$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E9D1A/C59B02DA1D7011E286F147B508B02CD2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.mft File: CXb8PSMYbUjGcXc3QIkc9U4xuA4.mft (raw, json) Hash identifier: 7nh3nX0MbGwkfioCKwCCPTFbtkgZ9IiCGj7s6RMimAQ= Subject key identifier: 77:45:2A:35:DA:51:2F:8D:E7:D4:F5:94:0C:E3:03:D1:BC:71:C9:5C Authority key identifier: 09:76:FC:3D:23:18:6D:48:C6:71:77:37:40:89:1C:F5:4E:31:B8:0E Certificate issuer: /CN=A91E9D1A/serialNumber=0976FC3D23186D48C671773740891CF54E31B80E Certificate serial: 35CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9D1A/C59B02DA1D7011E286F147B508B02CD2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.mft Manifest number: 35A5 Signing time: Thu 24 Sep 2026 14:19:26 +0000 Manifest this update: Thu 24 Sep 2026 14:19:26 +0000 Manifest next update: Thu 01 Oct 2026 14:19:26 +0000 Files and hashes: 1: CXb8PSMYbUjGcXc3QIkc9U4xuA4.crl (hash: hPpqTJukXeaGaM2AaytbcofRrEY6gytCVslYpX9xlIU=) 2: E404430CB0F811E595E0F761C4F9AE02.roa (hash: dh5lUduMwHSl3wThPTXL9P/yi+GXIfLIHScJbSj8Rp0=) 3: Hc9HIXtMSG_5N_vBQ1tiTJyx4Uc.asa (hash: Hn+LrBWls+8N6/ROjuDSjCe4xS9yFFqp8inB56Ippe4=) 4: 77WwVdlWOllQ_9nqw0OJxL5S230.asa (hash: 4G+8eHZ/yV9ZB1VW22OiyhYdNPjveNdtUIFCgVDff7Y=) 5: 81C9B5A4BBFA11ED99272016C4F9AE02.roa (hash: XQiiRoZi6pRqCcdlCvd3IdGsHWdpm/jnCGN7DrFAwWE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9D1A/C59B02DA1D7011E286F147B508B02CD2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.crl rsync://rpki.apnic.net/member_repository/A91E9D1A/C59B02DA1D7011E286F147B508B02CD2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 14:19:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13771 (0x35cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9D1A, serialNumber=0976FC3D23186D48C671773740891CF54E31B80E Validity Not Before: Sep 24 14:19:26 2026 GMT Not After : Oct 1 14:19:26 2026 GMT Subject: CN=6ab5316e-2c80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:99:d8:5f:30:b9:ec:fd:f6:78:7f:4f:4d:35: 05:8b:63:d9:06:c8:54:a0:56:bf:b4:42:40:9e:9d: 44:a4:0a:96:c9:ea:d0:82:8c:ac:ca:60:4a:af:c7: 88:29:4c:7c:4d:d7:90:a3:41:4c:99:f0:1e:82:e1: 0a:6d:ff:d1:88:4a:08:ce:b4:c5:35:a9:fc:c0:8a: d9:fc:cc:0a:a8:87:f9:4c:35:d3:d1:88:11:3c:78: 68:a0:49:df:18:87:5e:12:5e:f8:33:a6:c9:d3:68: 93:a3:ab:b8:f1:77:6a:5a:0b:2b:4a:65:5b:cf:bd: 6c:06:ca:4f:42:cc:fd:ac:03:80:65:c2:c0:09:fb: 52:da:65:38:9c:0b:f2:e2:16:c2:99:80:0f:17:f6: 3f:08:20:7c:b8:95:5c:80:80:63:5f:97:4b:ff:8d: 01:4d:12:77:fd:d7:38:65:ef:53:f4:58:c5:6d:8b: 3e:4e:e0:a4:f8:ea:49:d7:c9:12:af:f1:d6:f5:cd: cb:7b:eb:d2:3d:42:e9:d3:bb:fb:cd:3b:a3:fc:99: 0b:e9:a0:f8:f0:6a:ac:f3:9f:75:52:5c:ca:d0:42: 8a:12:95:2b:c8:0a:50:e9:1d:89:68:e1:64:9b:99: 0c:52:d4:e3:6a:14:ba:30:6a:8d:92:a1:bc:5c:ec: