$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft File: cnQCOx-0p0kyj11N-DsN0_B_6UI.mft (raw, json) Hash identifier: xfnzvqocqtgywqNLv3O7nT5uy1aE3joo/N1YwHM3c0Q= Subject key identifier: 0F:65:33:33:95:2F:7F:12:B8:CA:02:74:81:D6:EF:7C:A4:D3:39:03 Authority key identifier: 72:74:02:3B:1F:B4:A7:49:32:8F:5D:4D:F8:3B:0D:D3:F0:7F:E9:42 Certificate issuer: /CN=A91FFDF3/serialNumber=7274023B1FB4A749328F5D4DF83B0DD3F07FE942 Certificate serial: 075D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnQCOx-0p0kyj11N-DsN0_B_6UI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft Manifest number: 075D Signing time: Sun 20 Sep 2026 21:35:11 +0000 Manifest this update: Sun 20 Sep 2026 21:35:10 +0000 Manifest next update: Sun 27 Sep 2026 21:35:10 +0000 Files and hashes: 1: cnQCOx-0p0kyj11N-DsN0_B_6UI.crl (hash: Ow1Sq6IWUqmt3W8+blrWjbfMNSG+ARfvYXefvbx82LM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.crl rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnQCOx-0p0kyj11N-DsN0_B_6UI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 21:35:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1885 (0x75d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFDF3, serialNumber=7274023B1FB4A749328F5D4DF83B0DD3F07FE942 Validity Not Before: Sep 20 21:35:10 2026 GMT Not After : Sep 27 21:35:10 2026 GMT Subject: CN=6ab0518e-0e9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:2f:76:e5:f2:52:85:c2:39:32:3b:7b:ee:04: 33:c1:77:04:01:19:67:82:70:be:d3:38:c6:54:ac: ef:5b:59:b9:7b:12:da:ca:97:83:0b:78:9e:85:28: 1a:01:35:c9:e4:fe:49:0d:39:af:c9:ef:78:e7:9e: ae:f5:c8:41:32:a4:db:1c:f8:fd:79:54:4c:09:eb: f0:f3:63:9a:23:27:80:fb:bc:bd:79:7d:72:20:bc: d2:91:8d:8c:cd:86:90:81:33:5c:c3:45:b3:e0:15: 78:40:86:25:5c:e8:5a:56:ac:db:ff:1e:9b:08:40: 24:85:90:d7:1b:02:99:73:db:5f:c3:fc:05:db:13: 5d:15:6a:19:06:32:fd:e0:5a:21:cb:48:99:f7:eb: 60:52:11:a5:6f:50:7c:2c:09:b1:57:76:90:c1:fc: a6:da:99:09:a5:66:5f:77:2b:79:de:1e:cd:77:83: f6:4a:4b:08:30:a3:c4:d6:f9:f4:cf:fe:09:4f:ce: 8d:67:3a:5a:d0:f7:f2:bc:58:e1:db:9d:a4:32:b2: 2b:81:11:da:74:06:10:83:f2:34:ea:48:1c:81:ff: 2b:51:30:aa:29:81:03:e4:06:24:71:e8:16:8f:ad: 42:42:bb:07:32:72:29:46:e2:51:1b:22:8a:be:ed: 72:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:65:33:33:95:2F:7F:12:B8:CA:02:74:81:D6:EF:7C:A4:D3:39:03 X509v3 Authority Key Identifier: keyid:72:74:02:3B:1F:B4:A7:49:32:8F:5D:4D:F8:3B:0D:D3:F0:7F:E9:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnQCOx-0p0kyj11N-DsN0_B_6UI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:76:be:fa:93:26:fc:f5:8e:2f:00:b3:c6:b0:fa:ae:e9:c8: 