$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA23A/8D59A2E4582311F18D7F2C9EA7833773/CiXR8yHlCgvKx8HQfzGTl6ORAT8.mft File: CiXR8yHlCgvKx8HQfzGTl6ORAT8.mft (raw, json) Hash identifier: Z+UR1aM30ei5Mg2lmwbCpqdA7XgjAPPzNGEGnTsJs+U= Subject key identifier: EE:C3:31:CA:87:35:90:F2:66:76:23:D6:AA:C8:1A:2D:CF:89:B2:39 Authority key identifier: 0A:25:D1:F3:21:E5:0A:0B:CA:C7:C1:D0:7F:31:93:97:A3:91:01:3F Certificate issuer: /CN=A91EA23A/serialNumber=0A25D1F321E50A0BCAC7C1D07F319397A391013F Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiXR8yHlCgvKx8HQfzGTl6ORAT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA23A/8D59A2E4582311F18D7F2C9EA7833773/CiXR8yHlCgvKx8HQfzGTl6ORAT8.mft Manifest number: 3D Signing time: Wed 09 Sep 2026 09:01:50 +0000 Manifest this update: Wed 09 Sep 2026 09:01:50 +0000 Manifest next update: Wed 16 Sep 2026 09:01:50 +0000 Files and hashes: 1: CiXR8yHlCgvKx8HQfzGTl6ORAT8.crl (hash: YkdfkfpJaBM6/zkwrgfe1p7aht+lFKvOXFM8fMPq1tE=) 2: A08CACAC631411F19BD88A887D47A888.roa (hash: cui5kt/ao4ZSMnSmpM+vFQ/6IaNn7ud21wvDYaj2E2c=) 3: 65735378631411F1A1ABE5607D47A888.roa (hash: mA7bAbno8eCxBFSHk2mZ7wRMpGBwQ5uNOFxGCcgIxe4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA23A/8D59A2E4582311F18D7F2C9EA7833773/CiXR8yHlCgvKx8HQfzGTl6ORAT8.crl rsync://rpki.apnic.net/member_repository/A91EA23A/8D59A2E4582311F18D7F2C9EA7833773/CiXR8yHlCgvKx8HQfzGTl6ORAT8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiXR8yHlCgvKx8HQfzGTl6ORAT8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Sep 2026 09:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA23A, serialNumber=0A25D1F321E50A0BCAC7C1D07F319397A391013F Validity Not Before: Sep 9 09:01:50 2026 GMT Not After : Sep 16 09:01:50 2026 GMT Subject: CN=6aa1207e-9d66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b8:b0:2a:63:ee:b3:bb:bc:68:83:ac:fd:c1: 74:5d:16:01:4a:97:fb:80:b9:94:60:5b:37:7d:74: 77:2e:46:81:64:fc:e7:ea:9f:1e:85:e9:71:70:a2: 21:1e:c4:6b:09:ff:35:2c:52:d0:30:82:42:69:b0: f6:42:8d:5a:bf:48:5c:db:0f:1d:fb:d8:06:5b:76: 3f:85:81:54:b3:25:4a:05:08:c5:6a:ba:9d:89:20: 36:fd:7c:fb:63:65:30:44:13:f5:d0:c5:35:a6:a8: 8f:81:57:6e:15:d6:be:7f:6c:50:a2:7b:c2:89:33: 20:fd:cc:48:c8:93:64:aa:a3:ee:7c:3c:97:7e:71: c8:57:9b:40:60:a2:fb:a1:7e:af:eb:f0:87:82:22: 73:74:5f:81:77:0f:cd:2f:f4:bc:bb:f3:09:57:51: 7f:62:1d:aa:d4:26:77:5a:72:cc:2b:44:ff:f2:c6: af:07:12:81:0e:b7:ae:60:c5:42:6b:49:5c:13:c4: 93:71:e3:4e:0b:92:d5:a5:1f:2e:f4:91:4d:f3:7e: 96:e1:5f:9a:31:d8:b0:fa:3b:d0:d2:b0:b9:73:f2: 5b:cd:6f:bf:23:ea:af:8f:09:75:9c:c4:fb:b1:28: 18:51:8b:e5:01:09:de:62:30:70:fb:2e:f9:d1:b5: 8f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:C3:31:CA:87:35:90:F2:66:76:23:D6:AA:C8:1A:2D:CF:89:B2:39 X509v3 Authority Key Identifier: