$ rpki-client -vvvf rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft File: sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft (raw, json) Hash identifier: HdymAduTUH/NqH1Qu5aN6kKTt9dkKDo5w4wRihDM4AI= Subject key identifier: 67:71:11:B5:7E:FF:E2:DE:5C:7C:D0:18:92:E1:EC:B6:E9:A6:FC:E9 Authority key identifier: B3:12:C2:2F:3D:0B:97:BA:AF:32:73:E5:C6:6B:8F:14:02:03:E2:F9 Certificate issuer: /CN=A91374BB/serialNumber=B312C22F3D0B97BAAF3273E5C66B8F140203E2F9 Certificate serial: 023B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft Manifest number: 0235 Signing time: Fri 25 Sep 2026 02:40:40 +0000 Manifest this update: Fri 25 Sep 2026 02:40:40 +0000 Manifest next update: Fri 02 Oct 2026 02:40:40 +0000 Files and hashes: 1: sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl (hash: Jka3MtzdWsVO2bvTEsG4+z1jJEmM/hd02FnKHNeFug0=) 2: E7DBE2945B6A11EE8C05CA59C4F9AE02.roa (hash: EOojy2+JzC+p+QaVV3QkjR8Q0Zfn9YjNT084DP1KFTs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 02:40:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 571 (0x23b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91374BB, serialNumber=B312C22F3D0B97BAAF3273E5C66B8F140203E2F9 Validity Not Before: Sep 25 02:40:40 2026 GMT Not After : Oct 2 02:40:40 2026 GMT Subject: CN=6ab5df28-658f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9d:cf:c2:43:a5:7c:64:88:16:de:07:7d:dc: b8:ec:03:46:c0:09:80:2e:66:c6:54:ac:09:1f:fa: 16:0e:6f:dd:2c:af:ad:5a:3c:56:2b:8a:ec:b9:80: 1e:e0:5d:ca:f1:64:73:70:c6:3d:28:7a:aa:fa:78: 3b:2b:4d:7e:b9:a2:d4:db:82:71:d6:ad:d7:5b:09: eb:ca:f0:8a:03:d7:3c:69:fd:59:0c:da:fd:19:4c: 0f:a2:84:cc:02:b7:7e:13:25:63:bb:2d:a3:c4:41: 06:b2:5b:09:47:2f:7d:c6:7b:bf:1a:ca:a1:a8:14: 7e:24:32:8d:08:40:37:d9:5e:d5:a6:22:f1:b2:ef: b3:5e:16:3a:23:1d:e1:d5:b7:15:bc:72:d5:ca:af: e2:8a:59:22:73:f1:db:96:43:94:a1:40:d0:65:0e: 7c:8a:01:dc:08:9e:93:21:e7:44:f6:d7:cf:11:c3: 24:2a:8a:d7:c0:47:65:85:a1:06:12:b9:37:25:e1: f3:89:24:30:a9:e4:a2:17:94:25:46:c6:37:cc:19: 78:47:0a:5b:bf:04:a8:42:f7:28:18:78:cb:0e:bf: 07:60:4a:4b:82:01:12:ff:a0:f7:52:93:c8:33:2f: 03:eb:aa:20:e1:4e:e3:19:13:dd:6d:87:21:27:34: 5a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:71:11:B5:7E:FF:E2:DE:5C:7C:D0:18:92:E1:EC:B6:E9:A6:FC:E9 X509v3 Authority Key Identifier: keyid:B3:12:C2:2F:3D:0B:97:BA:AF:32:73:E5:C6:6B:8F:14:02:03:E2:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:2c:47:46:37:6a:fd:9b:28:80:40:d3:bf:45:6b:bc:6f:9b: 