$ rpki-client -vvvf rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft File: CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft (raw, json) Hash identifier: zb2VMY66NwqOp82bn0ZWGVA0JNmhlMlKOpAIDjer/Ic= Subject key identifier: C0:E4:07:AE:46:01:E3:C4:67:5D:68:A5:AC:D7:94:CA:67:DB:EB:4D Authority key identifier: 0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14 Certificate issuer: /CN=A91886CC/serialNumber=0B10E5EFEF30F8CE04ED4C5B8F48A9CD24BCBA14 Certificate serial: 01F5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft Manifest number: 01ED Signing time: Fri 25 Sep 2026 01:56:17 +0000 Manifest this update: Fri 25 Sep 2026 01:56:16 +0000 Manifest next update: Fri 02 Oct 2026 01:56:16 +0000 Files and hashes: 1: CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl (hash: 89KT0oWrRYh/4ec6AYB3AQg57AqqIHw+osj6KiqmDSk=) 2: 6DAC44BAA91E11F0B822717EC4F9AE02.roa (hash: U/DEuDwRwhqtKgxxnucO+fNicfaNI7xpxs1zj8ALIgg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 01:56:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 501 (0x1f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91886CC, serialNumber=0B10E5EFEF30F8CE04ED4C5B8F48A9CD24BCBA14 Validity Not Before: Sep 25 01:56:16 2026 GMT Not After : Oct 2 01:56:16 2026 GMT Subject: CN=6ab5d4c1-c24f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0f:be:87:36:45:20:13:03:e0:f7:08:bf:74: 5c:74:9d:1c:76:76:41:2a:3c:98:af:1e:a6:66:80: f7:e3:c6:aa:bc:73:25:0a:82:06:1b:a9:a6:c2:a5: 34:26:79:ac:11:bf:c9:58:45:03:5c:86:c6:86:aa: 81:56:ea:bc:13:c1:25:14:0b:4a:e4:d4:46:d2:0e: 8e:9f:a6:29:6f:15:87:a9:cb:54:eb:ff:f8:ec:3f: 6d:ea:9b:3b:39:2a:ad:cd:c3:a7:01:5b:62:b0:3d: 5b:f1:e8:b7:ab:45:21:74:d7:7d:bb:d2:3a:37:dd: 1a:72:32:4a:ae:49:bf:b7:f7:ae:e7:6c:e0:2d:3b: 35:67:22:9f:e0:e4:69:7f:b0:1b:1d:09:9a:0f:53: 45:49:e2:04:0b:06:f1:65:3b:ec:84:d6:55:0e:58: fa:7c:3d:e4:80:1f:27:28:7c:c5:4b:db:48:b6:8c: ff:58:da:98:39:6e:df:6e:cf:cf:cd:f5:21:8b:7c: 3e:a8:95:05:9c:2d:a1:55:fd:47:8d:2e:46:1b:93: 41:8e:20:54:be:5e:d9:a9:5d:dc:a4:8c:ff:27:81: 87:03:20:cf:85:43:dc:40:c8:99:0b:ed:52:5a:df: 36:12:8c:b2:d7:d0:d7:d3:7a:f9:37:bf:43:d2:5b: a3:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:E4:07:AE:46:01:E3:C4:67:5D:68:A5:AC:D7:94:CA:67:DB:EB:4D X509v3 Authority Key Identifier: keyid:0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:3a:f7:0e:d3:eb:ff:08:83:0b:7f:e3:2b:91:21:76:e9:d5: 