ee:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:45:2A:35:DA:51:2F:8D:E7:D4:F5:94:0C:E3:03:D1:BC:71:C9:5C X509v3 Authority Key Identifier: keyid:09:76:FC:3D:23:18:6D:48:C6:71:77:37:40:89:1C:F5:4E:31:B8:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9D1A/C59B02DA1D7011E286F147B508B02CD2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9D1A/C59B02DA1D7011E286F147B508B02CD2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:d2:7a:c1:54:05:83:6a:19:33:e1:f5:52:17:b6:e1:f7:cf: 16:fb:0f:64:33:aa:31:0b:e3:03:0f:16:18:70:28:a1:97:e1: cd:53:86:7c:df:49:1e:e9:c5:c1:80:55:e4:30:51:e0:9f:77: a3:de:09:e5:f9:97:7f:aa:de:e6:61:ce:05:cc:1d:12:62:fa: 70:29:12:9d:b1:08:88:de:36:5b:4a:bf:bc:38:98:84:ab:22: 75:06:48:96:d7:ed:90:21:3f:22:80:b9:be:6b:87:04:cc:af: ef:50:29:fd:84:a0:83:4b:20:ce:47:a8:91:e3:58:7e:5e:73: 1c:bf:b9:1e:96:6f:d6:ed:54:c0:ae:49:9f:1b:ae:d2:bf:28: 52:e7:4d:f4:67:de:bf:24:25:9a:0d:0b:47:7e:ce:b2:98:15: e6:26:ad:a1:49:e4:ea:bc:49:8d:0d:7b:47:a8:84:f2:ba:7f: 31:1d:45:23:23:3d:4d:8c:d3:dd:00:c9:00:9a:45:c2:de:9b: b5:29:ee:6c:41:5e:47:06:ca:c5:ad:ec:34:84:c7:49:f6:c5: dc:81:49:a2:6c:37:4d:63:82:1d:06:5e:60:e4:5c:f0:05:8b: d8:6e:0a:15:18:45:d8:5b:cb:e5:06:45:0c:83:fe:1f:97:9b: 02:80:b7:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlEMUExMTAvBgNVBAUTKDA5NzZGQzNEMjMxODZENDhDNjcxNzczNzQwODkxQ0Y1 NEUzMUI4MEUwHhcNMjYwOTI0MTQxOTI2WhcNMjYxMDAxMTQxOTI2WjAYMRYwFAYD VQQDEw02YWI1MzE2ZS0yYzgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5nYXzC57P32eH9PTTUFi2PZBshUoFa/tEJAnp1EpAqWyerQgoysymBKr8eI KUx8TdeQo0FMmfAeguEKbf/RiEoIzrTFNan8wIrZ/MwKqIf5TDXT0YgRPHhooEnf GIdeEl74M6bJ02iTo6u48XdqWgsrSmVbz71sBspPQsz9rAOAZcLACftS2mU4nAvy 4hbCmYAPF/Y/CCB8uJVcgIBjX5dL/40BTRJ3/dc4Ze9T9FjFbYs+TuCk+OpJ18kS r/HW9c3Le+vSPULp07v7zTuj/JkL6aD48Gqs8591UlzK0EKKEpUryApQ6R2JaOFk m5kMUtTjahS6MGqNkqG8XOzuewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHdFKjXa US+N59T1lAzjA9G8cclcMB8GA1UdIwQYMBaAFAl2/D0jGG1IxnF3N0CJHPVOMbgO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUQxQS9DNTlCMDJEQTFE NzAxMUUyODZGMTQ3QjUwOEIwMkNEMi9DWGI4UFNNWWJVakdjWGMzUUlrYzlVNHh1 QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NYYjhQU01ZYlVqR2NYYzNRSWtjOVU0eHVBNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUQxQS9DNTlCMDJEQTFENzAxMUUyODZGMTQ3QjUwOEIwMkNEMi9DWGI4UFNNWWJV akdjWGMzUUlrYzlVNHh1QTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMtJ6wVQFg2oZM+H1Uhe24ffPFvsPZDOqMQvjAw8WGHAooZfhzVOGfN9JHunF wYBV5DBR4J93o94J5fmXf6re5mHOBcwdEmL6cCkSnbEIiN42W0q/vDiYhKsidQZI ltftkCE/IoC5vmuHBMyv71Ap/YSgg0sgzkeokeNYfl5zHL+5HpZv1u1UwK5Jnxuu 0r8oUudN9GfevyQlmg0LR37OspgV5iatoUnk6rxJjQ17R6iE8rp/MR1FIyM9TYzT 3QDJAJpFwt6btSnubEFeRwbKxa3sNITHSfbF3IFJomw3TWOCHQZeYORc8AWL2G4K FRhF2FvL5QZFDIP+H5ebAoC3Wg== -----END CERTIFICATE-----Generated at Thu Sep 24 21:21:31 2026 by rpki-client