$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AA444/8DCE274AB11D11EEA3363319C4F9AE02/cx5XsN_ep5G6TV1xly2oEF3JPos.mft File: cx5XsN_ep5G6TV1xly2oEF3JPos.mft (raw, json) Hash identifier: fuslujqtIkVo7HJupurG85T6OOdI1MNnUZDodMOxqWo= Subject key identifier: 7A:95:E1:EB:CC:D7:57:3A:A2:BE:53:C6:8B:35:96:31:69:28:F1:AA Authority key identifier: 73:1E:57:B0:DF:DE:A7:91:BA:4D:5D:71:97:2D:A8:10:5D:C9:3E:8B Certificate issuer: /CN=A91AA444/serialNumber=731E57B0DFDEA791BA4D5D71972DA8105DC93E8B Certificate serial: 0204 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx5XsN_ep5G6TV1xly2oEF3JPos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA444/8DCE274AB11D11EEA3363319C4F9AE02/cx5XsN_ep5G6TV1xly2oEF3JPos.mft Manifest number: 01FF Signing time: Tue 29 Sep 2026 03:37:36 +0000 Manifest this update: Tue 29 Sep 2026 03:37:35 +0000 Manifest next update: Tue 06 Oct 2026 03:37:35 +0000 Files and hashes: 1: cx5XsN_ep5G6TV1xly2oEF3JPos.crl (hash: s8R6WM2YdKbXImo/AMiS03pKhTtitMCUKqkAg8eAF18=) 2: 24DD519CEEA311EFA5EDDD76C4F9AE02.roa (hash: oYkxtXccfNzhupGam+/pGKaAabTu5hknTCz4hIdu2D0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA444/8DCE274AB11D11EEA3363319C4F9AE02/cx5XsN_ep5G6TV1xly2oEF3JPos.crl rsync://rpki.apnic.net/member_repository/A91AA444/8DCE274AB11D11EEA3363319C4F9AE02/cx5XsN_ep5G6TV1xly2oEF3JPos.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx5XsN_ep5G6TV1xly2oEF3JPos.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Oct 2026 03:37:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 516 (0x204) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA444, serialNumber=731E57B0DFDEA791BA4D5D71972DA8105DC93E8B Validity Not Before: Sep 29 03:37:35 2026 GMT Not After : Oct 6 03:37:35 2026 GMT Subject: CN=6abb3280-60fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d8:e9:de:cb:6e:1c:fe:bc:55:a4:5a:d5:34: 9a:c0:d6:1a:df:e3:d0:43:23:c1:31:ec:64:74:02: f0:e3:1f:e7:60:9f:5b:0a:36:6f:ee:89:45:bf:02: df:f3:07:a2:12:ff:06:03:f9:55:bc:f1:48:f2:8c: 8f:58:a0:19:70:70:a1:d7:ce:e3:84:cd:33:f7:1b: e7:12:10:79:c7:96:a8:af:dc:e8:c2:66:51:56:88: 04:89:53:54:0a:19:24:a5:43:75:64:c3:a7:61:c2: 84:c9:45:f0:59:b5:e4:70:08:df:9a:8a:dc:58:ea: 8f:1c:51:b8:98:b0:2f:ef:dd:9e:da:a6:21:12:0e: 2a:7b:7c:ab:c8:10:0c:79:32:96:73:81:32:70:01: ab:f0:12:15:3a:15:19:5d:49:2e:14:05:72:24:74: 1a:f2:e1:7e:e9:b8:4a:93:53:a0:32:cb:e1:35:f4: d2:3c:4b:e2:d1:38:6a:fc:25:18:72:44:f2:a4:09: 0d:2e:06:ac:e4:97:71:9d:45:39:a2:f5:79:91:a5: e2:18:85:25:df:25:a5:3a:22:5b:75:9e:13:28:c7: 4f:42:af:cc:b8:9b:80:01:30:84:66:b2:1a:04:43: 29:ad:ae:e4:3f:44:15:b9:08:41:78:77:53:fe:16: 27:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:95:E1:EB:CC:D7:57:3A:A2:BE:53:C6:8B:35:96:31:69:28:F1:AA X509v3 Authority Key Identifier: keyid:73:1E:57:B0:DF:DE:A7:91:BA:4D:5D:71:97:2D:A8:10:5D:C9:3E:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA444/8DCE274AB11D11EEA3363319C4F9AE02/cx5XsN_ep5G6TV1xly2oEF3JPos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx5XsN_ep5G6TV1xly2oEF3JPos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA444/8DCE274AB11D11EEA3363319C4F9AE02/cx5XsN_ep5G6TV1xly2oEF3JPos.