$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft File: Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft (raw, json) Hash identifier: MUsbUOcf3/WNcQZ/+QYN8thI13i/sgljU4/zSwT1CIU= Subject key identifier: F4:90:64:E1:2A:C6:15:45:8A:DC:68:B5:75:CE:E7:8E:8B:6A:E6:E6 Authority key identifier: 0A:3C:7B:38:49:96:E1:AF:57:95:85:45:39:4E:DB:3E:20:DB:EE:9E Certificate issuer: /CN=A91F0C45/serialNumber=0A3C7B384996E1AF57958545394EDB3E20DBEE9E Certificate serial: D3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft Manifest number: CD Signing time: Mon 21 Sep 2026 06:47:28 +0000 Manifest this update: Mon 21 Sep 2026 06:47:27 +0000 Manifest next update: Mon 28 Sep 2026 06:47:27 +0000 Files and hashes: 1: Cjx7OEmW4a9XlYVFOU7bPiDb7p4.crl (hash: BzhqT7fLw4BJmGUYPxLqmi0gi1K4+abFedh5VB3Hx6Y=) 2: 8A80B8D69A1011F0AC6E9127C4F9AE02.roa (hash: Dpuua3C8HF/TzJDPbTHc748WAwDZUWGv1xbXjI6Ri+E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.crl rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:47:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0C45, serialNumber=0A3C7B384996E1AF57958545394EDB3E20DBEE9E Validity Not Before: Sep 21 06:47:27 2026 GMT Not After : Sep 28 06:47:27 2026 GMT Subject: CN=6ab0d300-e975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a4:1a:8d:fb:23:18:89:9a:4e:55:0c:8f:4f: 4e:58:90:a4:71:f7:aa:a4:90:31:85:b4:8a:ff:cc: 81:88:5b:b5:df:67:cf:64:f5:c5:7b:5c:bd:3d:da: 3e:6d:46:14:e3:6a:25:13:35:f8:75:70:eb:ad:b3: c8:67:67:72:d2:9f:e1:9c:ac:86:15:72:b4:cb:ae: 15:ff:79:83:0e:fc:23:b4:26:8b:3c:b3:ec:27:1d: 19:90:c1:54:26:5c:7c:b8:74:eb:8f:73:29:17:28: 05:b8:6c:a5:17:7b:91:cc:ca:a2:83:14:84:66:f3: 45:24:f7:be:17:e7:52:de:b3:33:6f:f6:a9:95:68: 74:79:d9:5c:0d:2b:7e:a3:b6:33:dd:65:3c:90:17: 3b:7b:f9:88:65:bb:4b:37:92:71:50:ba:25:cc:94: b4:f3:3f:26:e5:2a:b6:57:f3:63:c6:f3:62:07:5c: ee:da:68:7a:66:c8:ba:6a:15:06:24:fb:d5:f2:90: 3d:99:21:59:10:4a:ae:d5:4c:59:c2:1f:fa:24:7f: 22:29:bd:71:38:36:f1:db:cd:60:0a:d8:91:57:18: 84:35:4b:14:a2:66:e5:a3:48:34:ba:1a:7c:23:98: e8:22:5e:4b:a3:e2:91:c6:57:a4:18:1e:a5:f8:b1: 0c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:90:64:E1:2A:C6:15:45:8A:DC:68:B5:75:CE:E7:8E:8B:6A:E6:E6 X509v3 Authority Key Identifier: keyid:0A:3C:7B:38:49:96:E1:AF:57:95:85:45:39:4E:DB:3E:20:DB:EE:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:48:36:32:90:8d:53:fb:d0:3a:48:37:3e:c8:2b:fa:ac:ff: 