$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AA444/8DCE274AB11D11EEA3363319C4F9AE02/cx5XsN_ep5G6TV1xly2oEF3JPos.mft File: cx5XsN_ep5G6TV1xly2oEF3JPos.mft (raw, json) Hash identifier: KUmqKBG61idM/jB3siay0U8jDOe9KENrfE93owY+Jq4= Subject key identifier: 7E:70:EA:D9:8A:58:4B:48:B6:08:1C:9E:47:8C:75:29:66:8D:E2:A8 Authority key identifier: 73:1E:57:B0:DF:DE:A7:91:BA:4D:5D:71:97:2D:A8:10:5D:C9:3E:8B Certificate issuer: /CN=A91AA444/serialNumber=731E57B0DFDEA791BA4D5D71972DA8105DC93E8B Certificate serial: 0209 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx5XsN_ep5G6TV1xly2oEF3JPos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA444/8DCE274AB11D11EEA3363319C4F9AE02/cx5XsN_ep5G6TV1xly2oEF3JPos.mft Manifest number: 0204 Signing time: Fri 09 Oct 2026 03:42:02 +0000 Manifest this update: Fri 09 Oct 2026 03:42:02 +0000 Manifest next update: Fri 16 Oct 2026 03:42:02 +0000 Files and hashes: 1: cx5XsN_ep5G6TV1xly2oEF3JPos.crl (hash: Ed8E7GNRMC/seTp6x4e1KGYWJkHZtnrdWjszoUCPXSM=) 2: 24DD519CEEA311EFA5EDDD76C4F9AE02.roa (hash: oYkxtXccfNzhupGam+/pGKaAabTu5hknTCz4hIdu2D0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA444/8DCE274AB11D11EEA3363319C4F9AE02/cx5XsN_ep5G6TV1xly2oEF3JPos.crl rsync://rpki.apnic.net/member_repository/A91AA444/8DCE274AB11D11EEA3363319C4F9AE02/cx5XsN_ep5G6TV1xly2oEF3JPos.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx5XsN_ep5G6TV1xly2oEF3JPos.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 03:42:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 521 (0x209) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA444, serialNumber=731E57B0DFDEA791BA4D5D71972DA8105DC93E8B Validity Not Before: Oct 9 03:42:02 2026 GMT Not After : Oct 16 03:42:02 2026 GMT Subject: CN=6ac8628a-8544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2f:91:82:ef:40:34:2d:68:3d:ac:9c:94:2d: 97:b3:ae:97:8d:57:3a:93:ff:76:d2:b7:78:c1:a1: ae:7d:e2:53:9e:27:44:63:20:11:4a:a7:3e:39:6b: ad:74:7a:1c:3e:08:f3:d8:09:4b:e6:2d:44:bf:46: 04:b0:56:dc:e9:96:ce:20:96:22:b4:52:54:7a:b2: 7a:71:48:15:a5:b2:7a:31:4a:e7:28:73:54:c1:a1: 98:83:15:05:bf:c2:8a:de:fb:98:07:35:eb:6b:23: 9c:02:f4:f2:40:a9:57:d7:ef:3f:fe:23:a5:21:bd: a6:57:0e:1d:1b:4f:8b:31:bb:92:7a:77:27:72:95: 1b:11:f7:59:00:16:76:7b:26:a8:59:30:57:18:0b: d2:6c:a4:fa:ca:ca:3d:b8:43:9f:24:63:13:9c:55: 60:c6:5a:cd:35:be:b5:f7:66:2d:a3:5d:24:c4:cf: 89:a4:36:d7:4e:66:cc:9e:c7:2d:14:0e:97:68:18: 64:c0:f7:87:0c:69:d8:93:58:1f:79:35:a5:1a:00: d2:06:cc:0e:96:f6:65:cc:ff:a1:d3:ca:0f:35:3d: f5:11:c0:e8:c3:15:78:5c:81:22:b9:7c:65:cb:b4: 02:2b:76:2d:49:57:11:dc:0b:7c:dd:b4:46:81:ac: 7c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:70:EA:D9:8A:58:4B:48:B6:08:1C:9E:47:8C:75:29:66:8D:E2:A8 X509v3 Authority Key Identifier: keyid:73:1E:57:B0:DF:DE:A7:91:BA:4D:5D:71:97:2D:A8:10:5D:C9:3E:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA444/8DCE274AB11D11EEA3363319C4F9AE02/cx5XsN_ep5G6TV1xly2oEF3JPos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx5XsN_ep5G6TV1xly2oEF3JPos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA444/8DCE274AB11D11EEA3363319C4F9AE02/cx5XsN_ep5G6TV1xly2oEF3JPos.