22:da:92:d6:98:35:c8:83:10:89:15:99:bf:ac:dd:08:ff:39: 59:6e:6a:77:ff:4f:ee:a1:8c:cb:59:0f:50:d9:47:a4:9d:83: 6a:52:23:fd:f3:a1:ca:cb:e9:28:e4:e1:7f:a0:cf:15:43:d5: f0:b1:f3:92:bc:b4:e2:89:9a:fb:61:42:7e:d1:13:ef:ed:53: e2:21:aa:f9:b8:f9:8b:43:40:54:3a:0d:9f:63:18:37:17:52: dc:d8:ae:11:63:69:88:b9:e3:1f:ff:01:5d:19:18:77:6c:53: 59:55:29:8e:0b:aa:3c:e8:22:86:71:67:aa:bb:83:a9:7b:b6: 82:e0:c0:b0:1e:cb:0b:44:53:bf:e0:63:20:b9:61:0d:cc:47: 1a:a8:ae:83:01:11:fa:a8:36:c3:7d:7d:c9:31:14:bb:14:6d: f8:77:28:3c:09:19:fe:a7:2d:e9:d9:40:66:69:55:2f:31:8a: 3e:3a:f9:7b:99:64:c2:76:38:6d:1e:d0:56:38:3f:f0:bc:a0: b8:61:40:3d:44:85:9b:cf:aa:c0:a2:9f:99:5f:2c:b4:03:0b: de:78:b0:22:f8:f6:67:4a:da:e9:d4:15:86:76:cf:00:9e:e4: f3:d4:9d:5c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc0QkIxMTAvBgNVBAUTKEIzMTJDMjJGM0QwQjk3QkFBRjMyNzNFNUM2NkI4RjE0 MDIwM0UyRjkwHhcNMjYwOTI1MDI0MDQwWhcNMjYxMDAyMDI0MDQwWjAYMRYwFAYD VQQDEw02YWI1ZGYyOC02NThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnZ3PwkOlfGSIFt4Hfdy47ANGwAmALmbGVKwJH/oWDm/dLK+tWjxWK4rsuYAe 4F3K8WRzcMY9KHqq+ng7K01+uaLU24Jx1q3XWwnryvCKA9c8af1ZDNr9GUwPooTM Ard+EyVjuy2jxEEGslsJRy99xnu/GsqhqBR+JDKNCEA32V7VpiLxsu+zXhY6Ix3h 1bcVvHLVyq/iilkic/HblkOUoUDQZQ58igHcCJ6TIedE9tfPEcMkKorXwEdlhaEG Erk3JeHziSQwqeSiF5QlRsY3zBl4RwpbvwSoQvcoGHjLDr8HYEpLggES/6D3UpPI My8D66og4U7jGRPdbYchJzRaIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGdxEbV+ /+LeXHzQGJLh7LbppvzpMB8GA1UdIwQYMBaAFLMSwi89C5e6rzJz5cZrjxQCA+L5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzRCQi82NDg1NDJDODVC NkExMUVFODBEMzZCNTRDNEY5QUUwMi9zeExDTHowTGw3cXZNblBseG11UEZBSUQ0 dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N4TENMejBMbDdxdk1uUGx4bXVQRkFJRDR2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzRCQi82NDg1NDJDODVCNkExMUVFODBEMzZCNTRDNEY5QUUwMi9zeExDTHowTGw3 cXZNblBseG11UEZBSUQ0dmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARixHRjdq/ZsogEDTv0VrvG+bItqS1pg1yIMQiRWZv6zdCP85WW5qd/9P7qGM y1kPUNlHpJ2DalIj/fOhysvpKOThf6DPFUPV8LHzkry04oma+2FCftET7+1T4iGq +bj5i0NAVDoNn2MYNxdS3NiuEWNpiLnjH/8BXRkYd2xTWVUpjguqPOgihnFnqruD qXu2guDAsB7LC0RTv+BjILlhDcxHGqiugwER+qg2w319yTEUuxRt+HcoPAkZ/qct 6dlAZmlVLzGKPjr5e5lkwnY4bR7QVjg/8LyguGFAPUSFm8+qwKKfmV8stAML3niw Ivj2Z0ra6dQVhnbPAJ7k89SdXA== -----END CERTIFICATE-----Generated at Sat Sep 26 03:52:05 2026 by rpki-client