$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft File: CHspwfvXREICrgAqSXEn_WbyStk.mft (raw, json) Hash identifier: 4uFWDk92y335XHm3x1fh7QNTdxCJyYghfxyb9BRsbEw= Subject key identifier: 83:5A:F3:5C:3F:31:E2:A9:CA:DA:D2:C9:3A:55:7B:FF:EE:52:3C:B1 Authority key identifier: 08:7B:29:C1:FB:D7:44:42:02:AE:00:2A:49:71:27:FD:66:F2:4A:D9 Certificate issuer: /CN=A91FAED9/serialNumber=087B29C1FBD7444202AE002A497127FD66F24AD9 Certificate serial: 0581 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHspwfvXREICrgAqSXEn_WbyStk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft Manifest number: 0577 Signing time: Fri 02 Oct 2026 23:37:04 +0000 Manifest this update: Fri 02 Oct 2026 23:37:03 +0000 Manifest next update: Fri 09 Oct 2026 23:37:03 +0000 Files and hashes: 1: CHspwfvXREICrgAqSXEn_WbyStk.crl (hash: WXiuZnwVIKtbAcxkQe1ykMYsmHwMbmpeg3gW2Lf1X4A=) 2: D3C965FA45F611EC9FB3BB49C4F9AE02.roa (hash: ux98ZA0wQgB4FkaCCMLS/K2q+Dgh8iXTzVCbgOOhli4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.crl rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHspwfvXREICrgAqSXEn_WbyStk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 23:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1409 (0x581) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAED9, serialNumber=087B29C1FBD7444202AE002A497127FD66F24AD9 Validity Not Before: Oct 2 23:37:03 2026 GMT Not After : Oct 9 23:37:03 2026 GMT Subject: CN=6ac0401f-817b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ff:ef:c3:aa:1c:66:d6:57:8d:d1:25:f7:1e: 01:de:33:68:0a:f3:7f:e1:de:b4:ee:da:e9:c7:a1: 58:57:da:b9:a5:13:9e:89:87:fc:b7:12:f7:9f:5c: bd:5d:66:22:c2:6a:f6:39:4b:21:8f:d0:e0:e4:d8: f5:a8:22:9e:cf:3a:8d:9c:35:32:2b:fa:4d:30:01: 9b:8a:05:91:8f:4c:9b:57:c4:b1:22:3e:6b:b0:73: 2e:e0:24:4c:29:50:35:f8:18:f2:a4:2c:7b:42:6c: 55:da:a8:17:f9:1b:eb:78:ba:7f:55:d7:2f:8e:7c: c8:5a:d3:56:52:a1:94:91:5a:f3:2f:df:86:7e:31: 8a:90:99:f7:38:54:26:24:51:3c:6d:2c:e0:76:21: 3f:7f:ab:ca:b4:6a:be:bc:83:a5:29:d1:f9:b0:a8: 00:8c:44:7b:91:af:33:8d:b9:85:5d:55:68:a1:cf: 99:4d:79:aa:2d:5a:a7:64:dd:fc:b8:3b:39:f9:d2: cb:b0:ee:50:8b:a7:5d:41:25:b8:76:a4:6e:62:bd: 2f:d7:08:93:8f:f6:0a:89:e1:90:0e:8e:9e:f8:dc: eb:96:e5:74:c4:0e:f7:dd:86:80:cb:43:fa:f4:73: 36:54:6c:8a:b4:30:d8:e3:65:65:10:07:dd:75:60: 82:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:5A:F3:5C:3F:31:E2:A9:CA:DA:D2:C9:3A:55:7B:FF:EE:52:3C:B1 X509v3 Authority Key Identifier: