$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft File: CJx_ANge3WTbq20DcSKyoh8NO-Y.mft (raw, json) Hash identifier: udpGtUSfJmri78tgKV+tTwBV5Jba1mXy3vKkOnck588= Subject key identifier: 5C:38:E3:3C:06:4C:AE:FE:A4:A2:0A:DE:F1:41:B2:1A:BD:20:8F:3F Authority key identifier: 08:9C:7F:00:D8:1E:DD:64:DB:AB:6D:03:71:22:B2:A2:1F:0D:3B:E6 Certificate issuer: /CN=A91BB5F2/serialNumber=089C7F00D81EDD64DBAB6D037122B2A21F0D3BE6 Certificate serial: 02F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft Manifest number: 02EA Signing time: Fri 25 Sep 2026 00:59:49 +0000 Manifest this update: Fri 25 Sep 2026 00:59:48 +0000 Manifest next update: Fri 02 Oct 2026 00:59:48 +0000 Files and hashes: 1: CJx_ANge3WTbq20DcSKyoh8NO-Y.crl (hash: dlce7RAxwTUOz4WXlJKMbEYsY8yoTzx1HEaN0taG9/k=) 2: D1FD204C43B911EDB6AA2D5FC4F9AE02.roa (hash: ZQQmEapOEB8hbnYD2748C5/tVDyFBuYad9v0XjI6Mok=) 3: D173DA3043B911EDB6AA2D5FC4F9AE02.roa (hash: 4oINYtmMIJAI0qB/zgs7eJ/PHXiHCKVBi4RA5fWevZs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.crl rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 00:59:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 758 (0x2f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB5F2, serialNumber=089C7F00D81EDD64DBAB6D037122B2A21F0D3BE6 Validity Not Before: Sep 25 00:59:48 2026 GMT Not After : Oct 2 00:59:48 2026 GMT Subject: CN=6ab5c785-4744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5b:58:07:fc:5d:17:84:2b:ef:2c:74:d7:09: e4:32:ed:00:e6:35:67:2d:32:c4:e4:61:99:01:eb: fb:3d:2b:23:b1:a5:f7:0f:ff:3d:dc:fa:e9:39:1a: fd:e0:e6:af:6d:85:b5:de:48:1b:5f:e0:45:ed:06: 16:db:8a:4d:6d:ff:2f:69:f8:87:42:07:2a:ca:a6: e3:86:a8:51:3a:8d:32:88:b6:dd:b2:d9:93:b4:ea: 25:3b:bf:8d:1e:97:a5:26:66:e8:d1:ef:aa:38:e4: f5:2a:11:ac:74:a2:68:0e:34:ef:ed:e7:35:6c:b5: 1c:4d:f5:fc:9a:98:c9:6b:0e:a8:67:3a:44:6a:70: 82:0b:43:0c:fc:1d:a6:0e:8a:0e:12:fc:93:8c:63: 59:9f:e5:1e:fe:e2:8b:7f:6d:ca:6d:dc:53:0f:6d: 49:ae:34:06:9b:ea:42:2a:91:6c:9a:10:c1:33:3c: ef:47:58:36:8f:ac:a7:52:ae:3a:e9:75:e8:65:7d: 39:20:52:7b:ca:a3:fc:e6:98:99:2e:80:3d:07:31: 19:a2:43:c2:a6:0c:25:a1:fe:2c:65:a0:ad:ff:46: 42:fc:06:e7:fb:77:2a:e7:50:fe:1c:5d:0a:3d:40: 36:e2:65:56:7a:49:c7:65:c5:62:1b:b2:0c:69:47: ed:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:38:E3:3C:06:4C:AE:FE:A4:A2:0A:DE:F1:41:B2:1A:BD:20:8F:3F X509v3 Authority Key Identifier: keyid:08:9C:7F:00:D8:1E:DD:64:DB:AB:6D:03:71:22:B2:A2:1F:0D:3B:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:cd:b3:cc:7a:68:1a:ff:49:62:c7:85:ae:6c:0d:89:81:f3: 