$ rpki-client -vvvf rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft File: cxr37OuNcapcrpOXPuGmWXYUwkQ.mft (raw, json) Hash identifier: HMCk4yX0hQr0nFA84FsC7Z0JAyf94Qcjh084/wmpQzY= Subject key identifier: 64:A8:D9:67:90:92:26:41:34:ED:65:7E:9C:BA:28:A3:3F:F4:CB:58 Authority key identifier: 73:1A:F7:EC:EB:8D:71:AA:5C:AE:93:97:3E:E1:A6:59:76:14:C2:44 Certificate issuer: /CN=A9169E68/serialNumber=731AF7ECEB8D71AA5CAE93973EE1A6597614C244 Certificate serial: 08D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxr37OuNcapcrpOXPuGmWXYUwkQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft Manifest number: 08CA Signing time: Thu 24 Sep 2026 20:23:59 +0000 Manifest this update: Thu 24 Sep 2026 20:23:59 +0000 Manifest next update: Thu 01 Oct 2026 20:23:59 +0000 Files and hashes: 1: cxr37OuNcapcrpOXPuGmWXYUwkQ.crl (hash: 60jV3teB8Yn2TE0GZDvKrvWJKz+TJ108icmbbcdUUP8=) 2: 6A23B8EAF25411EA9DE4FF2DC4F9AE02.roa (hash: Wg9RfGn7DWEr8GbZKeTSiadhyGcaa2JL5/PabgAQIOg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.crl rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxr37OuNcapcrpOXPuGmWXYUwkQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 20:23:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2258 (0x8d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169E68, serialNumber=731AF7ECEB8D71AA5CAE93973EE1A6597614C244 Validity Not Before: Sep 24 20:23:59 2026 GMT Not After : Oct 1 20:23:59 2026 GMT Subject: CN=6ab586df-dbdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2c:b8:d5:98:cb:e0:07:b8:a0:c9:fa:27:01: 72:af:30:6b:f9:5a:e6:1b:f1:46:d3:19:b7:38:2d: 03:d7:0e:1c:44:0e:33:db:f1:3b:44:e5:27:8f:87: 73:4a:7e:42:59:f4:5a:ff:91:93:5f:b3:eb:49:36: 4b:32:67:04:c9:92:54:50:37:39:ce:84:3f:4a:6e: 63:71:07:ee:88:b2:f8:cc:5b:f9:19:2f:d6:15:83: eb:b0:f2:96:1b:21:8b:01:ac:ab:b1:39:d9:5f:70: 9a:81:c3:76:8c:a1:fa:e9:4f:dd:91:94:e1:62:e4: ee:62:6e:f5:58:be:15:4a:d9:9a:4c:2b:49:b9:f7: 76:f7:78:e7:e7:ad:99:23:43:63:1e:70:82:42:ab: 0a:bf:7c:4a:28:a9:1f:75:88:1b:ed:0f:f1:28:2f: c6:79:1a:f7:57:f2:01:7f:db:80:10:96:33:54:c5: a1:0c:b9:e3:e9:f8:7f:88:92:23:8a:98:66:35:69: c1:b0:10:19:71:5c:b8:1f:f5:70:dd:0f:67:55:37: 98:57:fc:f3:b2:b3:da:26:49:ab:b6:4e:e3:7f:46: 89:1d:eb:d8:c5:9c:ae:24:7b:e2:43:65:e4:8e:1a: 85:78:8a:26:07:d6:df:5b:37:c7:8e:b1:7d:3d:f5: d0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:A8:D9:67:90:92:26:41:34:ED:65:7E:9C:BA:28:A3:3F:F4:CB:58 X509v3 Authority Key Identifier: