$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft File: -xEsrVYxm_qsoasoznvX9MsmjOk.mft (raw, json) Hash identifier: OYMAWM573C1pFZt5VyO1G/IqzxyvGFi5pDD0c7KWjKU= Subject key identifier: BE:3B:F4:9D:0A:FE:2D:CD:9C:E3:64:5F:FA:5C:8B:19:DA:F1:5D:16 Authority key identifier: FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9 Certificate issuer: /CN=A91ADDD5/serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9 Certificate serial: 0688 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft Manifest number: 0672 Signing time: Mon 28 Sep 2026 22:44:57 +0000 Manifest this update: Mon 28 Sep 2026 22:44:57 +0000 Manifest next update: Mon 05 Oct 2026 22:44:57 +0000 Files and hashes: 1: -xEsrVYxm_qsoasoznvX9MsmjOk.crl (hash: ENzBwJJUQskvuzMSby+hwOMBp2Z6eHbFYHo7MlkY88g=) 2: 128DFF02E14611EE80D6C425C4F9AE02.roa (hash: O4RI8nFWIUHGr3lrmWvMSynoOuRE0fzWotx1sdpRx0k=) 3: F50A884C5DDF11F197B40288B8833773.roa (hash: q5ErDtvJGiFQsfi0aNFW5nSZE39VbQoqOQCebpIWByc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 22:44:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1672 (0x688) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADDD5, serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9 Validity Not Before: Sep 28 22:44:57 2026 GMT Not After : Oct 5 22:44:57 2026 GMT Subject: CN=6abaede9-1215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c8:ab:cf:26:cd:65:b7:d2:d4:3c:cc:82:4a: f7:dc:bc:a2:2d:25:06:0f:fb:e6:a3:1b:41:29:a8: 60:aa:4d:74:25:bd:53:77:f7:5b:f2:78:f5:d7:b0: 65:cb:cd:71:ed:cb:ae:6e:f3:69:0a:da:31:33:ad: f2:de:a2:4e:c1:c9:75:3c:b2:04:69:c6:65:c5:ff: f1:83:1f:26:a0:74:1b:ca:ab:50:22:91:05:37:95: 12:aa:ae:ae:9f:ae:4e:b9:82:86:ec:90:5d:41:74: 62:6c:35:e3:5b:d1:78:c1:7c:f9:04:42:cc:99:f0: df:ae:e3:ed:3f:a9:a0:ab:1b:05:e0:e1:f9:d4:bb: fe:9c:03:61:c9:e7:f8:39:6b:68:f9:bb:82:59:9f: d4:e3:2c:3c:c5:84:a2:6c:d0:83:69:d5:3e:64:34: c8:b3:cb:15:60:bc:3a:42:e8:da:e3:cc:5b:ae:74: aa:e4:25:10:0e:1a:75:95:8e:b1:79:e1:44:df:3e: d2:ac:b2:71:b8:7f:22:f2:e0:4e:46:32:c9:81:69: 62:fe:7d:38:86:35:06:eb:da:f6:49:e3:3d:36:f5: ac:c2:e6:64:e2:0e:9f:94:53:b0:d9:3b:2f:6d:e4: 54:4b:f5:92:74:66:0e:44:bc:ef:18:a3:24:a2:ad: 13:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:3B:F4:9D:0A:FE:2D:CD:9C:E3:64:5F:FA:5C:8B:19:DA:F1:5D:16 X509v3 Authority Key Identifier: keyid:FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:43:ae:b1:59:3e:ab:87:bc:7f:4c:29:b5:95:b1:d7:f4:f7: 