$ rpki-client -vvvf rpki.apnic.net/member_repository/A911E621/5D6AF50A70ED11F1A6F57C9E5DA30FBC/xUCE0wQkhNyXlJ3tyVbCgtnrglk.mft File: xUCE0wQkhNyXlJ3tyVbCgtnrglk.mft (raw, json) Hash identifier: GjavTgFeVSYi0tVHkEyxFFRW5ariDtTI7XlRVJ0+v1M= Subject key identifier: 04:B8:43:5B:62:9D:15:A3:3B:3F:80:E3:89:11:7C:FA:AC:A1:07:0F Authority key identifier: C5:40:84:D3:04:24:84:DC:97:94:9D:ED:C9:56:C2:82:D9:EB:82:59 Certificate issuer: /CN=A911E621/serialNumber=C54084D3042484DC97949DEDC956C282D9EB8259 Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xUCE0wQkhNyXlJ3tyVbCgtnrglk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E621/5D6AF50A70ED11F1A6F57C9E5DA30FBC/xUCE0wQkhNyXlJ3tyVbCgtnrglk.mft Manifest number: 30 Signing time: Wed 23 Sep 2026 08:26:24 +0000 Manifest this update: Wed 23 Sep 2026 08:26:24 +0000 Manifest next update: Wed 30 Sep 2026 08:26:24 +0000 Files and hashes: 1: xUCE0wQkhNyXlJ3tyVbCgtnrglk.crl (hash: olsyUnZHEk9MBH55DgG7+YsdJ3mPk6CICn6Ja47POSg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E621/5D6AF50A70ED11F1A6F57C9E5DA30FBC/xUCE0wQkhNyXlJ3tyVbCgtnrglk.crl rsync://rpki.apnic.net/member_repository/A911E621/5D6AF50A70ED11F1A6F57C9E5DA30FBC/xUCE0wQkhNyXlJ3tyVbCgtnrglk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xUCE0wQkhNyXlJ3tyVbCgtnrglk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:26:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E621, serialNumber=C54084D3042484DC97949DEDC956C282D9EB8259 Validity Not Before: Sep 23 08:26:24 2026 GMT Not After : Sep 30 08:26:24 2026 GMT Subject: CN=6ab38d30-237b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:5f:76:72:2a:c5:7d:df:85:62:b5:f7:91:2b: dd:9c:c0:61:7f:4b:ca:c0:15:75:1d:1f:2f:a9:95: 99:05:12:44:03:75:6a:16:94:2e:44:6a:39:66:6a: 38:35:f7:cb:d3:d1:16:77:3c:6e:25:98:e0:b9:5e: 7e:51:06:72:70:a8:ee:7b:9e:95:0f:aa:91:99:85: a7:26:74:6c:ac:64:4d:a7:e0:5c:1e:6f:d4:2d:23: 14:29:78:5d:87:78:dd:07:16:42:7c:90:9b:b5:12: 70:87:4f:6b:61:08:cc:02:54:af:c9:8c:e0:55:06: ef:5b:25:bc:02:22:25:73:82:70:f6:20:46:f3:72: 14:c2:95:f7:12:d7:70:dd:e0:22:dc:9b:f9:b4:d4: d7:5a:ac:2a:4f:68:90:bb:c4:fb:5e:bc:10:aa:b2: 6c:fa:50:82:2c:89:63:0a:a6:04:ab:ae:d6:9c:cb: 25:5d:97:b0:6a:34:73:77:c9:a0:80:39:1b:23:ad: 81:f7:76:ce:94:4e:40:96:f2:14:ec:b3:d9:96:71: 6f:e8:8a:48:2f:f6:54:13:51:d8:9a:9b:ff:d8:ef: 99:29:d8:c8:3a:36:2a:42:63:7b:be:7d:a9:50:f7: a3:c3:75:3b:f3:51:b3:c5:6c:dc:46:0e:cb:82:11: 54:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:B8:43:5B:62:9D:15:A3:3B:3F:80:E3:89:11:7C:FA:AC:A1:07:0F X509v3 Authority Key Identifier: keyid:C5:40:84:D3:04:24:84:DC:97:94:9D:ED:C9:56:C2:82:D9:EB:82:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E621/5D6AF50A70ED11F1A6F57C9E5DA30FBC/xUCE0wQkhNyXlJ3tyVbCgtnrglk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xUCE0wQkhNyXlJ3tyVbCgtnrglk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E621/5D6AF50A70ED11F1A6F57C9E5DA30FBC/xUCE0wQkhNyXlJ3tyVbCgtnrglk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:b1:c9:1b:c7:7c:8f:92:c9:a7:36:80:46:6a:37:66:0b:fe: 75:9a:8d:c6:f1:c2:db:0d:78:ce:89:d1:55:a9:ec:a6:c1:fc: 8f:83:1b:a3:21:49:d6:67:75:ec:8d:cc:77:76:8a:4a:7c:e8: 85:c5:55:bb:18:f9:ac:9a:74:4c:83:f0:fe:b2:8a:7f:87:84: 57:71:1e:94:15:8e:c4:98:6a:d5:33:e9:b4:d5:46:16:2d:5b: b8:d6:b9:b4:fa:4d:dd:be:2a:4e:d1:38:e0:4e:98:30:c7:23: a5:5d:c2:9f:c5:04:8b:d3:fc:14:8e:5e:f3:59:92:1e:ea:bf: 1b:68:f8:18:0a:fe:bb:83:1b:a3:04:41:10:fe:bc:e9:56:09: b1:59:ac:d3:74:56:22:ea:ec:c9:da:8b:58:0f:79:bf:d7:1f: 72:c9:1e:85:6e:f6:e4:08:85:f2:3c:4a:23:b3:cf:8c:19:01: ff:79:59:29:36:a7:85:0b:ee:ba:a7:f4:38:e5:9e:40:9e:04: b6:d0:ff:bd:29:c6:7a:77:04:be:81:e6:ce:74:18:b4:df:ee: 19:d3:d4:97:81:9e:1e:d2:16:b1:ad:50:8f:68:7b:ee:ed:55: 10:a6:9c:b7:9f:ac:a4:ef:e2:39:a0:d0:5d:57:d8:88:a7:b3: 9f:31:e3:4f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RTYyMTExMC8GA1UEBRMoQzU0MDg0RDMwNDI0ODREQzk3OTQ5REVEQzk1NkMyODJE OUVCODI1OTAeFw0yNjA5MjMwODI2MjRaFw0yNjA5MzAwODI2MjRaMBgxFjAUBgNV BAMTDTZhYjM4ZDMwLTIzN2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDxX3ZyKsV934VitfeRK92cwGF/S8rAFXUdHy+plZkFEkQDdWoWlC5Eajlmajg1 98vT0RZ3PG4lmOC5Xn5RBnJwqO57npUPqpGZhacmdGysZE2n4Fweb9QtIxQpeF2H eN0HFkJ8kJu1EnCHT2thCMwCVK/JjOBVBu9bJbwCIiVzgnD2IEbzchTClfcS13Dd 4CLcm/m01NdarCpPaJC7xPtevBCqsmz6UIIsiWMKpgSrrtacyyVdl7BqNHN3yaCA ORsjrYH3ds6UTkCW8hTss9mWcW/oikgv9lQTUdiam//Y75kp2Mg6NipCY3u+falQ 96PDdTvzUbPFbNxGDsuCEVRzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUBLhDW2Kd FaM7P4DjiRF8+qyhBw8wHwYDVR0jBBgwFoAUxUCE0wQkhNyXlJ3tyVbCgtnrglkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFFNjIxLzVENkFGNTBBNzBF RDExRjFBNkY1N0M5RTVEQTMwRkJDL3hVQ0Uwd1FraE55WGxKM3R5VmJDZ3Rucmds ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveFVDRTB3UWtoTnlYbEozdHlWYkNndG5yZ2xrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFF NjIxLzVENkFGNTBBNzBFRDExRjFBNkY1N0M5RTVEQTMwRkJDL3hVQ0Uwd1FraE55 WGxKM3R5VmJDZ3Rucmdsay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCGsckbx3yPksmnNoBGajdmC/51mo3G8cLbDXjOidFVqeymwfyPgxujIUnWZ3Xs jcx3dopKfOiFxVW7GPmsmnRMg/D+sop/h4RXcR6UFY7EmGrVM+m01UYWLVu41rm0 +k3dvipO0TjgTpgwxyOlXcKfxQSL0/wUjl7zWZIe6r8baPgYCv67gxujBEEQ/rzp VgmxWazTdFYi6uzJ2otYD3m/1x9yyR6FbvbkCIXyPEojs8+MGQH/eVkpNqeFC+66 p/Q45Z5AngS20P+9KcZ6dwS+gebOdBi03+4Z09SXgZ4e0haxrVCPaHvu7VUQppy3 n6yk7+I5oNBdV9iIp7OfMeNP -----END CERTIFICATE-----Generated at Thu Sep 24 08:51:02 2026 by rpki-client