$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft File: 5CANRK2dbstocvZTqVhD-yfYR6Q.mft (raw, json) Hash identifier: WcqaLapdnxSnckEBJR5IFKqci8BdTgcPk9c3E+RcNlg= Subject key identifier: A0:B9:65:C9:46:A8:B5:D9:2A:95:17:6C:D8:7E:49:29:78:61:DA:C0 Authority key identifier: E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4 Certificate issuer: /CN=A91C0D37/serialNumber=E4200D44AD9D6ECB6872F653A95843FB27D847A4 Certificate serial: 0242 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft Manifest number: 0237 Signing time: Thu 17 Sep 2026 02:47:50 +0000 Manifest this update: Thu 17 Sep 2026 02:47:50 +0000 Manifest next update: Thu 24 Sep 2026 02:47:50 +0000 Files and hashes: 1: 5CANRK2dbstocvZTqVhD-yfYR6Q.crl (hash: r/u+8FQ77ehXjBfpavJnY9KbvXMeTGSmJBj/pF+mQKw=) 2: C7C45DD643F611EF84151D6FC4F9AE02.roa (hash: eCz90crmLyyT4eJR0NDAlMlvL0AfXIIanbDH55qxfQE=) 3: 0099AE56536911EE8594503BC4F9AE02.roa (hash: A3g1MvapK720MR4guCb5ZHynm0vdBJ498DzGR8wq4fU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.crl rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 02:47:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 578 (0x242) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0D37, serialNumber=E4200D44AD9D6ECB6872F653A95843FB27D847A4 Validity Not Before: Sep 17 02:47:50 2026 GMT Not After : Sep 24 02:47:50 2026 GMT Subject: CN=6aab54d6-4f1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d7:6f:b3:23:0f:ca:d6:f3:93:58:f9:2f:ce: 67:a4:5d:b8:21:dd:84:3d:71:8a:e5:c6:10:14:c0: 4c:d3:5c:c5:da:2e:3c:07:df:54:6f:f5:70:68:10: 91:96:85:94:5d:c3:f4:20:d7:b5:36:50:8e:e8:37: c3:65:cb:2a:36:df:81:35:c9:06:cc:cf:1f:2b:ae: a7:9d:8f:87:c1:26:07:86:95:3e:45:6f:df:25:c9: 9f:a0:86:10:0a:ec:0b:70:56:85:56:75:38:da:2d: 75:2c:af:5c:0a:0c:44:f1:64:e0:29:d1:41:0b:5e: b5:e5:03:1b:d2:3c:87:2a:b9:3d:4f:2d:6e:10:57: f1:f9:bf:73:9a:ca:1a:0a:08:a8:79:d8:0b:6b:2f: 4d:71:af:9b:2a:70:02:8f:79:51:89:48:67:15:1c: 88:f7:8d:2c:1f:51:a9:bb:61:a9:1f:4b:7f:98:c6: 08:56:8f:30:ce:7a:ee:d1:dc:95:e9:04:f2:83:1a: 96:d2:ae:00:23:78:de:6f:6d:5e:19:1a:ea:5b:ad: 67:e7:11:eb:09:28:cf:54:a1:c1:a8:90:e8:68:71: 28:9c:4d:3e:a1:83:c0:9d:ce:9d:94:e0:3b:75:fc: 9e:2e:7b:d6:0b:a6:da:c9:4a:b1:1f:5f:8a:db:0b: d5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B9:65:C9:46:A8:B5:D9:2A:95:17:6C:D8:7E:49:29:78:61:DA:C0 X509v3 Authority Key Identifier: keyid:E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:ca:0a:fe:77:8a:15:93:fa:54:2d:4a:d8:7f:9a:36:c1:6d: 7b:87:81:4a:28:eb:49:e5:6f:ce:61:b7:f0:50:e7:68:86:d3: 14:a3:52:3d:cf:f7:9d:ba:16:62:d0:05:e8:c9:dc:37:c5:ce: 9b:65:92:ae:2b:b4:8b:1d:3a:a4:d9:83:04:d7:84:68:be:f5: cb:22:e0:0c:e8:4f:e8:3d:75:ad:87:a4:cf:0a:7e:4f:ef:81: 9b:bd:b8:91:3b:6d:43:d8:3b:3d:2c:68:ee:7a:3d:fa:f2:95: 0a:dc:97:10:3d:8b:7a:7e:21:9e:5f:83:3b:b0:e6:c1:33:d0: 6c:90:65:1f:09:38:59:57:d1:b6:26:e6:a6:fa:2d:61:12:6b: 72:8c:07:b4:6d:fb:af:d5:cf:6e:9e:3a:4d:47:17:35:47:43: 51:7f:5d:e9:cf:2b:d7:a4:6a:e0:f6:65:25:b6:a3:8b:73:ad: db:10:75:ca:f6:c1:98:6a:6c:18:9d:3a:d8:52:07:99:1a:d4: c3:ec:68:bf:5e:2a:84:7d:8e:e5:f7:81:38:50:b8:bb:b9:e3: 6a:9c:be:a8:09:74:42:58:f8:dc:b6:db:37:61:83:f2:45:58: 2f:25:d2:73:16:fc:89:6b:30:7c:d9:e4:2d:26:cd:1b:39:b5: b2:1e:8b:f8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBEMzcxMTAvBgNVBAUTKEU0MjAwRDQ0QUQ5RDZFQ0I2ODcyRjY1M0E5NTg0M0ZC MjdEODQ3QTQwHhcNMjYwOTE3MDI0NzUwWhcNMjYwOTI0MDI0NzUwWjAYMRYwFAYD VQQDEw02YWFiNTRkNi00ZjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiNdvsyMPytbzk1j5L85npF24Id2EPXGK5cYQFMBM01zF2i48B99Ub/VwaBCR loWUXcP0INe1NlCO6DfDZcsqNt+BNckGzM8fK66nnY+HwSYHhpU+RW/fJcmfoIYQ CuwLcFaFVnU42i11LK9cCgxE8WTgKdFBC1615QMb0jyHKrk9Ty1uEFfx+b9zmsoa CgioedgLay9Nca+bKnACj3lRiUhnFRyI940sH1Gpu2GpH0t/mMYIVo8wznru0dyV 6QTygxqW0q4AI3jeb21eGRrqW61n5xHrCSjPVKHBqJDoaHEonE0+oYPAnc6dlOA7 dfyeLnvWC6bayUqxH1+K2wvVoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKC5ZclG qLXZKpUXbNh+SSl4YdrAMB8GA1UdIwQYMBaAFOQgDUStnW7LaHL2U6lYQ/sn2Eek MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEQzNy8wNUVFQ0Q4NjUz NUIxMUVFOUJGMjBBNkJDNEY5QUUwMi81Q0FOUksyZGJzdG9jdlpUcVZoRC15ZllS NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzVDQU5SSzJkYnN0b2N2WlRxVmhELXlmWVI2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEQzNy8wNUVFQ0Q4NjUzNUIxMUVFOUJGMjBBNkJDNEY5QUUwMi81Q0FOUksyZGJz dG9jdlpUcVZoRC15ZllSNlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM8oK/neKFZP6VC1K2H+aNsFte4eBSijrSeVvzmG38FDnaIbTFKNSPc/3nboW YtAF6MncN8XOm2WSriu0ix06pNmDBNeEaL71yyLgDOhP6D11rYekzwp+T++Bm724 kTttQ9g7PSxo7no9+vKVCtyXED2Len4hnl+DO7DmwTPQbJBlHwk4WVfRtibmpvot YRJrcowHtG37r9XPbp46TUcXNUdDUX9d6c8r16Rq4PZlJbaji3Ot2xB1yvbBmGps GJ062FIHmRrUw+xov14qhH2O5feBOFC4u7njapy+qAl0Qlj43LbbN2GD8kVYLyXS cxb8iWswfNnkLSbNGzm1sh6L+A== -----END CERTIFICATE-----Generated at Sat Sep 19 01:11:23 2026 by rpki-client