$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.mft File: XU9BKuSAEP5Uh_AY8XGpxkadmsU.mft (raw, json) Hash identifier: HUqGLqAYYR7IBsfyEk3T2dOp5UC7qGh5huev8tzRe5c= Subject key identifier: EC:E9:F2:AE:06:7E:03:B4:1E:B6:71:7B:94:E3:59:5D:1F:94:CF:57 Authority key identifier: 5D:4F:41:2A:E4:80:10:FE:54:87:F0:18:F1:71:A9:C6:46:9D:9A:C5 Certificate issuer: /CN=A91BCA5B/serialNumber=5D4F412AE48010FE5487F018F171A9C6469D9AC5 Certificate serial: AE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XU9BKuSAEP5Uh_AY8XGpxkadmsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.mft Manifest number: A8 Signing time: Wed 23 Sep 2026 06:58:31 +0000 Manifest this update: Wed 23 Sep 2026 06:58:31 +0000 Manifest next update: Wed 30 Sep 2026 06:58:31 +0000 Files and hashes: 1: XU9BKuSAEP5Uh_AY8XGpxkadmsU.crl (hash: 3YRoUGkwZ3MBJgZf2rz1yc5IsxFaZUl6nUVS8Vln1cc=) 2: 40506BD64F6311F1B33586E9C4833773.roa (hash: /xujX/eflt5wRcWaBi7MbQ6JbnMkzZt1Nfl3vZK9gwA=) 3: 6273B5964F6411F1B5990A8BC5833773.roa (hash: y3V7Ac3VRTVKkf/zwxo2Yj3w4U6T8D7jfnzMbqhRIFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.crl rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XU9BKuSAEP5Uh_AY8XGpxkadmsU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 06:58:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 174 (0xae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCA5B, serialNumber=5D4F412AE48010FE5487F018F171A9C6469D9AC5 Validity Not Before: Sep 23 06:58:31 2026 GMT Not After : Sep 30 06:58:31 2026 GMT Subject: CN=6ab37897-9d90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fe:3e:b0:ed:65:3a:1b:b0:ae:48:a1:3a:26: aa:60:0d:53:59:b2:29:5b:2a:d7:e9:c6:81:41:61: c8:78:33:b1:40:0a:46:13:f1:d7:88:f7:b7:ea:0c: 6d:7d:2f:68:79:34:c1:6b:c1:3d:5a:26:cb:df:05: 2e:07:1a:b8:99:b7:e3:c1:0c:29:28:6d:86:9b:5a: 57:96:94:f3:f9:b4:49:a1:c4:e5:92:8e:15:3f:16: 04:0f:a8:7e:14:c8:9a:9c:99:d3:5b:69:5c:8b:53: 1a:d0:8c:2d:71:53:53:19:bf:94:d5:9c:af:6e:cc: 49:0c:e5:c0:90:a3:ac:3e:e2:88:67:bc:bb:1f:72: 40:00:f4:04:8a:e0:6a:8b:22:9a:c2:e1:27:b1:a4: a6:0a:00:d6:97:f9:fb:69:3f:a9:ce:1c:56:60:46: b1:04:16:d5:04:18:0b:43:e8:0f:3b:66:c7:5d:ef: ea:c8:11:39:11:20:8c:37:56:f5:5c:76:22:0d:3e: f4:f7:8c:63:fd:d7:a8:ab:3f:84:12:18:87:a7:c1: 69:2c:e1:2d:d3:7e:f0:57:40:66:65:3d:ee:9d:fa: 5e:17:30:6d:9d:f8:03:fd:a9:c7:ec:f1:91:63:64: d0:a8:25:5a:83:87:2f:65:7f:3a:dc:4a:fb:30:9f: 5e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E9:F2:AE:06:7E:03:B4:1E:B6:71:7B:94:E3:59:5D:1F:94:CF:57 X509v3 Authority Key Identifier: