$ rpki-client -vvvf rpki.apnic.net/member_repository/A9112F94/EAAF28EA6AD111F196BA5E2E6B47A888/cxpd1NZKcLcdOLC1S6RUa2aDoBs.mft File: cxpd1NZKcLcdOLC1S6RUa2aDoBs.mft (raw, json) Hash identifier: 4FWo0Zd0nU2CesgkBfh6OmGtonK1wXe4xsSky3KX/yI= Subject key identifier: D9:5F:CF:DE:C0:23:50:A5:9B:61:01:B7:26:0B:19:D3:E4:DE:07:18 Authority key identifier: 73:1A:5D:D4:D6:4A:70:B7:1D:38:B0:B5:4B:A4:54:6B:66:83:A0:1B Certificate issuer: /CN=A9112F94/serialNumber=731A5DD4D64A70B71D38B0B54BA4546B6683A01B Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cxpd1NZKcLcdOLC1S6RUa2aDoBs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112F94/EAAF28EA6AD111F196BA5E2E6B47A888/cxpd1NZKcLcdOLC1S6RUa2aDoBs.mft Manifest number: 39 Signing time: Wed 23 Sep 2026 08:24:02 +0000 Manifest this update: Wed 23 Sep 2026 08:24:01 +0000 Manifest next update: Wed 30 Sep 2026 08:24:01 +0000 Files and hashes: 1: cxpd1NZKcLcdOLC1S6RUa2aDoBs.crl (hash: fN4J9frPcS8iaQNOfbLHJsyP+KtR8Vl9UOlh5bnz5N4=) 2: 1603FF2C6AE911F1B5ED47487247A888.roa (hash: 3qfyehPx18iZ+nZ3Fp3nstIPk0IChqfQZsM3HoTDXwU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112F94/EAAF28EA6AD111F196BA5E2E6B47A888/cxpd1NZKcLcdOLC1S6RUa2aDoBs.crl rsync://rpki.apnic.net/member_repository/A9112F94/EAAF28EA6AD111F196BA5E2E6B47A888/cxpd1NZKcLcdOLC1S6RUa2aDoBs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cxpd1NZKcLcdOLC1S6RUa2aDoBs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:19:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112F94, serialNumber=731A5DD4D64A70B71D38B0B54BA4546B6683A01B Validity Not Before: Sep 23 08:24:01 2026 GMT Not After : Sep 30 08:24:01 2026 GMT Subject: CN=6ab38ca1-d1dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e2:13:e2:a1:a1:62:bb:3f:e6:18:64:6c:65: b7:07:9e:d7:d3:d8:e4:f4:e2:7b:c6:29:49:16:bd: 62:16:be:e0:8d:61:ed:0d:a4:e3:aa:cb:36:36:0b: 65:78:6a:f1:f5:39:ec:ce:38:d2:81:69:26:c6:d6: 92:6c:39:4c:c1:c4:15:e4:04:55:e1:1e:22:66:66: 05:1b:d2:e8:8c:80:6b:f9:ed:9e:60:8b:36:55:8b: e5:a1:45:d5:5d:61:06:ac:0e:97:60:d3:14:6b:34: bb:b8:46:e4:85:f6:54:0d:e3:b0:92:bc:65:47:55: 4b:80:12:43:5b:e6:7a:63:a3:b3:c8:6e:21:bb:da: 41:14:0c:18:7d:33:96:de:0d:0b:64:94:d7:ae:48: 23:8b:b7:2f:c8:4a:37:1a:a2:c6:6c:ac:ea:e8:38: ab:48:a2:39:9b:af:45:81:94:bc:45:6b:f6:8c:4b: 2f:05:a1:55:88:82:06:88:87:63:4a:1a:d9:56:43: 74:24:95:16:ba:1b:c2:fe:01:08:c1:e5:b5:70:76: 96:dd:5d:e9:cf:83:89:1e:21:4a:42:21:3f:1a:03: 1f:d8:65:ac:b8:93:23:01:29:e7:e9:10:44:e5:3a: 74:07:b7:81:78:12:a6:c4:99:75:cd:d9:c4:e1:c5: e7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:5F:CF:DE:C0:23:50:A5:9B:61:01:B7:26:0B:19:D3:E4:DE:07:18 X509v3 Authority Key Identifier: