$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft File: Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft (raw, json) Hash identifier: UXPmLqnEDdvskePtX5kTthPfEGoAR+mkXnZsu1NDu6E= Subject key identifier: 44:00:2E:08:B2:D1:D3:BB:D9:BB:78:F9:A4:F6:29:B1:94:DE:82:8E Authority key identifier: 3F:17:79:09:89:17:2F:40:92:67:E0:FF:E7:44:EE:48:B0:17:91:E7 Certificate issuer: /CN=A91F1303/serialNumber=3F17790989172F409267E0FFE744EE48B01791E7 Certificate serial: F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pxd5CYkXL0CSZ-D_50TuSLAXkec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft Manifest number: F3 Signing time: Mon 21 Sep 2026 06:20:44 +0000 Manifest this update: Mon 21 Sep 2026 06:20:43 +0000 Manifest next update: Mon 28 Sep 2026 06:20:43 +0000 Files and hashes: 1: Pxd5CYkXL0CSZ-D_50TuSLAXkec.crl (hash: zT90mPtYdqexASqUYsDOxvM1z4ZXyP/i7gVDS0YQ9Fg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.crl rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pxd5CYkXL0CSZ-D_50TuSLAXkec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 243 (0xf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1303, serialNumber=3F17790989172F409267E0FFE744EE48B01791E7 Validity Not Before: Sep 21 06:20:43 2026 GMT Not After : Sep 28 06:20:43 2026 GMT Subject: CN=6ab0ccbc-d607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:2c:1a:8c:c5:63:50:f0:6b:1c:2c:20:bd:67: 3b:f5:ea:da:d0:c7:00:90:16:3e:d3:c7:e5:4b:fa: c2:f9:09:e4:42:72:61:e1:bb:71:c9:ec:54:4e:6d: 93:12:dc:30:eb:ef:e2:d4:81:4b:13:2a:d4:18:d7: f1:58:c7:01:fc:38:e4:cc:61:cb:c1:ba:68:4d:bf: 47:cf:93:ed:d2:0e:d5:20:92:cb:94:82:4e:a4:89: b6:ac:5e:b7:a2:f8:63:2c:ff:39:d2:9d:ec:cc:1e: 5f:72:be:99:1d:96:93:af:77:8f:c9:15:0e:12:8c: 6a:df:74:de:36:b6:ab:1f:2b:a8:c5:99:0a:8f:46: 46:3e:1f:45:92:d2:54:e7:f5:a6:6c:06:20:46:53: 5b:ac:ad:7f:7a:06:8e:10:8b:d4:c8:a9:be:f7:6d: 24:f7:2c:af:82:b0:86:42:ca:a9:05:cf:12:95:dd: f2:b5:9c:8b:a9:f1:02:44:70:cc:63:7d:1e:2d:6a: 74:d0:73:42:f9:f2:90:9c:9c:81:fe:4a:fe:f0:95: 83:8d:06:c5:76:ef:53:85:2f:15:72:6f:af:86:dc: e8:99:1d:13:65:d2:b7:9c:0a:7c:a1:d5:2d:c3:5e: 42:28:e1:5b:b3:ff:a3:7f:cd:14:68:04:14:33:aa: 3c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:00:2E:08:B2:D1:D3:BB:D9:BB:78:F9:A4:F6:29:B1:94:DE:82:8E X509v3 Authority Key Identifier: keyid:3F:17:79:09:89:17:2F:40:92:67:E0:FF:E7:44:EE:48:B0:17:91:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pxd5CYkXL0CSZ-D_50TuSLAXkec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:7c:ef:fe:66:f7:8e:a5:4b:46:3e:42:5c:99:09:7a:8d:b1: ce:9a:f7:54:dd:50:9a:99:25:66:92:eb:01:8b:a8:7a:0c:11: ff:b3:9d:76:32:01:3c:28:54:94:fc:b2:67:20:a3:bf:11:fc: 2d:08:48:94:b8:5c:82:b8:cd:68:8c:ea:21:8f:a8:ef:da:61: bf:19:83:0a:5c:02:46:cb:fa:41:21:59:d3:fd:da:c3:dd:02: f0:4e:14:7a:18:ab:cf:cc:8c:a5:a9:09:3e:de:72:9e:53:1b: e0:68:50:c3:a3:a7:d1:25:64:e6:5e:6c:55:4e:10:11:db:7c: f6:ff:19:d6:bb:ca:0b:38:f5:c4:42:d0:67:ce:1e:fc:39:3e: f8:00:2a:58:2a:22:c1:51:fc:22:68:a4:17:0c:14:3f:73:7f: 1a:94:9e:e2:99:14:a0:a8:3d:41:5a:83:1c:27:2f:a2:b8:b4: b8:85:e5:e6:a5:cc:cf:0b:1b:1c:94:7b:28:89:36:ad:82:bc: 46:06:43:1e:aa:29:c3:42:bc:2c:72:70:53:b6:73:a9:b1:cb: 00:ae:92:ad:ae:f6:e1:37:c8:9f:94:9d:48:f8:67:17:b1:e7: 08:b2:c3:a2:ba:05:6b:73:0f:ee:ad:6e:f7:97:ca:c9:c7:d2: 74:77:e1:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjEzMDMxMTAvBgNVBAUTKDNGMTc3OTA5ODkxNzJGNDA5MjY3RTBGRkU3NDRFRTQ4 QjAxNzkxRTcwHhcNMjYwOTIxMDYyMDQzWhcNMjYwOTI4MDYyMDQzWjAYMRYwFAYD VQQDEw02YWIwY2NiYy1kNjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ywajMVjUPBrHCwgvWc79era0McAkBY+08flS/rC+QnkQnJh4btxyexUTm2T Etww6+/i1IFLEyrUGNfxWMcB/DjkzGHLwbpoTb9Hz5Pt0g7VIJLLlIJOpIm2rF63 ovhjLP850p3szB5fcr6ZHZaTr3ePyRUOEoxq33TeNrarHyuoxZkKj0ZGPh9FktJU 5/WmbAYgRlNbrK1/egaOEIvUyKm+920k9yyvgrCGQsqpBc8Sld3ytZyLqfECRHDM Y30eLWp00HNC+fKQnJyB/kr+8JWDjQbFdu9ThS8Vcm+vhtzomR0TZdK3nAp8odUt w15CKOFbs/+jf80UaAQUM6o8awIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEQALgiy 0dO72bt4+aT2KbGU3oKOMB8GA1UdIwQYMBaAFD8XeQmJFy9Akmfg/+dE7kiwF5Hn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTMwMy85QjQyNEQzMDQ2 ODUxMUYwQTg4MTg4M0VDNEY5QUUwMi9QeGQ1Q1lrWEwwQ1NaLURfNTBUdVNMQVhr ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B4ZDVDWWtYTDBDU1otRF81MFR1U0xBWGtlYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTMwMy85QjQyNEQzMDQ2ODUxMUYwQTg4MTg4M0VDNEY5QUUwMi9QeGQ1Q1lrWEww Q1NaLURfNTBUdVNMQVhrZWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFXzv/mb3jqVLRj5CXJkJeo2xzpr3VN1QmpklZpLrAYuoegwR/7OddjIBPChU lPyyZyCjvxH8LQhIlLhcgrjNaIzqIY+o79phvxmDClwCRsv6QSFZ0/3aw90C8E4U ehirz8yMpakJPt5ynlMb4GhQw6On0SVk5l5sVU4QEdt89v8Z1rvKCzj1xELQZ84e /Dk++AAqWCoiwVH8ImikFwwUP3N/GpSe4pkUoKg9QVqDHCcvori0uIXl5qXMzwsb HJR7KIk2rYK8RgZDHqopw0K8LHJwU7ZzqbHLAK6Sra724TfIn5SdSPhnF7HnCLLD oroFa3MP7q1u95fKycfSdHfhjw== -----END CERTIFICATE-----Generated at Mon Sep 21 22:21:52 2026 by rpki-client