$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.mft File: C33smHxhdR0-2h2_PnwipzoV3u0.mft (raw, json) Hash identifier: /Ul6OD/Xlhh450PKYiX9H6hTw7cAmcmJGTaiaU6obuY= Subject key identifier: 89:79:87:4B:65:C2:5C:0C:DB:C3:AC:41:C0:55:BA:6A:B8:2B:A2:31 Authority key identifier: 0B:7D:EC:98:7C:61:75:1D:3E:DA:1D:BF:3E:7C:22:A7:3A:15:DE:ED Certificate issuer: /CN=A91C0E57/serialNumber=0B7DEC987C61751D3EDA1DBF3E7C22A73A15DEED Certificate serial: 05D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C33smHxhdR0-2h2_PnwipzoV3u0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.mft Manifest number: 05CE Signing time: Thu 24 Sep 2026 22:54:09 +0000 Manifest this update: Thu 24 Sep 2026 22:54:08 +0000 Manifest next update: Thu 01 Oct 2026 22:54:08 +0000 Files and hashes: 1: C33smHxhdR0-2h2_PnwipzoV3u0.crl (hash: jAuLrn/cZFYAoe9QSVDYviJHj+05BmzKkNiH7wcYbNo=) 2: 60A8F48A25D211ECB2CCF633C4F9AE02.roa (hash: 1OTKEgqlZnaKGpmz6oNBNrSZubeFhZS/c5pM2HU9abQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.crl rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C33smHxhdR0-2h2_PnwipzoV3u0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 21:49:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1495 (0x5d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0E57, serialNumber=0B7DEC987C61751D3EDA1DBF3E7C22A73A15DEED Validity Not Before: Sep 24 22:54:08 2026 GMT Not After : Oct 1 22:54:08 2026 GMT Subject: CN=6ab5aa11-6443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5d:84:b9:8c:d3:bd:3c:38:21:19:e5:3a:70: 23:a4:52:68:34:70:67:6c:f4:5d:10:b1:cc:90:7f: 5b:a6:68:02:8f:f2:78:89:4c:ec:56:ff:12:d7:7a: 9f:99:73:75:3a:9b:52:7e:42:b9:59:e6:28:58:bf: d4:e5:22:08:bd:54:38:ce:71:ba:b7:4b:b4:0f:3e: 4a:40:cf:10:c8:8b:61:9a:c5:e0:b8:e5:27:ed:68: 78:a1:e0:9f:b3:b9:a2:1e:98:d6:7c:61:9c:10:d5: a0:06:45:d4:21:c1:68:61:5c:c4:03:bd:42:ca:e6: e9:f5:3b:b6:d6:ef:b8:e4:c8:5e:43:af:02:49:63: 40:6a:be:4a:0f:23:30:a5:4d:f9:a1:71:0b:f5:d6: 39:56:8c:78:02:53:0d:6d:a2:15:b5:39:59:22:dc: 8e:5c:ce:fb:8e:3d:d2:ca:4f:93:29:b9:87:92:7f: a8:3b:ec:09:7a:33:63:40:9d:64:0a:22:a4:46:fe: 14:b3:64:f2:71:74:e7:c4:fa:db:6c:12:15:a2:0f: 09:02:51:3b:8a:8d:ad:b9:35:fb:c4:fb:89:59:2a: 4b:de:cd:0e:52:8a:0c:9b:e9:eb:5c:3e:ce:0f:6c: f3:9b:1d:24:33:6c:a6:06:5c:9a:35:dd:b2:b9:61: 0a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:79:87:4B:65:C2:5C:0C:DB:C3:AC:41:C0:55:BA:6A:B8:2B:A2:31 X509v3 Authority Key Identifier: keyid:0B:7D:EC:98:7C:61:75:1D:3E:DA:1D:BF:3E:7C:22:A7:3A:15:DE:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C33smHxhdR0-2h2_PnwipzoV3u0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:c4:55:d4:81:91:34:43:c5:01:49:ed:0f:60:d0:bc:4e:b5: b1:68:83:f8:1a:28:dd:f1:03:54:4a:5c:33:ea:c2:17:8d:ee: b7:ad:1b:dc:f2:95:18:c5:ef:04:e9:8d:8e:35:4f:8d:39:99: e4:92:d4:b2:2a:cd:fd:e7:25:69:e6:a3:6e:ce:27:0f:eb:5c: f8:0f:af:bd:f5:00:e3:5f:c9:c7:0a:67:af:2e:16:e6:43:a4: ae:a8:e5:a6:bd:f0:00:07:81:9f:6f:5b:ad:66:ab:8c:be:0f: 30:82:b0:25:48:82:6b:48:41:a1:93:58:01:08:98:48:bd:35: b1:ff:41:1c:7e:df:74:1d:0a:ec:77:0a:db:f7:60:e7:4a:28: f7:9a:4e:fc:4b:b4:e4:4b:a3:33:ff:81:d3:e0:3d:e7:31:2a: b7:be:b6:39:5c:d7:c5:af:36:4c:64:2c:0e:50:90:b0:db:14: 84:f1:d6:b4:08:20:57:a5:8e:e2:a6:00:f4:f5:5a:d5:1a:82: 6e:88:16:28:44:c9:a4:13:fa:90:93:bd:96:88:66:6d:b7:1c: 6b:29:cc:a7:fc:56:49:e7:d0:1d:4e:b0:c6:af:f2:0a:84:e8: 0e:d6:4e:2a:7d:02:0b:99:1d:46:45:c8:34:b7:95:f8:e2:8b: 0a:c2:3b:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBFNTcxMTAvBgNVBAUTKDBCN0RFQzk4N0M2MTc1MUQzRURBMURCRjNFN0MyMkE3 M0ExNURFRUQwHhcNMjYwOTI0MjI1NDA4WhcNMjYxMDAxMjI1NDA4WjAYMRYwFAYD VQQDEw02YWI1YWExMS02NDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqV2EuYzTvTw4IRnlOnAjpFJoNHBnbPRdELHMkH9bpmgCj/J4iUzsVv8S13qf mXN1OptSfkK5WeYoWL/U5SIIvVQ4znG6t0u0Dz5KQM8QyIthmsXguOUn7Wh4oeCf s7miHpjWfGGcENWgBkXUIcFoYVzEA71Cyubp9Tu21u+45MheQ68CSWNAar5KDyMw pU35oXEL9dY5Vox4AlMNbaIVtTlZItyOXM77jj3Syk+TKbmHkn+oO+wJejNjQJ1k CiKkRv4Us2TycXTnxPrbbBIVog8JAlE7io2tuTX7xPuJWSpL3s0OUooMm+nrXD7O D2zzmx0kM2ymBlyaNd2yuWEKcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIl5h0tl wlwM28OsQcBVumq4K6IxMB8GA1UdIwQYMBaAFAt97Jh8YXUdPtodvz58Iqc6Fd7t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEU1Ny9GQ0MxOEExNDIw NEUxMUVDQjEzRUUxN0FDNEY5QUUwMi9DMzNzbUh4aGRSMC0yaDJfUG53aXB6b1Yz dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MzM3NtSHhoZFIwLTJoMl9QbndpcHpvVjN1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEU1Ny9GQ0MxOEExNDIwNEUxMUVDQjEzRUUxN0FDNEY5QUUwMi9DMzNzbUh4aGRS MC0yaDJfUG53aXB6b1YzdTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzsRV1IGRNEPFAUntD2DQvE61sWiD+Boo3fEDVEpcM+rCF43ut60b3PKVGMXv BOmNjjVPjTmZ5JLUsirN/eclaeajbs4nD+tc+A+vvfUA41/Jxwpnry4W5kOkrqjl pr3wAAeBn29brWarjL4PMIKwJUiCa0hBoZNYAQiYSL01sf9BHH7fdB0K7HcK2/dg 50oo95pO/Eu05EujM/+B0+A95zEqt762OVzXxa82TGQsDlCQsNsUhPHWtAggV6WO 4qYA9PVa1RqCbogWKETJpBP6kJO9lohmbbccaynMp/xWSefQHU6wxq/yCoToDtZO Kn0CC5kdRkXINLeV+OKLCsI7pw== -----END CERTIFICATE-----Generated at Fri Sep 25 04:18:51 2026 by rpki-client