keyid:73:1A:F7:EC:EB:8D:71:AA:5C:AE:93:97:3E:E1:A6:59:76:14:C2:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxr37OuNcapcrpOXPuGmWXYUwkQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:bc:c9:ec:87:0a:ce:1e:05:3e:4b:d3:af:c4:21:67:bd:ff: 3b:58:27:4e:a3:85:73:46:bb:7d:14:e1:53:42:e4:47:3e:a6: 9c:59:ca:71:37:39:b3:e1:28:1c:c4:14:26:09:5f:bc:29:61: e7:bb:5f:52:e5:85:a1:bf:5b:80:43:8a:6d:54:fc:e5:13:f9: ec:30:31:76:6f:85:3f:0f:f9:bc:6f:5b:a9:18:fd:f2:ec:ae: 44:bf:3f:fb:92:87:6c:c8:94:ff:6a:d3:6a:8f:c0:76:6c:9c: 14:48:dc:68:42:a0:f7:e6:6b:b4:85:30:0a:88:52:dd:4c:f1: 50:0f:20:3c:37:c8:af:85:e9:ea:d4:07:ad:0d:b4:c8:d1:d9: 55:6c:9c:63:1f:d4:30:c5:fa:a3:21:99:fa:f1:e2:7b:09:25: 73:20:00:89:c8:35:da:48:63:45:cb:dd:48:b3:2b:89:b0:b9: ff:2e:29:40:7f:ea:80:f3:5b:6b:bc:3f:b3:79:d4:69:b9:50: e4:65:e6:fc:c0:b0:92:f5:f6:c3:3c:11:4e:99:91:9d:22:2b: 70:79:09:ad:6c:2a:5d:5e:e3:5e:b3:3e:c8:31:96:a5:20:1e: 55:d4:7e:75:2a:f5:7f:f9:6c:30:bf:3c:46:c9:0b:7b:f0:a3: cc:da:97:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlFNjgxMTAvBgNVBAUTKDczMUFGN0VDRUI4RDcxQUE1Q0FFOTM5NzNFRTFBNjU5 NzYxNEMyNDQwHhcNMjYwOTI0MjAyMzU5WhcNMjYxMDAxMjAyMzU5WjAYMRYwFAYD VQQDEw02YWI1ODZkZi1kYmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzSy41ZjL4Ae4oMn6JwFyrzBr+VrmG/FG0xm3OC0D1w4cRA4z2/E7ROUnj4dz Sn5CWfRa/5GTX7PrSTZLMmcEyZJUUDc5zoQ/Sm5jcQfuiLL4zFv5GS/WFYPrsPKW GyGLAayrsTnZX3CagcN2jKH66U/dkZThYuTuYm71WL4VStmaTCtJufd293jn562Z I0NjHnCCQqsKv3xKKKkfdYgb7Q/xKC/GeRr3V/IBf9uAEJYzVMWhDLnj6fh/iJIj iphmNWnBsBAZcVy4H/Vw3Q9nVTeYV/zzsrPaJkmrtk7jf0aJHevYxZyuJHviQ2Xk jhqFeIomB9bfWzfHjrF9PfXQvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGSo2WeQ kiZBNO1lfpy6KKM/9MtYMB8GA1UdIwQYMBaAFHMa9+zrjXGqXK6Tlz7hpll2FMJE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUU2OC82MzIyQTMzQ0Yy NTIxMUVBQkI4RUI0MEZDNEY5QUUwMi9jeHIzN091TmNhcGNycE9YUHVHbVdYWVV3 a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N4cjM3T3VOY2FwY3JwT1hQdUdtV1hZVXdrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUU2OC82MzIyQTMzQ0YyNTIxMUVBQkI4RUI0MEZDNEY5QUUwMi9jeHIzN091TmNh cGNycE9YUHVHbVdYWVV3a1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyLzJ7IcKzh4FPkvTr8QhZ73/O1gnTqOFc0a7fRThU0LkRz6mnFnKcTc5s+Eo HMQUJglfvClh57tfUuWFob9bgEOKbVT85RP57DAxdm+FPw/5vG9bqRj98uyuRL8/ +5KHbMiU/2rTao/AdmycFEjcaEKg9+ZrtIUwCohS3UzxUA8gPDfIr4Xp6tQHrQ20 yNHZVWycYx/UMMX6oyGZ+vHiewklcyAAicg12khjRcvdSLMribC5/y4pQH/qgPNb a7w/s3nUablQ5GXm/MCwkvX2wzwRTpmRnSIrcHkJrWwqXV7jXrM+yDGWpSAeVdR+ dSr1f/lsML88RskLe/CjzNqXxQ== -----END CERTIFICATE-----Generated at Sat Sep 26 04:48:44 2026 by rpki-client