8b:e5:e8:8f:3f:c3:17:e9:21:70:ea:87:7b:9e:10:20:48:c1: 8d:52:97:e0:49:05:3f:7e:9e:43:72:dc:97:e7:33:84:fc:f3: 7e:27:20:b6:b2:cd:dd:c3:6d:ac:ea:55:41:8c:ae:2a:26:e5: 13:47:89:a9:a5:b8:7f:bd:22:da:bf:73:d1:f2:25:c7:69:6a: 81:54:ea:ea:69:e5:a6:c9:55:f9:2f:85:07:01:66:c0:52:ed: e4:1a:57:0e:e5:fa:a2:f5:dc:e5:fb:67:36:7f:14:3e:38:3a: 3d:d3:35:2c:1d:7f:60:fe:48:ab:a6:9f:f4:5f:3b:11:24:56: 68:b8:2a:03:26:9f:50:96:8d:3b:59:96:b2:d9:d7:a0:f9:52: 58:63:8d:69:3e:53:37:0b:53:ce:44:d0:3f:93:51:52:17:30: 65:98:1a:2f:a1:3c:f9:f5:fb:13:4c:5b:24:cc:ba:dc:cc:1b: f8:f2:89:7e:e3:86:71:31:af:10:ef:ab:da:5c:e1:85:c8:4d: da:db:70:3c:59:bd:3c:34:18:4e:9e:db:e7:ac:f0:35:90:a0: fb:77:bc:8b:24:3c:f0:a6:ec:df:d1:ff:22:1b:53:8f:da:50: 26:25:de:e4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURERDUxMTAvBgNVBAUTKEZCMTEyQ0FENTYzMTlCRkFBQ0ExQUIyOENFN0JEN0Y0 Q0IyNjhDRTkwHhcNMjYwOTI4MjI0NDU3WhcNMjYxMDA1MjI0NDU3WjAYMRYwFAYD VQQDEw02YWJhZWRlOS0xMjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiMirzybNZbfS1DzMgkr33LyiLSUGD/vmoxtBKahgqk10Jb1Td/db8nj117Bl y81x7cuubvNpCtoxM63y3qJOwcl1PLIEacZlxf/xgx8moHQbyqtQIpEFN5USqq6u n65OuYKG7JBdQXRibDXjW9F4wXz5BELMmfDfruPtP6mgqxsF4OH51Lv+nANhyef4 OWto+buCWZ/U4yw8xYSibNCDadU+ZDTIs8sVYLw6Quja48xbrnSq5CUQDhp1lY6x eeFE3z7SrLJxuH8i8uBORjLJgWli/n04hjUG69r2SeM9NvWswuZk4g6flFOw2Tsv beRUS/WSdGYORLzvGKMkoq0TuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL479J0K /i3NnONkX/pcixna8V0WMB8GA1UdIwQYMBaAFPsRLK1WMZv6rKGrKM571/TLJozp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRERENS84QjBEMEZGMkUz RjgxMUVCOUUwOERCMTRDNEY5QUUwMi8teEVzclZZeG1fcXNvYXNvem52WDlNc21q T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy14RXNyVll4bV9xc29hc296bnZYOU1zbWpPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RERENS84QjBEMEZGMkUzRjgxMUVCOUUwOERCMTRDNEY5QUUwMi8teEVzclZZeG1f cXNvYXNvem52WDlNc21qT2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAokOusVk+q4e8f0wptZWx1/T3i+Xojz/DF+khcOqHe54QIEjBjVKX4EkFP36e Q3Lcl+czhPzzficgtrLN3cNtrOpVQYyuKiblE0eJqaW4f70i2r9z0fIlx2lqgVTq 6mnlpslV+S+FBwFmwFLt5BpXDuX6ovXc5ftnNn8UPjg6PdM1LB1/YP5Iq6af9F87 ESRWaLgqAyafUJaNO1mWstnXoPlSWGONaT5TNwtTzkTQP5NRUhcwZZgaL6E8+fX7 E0xbJMy63Mwb+PKJfuOGcTGvEO+r2lzhhchN2ttwPFm9PDQYTp7b56zwNZCg+3e8 iyQ88Kbs39H/IhtTj9pQJiXe5A== -----END CERTIFICATE-----Generated at Tue Sep 29 15:44:27 2026 by rpki-client