$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft File: xE8qyrKneZlDFaqTsyPam0dce5o.mft (raw, json) Hash identifier: uL4Y0nMcJZnGgZ3k4wASNBjN94E7TMZQVu/ot0Fa4Ic= Subject key identifier: 96:C9:A3:8E:7D:4B:C4:FC:6C:C6:C6:31:F5:5D:94:E2:DB:C2:50:67 Authority key identifier: C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A Certificate issuer: /CN=A91BDCF1/serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A Certificate serial: 04F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft Manifest number: 04AC Signing time: Tue 22 Sep 2026 23:43:39 +0000 Manifest this update: Tue 22 Sep 2026 23:43:38 +0000 Manifest next update: Tue 29 Sep 2026 23:43:38 +0000 Files and hashes: 1: xE8qyrKneZlDFaqTsyPam0dce5o.crl (hash: uwyCom+E+FUp5XHObCimPWf3/FPoy1qpT7d9PRyjDU0=) 2: 4643A5E4703011EFA1A7CB20C4F9AE02.roa (hash: CNCgjqoVzyqxh93n0ZBsBcg25yxnaYEUJ+jXTOgpvUo=) 3: 97F41C10818811F0AE59F81AC4F9AE02.roa (hash: ZlA781tNXPtHDv8gbQ6DMbr27sqCTQUDYyUqps9Yuss=) 4: 977BACDA818811F0AE59F81AC4F9AE02.roa (hash: dEkGctGFRuV+92+6vy6IawdT4cLJk4p5FamFSDgRr5E=) 5: 5C153EA0EC5811F0941546AF4A6F56BC.roa (hash: SESRFgYcB//TECdDuj/cs+vfm+TSag2D6w9sVIXdLb0=) 6: 366FD216EC5611F0B67F861C4A6F56BC.roa (hash: 8hEcxmIABfPcKgGp7REoiZjUChwO5uqaU2sng+eHPto=) 7: E2ADA1E4AE8311F196A6E2687011F970.roa (hash: pV7LACnAOovbk4kGz4yeqcGr1OmaV64Doq2AzSoU9ng=) 8: 25985D28EE1411EFB4908431C4F9AE02.roa (hash: 4xc2eHMBANiDLGUopOzPmz/t979NlwB4OQ24UrePrZk=) 9: 0735D9BEEC5611F09B1B681B4A6F56BC.roa (hash: 9O8lYARfguAM8wZyrMjSX3M2SixgKtVusIr2gjU+hSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 22:47:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1268 (0x4f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDCF1, serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A Validity Not Before: Sep 22 23:43:38 2026 GMT Not After : Sep 29 23:43:38 2026 GMT Subject: CN=6ab312ab-74ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4e:fa:ce:5b:cc:3a:d9:68:30:93:4d:db:83: f8:2f:eb:70:c0:20:cb:f3:c5:bd:8c:60:75:52:aa: 31:e3:44:25:45:0c:a5:15:07:4c:2a:3f:79:a1:e7: 74:e3:05:07:dc:2a:ce:ca:45:df:50:14:ec:29:b8: d8:50:2c:76:42:14:cc:28:cb:32:a0:85:12:af:e2: 48:f8:88:ab:a4:20:94:0e:dd:6f:af:ef:e2:48:4b: de:bf:80:22:ef:f5:b1:5c:23:cf:a2:7a:0a:ef:ee: 7e:b6:88:6f:fe:fb:38:c9:4a:a7:24:b8:a3:35:17: e9:4c:07:a8:41:b8:3a:1d:d1:f1:73:52:cf:7c:4f: f8:ec:5d:39:ab:49:7d:bd:de:4a:a9:3c:cc:98:34: a2:7d:41:b6:88:4e:a0:4f:2d:fb:85:3c:d4:99:80: 84:81:c5:1c:d6:4c:8f:22:20:1c:ad:ff:6c:b3:21: 89:06:23:e0:92:60:e9:e1:16:ec:57:0a:89:8c:dc: 26:73:c2:cf:07:7a:45:96:8b:e8:e5:f5:6e:01:cc: e2:f0:56:1f:e4:45:c9:e3:cf:fa:ad:f3:ea:f8:b3: dc:8f:ca:c2:5b:07:f9:2d:bc:6d:39:58:a4:22:bd: 3c:a5:4a:7c:0a:ce:48:ac:f7:84:68:0b:70:ed:70: 32:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:C9:A3:8E:7D:4B:C4:FC:6C:C6:C6:31:F5:5D:94:E2:DB:C2:50:67 X509v3 Authority Key Identifier: keyid:C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:73:01:8b:b8:3a:90:00:d4:76:00:99:64:d2:ee:b5:6e:bc: b9:54:04:c6:c8:e3:57:46:63:b3:b2:9e:e5:36:2c:c8:dd:b0: 9b:a2:5e:80:8b:dc:d1:3d:6d:dd:19:95:74:aa:4a:6a:f3:1f: 36:a5:4e:27:e6:fe:35:88:e4:da:ae:89:6f:a3:62:bf:40:49: 4b:3f:59:81:27:54:50:76:04:b6:7b:9d:0e:e2:58:d4:fe:00: 4b:f6:e7:0e:f9:61:5d:2a:9d:d5:3e:0b:4a:14:f9:c8:df:a3: 72:df:2c:43:a3:4b:58:d3:25:a5:28:bd:67:8f:6e:05:4e:3b: 3e:6d:37:d4:3d:b9:5a:7b:56:8a:6d:bb:a8:5b:d7:42:36:ec: 34:ea:93:fb:38:9d:93:d8:41:2e:64:8d:37:cd:46:a3:e7:36: 4e:af:95:35:63:25:83:79:ff:31:89:f2:84:16:18:1d:24:b7: 7a:48:b7:d1:de:d5:4b:ea:5f:10:7b:1d:ea:5f:de:e6:a7:40: cc:ad:03:a6:38:96:e2:4c:c0:fe:21:ee:e5:e8:7b:d4:b1:dd: 3c:ad:25:02:aa:9f:34:10:f7:bc:c9:ee:c4:10:2d:13:6b:be: a6:62:14:28:3b:5e:73:1a:7d:76:5d:a8:f1:f4:b3:21:da:f4: 7e:b5:24:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRDRjExMTAvBgNVBAUTKEM0NEYyQUNBQjJBNzc5OTk0MzE1QUE5M0IzMjNEQTlC NDc1QzdCOUEwHhcNMjYwOTIyMjM0MzM4WhcNMjYwOTI5MjM0MzM4WjAYMRYwFAYD VQQDEw02YWIzMTJhYi03NGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxk76zlvMOtloMJNN24P4L+twwCDL88W9jGB1Uqox40QlRQylFQdMKj95oed0 4wUH3CrOykXfUBTsKbjYUCx2QhTMKMsyoIUSr+JI+IirpCCUDt1vr+/iSEvev4Ai 7/WxXCPPonoK7+5+tohv/vs4yUqnJLijNRfpTAeoQbg6HdHxc1LPfE/47F05q0l9 vd5KqTzMmDSifUG2iE6gTy37hTzUmYCEgcUc1kyPIiAcrf9ssyGJBiPgkmDp4Rbs VwqJjNwmc8LPB3pFlovo5fVuAczi8FYf5EXJ48/6rfPq+LPcj8rCWwf5LbxtOVik Ir08pUp8Cs5IrPeEaAtw7XAy2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJbJo459 S8T8bMbGMfVdlOLbwlBnMB8GA1UdIwQYMBaAFMRPKsqyp3mZQxWqk7Mj2ptHXHua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRENGMS9FQjU5MTEyMkE4 M0MxMUVDQTNBNEYzMjVDNEY5QUUwMi94RThxeXJLbmVabERGYXFUc3lQYW0wZGNl NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hFOHF5cktuZVpsREZhcVRzeVBhbTBkY2U1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RENGMS9FQjU5MTEyMkE4M0MxMUVDQTNBNEYzMjVDNEY5QUUwMi94RThxeXJLbmVa bERGYXFUc3lQYW0wZGNlNW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmXMBi7g6kADUdgCZZNLutW68uVQExsjjV0Zjs7Ke5TYsyN2wm6JegIvc0T1t 3RmVdKpKavMfNqVOJ+b+NYjk2q6Jb6Niv0BJSz9ZgSdUUHYEtnudDuJY1P4AS/bn DvlhXSqd1T4LShT5yN+jct8sQ6NLWNMlpSi9Z49uBU47Pm031D25WntWim27qFvX QjbsNOqT+zidk9hBLmSNN81Go+c2Tq+VNWMlg3n/MYnyhBYYHSS3eki30d7VS+pf EHsd6l/e5qdAzK0DpjiW4kzA/iHu5eh71LHdPK0lAqqfNBD3vMnuxBAtE2u+pmIU KDtecxp9dl2o8fSzIdr0frUkyw== -----END CERTIFICATE-----Generated at Wed Sep 23 02:05:50 2026 by rpki-client