keyid:0A:25:D1:F3:21:E5:0A:0B:CA:C7:C1:D0:7F:31:93:97:A3:91:01:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA23A/8D59A2E4582311F18D7F2C9EA7833773/CiXR8yHlCgvKx8HQfzGTl6ORAT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiXR8yHlCgvKx8HQfzGTl6ORAT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA23A/8D59A2E4582311F18D7F2C9EA7833773/CiXR8yHlCgvKx8HQfzGTl6ORAT8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:47:57:25:88:ab:e3:b5:e2:d9:c9:c7:06:58:85:94:12:b2: 0a:b8:c4:ce:d9:3c:c3:6d:e7:20:90:1d:f5:52:d7:48:be:92: 8b:eb:f4:28:fb:3f:f5:c4:d9:46:23:6b:2d:fe:9e:cc:44:0b: cf:b9:30:17:0a:82:b7:98:36:c5:57:78:0e:04:99:a3:4d:bc: 7c:fe:4c:89:13:9e:ac:14:41:b1:27:15:1b:d0:dc:f5:6a:3c: 40:18:9b:d5:13:41:8c:a6:b0:36:22:cd:a0:f6:34:b3:ce:a2: e5:f8:86:24:da:c5:e7:68:d1:a0:30:69:fa:c7:2a:8b:1b:1b: 36:1b:8c:e7:b3:ae:d7:43:d7:cd:e8:64:b7:15:f4:08:45:71: 66:f6:95:d3:ef:55:5e:ea:1b:43:47:c4:84:52:f4:52:13:f6: 84:6f:dd:f1:d0:30:f9:dc:7d:3a:c3:e6:ef:2f:da:f5:4c:1d: a4:a3:9b:51:bf:0d:ac:e7:e5:91:ff:12:e2:b2:49:d6:df:48: 91:13:6b:4e:fe:85:d7:5f:b2:52:ea:81:65:2d:37:ae:c1:e6: ee:fd:52:45:a0:b3:a4:bf:29:c5:d6:03:de:96:be:5f:3a:40: 60:43:86:66:85:d2:54:b4:df:4a:6e:02:9a:8e:4e:ad:50:a4: 00:10:dd:e0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QTIzQTExMC8GA1UEBRMoMEEyNUQxRjMyMUU1MEEwQkNBQzdDMUQwN0YzMTkzOTdB MzkxMDEzRjAeFw0yNjA5MDkwOTAxNTBaFw0yNjA5MTYwOTAxNTBaMBgxFjAUBgNV BAMTDTZhYTEyMDdlLTlkNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0uLAqY+6zu7xog6z9wXRdFgFKl/uAuZRgWzd9dHcuRoFk/Ofqnx6F6XFwoiEe xGsJ/zUsUtAwgkJpsPZCjVq/SFzbDx372AZbdj+FgVSzJUoFCMVqup2JIDb9fPtj ZTBEE/XQxTWmqI+BV24V1r5/bFCie8KJMyD9zEjIk2Sqo+58PJd+cchXm0Bgovuh fq/r8IeCInN0X4F3D80v9Ly78wlXUX9iHarUJndacswrRP/yxq8HEoEOt65gxUJr SVwTxJNx404LktWlHy70kU3zfpbhX5ox2LD6O9DSsLlz8lvNb78j6q+PCXWcxPux KBhRi+UBCd5iMHD7LvnRtY9JAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU7sMxyoc1 kPJmdiPWqsgaLc+JsjkwHwYDVR0jBBgwFoAUCiXR8yHlCgvKx8HQfzGTl6ORAT8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBMjNBLzhENTlBMkU0NTgy MzExRjE4RDdGMkM5RUE3ODMzNzczL0NpWFI4eUhsQ2d2S3g4SFFmekdUbDZPUkFU OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ2lYUjh5SGxDZ3ZLeDhIUWZ6R1RsNk9SQVQ4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB MjNBLzhENTlBMkU0NTgyMzExRjE4RDdGMkM5RUE3ODMzNzczL0NpWFI4eUhsQ2d2 S3g4SFFmekdUbDZPUkFUOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCHR1cliKvjteLZyccGWIWUErIKuMTO2TzDbecgkB31UtdIvpKL6/Qo+z/1xNlG I2st/p7MRAvPuTAXCoK3mDbFV3gOBJmjTbx8/kyJE56sFEGxJxUb0Nz1ajxAGJvV E0GMprA2Is2g9jSzzqLl+IYk2sXnaNGgMGn6xyqLGxs2G4zns67XQ9fN6GS3FfQI RXFm9pXT71Ve6htDR8SEUvRSE/aEb93x0DD53H06w+bvL9r1TB2ko5tRvw2s5+WR /xLisknW30iRE2tO/oXXX7JS6oFlLTeuwebu/VJFoLOkvynF1gPelr5fOkBgQ4Zm hdJUtN9KbgKajk6tUKQAEN3g -----END CERTIFICATE-----Generated at Thu Sep 10 08:19:59 2026 by rpki-client