$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft File: xgie68VWt39k5EJJpouV1b2UHkA.mft (raw, json) Hash identifier: 2VvOnZ6RPvZRvevunxjmUhrBcHKJ5krSd0q6fWeQh0o= Subject key identifier: 8F:BF:C6:0B:2F:03:F6:63:31:F3:4C:9A:DD:EC:52:E2:EC:15:63:D0 Authority key identifier: C6:08:9E:EB:C5:56:B7:7F:64:E4:42:49:A6:8B:95:D5:BD:94:1E:40 Certificate issuer: /CN=A91ADFD3/serialNumber=C6089EEBC556B77F64E44249A68B95D5BD941E40 Certificate serial: 2434 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft Manifest number: 2400 Signing time: Thu 24 Sep 2026 15:46:37 +0000 Manifest this update: Thu 24 Sep 2026 15:46:36 +0000 Manifest next update: Thu 01 Oct 2026 15:46:36 +0000 Files and hashes: 1: xgie68VWt39k5EJJpouV1b2UHkA.crl (hash: GiOFMXz9IBT/TiGGL9dCT0KKZBKjCjssqPUSnWsBEwg=) 2: 678DA8FE59D211EAB77C8C13C4F9AE02.roa (hash: uilr/VzadspQ9DLCCiVVicEIdw3R/zCYDu3WsWsjhCg=) 3: 6880FA2C59D211EAB77C8C13C4F9AE02.roa (hash: hJzT/XLLbMceVkg1RnXkgd5dOl16o+CTb6P8jS+3k+A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.crl rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 15:46:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9268 (0x2434) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADFD3, serialNumber=C6089EEBC556B77F64E44249A68B95D5BD941E40 Validity Not Before: Sep 24 15:46:36 2026 GMT Not After : Oct 1 15:46:36 2026 GMT Subject: CN=6ab545dd-e2e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:05:80:53:92:0b:73:57:bb:05:3e:1e:ce:0d: 29:1f:87:e8:01:bc:bd:9b:7e:fc:ac:45:ff:6f:76: 66:f5:be:f6:7a:b5:63:4b:53:3e:83:1f:38:a1:07: 54:d4:e9:39:4b:43:6f:5c:79:1d:0e:dc:c6:7f:d3: 68:9f:0c:93:f6:a4:b3:b9:12:b5:33:8d:88:58:79: dc:4b:9c:18:6e:00:3a:61:70:f8:d5:96:62:6a:1f: 3c:93:55:30:2a:98:2d:b2:36:1c:fe:2a:46:eb:a4: 12:c9:0e:4d:eb:59:eb:3b:8d:f1:2c:d1:04:67:5c: a4:eb:06:f0:9e:ec:d3:a3:2f:7d:e6:c9:65:1a:21: 76:07:de:51:61:27:41:7a:11:94:c8:9d:0b:ac:08: 35:8c:b1:74:f0:24:fb:d3:66:6f:a0:84:7a:54:fc: 90:e6:3d:04:b6:18:63:c9:00:77:b4:2e:ea:14:0a: 0c:ab:91:ee:6c:53:66:c7:ea:bf:d6:10:27:56:88: 16:c3:6f:68:a1:78:6d:d1:62:76:e1:15:ca:b8:3c: 5a:c2:c8:0c:2e:6c:38:2f:2e:40:33:5b:92:33:06: 28:8c:70:dc:1d:61:da:f2:75:cc:c0:ec:b7:0a:63: 3e:b9:b5:c8:f4:4e:24:83:02:3c:8f:a3:d3:8d:8c: 2d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:BF:C6:0B:2F:03:F6:63:31:F3:4C:9A:DD:EC:52:E2:EC:15:63:D0 X509v3 Authority Key Identifier: keyid:C6:08:9E:EB:C5:56:B7:7F:64:E4:42:49:A6:8B:95:D5:BD:94:1E:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:de:63:8f:36:0e:07:77:a0:9f:a8:84:3b:5f:1b:00:12:a6: d6:a2:3f:5d:c6:05:4b:77:64:fe:52:99:c2:41:73:0e:87:5e: 08:a3:95:76:88:89:eb:0c:7c:af:06:c9:19:c8:05:0f:fa:e5: d0:94:0c:5f:26:af:12:a8:7b:c6:c5:5e:ab:fa:45:20:73:3f: 72:ef:74:b6:d2:b1:58:6f:0e:98:5e:c3:95:9e:52:bc:4c:67: f2:37:00:7b:cb:20:99:50:99:5b:f5:fd:60:ff:b3:78:79:83: 5e:94:87:6c:33:64:9c:3e:06:1e:d4:f2:a3:1c:83:9f:57:3d: c9:5f:37:1f:1d:a1:cf:6e:4d:a8:ac:ef:3d:9b:78:9b:d2:ca: ab:4d:3e:fb:a8:c7:da:0a:5a:30:87:f5:bb:7c:d7:66:c2:4d: 24:d9:24:da:2f:9e:0d:1b:0b:de:1b:05:58:5d:2e:5c:bd:bd: 78:ab:ad:d8:b0:f0:57:0a:da:82:23:fe:1c:da:d0:1d:91:9a: 5a:d4:7b:ef:c3:ce:7f:29:09:f0:4f:1e:2e:c4:a9:e6:c0:c4: 3c:b7:91:ed:64:68:b3:66:60:b8:f1:98:9f:bc:34:51:a6:54: c7:0a:07:fb:c4:c3:c5:50:8d:aa:bb:48:1f:db:e1:a0:6e:de: 65:63:9e:97 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJDQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURGRDMxMTAvBgNVBAUTKEM2MDg5RUVCQzU1NkI3N0Y2NEU0NDI0OUE2OEI5NUQ1 QkQ5NDFFNDAwHhcNMjYwOTI0MTU0NjM2WhcNMjYxMDAxMTU0NjM2WjAYMRYwFAYD VQQDEw02YWI1NDVkZC1lMmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtwWAU5ILc1e7BT4ezg0pH4foAby9m378rEX/b3Zm9b72erVjS1M+gx84oQdU 1Ok5S0NvXHkdDtzGf9NonwyT9qSzuRK1M42IWHncS5wYbgA6YXD41ZZiah88k1Uw KpgtsjYc/ipG66QSyQ5N61nrO43xLNEEZ1yk6wbwnuzToy995sllGiF2B95RYSdB ehGUyJ0LrAg1jLF08CT702ZvoIR6VPyQ5j0EthhjyQB3tC7qFAoMq5HubFNmx+q/ 1hAnVogWw29ooXht0WJ24RXKuDxawsgMLmw4Ly5AM1uSMwYojHDcHWHa8nXMwOy3 CmM+ubXI9E4kgwI8j6PTjYwt+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI+/xgsv A/ZjMfNMmt3sUuLsFWPQMB8GA1UdIwQYMBaAFMYInuvFVrd/ZORCSaaLldW9lB5A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREZEMy8xRkQxQThCRTk0 ODYxMUU1QUUwQzhCNzJDNEY5QUUwMi94Z2llNjhWV3QzOWs1RUpKcG91VjFiMlVI a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hnaWU2OFZXdDM5azVFSkpwb3VWMWIyVUhrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REZEMy8xRkQxQThCRTk0ODYxMUU1QUUwQzhCNzJDNEY5QUUwMi94Z2llNjhWV3Qz OWs1RUpKcG91VjFiMlVIa0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAs95jjzYOB3egn6iEO18bABKm1qI/XcYFS3dk/lKZwkFzDodeCKOVdoiJ6wx8 rwbJGcgFD/rl0JQMXyavEqh7xsVeq/pFIHM/cu90ttKxWG8OmF7DlZ5SvExn8jcA e8sgmVCZW/X9YP+zeHmDXpSHbDNknD4GHtTyoxyDn1c9yV83Hx2hz25NqKzvPZt4 m9LKq00++6jH2gpaMIf1u3zXZsJNJNkk2i+eDRsL3hsFWF0uXL29eKut2LDwVwra giP+HNrQHZGaWtR778POfykJ8E8eLsSp5sDEPLeR7WRos2ZguPGYn7w0UaZUxwoH +8TDxVCNqrtIH9vhoG7eZWOelw== -----END CERTIFICATE-----Generated at Sat Sep 26 09:08:33 2026 by rpki-client