$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.mft File: XMqY-HjJJALi8QTiuL2rgZCx-qI.mft (raw, json) Hash identifier: dLRL2kRLnV0VH4hmkvnDekpFX92+0IWMpBSNbtZH10M= Subject key identifier: 04:EA:97:6D:58:A1:EA:5A:81:7F:75:F1:98:C0:21:F2:A4:13:FA:31 Authority key identifier: 5C:CA:98:F8:78:C9:24:02:E2:F1:04:E2:B8:BD:AB:81:90:B1:FA:A2 Certificate issuer: /CN=A91BCFC5/serialNumber=5CCA98F878C92402E2F104E2B8BDAB8190B1FAA2 Certificate serial: A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMqY-HjJJALi8QTiuL2rgZCx-qI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.mft Manifest number: A3 Signing time: Sun 27 Sep 2026 07:47:25 +0000 Manifest this update: Sun 27 Sep 2026 07:47:24 +0000 Manifest next update: Sun 04 Oct 2026 07:47:24 +0000 Files and hashes: 1: XMqY-HjJJALi8QTiuL2rgZCx-qI.crl (hash: NHE1Sa9EtKUx4WI0MIxYkHWKFS4NMPQbhJNySJzMYM0=) 2: 20928024C9BA11F09F21BD27C4F9AE02.roa (hash: 11c8TK/vLAQyKDtxVuKGgv22tCaQip5k8q75oDTrT4s=) 3: 7407D8E2C5AC11F0AF286222C4F9AE02.roa (hash: e6p12F49PX7qCkcwZNgn+CaOt0/TImrLuvnCu7Vczvc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.crl rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMqY-HjJJALi8QTiuL2rgZCx-qI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 07:47:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCFC5, serialNumber=5CCA98F878C92402E2F104E2B8BDAB8190B1FAA2 Validity Not Before: Sep 27 07:47:24 2026 GMT Not After : Oct 4 07:47:24 2026 GMT Subject: CN=6ab8ca0c-99e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b4:74:b5:a1:94:85:6e:69:13:4c:77:0e:cb: fd:c2:a0:5b:b0:e9:7b:a2:da:bf:70:85:1f:78:b9: 36:bd:c1:9c:60:67:1e:55:76:7d:69:44:75:d9:33: 98:b6:2f:8f:d8:09:ff:4a:27:cf:04:79:1b:9c:b1: f7:24:34:cd:d7:b0:fa:67:18:c3:b6:70:a6:34:13: 41:1a:f2:18:84:c7:9d:06:f3:b7:4f:74:2c:ec:76: ae:bb:1a:fb:0a:e1:74:a9:f1:84:6f:23:d1:77:bd: 56:da:32:43:30:6a:7a:4e:e4:4f:fe:e6:03:37:9c: a0:11:a9:0f:e1:bc:25:70:45:d6:c2:25:2e:c4:7c: 5d:38:b8:93:39:7d:20:b8:8f:9d:be:d9:ff:ad:51: bc:70:f8:0a:49:ba:bc:db:34:82:81:b9:3e:e1:a0: b6:54:64:65:f3:bf:8d:c7:03:db:36:71:89:b5:4e: c6:3a:be:62:ee:df:d7:f6:05:f3:01:a0:68:cd:17: e6:3f:7e:ea:ec:d2:7c:7f:4b:0d:9f:5c:a1:45:85: 14:18:f4:fb:db:c1:5a:a3:ff:78:02:66:d3:a1:f3: 83:28:72:69:e9:3e:68:80:16:95:03:82:55:57:d0: ca:24:09:01:de:0f:71:72:9c:c6:7c:dd:94:b4:98: a4:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:EA:97:6D:58:A1:EA:5A:81:7F:75:F1:98:C0:21:F2:A4:13:FA:31 X509v3 Authority Key Identifier: keyid:5C:CA:98:F8:78:C9:24:02:E2:F1:04:E2:B8:BD:AB:81:90:B1:FA:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMqY-HjJJALi8QTiuL2rgZCx-qI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:b5:46:b8:1b:8d:38:ff:1f:58:a8:6f:08:1f:ee:82:1a:6b: f4:20:df:5d:1f:63:4d:11:1f:f0:c5:08:db:e6:f6:fc:7c:90: 3b:19:3e:d6:b6:83:f6:30:4e:44:a1:ec:0c:7d:90:16:28:14: 12:3d:ad:c9:99:c2:4a:82:43:c3:43:97:3e:3c:cc:7e:8d:21: 0c:e9:68:f3:06:cb:00:2b:91:8d:9d:4c:57:cd:ad:d1:e2:a7: fa:2a:a9:3b:d1:d3:b1:6a:3c:74:2a:82:b6:35:18:f7:e5:ed: e4:f5:5b:4c:51:89:fe:5a:8d:8c:ce:00:70:87:29:4e:fe:58: 66:83:94:7d:9c:75:fa:64:23:e8:ea:19:6d:23:c8:9e:3f:84: d2:9a:20:a8:44:74:9c:f4:96:28:e3:2a:ac:dc:4d:f3:8c:42: b8:cb:11:3a:06:b8:a6:d1:1d:5e:f7:89:b3:28:3e:1e:cb:26: 16:b0:97:0e:fa:79:4b:54:65:e5:8b:a0:41:c9:2f:db:b8:b9: fd:5d:09:d5:3e:a6:a3:c5:02:d1:8c:e7:5b:8a:f1:8d:ee:42: 78:20:02:50:e8:73:d0:89:0c:ce:a1:dd:36:47:bf:fe:03:55: f1:b5:98:ad:e5:70:96:43:f7:78:53:f5:ca:89:03:62:3b:95: b1:d0:f6:c4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkNGQzUxMTAvBgNVBAUTKDVDQ0E5OEY4NzhDOTI0MDJFMkYxMDRFMkI4QkRBQjgx OTBCMUZBQTIwHhcNMjYwOTI3MDc0NzI0WhcNMjYxMDA0MDc0NzI0WjAYMRYwFAYD VQQDEw02YWI4Y2EwYy05OWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkLR0taGUhW5pE0x3Dsv9wqBbsOl7otq/cIUfeLk2vcGcYGceVXZ9aUR12TOY ti+P2An/SifPBHkbnLH3JDTN17D6ZxjDtnCmNBNBGvIYhMedBvO3T3Qs7Hauuxr7 CuF0qfGEbyPRd71W2jJDMGp6TuRP/uYDN5ygEakP4bwlcEXWwiUuxHxdOLiTOX0g uI+dvtn/rVG8cPgKSbq82zSCgbk+4aC2VGRl87+NxwPbNnGJtU7GOr5i7t/X9gXz AaBozRfmP37q7NJ8f0sNn1yhRYUUGPT728Fao/94AmbTofODKHJp6T5ogBaVA4JV V9DKJAkB3g9xcpzGfN2UtJikNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFATql21Y oepagX918ZjAIfKkE/oxMB8GA1UdIwQYMBaAFFzKmPh4ySQC4vEE4ri9q4GQsfqi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0ZDNS85OTlGMDI0OEM1 QUIxMUYwOEEyMDM1NERDNEY5QUUwMi9YTXFZLUhqSkpBTGk4UVRpdUwycmdaQ3gt cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hNcVktSGpKSkFMaThRVGl1TDJyZ1pDeC1xSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Q0ZDNS85OTlGMDI0OEM1QUIxMUYwOEEyMDM1NERDNEY5QUUwMi9YTXFZLUhqSkpB TGk4UVRpdUwycmdaQ3gtcUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYrVGuBuNOP8fWKhvCB/ughpr9CDfXR9jTREf8MUI2+b2/HyQOxk+1raD9jBO RKHsDH2QFigUEj2tyZnCSoJDw0OXPjzMfo0hDOlo8wbLACuRjZ1MV82t0eKn+iqp O9HTsWo8dCqCtjUY9+Xt5PVbTFGJ/lqNjM4AcIcpTv5YZoOUfZx1+mQj6OoZbSPI nj+E0pogqER0nPSWKOMqrNxN84xCuMsROga4ptEdXveJsyg+HssmFrCXDvp5S1Rl 5YugQckv27i5/V0J1T6mo8UC0YznW4rxje5CeCACUOhz0IkMzqHdNke//gNV8bWY reVwlkP3eFP1yokDYjuVsdD2xA== -----END CERTIFICATE-----Generated at Sun Sep 27 16:50:51 2026 by rpki-client