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:79:8a:ff:e7:20:f5:01:41:1f:58:c5:9b:57:63:81:89:84: 5e:08:8a:42:71:64:ba:14:dc:f8:35:29:d0:2d:de:fc:8f:66: 2f:e6:78:5e:8c:a6:91:3f:e4:70:42:40:30:bd:59:49:89:7f: a2:4a:76:9b:8e:11:68:16:94:f7:1f:b2:bf:a9:55:fa:88:4a: a6:29:4b:e4:e1:31:95:81:0a:54:71:26:82:6f:39:64:b4:6d: 8e:0c:8c:e8:c8:6e:ba:4b:af:59:e1:38:60:b8:7a:7a:eb:a9: be:aa:3d:d6:f0:0f:ca:77:58:64:00:0d:88:ca:1e:82:a1:93: 98:e2:ed:d5:1c:65:94:38:a5:e7:40:94:55:df:f3:1f:40:30: 49:0e:12:36:de:9c:3b:44:da:4d:48:3a:e9:08:a9:10:20:1a: 2c:26:ed:fb:f2:ae:e7:e1:fe:6f:fb:9e:2e:1d:b9:df:51:81: aa:0f:6c:4a:d6:33:f2:62:44:2e:61:d2:b3:6c:5f:84:7b:8f: 56:e3:a6:49:34:f3:4f:04:d0:6c:2b:d3:d0:3d:64:3d:2d:fc: 7a:a9:4b:06:73:5b:78:34:28:19:ad:89:bc:b8:01:51:25:23: 1b:01:78:1c:1b:7f:e6:c1:06:aa:a3:1c:36:56:37:2f:f8:f6: 16:50:85:60 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE0NDQxMTAvBgNVBAUTKDczMUU1N0IwREZERUE3OTFCQTRENUQ3MTk3MkRBODEw NURDOTNFOEIwHhcNMjYwOTI5MDMzNzM1WhcNMjYxMDA2MDMzNzM1WjAYMRYwFAYD VQQDEw02YWJiMzI4MC02MGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzNjp3stuHP68VaRa1TSawNYa3+PQQyPBMexkdALw4x/nYJ9bCjZv7olFvwLf 8weiEv8GA/lVvPFI8oyPWKAZcHCh187jhM0z9xvnEhB5x5aor9zowmZRVogEiVNU ChkkpUN1ZMOnYcKEyUXwWbXkcAjfmorcWOqPHFG4mLAv792e2qYhEg4qe3yryBAM eTKWc4EycAGr8BIVOhUZXUkuFAVyJHQa8uF+6bhKk1OgMsvhNfTSPEvi0Thq/CUY ckTypAkNLgas5JdxnUU5ovV5kaXiGIUl3yWlOiJbdZ4TKMdPQq/MuJuAATCEZrIa BEMpra7kP0QVuQhBeHdT/hYnUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHqV4evM 11c6or5Txos1ljFpKPGqMB8GA1UdIwQYMBaAFHMeV7Df3qeRuk1dcZctqBBdyT6L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTQ0NC84RENFMjc0QUIx MUQxMUVFQTMzNjMzMTlDNEY5QUUwMi9jeDVYc05fZXA1RzZUVjF4bHkyb0VGM0pQ b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N4NVhzTl9lcDVHNlRWMXhseTJvRUYzSlBvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTQ0NC84RENFMjc0QUIxMUQxMUVFQTMzNjMzMTlDNEY5QUUwMi9jeDVYc05fZXA1 RzZUVjF4bHkyb0VGM0pQb3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAw3mK/+cg9QFBH1jFm1djgYmEXgiKQnFkuhTc+DUp0C3e/I9mL+Z4XoymkT/k cEJAML1ZSYl/okp2m44RaBaU9x+yv6lV+ohKpilL5OExlYEKVHEmgm85ZLRtjgyM 6MhuukuvWeE4YLh6euupvqo91vAPyndYZAANiMoegqGTmOLt1RxllDil50CUVd/z H0AwSQ4SNt6cO0TaTUg66QipECAaLCbt+/Ku5+H+b/ueLh2531GBqg9sStYz8mJE LmHSs2xfhHuPVuOmSTTzTwTQbCvT0D1kPS38eqlLBnNbeDQoGa2JvLgBUSUjGwF4 HBt/5sEGqqMcNlY3L/j2FlCFYA== -----END CERTIFICATE-----Generated at Tue Sep 29 17:53:39 2026 by rpki-client