$ rpki-client -vvvf rpki.apnic.net/member_repository/A91614E3/FAFF99863ED111F1A3BC1149B0833773/RXfmNryC40djCTad9uzHkOsrkUU.mft File: RXfmNryC40djCTad9uzHkOsrkUU.mft (raw, json) Hash identifier: 5QKZY2pBNd0PJMk3VEVHvCFj8lf0j59BJH3EpZRZGB0= Subject key identifier: C4:3A:C5:5D:35:43:75:D8:29:B1:75:65:2A:16:C7:83:2C:C2:2B:F4 Authority key identifier: 45:77:E6:36:BC:82:E3:47:63:09:36:9D:F6:EC:C7:90:EB:2B:91:45 Certificate issuer: /CN=A91614E3/serialNumber=4577E636BC82E3476309369DF6ECC790EB2B9145 Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RXfmNryC40djCTad9uzHkOsrkUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91614E3/FAFF99863ED111F1A3BC1149B0833773/RXfmNryC40djCTad9uzHkOsrkUU.mft Manifest number: 4E Signing time: Mon 21 Sep 2026 08:17:53 +0000 Manifest this update: Mon 21 Sep 2026 08:17:52 +0000 Manifest next update: Mon 28 Sep 2026 08:17:52 +0000 Files and hashes: 1: RXfmNryC40djCTad9uzHkOsrkUU.crl (hash: xQZicLqSX8qVIHZ9+GwvVkJBMshhEgeMPoM3kk32f+U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91614E3/FAFF99863ED111F1A3BC1149B0833773/RXfmNryC40djCTad9uzHkOsrkUU.crl rsync://rpki.apnic.net/member_repository/A91614E3/FAFF99863ED111F1A3BC1149B0833773/RXfmNryC40djCTad9uzHkOsrkUU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RXfmNryC40djCTad9uzHkOsrkUU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:17:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91614E3, serialNumber=4577E636BC82E3476309369DF6ECC790EB2B9145 Validity Not Before: Sep 21 08:17:52 2026 GMT Not After : Sep 28 08:17:52 2026 GMT Subject: CN=6ab0e831-4c6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8d:02:44:86:e0:16:51:23:28:b1:0e:20:e3: 37:0a:3f:32:d9:7a:cf:d0:32:6b:e3:c4:b7:b6:30: 2d:d6:f9:66:f2:38:0e:ed:29:3d:65:24:c7:28:b9: d7:c0:f6:53:03:fb:de:90:38:fe:49:1b:29:ab:1e: 57:94:07:43:c8:94:85:e2:67:db:32:84:39:dc:b0: f4:03:78:0e:69:fb:c3:a7:dd:e8:c7:ff:47:3d:fe: 0e:3a:86:30:b6:4e:ab:b1:3a:15:0e:49:a1:a5:cb: dd:f3:c9:2a:a6:91:e3:fe:c7:ea:41:9e:e9:74:66: f4:83:ea:fc:e7:32:d5:f6:19:4a:0f:64:37:c5:61: fd:8d:0d:ec:9c:c2:a0:f7:d8:45:49:69:10:5a:1b: f2:9c:fb:82:c7:2a:07:4b:58:54:00:73:f3:83:db: 5a:37:65:9c:23:ec:45:f5:23:30:e9:0c:75:55:10: b1:67:1b:ce:30:b8:36:86:89:58:da:68:02:da:07: 3a:29:d9:85:9b:c4:87:1c:2d:83:01:03:c8:96:95: fb:f3:88:dc:1a:86:5d:1e:2c:ff:ee:8c:c7:4a:b5: eb:17:73:d8:ea:87:9f:77:8e:9a:6e:55:d6:58:7a: 8c:47:9e:d9:5f:db:2c:8e:1b:51:af:08:77:a1:d9: aa:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:3A:C5:5D:35:43:75:D8:29:B1:75:65:2A:16:C7:83:2C:C2:2B:F4 X509v3 Authority Key Identifier: keyid:45:77:E6:36:BC:82:E3:47:63:09:36:9D:F6:EC:C7:90:EB:2B:91:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91614E3/FAFF99863ED111F1A3BC1149B0833773/RXfmNryC40djCTad9uzHkOsrkUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RXfmNryC40djCTad9uzHkOsrkUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91614E3/FAFF99863ED111F1A3BC1149B0833773/RXfmNryC40djCTad9uzHkOsrkUU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:90:75:dd:a0:90:fa:a5:13:bd:dd:52:cc:bb:27:a5:bb:7c: 04:cf:be:75:96:14:65:89:9c:a6:3f:f6:28:90:8f:cf:ff:08: a2:ce:87:cf:1b:09:17:05:6d:24:04:1b:d5:1b:4c:f1:67:a2: da:99:d5:ff:6b:52:ce:fc:73:db:4f:31:67:c8:58:28:5d:a2: a0:12:8b:bc:7f:19:c6:28:a1:ce:f6:0e:2c:a4:c0:2e:e7:f3: d6:cc:eb:5d:5a:7d:8e:20:18:4d:e2:56:1d:11:04:de:00:0e: 20:8a:78:74:b0:23:8e:51:4f:ba:a4:2c:25:b5:b9:72:c7:ab: e1:1b:db:48:31:3a:ed:f7:a1:b9:e7:c2:af:61:9e:e9:dc:a1: 59:b9:0e:3e:80:c1:32:bc:65:31:f6:06:e3:6c:05:a0:ed:4e: 3a:46:f1:28:b6:6a:6c:55:76:5d:32:99:59:9f:c3:0f:42:df: a7:4f:0f:d7:2c:dc:37:4d:63:a6:99:c1:5d:93:f6:9e:99:8f: 4e:da:23:32:60:63:a9:09:16:b0:d8:c9:c7:1a:e7:04:4b:2d: 51:72:d5:d4:fb:0b:1e:ce:ba:c0:7e:09:4f:48:f3:11:f9:b7: 9c:25:58:58:d4:23:74:5d:61:60:57:93:03:45:41:f6:08:b4: fd:22:d3:2b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MTRFMzExMC8GA1UEBRMoNDU3N0U2MzZCQzgyRTM0NzYzMDkzNjlERjZFQ0M3OTBF QjJCOTE0NTAeFw0yNjA5MjEwODE3NTJaFw0yNjA5MjgwODE3NTJaMBgxFjAUBgNV BAMTDTZhYjBlODMxLTRjNmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGjQJEhuAWUSMosQ4g4zcKPzLZes/QMmvjxLe2MC3W+WbyOA7tKT1lJMcoudfA 9lMD+96QOP5JGymrHleUB0PIlIXiZ9syhDncsPQDeA5p+8On3ejH/0c9/g46hjC2 TquxOhUOSaGly93zySqmkeP+x+pBnul0ZvSD6vznMtX2GUoPZDfFYf2NDeycwqD3 2EVJaRBaG/Kc+4LHKgdLWFQAc/OD21o3ZZwj7EX1IzDpDHVVELFnG84wuDaGiVja aALaBzop2YWbxIccLYMBA8iWlfvziNwahl0eLP/ujMdKtesXc9jqh593jppuVdZY eoxHntlf2yyOG1GvCHeh2apvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUxDrFXTVD ddgpsXVlKhbHgyzCK/QwHwYDVR0jBBgwFoAURXfmNryC40djCTad9uzHkOsrkUUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxNEUzL0ZBRkY5OTg2M0VE MTExRjFBM0JDMTE0OUIwODMzNzczL1JYZm1OcnlDNDBkakNUYWQ5dXpIa09zcmtV VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUlhmbU5yeUM0MGRqQ1RhZDl1ekhrT3Nya1VVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx NEUzL0ZBRkY5OTg2M0VEMTExRjFBM0JDMTE0OUIwODMzNzczL1JYZm1OcnlDNDBk akNUYWQ5dXpIa09zcmtVVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAskHXdoJD6pRO93VLMuyelu3wEz751lhRliZymP/YokI/P/wiizofPGwkXBW0k BBvVG0zxZ6LamdX/a1LO/HPbTzFnyFgoXaKgEou8fxnGKKHO9g4spMAu5/PWzOtd Wn2OIBhN4lYdEQTeAA4ginh0sCOOUU+6pCwltblyx6vhG9tIMTrt96G558KvYZ7p 3KFZuQ4+gMEyvGUx9gbjbAWg7U46RvEotmpsVXZdMplZn8MPQt+nTw/XLNw3TWOm mcFdk/aemY9O2iMyYGOpCRaw2MnHGucESy1RctXU+wsezrrAfglPSPMR+becJVhY 1CN0XWFgV5MDRUH2CLT9ItMr -----END CERTIFICATE-----Generated at Tue Sep 22 23:23:49 2026 by rpki-client