$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AA444/8DCE274AB11D11EEA3363319C4F9AE02/cx5XsN_ep5G6TV1xly2oEF3JPos.mft File: cx5XsN_ep5G6TV1xly2oEF3JPos.mft (raw, json) Hash identifier: AY91L0XVJP0sy6qbaPZGwvOyUSU8KKEUSMxetynG2Uc= Subject key identifier: C7:5C:AA:10:70:7A:4C:74:10:73:9D:C4:AB:EA:45:BE:76:65:77:87 Authority key identifier: 73:1E:57:B0:DF:DE:A7:91:BA:4D:5D:71:97:2D:A8:10:5D:C9:3E:8B Certificate issuer: /CN=A91AA444/serialNumber=731E57B0DFDEA791BA4D5D71972DA8105DC93E8B Certificate serial: 0206 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx5XsN_ep5G6TV1xly2oEF3JPos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA444/8DCE274AB11D11EEA3363319C4F9AE02/cx5XsN_ep5G6TV1xly2oEF3JPos.mft Manifest number: 0201 Signing time: Sat 03 Oct 2026 03:48:28 +0000 Manifest this update: Sat 03 Oct 2026 03:48:27 +0000 Manifest next update: Sat 10 Oct 2026 03:48:27 +0000 Files and hashes: 1: cx5XsN_ep5G6TV1xly2oEF3JPos.crl (hash: q2AAJdNDmyhZ9h77uk85ZfrcIxgJfayXI+YQLoUq1Aw=) 2: 24DD519CEEA311EFA5EDDD76C4F9AE02.roa (hash: oYkxtXccfNzhupGam+/pGKaAabTu5hknTCz4hIdu2D0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA444/8DCE274AB11D11EEA3363319C4F9AE02/cx5XsN_ep5G6TV1xly2oEF3JPos.crl rsync://rpki.apnic.net/member_repository/A91AA444/8DCE274AB11D11EEA3363319C4F9AE02/cx5XsN_ep5G6TV1xly2oEF3JPos.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx5XsN_ep5G6TV1xly2oEF3JPos.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 03:48:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 518 (0x206) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA444, serialNumber=731E57B0DFDEA791BA4D5D71972DA8105DC93E8B Validity Not Before: Oct 3 03:48:27 2026 GMT Not After : Oct 10 03:48:27 2026 GMT Subject: CN=6ac07b0b-3471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f9:cc:3e:5f:0d:e8:ac:75:57:3d:b5:53:25: 08:cf:05:70:95:95:2c:2a:73:97:30:a5:62:c4:92: 62:91:6e:01:65:22:92:5f:0f:7b:eb:cf:5c:b4:28: 9a:61:9b:97:40:38:f3:c6:40:2b:38:87:4f:1b:44: a3:c0:72:cb:5d:e1:60:13:aa:55:c4:51:5c:ae:a7: d5:01:66:ef:4b:c0:2b:c2:4f:18:7e:45:75:45:57: 26:58:7c:e7:99:a9:91:b2:67:32:13:21:3d:fe:a7: 05:a4:bb:55:4f:de:10:d3:88:3b:eb:03:40:6b:f9: ef:e5:95:e4:86:50:6d:91:bc:d6:07:de:4d:74:c7: 67:f7:c6:0d:e8:01:d4:50:fa:de:2a:44:e1:fd:2d: 88:22:6e:81:7c:bc:c3:69:59:82:1a:ae:1c:1f:75: 91:f4:1b:25:18:83:ca:e6:76:83:ab:4d:7f:a8:4b: 2f:ff:2e:81:58:fc:5f:6e:d4:3a:f3:12:f5:47:06: 08:41:38:12:7c:8c:e8:8c:da:a9:dc:ec:16:ef:d1: ca:2c:55:d1:65:f1:1b:30:5f:4d:91:c0:d4:0e:b6: a7:ed:5f:dd:47:91:63:fc:33:63:b9:2c:42:63:cb: 72:c3:d1:54:b4:8d:a3:b5:2d:73:2b:af:71:bd:0b: a3:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:5C:AA:10:70:7A:4C:74:10:73:9D:C4:AB:EA:45:BE:76:65:77:87 X509v3 Authority Key Identifier: keyid:73:1E:57:B0:DF:DE:A7:91:BA:4D:5D:71:97:2D:A8:10:5D:C9:3E:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA444/8DCE274AB11D11EEA3363319C4F9AE02/cx5XsN_ep5G6TV1xly2oEF3JPos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx5XsN_ep5G6TV1xly2oEF3JPos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA444/8DCE274AB11D11EEA3363319C4F9AE02/cx5XsN_ep5G6TV1xly2oEF3JPos.