$ rpki-client -vvvf rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft File: Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft (raw, json) Hash identifier: NOLkdlso6HQYCvc60+GYkNhd8RUa4qNj0dg1WM4QV9M= Subject key identifier: EB:BF:5D:37:CC:8D:DE:AF:EF:30:1C:D2:C8:4E:7D:64:A0:85:1E:EB Authority key identifier: 0A:CE:6F:6A:A6:A3:FA:E2:7A:08:5C:7A:12:7F:9B:C9:94:24:52:14 Certificate issuer: /CN=A91637FD/serialNumber=0ACE6F6AA6A3FAE27A085C7A127F9BC994245214 Certificate serial: 0162 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft Manifest number: 015D Signing time: Mon 21 Sep 2026 05:04:51 +0000 Manifest this update: Mon 21 Sep 2026 05:04:51 +0000 Manifest next update: Mon 28 Sep 2026 05:04:51 +0000 Files and hashes: 1: Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl (hash: DFaj366/+2ISTV4v4KZfWx8sH3VoUytjZDnbahf7KEY=) 2: D1E78BC0A15D11EFBAE3332CC4F9AE02.roa (hash: J9p77l9cTrTV2+cKIR/IP5JcPOecPcSAMEsYAdt8Ff0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 05:04:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 354 (0x162) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91637FD, serialNumber=0ACE6F6AA6A3FAE27A085C7A127F9BC994245214 Validity Not Before: Sep 21 05:04:51 2026 GMT Not After : Sep 28 05:04:51 2026 GMT Subject: CN=6ab0baf3-a4c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0e:ee:f7:e9:e4:fc:cd:d6:72:35:e1:b4:39: a2:c2:e0:4c:0e:cd:64:66:f2:9b:86:1f:00:6a:3f: 0c:3e:81:49:4f:26:f7:6d:30:84:50:83:8e:1a:12: 4d:23:2f:71:15:4b:9f:69:c0:cd:e0:86:96:0b:d4: 17:45:ab:94:ee:14:06:9e:1a:46:99:76:99:50:fb: 59:5c:80:27:1e:f9:0b:dd:f0:74:83:d9:3b:61:db: b2:22:d3:ec:64:e8:79:10:90:e0:0d:eb:f7:84:1e: a8:8f:18:33:f1:dc:6e:50:a9:08:a5:8b:a8:75:de: 9d:b3:61:d6:c6:f7:ad:3c:99:e3:4e:d3:65:ca:47: ea:b1:73:19:90:22:c8:74:40:65:95:e8:b7:a8:2a: bb:6f:67:58:52:03:2e:97:47:7b:6d:1a:42:71:51: e6:e3:df:4c:e0:e2:1f:1c:22:85:13:4e:96:af:41: 5e:91:b5:7d:e7:30:e8:32:b5:f7:84:2e:62:bb:fc: df:9a:54:dc:5f:45:6f:59:85:44:b2:3f:b4:8b:ee: 34:db:b8:2b:5a:c5:e9:fc:c8:8a:13:74:42:34:82: 9b:97:ee:cb:f4:c9:cf:b8:bb:79:e0:27:85:e3:ca: 8a:02:0e:a4:59:3f:7d:10:bf:eb:d6:69:2c:6e:c5: 41:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:BF:5D:37:CC:8D:DE:AF:EF:30:1C:D2:C8:4E:7D:64:A0:85:1E:EB X509v3 Authority Key Identifier: keyid:0A:CE:6F:6A:A6:A3:FA:E2:7A:08:5C:7A:12:7F:9B:C9:94:24:52:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:ee:3d:cc:53:6d:04:91:e7:43:ad:36:a8:58:a7:22:06:d1: db:3f:b0:75:c9:13:6e:55:7d:3a:84:42:c8:14:31:72:b5:d5: 53:95:11:a4:22:6c:13:3f:30:12:fe:58:7f:5e:6e:2d:5b:2d: 35:fb:b1:3f:ea:78:4a:0e:bf:4a:ab:c6:9c:c0:57:90:45:de: 7c:a3:37:1d:2e:3b:e7:cd:ef:03:f9:d2:67:a0:0f:ac:91:78: 53:be:de:1e:9b:2f:f8:66:af:61:96:0e:5c:70:ce:2f:ee:20: c3:d1:56:e8:6e:66:c0:f2:8d:17:8f:05:fa:b1:4e:76:d1:1c: b1:26:b8:7b:ca:ce:a6:27:79:0b:ba:3c:ad:4c:f5:1c:81:22: 31:c0:a3:d0:19:1f:f4:d9:ea:b0:95:b2:6d:c2:55:e8:72:47: cc:57:0c:11:f0:43:c5:20:cb:af:55:ee:15:a8:73:4a:06:9c: 71:7e:8a:d1:8c:ea:d8:45:da:80:98:eb:73:a3:6f:db:df:b1: d2:9f:7f:8e:d3:74:9e:5f:11:9a:d3:2f:22:0c:85:b5:7d:8d: f6:4a:dd:90:1e:ee:1d:a8:0d:72:b0:aa:0b:75:7f:87:a8:25: f1:b8:3f:b1:14:b1:89:cb:b0:b4:98:34:d1:30:86:2a:54:fa: 37:ad:cc:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM3RkQxMTAvBgNVBAUTKDBBQ0U2RjZBQTZBM0ZBRTI3QTA4NUM3QTEyN0Y5QkM5 OTQyNDUyMTQwHhcNMjYwOTIxMDUwNDUxWhcNMjYwOTI4MDUwNDUxWjAYMRYwFAYD VQQDEw02YWIwYmFmMy1hNGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsg7u9+nk/M3WcjXhtDmiwuBMDs1kZvKbhh8Aaj8MPoFJTyb3bTCEUIOOGhJN Iy9xFUufacDN4IaWC9QXRauU7hQGnhpGmXaZUPtZXIAnHvkL3fB0g9k7YduyItPs ZOh5EJDgDev3hB6ojxgz8dxuUKkIpYuodd6ds2HWxvetPJnjTtNlykfqsXMZkCLI dEBllei3qCq7b2dYUgMul0d7bRpCcVHm499M4OIfHCKFE06Wr0FekbV95zDoMrX3 hC5iu/zfmlTcX0VvWYVEsj+0i+4027grWsXp/MiKE3RCNIKbl+7L9MnPuLt54CeF 48qKAg6kWT99EL/r1mksbsVBowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOu/XTfM jd6v7zAc0shOfWSghR7rMB8GA1UdIwQYMBaAFArOb2qmo/rieghcehJ/m8mUJFIU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzdGRC9FMjQ1QjVCMkEx NUExMUVGQTFFQzJCNUZDNEY5QUUwMi9DczV2YXFhai11SjZDRng2RW4tYnlaUWtV aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NzNXZhcWFqLXVKNkNGeDZFbi1ieVpRa1VoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzdGRC9FMjQ1QjVCMkExNUExMUVGQTFFQzJCNUZDNEY5QUUwMi9DczV2YXFhai11 SjZDRng2RW4tYnlaUWtVaFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyO49zFNtBJHnQ602qFinIgbR2z+wdckTblV9OoRCyBQxcrXVU5URpCJsEz8w Ev5Yf15uLVstNfuxP+p4Sg6/SqvGnMBXkEXefKM3HS47583vA/nSZ6APrJF4U77e Hpsv+GavYZYOXHDOL+4gw9FW6G5mwPKNF48F+rFOdtEcsSa4e8rOpid5C7o8rUz1 HIEiMcCj0Bkf9NnqsJWybcJV6HJHzFcMEfBDxSDLr1XuFahzSgaccX6K0Yzq2EXa gJjrc6Nv29+x0p9/jtN0nl8RmtMvIgyFtX2N9krdkB7uHagNcrCqC3V/h6gl8bg/ sRSxicuwtJg00TCGKlT6N63MLg== -----END CERTIFICATE-----Generated at Tue Sep 22 21:08:07 2026 by rpki-client