keyid:5D:4F:41:2A:E4:80:10:FE:54:87:F0:18:F1:71:A9:C6:46:9D:9A:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XU9BKuSAEP5Uh_AY8XGpxkadmsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:fb:c5:fa:76:be:c2:18:e0:37:b1:f2:dc:6a:9c:6a:4a:e6: 0a:32:c6:5e:c8:fe:9b:3e:a8:64:b2:d4:76:ae:a5:0f:6d:09: 0b:37:9d:1f:85:e4:42:7b:da:6d:4a:7a:b6:ac:04:11:0f:ec: f6:de:56:f6:16:19:a7:80:f9:75:ce:05:50:18:01:a9:48:da: 7b:c9:63:ee:12:50:2f:a2:1a:2c:49:fc:08:3f:bc:74:d5:71: 19:42:20:f2:95:44:a3:d3:0f:3d:cc:85:56:56:da:2f:9c:b1: 04:3a:8b:2a:05:b2:d5:da:d7:95:c0:64:62:93:84:3b:f3:65: 3a:9e:44:63:06:50:91:5a:47:cb:d8:35:ef:8e:9f:7c:a6:a3: b7:0e:d5:4f:68:d9:29:1f:3f:c5:12:65:c6:46:fd:cb:b8:32: 3e:2f:5d:2c:30:18:d1:b2:42:09:76:93:38:0f:5c:94:97:a0: f2:58:ce:46:59:b5:50:5a:52:3e:3c:3f:46:49:7d:65:1e:7e: e5:1a:e8:50:3f:5c:a6:19:e1:70:29:48:ac:09:33:92:f8:52: 42:01:91:a8:eb:62:1e:d5:4e:cd:1b:e5:98:a6:c7:8d:83:43: e4:45:09:bd:7e:73:9d:05:04:6f:34:2b:85:17:64:77:71:fb: 48:a6:7f:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkNBNUIxMTAvBgNVBAUTKDVENEY0MTJBRTQ4MDEwRkU1NDg3RjAxOEYxNzFBOUM2 NDY5RDlBQzUwHhcNMjYwOTIzMDY1ODMxWhcNMjYwOTMwMDY1ODMxWjAYMRYwFAYD VQQDEw02YWIzNzg5Ny05ZDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuf4+sO1lOhuwrkihOiaqYA1TWbIpWyrX6caBQWHIeDOxQApGE/HXiPe36gxt fS9oeTTBa8E9WibL3wUuBxq4mbfjwQwpKG2Gm1pXlpTz+bRJocTlko4VPxYED6h+ FMianJnTW2lci1Ma0IwtcVNTGb+U1ZyvbsxJDOXAkKOsPuKIZ7y7H3JAAPQEiuBq iyKawuEnsaSmCgDWl/n7aT+pzhxWYEaxBBbVBBgLQ+gPO2bHXe/qyBE5ESCMN1b1 XHYiDT7094xj/deoqz+EEhiHp8FpLOEt037wV0BmZT3unfpeFzBtnfgD/anH7PGR Y2TQqCVag4cvZX863Er7MJ9erQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOzp8q4G fgO0HrZxe5TjWV0flM9XMB8GA1UdIwQYMBaAFF1PQSrkgBD+VIfwGPFxqcZGnZrF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0E1Qi9EMjVEODY4RUMw M0ExMUYwODhBMzQ2MkNDNEY5QUUwMi9YVTlCS3VTQUVQNVVoX0FZOFhHcHhrYWRt c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hVOUJLdVNBRVA1VWhfQVk4WEdweGthZG1zVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Q0E1Qi9EMjVEODY4RUMwM0ExMUYwODhBMzQ2MkNDNEY5QUUwMi9YVTlCS3VTQUVQ NVVoX0FZOFhHcHhrYWRtc1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQfvF+na+whjgN7Hy3GqcakrmCjLGXsj+mz6oZLLUdq6lD20JCzedH4XkQnva bUp6tqwEEQ/s9t5W9hYZp4D5dc4FUBgBqUjae8lj7hJQL6IaLEn8CD+8dNVxGUIg 8pVEo9MPPcyFVlbaL5yxBDqLKgWy1drXlcBkYpOEO/NlOp5EYwZQkVpHy9g1746f fKajtw7VT2jZKR8/xRJlxkb9y7gyPi9dLDAY0bJCCXaTOA9clJeg8ljORlm1UFpS Pjw/Rkl9ZR5+5RroUD9cphnhcClIrAkzkvhSQgGRqOtiHtVOzRvlmKbHjYND5EUJ vX5znQUEbzQrhRdkd3H7SKZ/5g== -----END CERTIFICATE-----Generated at Fri Sep 25 02:51:55 2026 by rpki-client