4d:5e:31:a4:28:52:7f:bd:a5:06:7a:6a:35:34:47:55:c3:7a: d0:ec:64:20:67:78:ee:2c:11:34:75:d6:cc:aa:eb:b7:24:0b: ee:af:93:45:d4:76:04:89:5a:b6:8a:4e:c4:8f:26:50:82:23: d8:ab:14:43:df:dd:27:a8:8a:cf:ad:2b:af:9c:8f:07:55:38: 18:5f:18:70:fd:7f:99:c5:af:9c:2b:07:bf:87:ab:d1:3f:78: a6:50:0e:43:2c:2d:3a:a8:1b:6d:8e:09:d6:1f:26:1c:b8:b7: 12:fb:06:e2:5c:c8:72:e5:bb:c2:1e:06:0a:85:d4:3f:b2:f7: fb:b0:ab:c0:15:2d:27:bb:60:70:ec:7d:20:6d:b0:95:74:de: f0:41:fc:c0:ae:31:f5:0c:51:69:5f:e0:b2:3c:63:27:a3:86: 71:d8:54:56:7a:97:0d:0d:1b:db:0c:5a:20:72:cf:4b:7d:6c: 53:9f:b8:21:4d:40:c4:9f:5b:16:b4:ed:d7:d5:1d:61:d3:62: ee:2e:1f:ea:8b:94:c9:b7:a9:f9:53:3d:e6:eb:34:d7:cf:93: f8:c4:a9:dc:c8:95:17:e8:7d:09:ab:2c:b6:b2:d4:a6:3d:83: ab:fd:73:de -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg2Q0MxMTAvBgNVBAUTKDBCMTBFNUVGRUYzMEY4Q0UwNEVENEM1QjhGNDhBOUNE MjRCQ0JBMTQwHhcNMjYwOTI1MDE1NjE2WhcNMjYxMDAyMDE1NjE2WjAYMRYwFAYD VQQDEw02YWI1ZDRjMS1jMjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQ++hzZFIBMD4PcIv3RcdJ0cdnZBKjyYrx6mZoD348aqvHMlCoIGG6mmwqU0 JnmsEb/JWEUDXIbGhqqBVuq8E8ElFAtK5NRG0g6On6YpbxWHqctU6//47D9t6ps7 OSqtzcOnAVtisD1b8ei3q0UhdNd9u9I6N90acjJKrkm/t/eu52zgLTs1ZyKf4ORp f7AbHQmaD1NFSeIECwbxZTvshNZVDlj6fD3kgB8nKHzFS9tItoz/WNqYOW7fbs/P zfUhi3w+qJUFnC2hVf1HjS5GG5NBjiBUvl7ZqV3cpIz/J4GHAyDPhUPcQMiZC+1S Wt82Eoyy19DX03r5N79D0lujSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMDkB65G AePEZ11opazXlMpn2+tNMB8GA1UdIwQYMBaAFAsQ5e/vMPjOBO1MW49Iqc0kvLoU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODZDQy81MTIxNDE1RUQ1 RjUxMUVFQjBGQTYwNUJDNEY5QUUwMi9DeERsNy04dy1NNEU3VXhiajBpcHpTUzh1 aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0N4RGw3LTh3LU00RTdVeGJqMGlwelNTOHVoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODZDQy81MTIxNDE1RUQ1RjUxMUVFQjBGQTYwNUJDNEY5QUUwMi9DeERsNy04dy1N NEU3VXhiajBpcHpTUzh1aFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqTr3DtPr/wiDC3/jK5EhdunVTV4xpChSf72lBnpqNTRHVcN60OxkIGd47iwR NHXWzKrrtyQL7q+TRdR2BIlatopOxI8mUIIj2KsUQ9/dJ6iKz60rr5yPB1U4GF8Y cP1/mcWvnCsHv4er0T94plAOQywtOqgbbY4J1h8mHLi3EvsG4lzIcuW7wh4GCoXU P7L3+7CrwBUtJ7tgcOx9IG2wlXTe8EH8wK4x9QxRaV/gsjxjJ6OGcdhUVnqXDQ0b 2wxaIHLPS31sU5+4IU1AxJ9bFrTt19UdYdNi7i4f6ouUybep+VM95us018+T+MSp 3MiVF+h9CasstrLUpj2Dq/1z3g== -----END CERTIFICATE-----Generated at Fri Sep 25 08:00:44 2026 by rpki-client