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:48:95:fd:fb:e1:37:ee:48:f9:92:e9:90:47:ba:cf:17:16: 09:41:48:bd:8c:e9:bb:3e:25:eb:82:b3:2a:cb:0a:36:62:28: d7:6b:81:3d:45:13:fc:cc:a4:81:c2:71:62:e9:78:c4:ba:37: e2:ca:c1:7b:ce:c0:95:e8:95:95:ac:81:ee:d0:bc:26:a3:7f: 0b:bd:6d:c0:f5:94:c9:b5:5a:da:db:9e:b0:07:2b:5d:b0:b3: 82:a7:a5:d8:5b:83:b9:61:c9:e7:22:67:32:fc:8d:86:81:93: 71:78:02:43:54:16:ad:ac:da:4c:41:7b:a5:ca:7e:8f:b3:e8: 92:e2:c5:52:c3:d8:d5:3c:71:cd:d8:89:e6:22:48:b8:2f:d9: f0:d3:35:82:a0:47:e1:90:e8:0c:79:41:02:04:fe:76:da:de: 2b:96:52:4b:d2:19:97:40:08:47:2d:d6:80:63:5e:1b:87:15: eb:10:92:70:af:8b:70:05:07:31:c9:19:e5:7a:41:e1:3d:6e: 9c:54:94:25:e6:a8:e1:3f:28:44:3f:6c:1a:8f:15:0a:5c:5f: ca:0a:0e:e3:95:fc:4a:7d:d6:a9:8d:21:a2:25:4c:a2:2d:eb: 54:ed:4c:50:51:c5:98:d9:23:82:1e:83:28:85:38:77:92:df: 9d:6b:a9:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE0NDQxMTAvBgNVBAUTKDczMUU1N0IwREZERUE3OTFCQTRENUQ3MTk3MkRBODEw NURDOTNFOEIwHhcNMjYxMDA5MDM0MjAyWhcNMjYxMDE2MDM0MjAyWjAYMRYwFAYD VQQDEw02YWM4NjI4YS04NTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1i+Rgu9ANC1oPayclC2Xs66XjVc6k/920rd4waGufeJTnidEYyARSqc+OWut dHocPgjz2AlL5i1Ev0YEsFbc6ZbOIJYitFJUerJ6cUgVpbJ6MUrnKHNUwaGYgxUF v8KK3vuYBzXrayOcAvTyQKlX1+8//iOlIb2mVw4dG0+LMbuSencncpUbEfdZABZ2 eyaoWTBXGAvSbKT6yso9uEOfJGMTnFVgxlrNNb6192Yto10kxM+JpDbXTmbMnsct FA6XaBhkwPeHDGnYk1gfeTWlGgDSBswOlvZlzP+h08oPNT31EcDowxV4XIEiuXxl y7QCK3YtSVcR3At83bRGgax8FwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH5w6tmK WEtItggcnkeMdSlmjeKoMB8GA1UdIwQYMBaAFHMeV7Df3qeRuk1dcZctqBBdyT6L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTQ0NC84RENFMjc0QUIx MUQxMUVFQTMzNjMzMTlDNEY5QUUwMi9jeDVYc05fZXA1RzZUVjF4bHkyb0VGM0pQ b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N4NVhzTl9lcDVHNlRWMXhseTJvRUYzSlBvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTQ0NC84RENFMjc0QUIxMUQxMUVFQTMzNjMzMTlDNEY5QUUwMi9jeDVYc05fZXA1 RzZUVjF4bHkyb0VGM0pQb3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAE0iV/fvhN+5I+ZLpkEe6zxcWCUFIvYzpuz4l64KzKssKNmIo12uBPUUT/Myk gcJxYul4xLo34srBe87AleiVlayB7tC8JqN/C71twPWUybVa2tuesAcrXbCzgqel 2FuDuWHJ5yJnMvyNhoGTcXgCQ1QWrazaTEF7pcp+j7PokuLFUsPY1TxxzdiJ5iJI uC/Z8NM1gqBH4ZDoDHlBAgT+dtreK5ZSS9IZl0AIRy3WgGNeG4cV6xCScK+LcAUH MckZ5XpB4T1unFSUJeao4T8oRD9sGo8VClxfygoO45X8Sn3WqY0hoiVMoi3rVO1M UFHFmNkjgh6DKIU4d5LfnWupjA== -----END CERTIFICATE-----Generated at Sat Oct 10 23:12:22 2026 by rpki-client