$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.mft File: xEWgBPxE11F5WpGduE8UoWBFOJE.mft (raw, json) Hash identifier: PEN24KUu6CjtKKC2Z42m8Q7y1SvF8IQFPrvDGQIOxYw= Subject key identifier: 03:03:39:F4:4A:8B:65:6A:66:88:33:0F:4D:0E:6B:08:B3:C8:16:24 Authority key identifier: C4:45:A0:04:FC:44:D7:51:79:5A:91:9D:B8:4F:14:A1:60:45:38:91 Certificate issuer: /CN=A91A7F3D/serialNumber=C445A004FC44D751795A919DB84F14A160453891 Certificate serial: A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEWgBPxE11F5WpGduE8UoWBFOJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.mft Manifest number: A0 Signing time: Wed 23 Sep 2026 07:03:05 +0000 Manifest this update: Wed 23 Sep 2026 07:03:04 +0000 Manifest next update: Wed 30 Sep 2026 07:03:04 +0000 Files and hashes: 1: xEWgBPxE11F5WpGduE8UoWBFOJE.crl (hash: GHEA65mND1P+xxqhhUSC8xlgumym4fPAHAduQ9C2+EI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.crl rsync://rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEWgBPxE11F5WpGduE8UoWBFOJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 07:03:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7F3D, serialNumber=C445A004FC44D751795A919DB84F14A160453891 Validity Not Before: Sep 23 07:03:04 2026 GMT Not After : Sep 30 07:03:04 2026 GMT Subject: CN=6ab379a9-f026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:12:17:1f:d0:a3:e3:13:5a:6c:f9:47:2c:bc: 84:06:e7:68:85:e6:84:56:1b:67:dd:fd:e1:81:2f: 15:ea:de:85:7a:42:0e:8d:17:13:94:e7:a9:ef:28: 9a:e9:02:df:d4:dc:e2:3a:be:80:0c:b6:73:29:d2: b9:27:90:5d:ed:c8:04:42:05:0a:91:30:b2:6c:d7: 37:6d:3a:7e:a4:cd:cb:64:44:e6:02:00:72:15:c1: 98:a8:a8:7b:87:fe:71:ac:c7:5b:f9:8a:e5:49:0d: 35:dc:bb:a2:2f:23:a5:ac:32:d0:22:8f:f1:5e:96: 0d:c1:50:5b:5a:9f:9d:8b:7e:b6:20:2b:64:51:0b: 49:1e:64:ee:94:1d:d5:ad:db:4d:e6:5a:6a:93:6d: bb:b1:a7:e8:ec:3c:26:07:7d:6a:e3:45:22:16:5f: ce:a6:04:1a:fa:80:ec:da:b2:3a:16:ce:0a:d4:c5: 19:77:23:26:bb:ab:b0:fb:90:ec:be:a3:c9:44:3c: 87:99:f5:86:98:98:c5:01:10:e2:b7:c6:ca:24:4a: 1e:66:03:ff:e5:ed:e7:9d:e4:ba:c4:71:c2:a2:1a: f1:5a:80:21:31:20:f0:a3:9e:02:2a:6a:9d:2a:ce: 6e:72:f6:ba:11:61:72:4e:9d:1a:d9:eb:85:55:28: bc:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:03:39:F4:4A:8B:65:6A:66:88:33:0F:4D:0E:6B:08:B3:C8:16:24 X509v3 Authority Key Identifier: keyid:C4:45:A0:04:FC:44:D7:51:79:5A:91:9D:B8:4F:14:A1:60:45:38:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEWgBPxE11F5WpGduE8UoWBFOJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:e9:b5:9f:77:0e:65:83:cf:73:8d:75:f8:97:32:81:d8:83: 