$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft File: CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft (raw, json) Hash identifier: HaCkUeNANmcnf68ZuWa0OXUuWiqfNFxq9EE93zmH8xs= Subject key identifier: A7:BC:62:4E:EA:7E:66:D4:F4:A2:59:A3:FD:D2:4E:0F:21:AB:92:6D Authority key identifier: 0B:09:52:36:23:4E:69:35:BA:A3:41:E3:23:5A:3D:B4:73:AC:C6:7F Certificate issuer: /CN=A91FFE9F/serialNumber=0B095236234E6935BAA341E3235A3DB473ACC67F Certificate serial: 1044 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft Manifest number: 100C Signing time: Thu 10 Sep 2026 17:26:44 +0000 Manifest this update: Thu 10 Sep 2026 17:26:43 +0000 Manifest next update: Thu 17 Sep 2026 17:26:43 +0000 Files and hashes: 1: CwlSNiNOaTW6o0HjI1o9tHOsxn8.crl (hash: A/+7L8OQ83BumXDC+aGA2OJud8Pt9kpBV0jVS8RqvwQ=) 2: 6153EE40A64911EEA2F9C24AC4F9AE02.roa (hash: xxh6NZnNYpflyBEdhUUFw/SOYfLeyMddymrrtghmKYo=) 3: D927A2DAA64A11EE8316D651C4F9AE02.roa (hash: LdvKEMxHF6LRdf8uDUGPZDjjr7RNd+qCPf5qkED55LI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.crl rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 17:26:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4164 (0x1044) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFE9F, serialNumber=0B095236234E6935BAA341E3235A3DB473ACC67F Validity Not Before: Sep 10 17:26:43 2026 GMT Not After : Sep 17 17:26:43 2026 GMT Subject: CN=6aa2e853-2a11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:06:d2:27:b8:47:5b:f0:d6:3e:66:92:6b:9d: f7:f0:19:e2:b8:52:55:7e:cc:e4:04:f9:f6:af:bd: c8:1d:77:3f:47:7a:02:00:0e:dc:ff:89:3d:de:ac: b3:7c:b4:9f:60:98:f2:a9:16:d5:55:7f:a5:2d:72: 61:82:0d:7a:64:88:6c:76:f2:8d:77:ac:4d:46:7f: 6b:2f:9e:5d:8a:d1:93:6d:67:e3:a5:65:1d:18:e5: ca:ac:24:ac:8b:dd:71:ac:13:c9:a1:6d:09:5e:54: ed:64:d7:fc:39:ee:93:80:ed:b8:1f:29:be:d9:94: a6:02:83:75:01:da:39:95:32:f8:98:2b:1d:67:78: ec:41:d6:dc:05:48:b7:cc:51:fb:d9:46:25:ae:56: 64:6f:70:1a:a9:ce:49:c0:87:b0:b4:58:f5:87:d5: 20:cf:80:c2:c6:b3:5c:a7:7e:a3:1d:fb:e5:2a:75: ad:2b:37:85:ef:3b:15:88:14:a2:66:d1:fe:2f:09: 4a:4f:10:9f:c5:8a:6e:c9:70:f0:4b:82:b5:7f:79: b7:b9:a9:11:f1:c2:61:41:7f:11:ca:52:c4:60:24: ab:8a:f1:3b:ec:c4:b4:66:cf:1b:47:b4:e2:47:81: 7d:13:ee:6f:77:ed:58:33:d9:2e:86:79:9f:16:e6: 09:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:BC:62:4E:EA:7E:66:D4:F4:A2:59:A3:FD:D2:4E:0F:21:AB:92:6D X509v3 Authority Key Identifier: keyid:0B:09:52:36:23:4E:69:35:BA:A3:41:E3:23:5A:3D:B4:73:AC:C6:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:bf:93:dd:11:66:3f:0b:c8:b4:9c:81:12:bf:c8:03:b2:e2: 41:35:2c:fd:c5:17:b6:b2:29:4e:31:f9:20:d9:03:63:08:94: fb:77:e7:28:d2:d1:c1:bc:b6:75:ba:33:93:97:39:4e:19:de: 0f:e2:aa:28:70:ce:9e:f9:fb:ca:76:29:b8:fb:83:18:65:85: c0:c6:9f:27:65:69:e8:34:92:ed:7e:4b:eb:eb:2f:70:66:1e: 33:54:12:b5:1c:00:f0:14:5e:a1:c9:3c:5f:ab:ca:2e:91:10: a4:8b:08:34:bb:96:79:a6:f3:4d:a6:1b:28:50:02:d1:b8:a4: c3:c1:78:d2:de:8b:39:c9:3a:9b:78:94:4a:57:ed:2f:1c:9f: ed:04:ce:a7:c1:5b:40:63:b5:20:ce:21:93:2f:fa:21:d6:2d: 19:d3:3d:a1:7f:8d:a2:28:4c:c3:8b:ae:bf:47:8d:d7:ca:86: fc:c7:d3:f7:a7:bc:ff:77:44:56:eb:f7:25:78:8b:d9:ec:75: 0c:bc:fe:73:59:52:e1:78:fb:a1:3a:6a:2e:72:f1:d3:ed:a3: 74:9f:9d:2d:64:85:ee:d9:9c:8c:aa:42:88:a0:cf:60:69:2f: 3d:95:ad:33:5b:66:ca:a9:9b:98:6d:a0:58:32:12:20:39:e7: e8:bd:77:2b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZFOUYxMTAvBgNVBAUTKDBCMDk1MjM2MjM0RTY5MzVCQUEzNDFFMzIzNUEzREI0 NzNBQ0M2N0YwHhcNMjYwOTEwMTcyNjQzWhcNMjYwOTE3MTcyNjQzWjAYMRYwFAYD VQQDEw02YWEyZTg1My0yYTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQbSJ7hHW/DWPmaSa5338BniuFJVfszkBPn2r73IHXc/R3oCAA7c/4k93qyz fLSfYJjyqRbVVX+lLXJhgg16ZIhsdvKNd6xNRn9rL55ditGTbWfjpWUdGOXKrCSs i91xrBPJoW0JXlTtZNf8Oe6TgO24Hym+2ZSmAoN1Ado5lTL4mCsdZ3jsQdbcBUi3 zFH72UYlrlZkb3Aaqc5JwIewtFj1h9Ugz4DCxrNcp36jHfvlKnWtKzeF7zsViBSi ZtH+LwlKTxCfxYpuyXDwS4K1f3m3uakR8cJhQX8RylLEYCSrivE77MS0Zs8bR7Ti R4F9E+5vd+1YM9kuhnmfFuYJOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKe8Yk7q fmbU9KJZo/3STg8hq5JtMB8GA1UdIwQYMBaAFAsJUjYjTmk1uqNB4yNaPbRzrMZ/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkU5Ri84QkUwNjNFMDdC MTYxMUU5OTk0OUFDNTFDNEY5QUUwMi9Dd2xTTmlOT2FUVzZvMEhqSTFvOXRIT3N4 bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N3bFNOaU5PYVRXNm8wSGpJMW85dEhPc3huOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkU5Ri84QkUwNjNFMDdCMTYxMUU5OTk0OUFDNTFDNEY5QUUwMi9Dd2xTTmlOT2FU VzZvMEhqSTFvOXRIT3N4bjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkb+T3RFmPwvItJyBEr/IA7LiQTUs/cUXtrIpTjH5INkDYwiU+3fnKNLRwby2 dbozk5c5ThneD+KqKHDOnvn7ynYpuPuDGGWFwMafJ2Vp6DSS7X5L6+svcGYeM1QS tRwA8BReock8X6vKLpEQpIsINLuWeabzTaYbKFAC0bikw8F40t6LOck6m3iUSlft Lxyf7QTOp8FbQGO1IM4hky/6IdYtGdM9oX+NoihMw4uuv0eN18qG/MfT96e8/3dE Vuv3JXiL2ex1DLz+c1lS4Xj7oTpqLnLx0+2jdJ+dLWSF7tmcjKpCiKDPYGkvPZWt M1tmyqmbmG2gWDISIDnn6L13Kw== -----END CERTIFICATE-----Generated at Fri Sep 11 13:57:12 2026 by rpki-client