1b:87:37:8b:aa:76:0f:6b:4a:45:0b:3b:e7:c1:64:9f:6f:8d: ef:b0:f7:b7:f2:e0:c5:d3:70:5c:dd:8c:51:f4:b6:2b:f5:5a: 24:da:57:91:04:f0:c9:0a:25:54:2d:db:90:57:fd:b8:5f:f0: 4e:41:f6:cb:5c:3b:a4:5b:10:79:24:a7:98:eb:d3:ee:1c:aa: a1:0c:0f:d1:a3:7b:38:c5:d9:15:3c:9b:80:e0:45:7b:f6:5f: 80:8a:7f:8b:28:ba:9e:20:2d:c2:f6:a4:8d:ff:52:63:22:8b: f6:ca:29:3c:9e:89:4d:d2:d9:4b:19:f9:53:15:6f:4f:6c:94: 5f:f0:ae:9a:3f:05:ea:5c:ba:c0:c1:a9:b7:e0:04:32:72:01: db:59:70:47:9f:88:b0:37:69:86:df:6a:90:a0:48:6e:cb:ae: fa:5b:5c:98:c6:1f:67:8e:60:fd:63:84:44:39:33:3d:7c:85: 85:bd:1a:5e:74:42:81:ee:99:4d:a0:99:33:e8:da:38:c9:c1: d6:17:b9:be:f1:28:38:41:c2:11:c4:79:f0:df:91:1e:fe:a8: 5a:d5:51:91:12:25:8b:3c:13:a2:3a:9d:8a:ee:9a:eb:1e:98: c3:09:a0:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB10wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZERjMxMTAvBgNVBAUTKDcyNzQwMjNCMUZCNEE3NDkzMjhGNUQ0REY4M0IwREQz RjA3RkU5NDIwHhcNMjYwOTIwMjEzNTEwWhcNMjYwOTI3MjEzNTEwWjAYMRYwFAYD VQQDEw02YWIwNTE4ZS0wZTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlS925fJShcI5Mjt77gQzwXcEARlngnC+0zjGVKzvW1m5exLaypeDC3iehSga ATXJ5P5JDTmvye94556u9chBMqTbHPj9eVRMCevw82OaIyeA+7y9eX1yILzSkY2M zYaQgTNcw0Wz4BV4QIYlXOhaVqzb/x6bCEAkhZDXGwKZc9tfw/wF2xNdFWoZBjL9 4Fohy0iZ9+tgUhGlb1B8LAmxV3aQwfym2pkJpWZfdyt53h7Nd4P2SksIMKPE1vn0 z/4JT86NZzpa0PfyvFjh252kMrIrgRHadAYQg/I06kgcgf8rUTCqKYED5AYkcegW j61CQrsHMnIpRuJRGyKKvu1yvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA9lMzOV L38SuMoCdIHW73yk0zkDMB8GA1UdIwQYMBaAFHJ0AjsftKdJMo9dTfg7DdPwf+lC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkRGMy83NTdEQjc4ODdE NzExMUVCODJEM0Q2NjFDNEY5QUUwMi9jblFDT3gtMHAwa3lqMTFOLURzTjBfQl82 VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NuUUNPeC0wcDBreWoxMU4tRHNOMF9CXzZVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkRGMy83NTdEQjc4ODdENzExMUVCODJEM0Q2NjFDNEY5QUUwMi9jblFDT3gtMHAw a3lqMTFOLURzTjBfQl82VUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANna++pMm/PWOLwCzxrD6runIG4c3i6p2D2tKRQs758Fkn2+N77D3t/LgxdNw XN2MUfS2K/VaJNpXkQTwyQolVC3bkFf9uF/wTkH2y1w7pFsQeSSnmOvT7hyqoQwP 0aN7OMXZFTybgOBFe/ZfgIp/iyi6niAtwvakjf9SYyKL9sopPJ6JTdLZSxn5UxVv T2yUX/Cumj8F6ly6wMGpt+AEMnIB21lwR5+IsDdpht9qkKBIbsuu+ltcmMYfZ45g /WOERDkzPXyFhb0aXnRCge6ZTaCZM+jaOMnB1he5vvEoOEHCEcR58N+RHv6oWtVR kRIlizwTojqdiu6a6x6Ywwmgkg== -----END CERTIFICATE-----Generated at Tue Sep 22 16:14:50 2026 by rpki-client