$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.mft File: C33smHxhdR0-2h2_PnwipzoV3u0.mft (raw, json) Hash identifier: PMayqOiLg3G8tApliiHSn/LPzeMZJleFbvF6a4GeDog= Subject key identifier: 09:0E:91:C9:CC:77:49:AB:1A:F0:1E:C8:0C:AB:B7:2B:80:FF:AB:B7 Authority key identifier: 0B:7D:EC:98:7C:61:75:1D:3E:DA:1D:BF:3E:7C:22:A7:3A:15:DE:ED Certificate issuer: /CN=A91C0E57/serialNumber=0B7DEC987C61751D3EDA1DBF3E7C22A73A15DEED Certificate serial: 05E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C33smHxhdR0-2h2_PnwipzoV3u0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.mft Manifest number: 05DE Signing time: Mon 26 Oct 2026 22:53:02 +0000 Manifest this update: Mon 26 Oct 2026 22:53:02 +0000 Manifest next update: Mon 02 Nov 2026 22:53:02 +0000 Files and hashes: 1: C33smHxhdR0-2h2_PnwipzoV3u0.crl (hash: ph0PnAkd66yFnKqI5LlJuLT4oRQ4GR8NH4kZgqOqoM0=) 2: 60A8F48A25D211ECB2CCF633C4F9AE02.roa (hash: 1OTKEgqlZnaKGpmz6oNBNrSZubeFhZS/c5pM2HU9abQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.crl rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C33smHxhdR0-2h2_PnwipzoV3u0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 22:53:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1511 (0x5e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0E57, serialNumber=0B7DEC987C61751D3EDA1DBF3E7C22A73A15DEED Validity Not Before: Oct 26 22:53:02 2026 GMT Not After : Nov 2 22:53:02 2026 GMT Subject: CN=6adfd9ce-29ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4f:1d:51:db:2b:cf:70:89:6d:3f:9b:fe:11: 89:1f:7a:1f:7b:b7:93:3a:8b:f4:1e:65:95:d4:a5: 97:14:ce:f1:1e:7c:d4:e7:b1:64:47:d8:4e:ca:16: ee:27:3b:56:76:8f:b9:c5:b3:96:41:eb:40:25:a5: f6:a5:70:9d:72:96:86:f7:45:b2:a1:34:81:4b:c9: 27:60:12:32:d1:42:82:b2:e5:07:f3:42:7a:0d:35: 73:68:e8:a3:a3:6a:37:5c:fe:52:9d:8a:53:4c:8e: fa:67:be:5e:ed:ff:e8:b4:58:c0:ce:f5:cb:c3:d6: 73:18:c5:21:d5:fb:7c:68:58:f8:fc:5d:e9:fa:0a: 7e:68:40:4e:c9:3e:a2:c9:26:3f:83:cf:ff:d6:97: e8:f6:47:7a:fe:9d:60:34:41:8e:a8:b6:14:73:60: f4:68:af:02:35:ad:4a:db:bd:34:fb:8b:36:68:81: 72:e2:12:58:ac:94:35:5c:30:0b:b5:56:d0:bd:09: 3b:3d:3a:87:bb:dc:db:8c:40:56:b1:b7:9c:92:8b: 95:4b:a8:bb:b0:f2:48:80:64:6d:17:b5:82:06:9d: 38:db:ac:7c:40:c6:c0:ea:f6:a1:40:19:43:29:9d: e6:4f:47:eb:84:7a:24:a9:76:62:6c:ea:48:88:fa: 76:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:0E:91:C9:CC:77:49:AB:1A:F0:1E:C8:0C:AB:B7:2B:80:FF:AB:B7 X509v3 Authority Key Identifier: keyid:0B:7D:EC:98:7C:61:75:1D:3E:DA:1D:BF:3E:7C:22:A7:3A:15:DE:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C33smHxhdR0-2h2_PnwipzoV3u0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:34:dd:dd:ee:1a:2b:fa:54:5f:8d:88:bd:5c:30:9d:2f:d7: 32:bb:63:c7:35:b6:20:a2:0c:ed:c0:43:d9:49:eb:f9:63:10: ec:d7:a1:25:38:0c:41:32:e7:09:74:83:fa:11:6b:38:cb:e5: 4c:79:42:dd:68:57:32:a6:f4:0a:ab:a8:07:91:32:2e:00:95: c1:86:9a:5f:03:bf:3e:fc:0c:5e:ff:f0:61:b8:8d:7c:08:de: d3:37:4a:1a:3e:9f:db:e7:b1:f4:80:44:0f:71:a3:2b:66:ec: 05:ea:03:1d:b1:d7:38:93:1d:38:18:08:50:fa:00:54:34:08: 2f:ed:96:be:c3:81:d2:b5:64:d5:6f:42:2d:87:80:98:ce:89: df:03:0f:50:68:55:5f:0c:c5:be:a1:0c:aa:8a:a0:d4:e4:e4: 3a:fc:92:eb:5a:c4:71:dc:81:05:8b:56:42:18:cc:88:cf:0a: 3c:28:54:4b:3e:e6:9f:e2:7f:65:dc:ee:46:d5:08:d5:bf:a4: 1f:27:b4:53:fc:84:aa:3d:ae:29:d8:d0:43:75:4b:66:81:8e: e3:17:5c:aa:c7:0f:79:91:46:52:16:fe:0e:94:a9:4b:dc:20: 3b:dd:0f:0c:8d:3c:77:89:cc:4d:c1:9f:9f:e6:d3:85:0f:e9: bf:17:f9:ac -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBFNTcxMTAvBgNVBAUTKDBCN0RFQzk4N0M2MTc1MUQzRURBMURCRjNFN0MyMkE3 M0ExNURFRUQwHhcNMjYxMDI2MjI1MzAyWhcNMjYxMTAyMjI1MzAyWjAYMRYwFAYD VQQDEw02YWRmZDljZS0yOWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnk8dUdsrz3CJbT+b/hGJH3ofe7eTOov0HmWV1KWXFM7xHnzU57FkR9hOyhbu JztWdo+5xbOWQetAJaX2pXCdcpaG90WyoTSBS8knYBIy0UKCsuUH80J6DTVzaOij o2o3XP5SnYpTTI76Z75e7f/otFjAzvXLw9ZzGMUh1ft8aFj4/F3p+gp+aEBOyT6i ySY/g8//1pfo9kd6/p1gNEGOqLYUc2D0aK8CNa1K2700+4s2aIFy4hJYrJQ1XDAL tVbQvQk7PTqHu9zbjEBWsbeckouVS6i7sPJIgGRtF7WCBp0426x8QMbA6vahQBlD KZ3mT0frhHokqXZibOpIiPp25QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAkOkcnM d0mrGvAeyAyrtyuA/6u3MB8GA1UdIwQYMBaAFAt97Jh8YXUdPtodvz58Iqc6Fd7t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEU1Ny9GQ0MxOEExNDIw NEUxMUVDQjEzRUUxN0FDNEY5QUUwMi9DMzNzbUh4aGRSMC0yaDJfUG53aXB6b1Yz dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MzM3NtSHhoZFIwLTJoMl9QbndpcHpvVjN1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEU1Ny9GQ0MxOEExNDIwNEUxMUVDQjEzRUUxN0FDNEY5QUUwMi9DMzNzbUh4aGRS MC0yaDJfUG53aXB6b1YzdTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWjTd3e4aK/pUX42IvVwwnS/XMrtjxzW2IKIM7cBD2Unr+WMQ7NehJTgMQTLn CXSD+hFrOMvlTHlC3WhXMqb0CquoB5EyLgCVwYaaXwO/PvwMXv/wYbiNfAje0zdK Gj6f2+ex9IBED3GjK2bsBeoDHbHXOJMdOBgIUPoAVDQIL+2WvsOB0rVk1W9CLYeA mM6J3wMPUGhVXwzFvqEMqoqg1OTkOvyS61rEcdyBBYtWQhjMiM8KPChUSz7mn+J/ ZdzuRtUI1b+kHye0U/yEqj2uKdjQQ3VLZoGO4xdcqscPeZFGUhb+DpSpS9wgO90P DI08d4nMTcGfn+bThQ/pvxf5rA== -----END CERTIFICATE-----Generated at Tue Oct 27 09:16:39 2026 by rpki-client