$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.mft File: C33smHxhdR0-2h2_PnwipzoV3u0.mft (raw, json) Hash identifier: uTX8sSPpntOh+nTQ+HhfwVqmZQNxKyuq6n0/LjmRU00= Subject key identifier: 67:F2:AF:73:FD:9C:98:D6:B7:61:F6:92:32:62:CC:2A:38:92:48:E5 Authority key identifier: 0B:7D:EC:98:7C:61:75:1D:3E:DA:1D:BF:3E:7C:22:A7:3A:15:DE:ED Certificate issuer: /CN=A91C0E57/serialNumber=0B7DEC987C61751D3EDA1DBF3E7C22A73A15DEED Certificate serial: 05CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C33smHxhdR0-2h2_PnwipzoV3u0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.mft Manifest number: 05C4 Signing time: Fri 04 Sep 2026 22:50:43 +0000 Manifest this update: Fri 04 Sep 2026 22:50:43 +0000 Manifest next update: Fri 11 Sep 2026 22:50:43 +0000 Files and hashes: 1: C33smHxhdR0-2h2_PnwipzoV3u0.crl (hash: fvEz3XIXMbugOK+lGKC0CrCRQqq5eWhsQuOZ5pVtkY4=) 2: 60A8F48A25D211ECB2CCF633C4F9AE02.roa (hash: 1OTKEgqlZnaKGpmz6oNBNrSZubeFhZS/c5pM2HU9abQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.crl rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C33smHxhdR0-2h2_PnwipzoV3u0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 22:50:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1485 (0x5cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0E57, serialNumber=0B7DEC987C61751D3EDA1DBF3E7C22A73A15DEED Validity Not Before: Sep 4 22:50:43 2026 GMT Not After : Sep 11 22:50:43 2026 GMT Subject: CN=6a9b4b43-86ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b4:49:43:10:85:c9:95:8b:ed:97:f1:2a:65: 58:b4:b6:b3:b9:9d:10:3d:25:b3:fe:b1:be:c6:bc: ae:b3:e3:a6:09:ac:7f:f9:6f:3a:cd:63:35:ab:87: a2:f5:c0:93:d6:e1:7c:f8:3d:ad:6d:43:7e:1b:5a: af:4b:9b:8a:b4:6a:be:1c:51:d8:68:39:06:e6:45: 5f:f6:10:0e:47:a9:fd:19:22:5e:eb:6e:89:fe:66: be:e6:55:7e:39:9e:4c:af:2b:17:b2:66:37:22:a7: 9a:30:c6:60:1e:64:c2:28:6e:c7:4e:28:19:d6:e9: 5d:f3:ea:56:8e:22:77:43:4b:04:6b:50:27:4e:56: 72:df:4f:bc:7b:61:55:2b:94:6b:a4:ab:22:e8:8c: d3:7f:ab:a5:3c:fa:cf:17:de:1c:8d:f7:bf:0b:05: 7b:2e:43:25:0d:f9:a4:ae:12:d6:06:5f:15:85:73: 28:49:d1:8a:a9:59:29:63:00:c8:38:32:7e:56:82: 3d:d0:1f:4d:9a:b6:5c:2b:71:40:e5:f7:66:90:81: c0:26:65:83:61:1c:b6:2d:9b:cb:e6:94:31:02:3c: d7:87:fc:d9:77:e0:58:28:3c:f3:dc:d6:ca:17:ef: 47:7e:9e:24:0a:81:ba:ab:4a:57:e2:91:e5:3b:f2: e9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:F2:AF:73:FD:9C:98:D6:B7:61:F6:92:32:62:CC:2A:38:92:48:E5 X509v3 Authority Key Identifier: keyid:0B:7D:EC:98:7C:61:75:1D:3E:DA:1D:BF:3E:7C:22:A7:3A:15:DE:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C33smHxhdR0-2h2_PnwipzoV3u0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:1a:09:10:8d:8b:d6:9e:10:2e:3c:f3:b4:e0:17:ae:7f:69: 28:3e:15:3b:f5:03:47:67:ff:4b:a2:74:f9:2b:98:ca:34:c2: 15:76:2d:b2:1a:94:b5:4f:dd:79:f5:f2:90:cc:f9:22:19:28: 93:59:be:41:da:e7:c0:3d:6d:00:37:5f:78:f2:ca:ff:49:8d: 05:b1:a5:80:9a:39:60:4c:54:5e:a6:94:26:3d:83:aa:f9:6b: 33:1c:8d:00:3b:3c:a1:f9:a1:93:2d:a6:ce:1e:12:f9:7c:0d: a2:6c:21:c4:f5:84:52:1e:31:37:e0:3d:52:8e:3d:c2:a5:4c: 46:c6:f8:8f:b5:e2:f1:f8:30:ad:47:ae:ee:50:a9:46:e1:c8: f9:c0:9c:76:45:e2:6c:10:2d:7b:4d:1c:5d:65:8b:38:98:d2: 46:00:74:53:94:28:a7:1f:ce:02:84:de:ed:a8:23:ec:c3:da: c7:33:f3:1a:49:76:e0:a1:00:8f:0c:ae:d5:b0:fb:9f:7b:e9: 06:c6:ce:91:72:65:ba:97:2f:99:3e:60:4c:e3:de:08:ae:51: f3:c9:cc:a5:50:e4:d3:12:d3:be:f8:51:fb:1c:29:3e:6b:9d: cc:4b:5f:69:52:6d:d5:28:61:d0:5e:6f:be:5a:6f:bd:6f:6b: da:75:19:bb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBFNTcxMTAvBgNVBAUTKDBCN0RFQzk4N0M2MTc1MUQzRURBMURCRjNFN0MyMkE3 M0ExNURFRUQwHhcNMjYwOTA0MjI1MDQzWhcNMjYwOTExMjI1MDQzWjAYMRYwFAYD VQQDEw02YTliNGI0My04NmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArrRJQxCFyZWL7ZfxKmVYtLazuZ0QPSWz/rG+xryus+OmCax/+W86zWM1q4ei 9cCT1uF8+D2tbUN+G1qvS5uKtGq+HFHYaDkG5kVf9hAOR6n9GSJe626J/ma+5lV+ OZ5MrysXsmY3IqeaMMZgHmTCKG7HTigZ1uld8+pWjiJ3Q0sEa1AnTlZy30+8e2FV K5RrpKsi6IzTf6ulPPrPF94cjfe/CwV7LkMlDfmkrhLWBl8VhXMoSdGKqVkpYwDI ODJ+VoI90B9NmrZcK3FA5fdmkIHAJmWDYRy2LZvL5pQxAjzXh/zZd+BYKDzz3NbK F+9Hfp4kCoG6q0pX4pHlO/LpGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGfyr3P9 nJjWt2H2kjJizCo4kkjlMB8GA1UdIwQYMBaAFAt97Jh8YXUdPtodvz58Iqc6Fd7t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEU1Ny9GQ0MxOEExNDIw NEUxMUVDQjEzRUUxN0FDNEY5QUUwMi9DMzNzbUh4aGRSMC0yaDJfUG53aXB6b1Yz dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MzM3NtSHhoZFIwLTJoMl9QbndpcHpvVjN1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEU1Ny9GQ0MxOEExNDIwNEUxMUVDQjEzRUUxN0FDNEY5QUUwMi9DMzNzbUh4aGRS MC0yaDJfUG53aXB6b1YzdTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAURoJEI2L1p4QLjzztOAXrn9pKD4VO/UDR2f/S6J0+SuYyjTCFXYtshqUtU/d efXykMz5Ihkok1m+QdrnwD1tADdfePLK/0mNBbGlgJo5YExUXqaUJj2DqvlrMxyN ADs8ofmhky2mzh4S+XwNomwhxPWEUh4xN+A9Uo49wqVMRsb4j7Xi8fgwrUeu7lCp RuHI+cCcdkXibBAte00cXWWLOJjSRgB0U5Qopx/OAoTe7agj7MPaxzPzGkl24KEA jwyu1bD7n3vpBsbOkXJlupcvmT5gTOPeCK5R88nMpVDk0xLTvvhR+xwpPmudzEtf aVJt1Shh0F5vvlpvvW9r2nUZuw== -----END CERTIFICATE-----Generated at Sat Sep 5 06:56:53 2026 by rpki-client