keyid:73:1A:5D:D4:D6:4A:70:B7:1D:38:B0:B5:4B:A4:54:6B:66:83:A0:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112F94/EAAF28EA6AD111F196BA5E2E6B47A888/cxpd1NZKcLcdOLC1S6RUa2aDoBs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cxpd1NZKcLcdOLC1S6RUa2aDoBs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112F94/EAAF28EA6AD111F196BA5E2E6B47A888/cxpd1NZKcLcdOLC1S6RUa2aDoBs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:af:8f:2c:e4:1e:30:be:d2:21:bf:94:ea:f9:98:28:31:89: 6b:3f:44:45:07:17:74:5e:d6:6f:eb:44:cb:46:f6:1f:ca:7e: 2b:60:b5:d2:47:c4:be:90:a6:e5:ae:16:a4:4e:1d:45:23:e9: 26:02:71:60:66:29:ac:ac:1b:55:be:91:1f:d0:0a:03:99:34: 82:46:83:f9:22:3c:a6:9c:50:f6:87:dc:94:0f:1f:c6:63:71: c4:e3:87:8a:98:33:c3:4b:bb:7a:a3:e8:43:76:41:f2:8b:fd: 0f:1c:a9:d5:5b:95:a6:fd:56:cb:8a:06:0d:a5:42:46:84:b9: 95:5a:02:5d:31:aa:3b:bb:79:9a:ea:e1:2d:a3:39:4e:fb:2a: 24:c3:46:a1:7f:19:29:ad:14:9a:73:4f:b3:71:9c:ab:a9:a4: b3:f3:35:78:fe:31:32:13:7c:5c:6b:b4:2b:aa:ed:b6:39:50: bb:30:33:ea:04:a9:23:a4:11:0e:fa:1c:a1:93:a8:83:99:2e: c2:bd:cb:b5:dd:72:e0:65:7c:4c:2f:69:ee:77:d2:87:27:e4: 36:96:7c:08:f6:95:a1:0e:db:43:74:a0:15:01:2c:6e:00:4e: 70:5f:ce:6a:08:9f:b7:b0:80:94:f3:cf:e4:d2:5d:cd:e2:df: 5e:1e:e1:b2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MkY5NDExMC8GA1UEBRMoNzMxQTVERDRENjRBNzBCNzFEMzhCMEI1NEJBNDU0NkI2 NjgzQTAxQjAeFw0yNjA5MjMwODI0MDFaFw0yNjA5MzAwODI0MDFaMBgxFjAUBgNV BAMTDTZhYjM4Y2ExLWQxZGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC04hPioaFiuz/mGGRsZbcHntfT2OT04nvGKUkWvWIWvuCNYe0NpOOqyzY2C2V4 avH1OezOONKBaSbG1pJsOUzBxBXkBFXhHiJmZgUb0uiMgGv57Z5gizZVi+WhRdVd YQasDpdg0xRrNLu4RuSF9lQN47CSvGVHVUuAEkNb5npjo7PIbiG72kEUDBh9M5be DQtklNeuSCOLty/ISjcaosZsrOroOKtIojmbr0WBlLxFa/aMSy8FoVWIggaIh2NK GtlWQ3QklRa6G8L+AQjB5bVwdpbdXenPg4keIUpCIT8aAx/YZay4kyMBKefpEETl OnQHt4F4EqbEmXXN2cThxec/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU2V/P3sAj UKWbYQG3JgsZ0+TeBxgwHwYDVR0jBBgwFoAUcxpd1NZKcLcdOLC1S6RUa2aDoBsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEyRjk0L0VBQUYyOEVBNkFE MTExRjE5NkJBNUUyRTZCNDdBODg4L2N4cGQxTlpLY0xjZE9MQzFTNlJVYTJhRG9C cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvY3hwZDFOWktjTGNkT0xDMVM2UlVhMmFEb0JzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEy Rjk0L0VBQUYyOEVBNkFEMTExRjE5NkJBNUUyRTZCNDdBODg4L2N4cGQxTlpLY0xj ZE9MQzFTNlJVYTJhRG9Ccy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCEr48s5B4wvtIhv5Tq+ZgoMYlrP0RFBxd0XtZv60TLRvYfyn4rYLXSR8S+kKbl rhakTh1FI+kmAnFgZimsrBtVvpEf0AoDmTSCRoP5IjymnFD2h9yUDx/GY3HE44eK mDPDS7t6o+hDdkHyi/0PHKnVW5Wm/VbLigYNpUJGhLmVWgJdMao7u3ma6uEtozlO +yokw0ahfxkprRSac0+zcZyrqaSz8zV4/jEyE3xca7Qrqu22OVC7MDPqBKkjpBEO +hyhk6iDmS7Cvcu13XLgZXxML2nud9KHJ+Q2lnwI9pWhDttDdKAVASxuAE5wX85q CJ+3sICU88/k0l3N4t9eHuGy -----END CERTIFICATE-----Generated at Wed Sep 23 13:24:24 2026 by rpki-client