74:7e:98:03:b0:12:2c:8c:a1:a1:42:17:f6:87:e5:74:f9:a6: ae:5c:01:37:c7:ef:6c:38:fe:84:2a:73:76:e3:a3:a9:bd:73: 43:b0:f1:48:fa:1b:fb:9b:65:39:c6:2c:63:84:e3:e9:ff:83: 16:1d:5f:bb:ac:8d:86:d9:b3:b3:2f:c7:9f:34:b0:85:48:44: c8:26:39:1d:4d:b8:42:0a:b5:5d:ac:8b:6c:83:52:a1:8b:99: 21:4a:0f:99:a2:83:73:81:26:5b:c3:d6:e0:98:2c:a0:d0:da: b7:65:56:d2:57:30:3a:67:cd:e5:ba:1c:32:6c:bd:3e:bb:5c: 1f:c0:25:5f:07:3c:0e:3c:24:6b:75:ac:80:cf:d3:22:b4:49: 29:54:ea:c6:de:c3:cb:4e:15:e9:eb:75:6a:87:93:83:de:63: c6:cc:dd:fe:7e:c4:8f:fe:0a:8e:57:bf:ff:6a:23:be:b0:7d: 72:78:2b:f4:29:37:84:6d:cd:d2:d8:88:20:d3:6f:85:86:d8: 2a:dc:4b:71:76:ce:83:3c:cf:06:90:9d:8f:cc:64:52:53:a9: 81:0a:3b:c1:76:c8:6e:1a:e8:e3:6c:8c:ad:c1:ea:f6:b5:9d: 0f:20:70:cf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBDNDUxMTAvBgNVBAUTKDBBM0M3QjM4NDk5NkUxQUY1Nzk1ODU0NTM5NEVEQjNF MjBEQkVFOUUwHhcNMjYwOTIxMDY0NzI3WhcNMjYwOTI4MDY0NzI3WjAYMRYwFAYD VQQDEw02YWIwZDMwMC1lOTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvaQajfsjGImaTlUMj09OWJCkcfeqpJAxhbSK/8yBiFu132fPZPXFe1y9Pdo+ bUYU42olEzX4dXDrrbPIZ2dy0p/hnKyGFXK0y64V/3mDDvwjtCaLPLPsJx0ZkMFU Jlx8uHTrj3MpFygFuGylF3uRzMqigxSEZvNFJPe+F+dS3rMzb/aplWh0edlcDSt+ o7Yz3WU8kBc7e/mIZbtLN5JxULolzJS08z8m5Sq2V/NjxvNiB1zu2mh6Zsi6ahUG JPvV8pA9mSFZEEqu1UxZwh/6JH8iKb1xODbx281gCtiRVxiENUsUomblo0g0uhp8 I5joIl5Lo+KRxlekGB6l+LEM6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPSQZOEq xhVFitxotXXO546LaubmMB8GA1UdIwQYMBaAFAo8ezhJluGvV5WFRTlO2z4g2+6e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEM0NS84NzY4MzBCODg5 MkUxMUYwOTdBQzY2MkZDNEY5QUUwMi9Dang3T0VtVzRhOVhsWVZGT1U3YlBpRGI3 cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0NqeDdPRW1XNGE5WGxZVkZPVTdiUGlEYjdwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEM0NS84NzY4MzBCODg5MkUxMUYwOTdBQzY2MkZDNEY5QUUwMi9Dang3T0VtVzRh OVhsWVZGT1U3YlBpRGI3cDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhkg2MpCNU/vQOkg3Psgr+qz/dH6YA7ASLIyhoUIX9ofldPmmrlwBN8fvbDj+ hCpzduOjqb1zQ7DxSPob+5tlOcYsY4Tj6f+DFh1fu6yNhtmzsy/HnzSwhUhEyCY5 HU24Qgq1XayLbINSoYuZIUoPmaKDc4EmW8PW4JgsoNDat2VW0lcwOmfN5bocMmy9 PrtcH8AlXwc8Djwka3WsgM/TIrRJKVTqxt7Dy04V6et1aoeTg95jxszd/n7Ej/4K jle//2ojvrB9cngr9Ck3hG3N0tiIINNvhYbYKtxLcXbOgzzPBpCdj8xkUlOpgQo7 wXbIbhro42yMrcHq9rWdDyBwzw== -----END CERTIFICATE-----Generated at Wed Sep 23 07:07:12 2026 by rpki-client