5f:04:0c:19:77:a3:38:1e:27:5a:40:33:9f:20:1b:31:2d:cc: 27:63:ea:fc:03:e9:2d:6b:2e:cb:7a:fb:3a:59:da:78:a4:dc: 53:fc:e2:1b:aa:09:ec:5a:74:51:f8:ad:50:cb:45:45:d1:e3: ce:77:99:76:bc:d3:36:d1:72:89:6b:35:15:25:47:e9:43:5b: 6f:3d:e7:8e:b9:76:78:f4:aa:2b:59:ba:85:7e:64:cd:df:b3: 0c:cf:34:32:35:24:50:51:0c:88:2b:41:a9:d7:53:f0:98:17: d0:ef:0d:11:d8:9c:44:a3:98:fe:37:43:71:74:47:3a:2c:e8: 2d:6e:13:2b:9d:71:73:06:95:67:05:37:6a:29:5c:24:22:41: 5c:09:7a:1c:be:d7:13:98:43:fa:2a:c7:d6:45:88:8d:53:d1: a7:62:0d:3f:52:a3:50:47:f4:7b:10:fb:28:ac:46:d3:81:5f: 40:ba:f7:43:b9:62:76:dc:c9:87:eb:f2:b6:f8:8a:1b:aa:b4: ee:63:d7:4b:49:27:1f:88:98:32:86:84:e1:06:a0:e5:a8:f8: c8:65:71:ec:49:96:a0:30:83:6c:07:a9:4c:19:95:32:4b:ed: 90:85:6b:dc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdGM0QxMTAvBgNVBAUTKEM0NDVBMDA0RkM0NEQ3NTE3OTVBOTE5REI4NEYxNEEx NjA0NTM4OTEwHhcNMjYwOTIzMDcwMzA0WhcNMjYwOTMwMDcwMzA0WjAYMRYwFAYD VQQDEw02YWIzNzlhOS1mMDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzBIXH9Cj4xNabPlHLLyEBudoheaEVhtn3f3hgS8V6t6FekIOjRcTlOep7yia 6QLf1NziOr6ADLZzKdK5J5Bd7cgEQgUKkTCybNc3bTp+pM3LZETmAgByFcGYqKh7 h/5xrMdb+YrlSQ013LuiLyOlrDLQIo/xXpYNwVBbWp+di362ICtkUQtJHmTulB3V rdtN5lpqk227safo7DwmB31q40UiFl/OpgQa+oDs2rI6Fs4K1MUZdyMmu6uw+5Ds vqPJRDyHmfWGmJjFARDit8bKJEoeZgP/5e3nneS6xHHCohrxWoAhMSDwo54CKmqd Ks5ucva6EWFyTp0a2euFVSi8sQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAMDOfRK i2VqZogzD00OawizyBYkMB8GA1UdIwQYMBaAFMRFoAT8RNdReVqRnbhPFKFgRTiR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0YzRC84OEVEMjA0RUM2 QTMxMUYwQjY5QUM5NTVDNEY5QUUwMi94RVdnQlB4RTExRjVXcEdkdUU4VW9XQkZP SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hFV2dCUHhFMTFGNVdwR2R1RThVb1dCRk9KRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0YzRC84OEVEMjA0RUM2QTMxMUYwQjY5QUM5NTVDNEY5QUUwMi94RVdnQlB4RTEx RjVXcEdkdUU4VW9XQkZPSkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQem1n3cOZYPPc411+JcygdiDXwQMGXejOB4nWkAznyAbMS3MJ2Pq/APpLWsu y3r7OlnaeKTcU/ziG6oJ7Fp0UfitUMtFRdHjzneZdrzTNtFyiWs1FSVH6UNbbz3n jrl2ePSqK1m6hX5kzd+zDM80MjUkUFEMiCtBqddT8JgX0O8NEdicRKOY/jdDcXRH OizoLW4TK51xcwaVZwU3ailcJCJBXAl6HL7XE5hD+irH1kWIjVPRp2INP1KjUEf0 exD7KKxG04FfQLr3Q7lidtzJh+vytviKG6q07mPXS0knH4iYMoaE4Qag5aj4yGVx 7EmWoDCDbAepTBmVMkvtkIVr3A== -----END CERTIFICATE-----Generated at Thu Sep 24 06:42:13 2026 by rpki-client