keyid:08:7B:29:C1:FB:D7:44:42:02:AE:00:2A:49:71:27:FD:66:F2:4A:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHspwfvXREICrgAqSXEn_WbyStk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:67:3e:25:b1:f9:fd:12:90:92:23:50:70:fd:e0:aa:89:5f: ef:c2:33:de:d3:ff:26:9f:15:95:9f:ce:11:ec:7b:da:fa:86: 84:e0:58:b2:e6:8a:3c:71:d7:2b:65:71:c1:e7:ca:b7:4a:86: ca:60:80:75:a6:d5:33:2a:5c:ae:4f:9a:e0:32:a7:44:46:13: 92:58:19:c3:e0:07:b7:1e:33:d3:46:ec:21:0b:fb:bd:b1:9c: 12:8d:bd:76:3b:d4:8b:bc:d9:2f:3f:21:41:07:75:3f:5a:e1: 29:4a:79:68:df:6f:29:bd:71:86:ab:b6:89:84:58:a4:53:2f: de:ab:2e:f2:78:f1:45:df:db:15:26:19:4a:3e:f6:1e:d8:dd: ec:2c:6e:42:c7:fd:51:a4:57:e9:c4:79:b3:b2:5d:b6:53:9f: 74:99:b4:fd:ca:24:0e:aa:9c:8d:cb:d5:e4:cb:bc:e8:76:85: ac:e2:c3:72:d3:8d:2c:f3:dd:44:aa:17:5b:df:a2:91:8c:ae: 3b:80:45:b9:2a:4c:5a:ef:8e:37:28:9b:12:8d:8d:c4:c4:bc: 6c:2b:3c:1d:a4:1b:a9:49:6d:e7:d4:ee:cf:50:84:e8:ce:25: 75:50:a1:59:a4:c8:11:83:e4:b0:55:d1:ef:8d:b5:af:1a:67: d0:2e:fa:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFFRDkxMTAvBgNVBAUTKDA4N0IyOUMxRkJENzQ0NDIwMkFFMDAyQTQ5NzEyN0ZE NjZGMjRBRDkwHhcNMjYxMDAyMjMzNzAzWhcNMjYxMDA5MjMzNzAzWjAYMRYwFAYD VQQDEw02YWMwNDAxZi04MTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxv/vw6ocZtZXjdEl9x4B3jNoCvN/4d607trpx6FYV9q5pROeiYf8txL3n1y9 XWYiwmr2OUshj9Dg5Nj1qCKezzqNnDUyK/pNMAGbigWRj0ybV8SxIj5rsHMu4CRM KVA1+BjypCx7QmxV2qgX+RvreLp/VdcvjnzIWtNWUqGUkVrzL9+GfjGKkJn3OFQm JFE8bSzgdiE/f6vKtGq+vIOlKdH5sKgAjER7ka8zjbmFXVVooc+ZTXmqLVqnZN38 uDs5+dLLsO5Qi6ddQSW4dqRuYr0v1wiTj/YKieGQDo6e+NzrluV0xA733YaAy0P6 9HM2VGyKtDDY42VlEAfddWCC8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFINa81w/ MeKpytrSyTpVe//uUjyxMB8GA1UdIwQYMBaAFAh7KcH710RCAq4AKklxJ/1m8krZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUVEOS82QTc2NUFBQTQ1 REMxMUVDQThBMzE0NkRDNEY5QUUwMi9DSHNwd2Z2WFJFSUNyZ0FxU1hFbl9XYnlT dGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NIc3B3ZnZYUkVJQ3JnQXFTWEVuX1dieVN0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUVEOS82QTc2NUFBQTQ1REMxMUVDQThBMzE0NkRDNEY5QUUwMi9DSHNwd2Z2WFJF SUNyZ0FxU1hFbl9XYnlTdGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADWc+JbH5/RKQkiNQcP3gqolf78Iz3tP/Jp8VlZ/OEex72vqGhOBYsuaKPHHX K2VxwefKt0qGymCAdabVMypcrk+a4DKnREYTklgZw+AHtx4z00bsIQv7vbGcEo29 djvUi7zZLz8hQQd1P1rhKUp5aN9vKb1xhqu2iYRYpFMv3qsu8njxRd/bFSYZSj72 Htjd7CxuQsf9UaRX6cR5s7JdtlOfdJm0/cokDqqcjcvV5Mu86HaFrOLDctONLPPd RKoXW9+ikYyuO4BFuSpMWu+ONyibEo2NxMS8bCs8HaQbqUlt59Tuz1CE6M4ldVCh WaTIEYPksFXR7421rxpn0C76Sw== -----END CERTIFICATE-----Generated at Sun Oct 4 19:50:58 2026 by rpki-client