB:42:66:74:8F:55:02:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89DB/C3EA0662639711F198FA81586E47A888/CbHIYEI0FyJ0uoSU60JmdI9VAp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CbHIYEI0FyJ0uoSU60JmdI9VAp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89DB/C3EA0662639711F198FA81586E47A888/CbHIYEI0FyJ0uoSU60JmdI9VAp8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:9e:04:95:68:9a:b7:4d:2c:29:86:64:e0:ca:8d:3a:dd:7e: 19:a0:a2:67:23:82:22:75:96:3c:c3:7e:61:71:52:97:11:04: c6:b7:36:3e:3a:de:14:fc:bd:ac:97:43:55:40:ee:3d:f8:76: 2b:c0:3e:d8:52:09:12:30:72:45:4d:c2:04:d3:e1:11:c1:9e: 52:2a:b5:7c:c4:b7:09:79:69:8b:4a:a0:5e:a7:bc:40:d4:a6: 81:13:a4:83:f6:b6:99:0a:21:32:f3:90:aa:9b:48:6f:b2:98: 18:29:32:93:a9:21:6d:18:1c:3d:6f:24:e0:bb:48:22:59:6b: 96:c8:c3:43:2b:0c:88:0a:89:6f:9c:4e:fe:65:9d:cc:c4:56: 8f:8d:95:22:4d:de:d0:26:4b:7f:36:c1:81:d9:74:33:63:8e: b0:46:07:ff:d5:2b:33:56:dd:21:5d:2b:67:42:9e:ea:7a:5a: ca:21:f1:b0:3c:c0:a8:31:93:67:79:99:32:eb:e6:60:b2:79: 60:f3:96:0e:df:fc:74:e8:b4:ce:d4:73:49:6d:93:49:b0:ef: d7:bc:73:4e:dc:dd:98:34:40:5f:59:26:95:bf:57:f1:50:db: 31:5f:93:e8:13:14:e8:c7:81:c9:5c:08:d9:9d:d3:b9:37:59: d8:23:26:e8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG ODlEQjExMC8GA1UEBRMoMDlCMUM4NjA0MjM0MTcyMjc0QkE4NDk0RUI0MjY2NzQ4 RjU1MDI5RjAeFw0yNjEwMDMwOTE2MzlaFw0yNjEwMTAwOTE2MzlaMBgxFjAUBgNV BAMTDTZhYzBjN2Y3LTkxMGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDsuNFs5ByutWlbfoCGaOdYJr2gSPxA/V3eYTrYdY8rSb0e78EFrtMGd6pa6MyG 3x0lzsQfY19UHf3O/SHkKhufQ4/QcuxObsqI/N70WqZtmM9aPlctmLx0gniK5feZ 5meF7RGMt6VYO/4zFW64x60BIBy/ogkJ9HjA2dSpJmTq9Nx/z1San9K4ipxU15Uf hv+KKuIpwJhUhmC8zJw7ofaCKYvVaubbiQ/bFqObvT4x0+iuze2FQeeo11STOrL/ iklpXB5cvRGEoubJh0qZtyCQUcZ+3BV7UFFXq5lzXjts3H7ADRXkBddsZq+g4g8M lAydEROYaR3pQLMTl8REQputAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUJj6XIZLY UPWhF9W+OzdmotOIOgwwHwYDVR0jBBgwFoAUCbHIYEI0FyJ0uoSU60JmdI9VAp8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4OURCL0MzRUEwNjYyNjM5 NzExRjE5OEZBODE1ODZFNDdBODg4L0NiSElZRUkwRnlKMHVvU1U2MEptZEk5VkFw OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ2JISVlFSTBGeUowdW9TVTYwSm1kSTlWQXA4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4 OURCL0MzRUEwNjYyNjM5NzExRjE5OEZBODE1ODZFNDdBODg4L0NiSElZRUkwRnlK MHVvU1U2MEptZEk5VkFwOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBXngSVaJq3TSwphmTgyo063X4ZoKJnI4IidZY8w35hcVKXEQTGtzY+Ot4U/L2s l0NVQO49+HYrwD7YUgkSMHJFTcIE0+ERwZ5SKrV8xLcJeWmLSqBep7xA1KaBE6SD 9raZCiEy85Cqm0hvspgYKTKTqSFtGBw9byTgu0giWWuWyMNDKwyIColvnE7+ZZ3M xFaPjZUiTd7QJkt/NsGB2XQzY46wRgf/1SszVt0hXStnQp7qelrKIfGwPMCoMZNn eZky6+Zgsnlg85YO3/x06LTO1HNJbZNJsO/XvHNO3N2YNEBfWSaVv1fxUNsxX5Po ExTox4HJXAjZndO5N1nYIybo -----END CERTIFICATE-----Generated at Mon Oct 5 06:42:24 2026 by rpki-client