78:b9:24:ec:0f:56:c9:9e:65:a6:82:56:a9:ef:68:cc:21:76: 7f:8e:8c:bc:ee:85:5a:12:cd:54:07:7e:97:74:9e:f4:00:36: 63:bb:da:e7:16:c6:5e:51:6f:3d:3d:ee:a8:9d:ac:f8:c7:ef: a0:09:05:fc:a9:12:fa:bc:ec:a7:41:d9:1c:80:94:22:58:da: 6e:05:7c:7f:28:88:9a:84:98:ff:eb:9a:52:62:66:fc:75:80: ad:d8:1b:9d:3f:80:84:56:52:e7:21:eb:19:4f:20:65:1a:42: de:00:57:61:5e:95:72:94:f6:38:80:ba:43:95:47:97:b2:ea: 10:d8:30:cf:f1:de:7e:89:b9:74:12:77:38:24:81:b8:be:3b: 64:9a:8e:2c:9b:eb:bc:56:74:3c:ba:f5:57:37:4a:85:32:ac: 81:2a:4a:ee:45:18:81:e0:90:b2:ae:93:39:a0:30:56:78:ed: 0e:d8:43:97:89:91:0e:99:94:36:7a:21:4b:9d:a0:a2:be:e3: c8:71:f6:82:1c:3b:86:15:0a:05:d3:4c:8e:18:11:12:2a:ce: 2e:6f:34:66:9b:b8:ea:4e:3e:73:73:59:63:2b:fe:14:9f:6e: 1f:a2:a2:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAvYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI1RjIxMTAvBgNVBAUTKDA4OUM3RjAwRDgxRURENjREQkFCNkQwMzcxMjJCMkEy MUYwRDNCRTYwHhcNMjYwOTI1MDA1OTQ4WhcNMjYxMDAyMDA1OTQ4WjAYMRYwFAYD VQQDEw02YWI1Yzc4NS00NzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm1tYB/xdF4Qr7yx01wnkMu0A5jVnLTLE5GGZAev7PSsjsaX3D/893PrpORr9 4OavbYW13kgbX+BF7QYW24pNbf8vafiHQgcqyqbjhqhROo0yiLbdstmTtOolO7+N HpelJmbo0e+qOOT1KhGsdKJoDjTv7ec1bLUcTfX8mpjJaw6oZzpEanCCC0MM/B2m DooOEvyTjGNZn+Ue/uKLf23KbdxTD21JrjQGm+pCKpFsmhDBMzzvR1g2j6ynUq46 6XXoZX05IFJ7yqP85piZLoA9BzEZokPCpgwlof4sZaCt/0ZC/Abn+3cq51D+HF0K PUA24mVWeknHZcViG7IMaUftewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFw44zwG TK7+pKIK3vFBshq9II8/MB8GA1UdIwQYMBaAFAicfwDYHt1k26ttA3EisqIfDTvm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjVGMi80QUVFRDkxQzQz QjcxMUVEOThGRjQ1NUVDNEY5QUUwMi9DSnhfQU5nZTNXVGJxMjBEY1NLeW9oOE5P LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NKeF9BTmdlM1dUYnEyMERjU0t5b2g4Tk8tWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjVGMi80QUVFRDkxQzQzQjcxMUVEOThGRjQ1NUVDNEY5QUUwMi9DSnhfQU5nZTNX VGJxMjBEY1NLeW9oOE5PLVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAns2zzHpoGv9JYseFrmwNiYHzeLkk7A9WyZ5lpoJWqe9ozCF2f46MvO6FWhLN VAd+l3Se9AA2Y7va5xbGXlFvPT3uqJ2s+MfvoAkF/KkS+rzsp0HZHICUIljabgV8 fyiImoSY/+uaUmJm/HWArdgbnT+AhFZS5yHrGU8gZRpC3gBXYV6VcpT2OIC6Q5VH l7LqENgwz/Hefom5dBJ3OCSBuL47ZJqOLJvrvFZ0PLr1VzdKhTKsgSpK7kUYgeCQ sq6TOaAwVnjtDthDl4mRDpmUNnohS52gor7jyHH2ghw7hhUKBdNMjhgREirOLm80 Zpu46k4+c3NZYyv+FJ9uH6Kiwg== -----END CERTIFICATE-----Generated at Fri Sep 25 06:54:40 2026 by rpki-client