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:17:7d:36:f1:2b:3e:fd:a5:de:f8:66:de:d2:d6:db:7b:82: fe:91:3d:d1:c4:4d:91:69:06:39:c9:1e:0b:46:db:11:6f:75: 31:e1:31:bc:dc:9e:0c:95:3b:1b:b7:ba:54:72:17:3d:f2:f5: 0f:48:cd:3f:c0:52:62:c8:f4:e4:18:b9:e8:4f:8c:07:9f:1a: 49:57:b0:1f:d4:26:e7:d0:9b:c7:92:ab:10:a2:e4:c1:b5:80: 5f:b1:38:65:35:67:3b:c7:ed:5d:40:8d:46:db:78:76:f9:2f: 9d:42:46:2d:dc:c8:3b:80:c7:50:75:e6:a4:99:1b:47:91:27: 5e:e7:b9:3e:65:32:75:49:fe:a1:ed:45:42:16:38:d8:d0:b0: db:5c:98:d3:f3:2d:e2:b7:49:b3:b1:b6:3a:9e:4a:94:a3:6d: c6:04:e6:80:99:4d:04:e0:19:fe:52:54:fe:4f:23:a1:57:61: bd:80:06:ca:e2:db:66:cb:54:8e:8c:12:43:a2:79:4a:87:0b: 76:09:c8:2c:25:7b:38:d9:d2:40:1c:5a:f9:0d:2e:d3:7f:88: 89:42:56:6b:20:be:ae:b6:2d:3f:73:b2:3c:f5:1e:53:6d:97: 7e:0c:48:6e:ab:9d:ee:6d:d2:58:1f:3b:d8:65:aa:f3:cd:29: c1:89:56:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE0NDQxMTAvBgNVBAUTKDczMUU1N0IwREZERUE3OTFCQTRENUQ3MTk3MkRBODEw NURDOTNFOEIwHhcNMjYxMDAzMDM0ODI3WhcNMjYxMDEwMDM0ODI3WjAYMRYwFAYD VQQDEw02YWMwN2IwYi0zNDcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxfnMPl8N6Kx1Vz21UyUIzwVwlZUsKnOXMKVixJJikW4BZSKSXw97689ctCia YZuXQDjzxkArOIdPG0SjwHLLXeFgE6pVxFFcrqfVAWbvS8Arwk8YfkV1RVcmWHzn mamRsmcyEyE9/qcFpLtVT94Q04g76wNAa/nv5ZXkhlBtkbzWB95NdMdn98YN6AHU UPreKkTh/S2IIm6BfLzDaVmCGq4cH3WR9BslGIPK5naDq01/qEsv/y6BWPxfbtQ6 8xL1RwYIQTgSfIzojNqp3OwW79HKLFXRZfEbMF9NkcDUDran7V/dR5Fj/DNjuSxC Y8tyw9FUtI2jtS1zK69xvQuj7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMdcqhBw ekx0EHOdxKvqRb52ZXeHMB8GA1UdIwQYMBaAFHMeV7Df3qeRuk1dcZctqBBdyT6L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTQ0NC84RENFMjc0QUIx MUQxMUVFQTMzNjMzMTlDNEY5QUUwMi9jeDVYc05fZXA1RzZUVjF4bHkyb0VGM0pQ b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N4NVhzTl9lcDVHNlRWMXhseTJvRUYzSlBvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTQ0NC84RENFMjc0QUIxMUQxMUVFQTMzNjMzMTlDNEY5QUUwMi9jeDVYc05fZXA1 RzZUVjF4bHkyb0VGM0pQb3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiRd9NvErPv2l3vhm3tLW23uC/pE90cRNkWkGOckeC0bbEW91MeExvNyeDJU7 G7e6VHIXPfL1D0jNP8BSYsj05Bi56E+MB58aSVewH9Qm59Cbx5KrEKLkwbWAX7E4 ZTVnO8ftXUCNRtt4dvkvnUJGLdzIO4DHUHXmpJkbR5EnXue5PmUydUn+oe1FQhY4 2NCw21yY0/Mt4rdJs7G2Op5KlKNtxgTmgJlNBOAZ/lJU/k8joVdhvYAGyuLbZstU jowSQ6J5SocLdgnILCV7ONnSQBxa+Q0u03+IiUJWayC+rrYtP3OyPPUeU22XfgxI bqud7m3SWB872GWq880pwYlWLg== -----END CERTIFICATE-----Generated at Sun Oct 4 21:32:20 2026 by rpki-client