$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft File: -XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft (raw, json) Hash identifier: mCu38MBIbfbl3TLYWrNQ6muyFvSyynb/aQHhtCblKRc= Subject key identifier: 30:28:84:00:03:46:D0:60:25:B3:6C:84:F6:78:F0:73:99:4A:3A:D1 Authority key identifier: F9:72:E7:5E:3D:03:E5:CE:19:01:93:0C:43:D1:6D:C4:A8:9C:47:92 Certificate issuer: /CN=A91C9484/serialNumber=F972E75E3D03E5CE1901930C43D16DC4A89C4792 Certificate serial: 35C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft Manifest number: 35A5 Signing time: Thu 24 Sep 2026 14:46:25 +0000 Manifest this update: Thu 24 Sep 2026 14:46:24 +0000 Manifest next update: Thu 01 Oct 2026 14:46:24 +0000 Files and hashes: 1: -XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl (hash: nWzFAu+o9xynmkxMsG9Zyja4vCaGmGECgD3H0NSNOTk=) 2: FFC89DF8CECD11EEA4AA6D44C4F9AE02.roa (hash: osZQLIbEE9CPRDR3SQRnuDCeiOuIIdsDuYiVKSiLftE=) 3: 49036D2CB0D711E58B185E0FC4F9AE02.roa (hash: Enuh5vYdCazpiTDLPGcNHLroVZqxWGLRitR4CBJmyQM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 14:46:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13764 (0x35c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9484, serialNumber=F972E75E3D03E5CE1901930C43D16DC4A89C4792 Validity Not Before: Sep 24 14:46:24 2026 GMT Not After : Oct 1 14:46:24 2026 GMT Subject: CN=6ab537c1-83b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0f:58:d0:6b:87:cd:ee:74:ac:d2:7f:81:f1: c3:cf:29:cf:b0:2e:6d:8f:e8:96:52:98:3e:72:57: 39:00:9d:83:f7:d6:75:8c:54:d5:8f:91:8a:17:a2: 63:c7:4c:87:40:c2:0e:da:17:14:2b:74:5b:8e:84: 6f:6b:72:03:b2:21:8d:c9:2f:4c:99:dc:c7:8f:25: 72:32:0d:5b:22:76:96:de:7b:cc:93:9e:77:76:3c: 80:79:0e:32:2b:34:21:2b:17:ee:4f:22:87:f6:28: 39:e1:fc:e1:11:80:75:e8:f8:b9:e7:12:29:0d:86: 63:f2:40:44:a9:3a:1b:7a:93:dd:68:59:d6:60:0d: 5f:bb:48:a1:f6:4f:00:8c:70:16:a0:4d:10:8a:7c: a1:b5:34:03:39:60:a0:c3:64:86:a1:94:9d:c5:88: 4e:be:45:01:c2:29:d5:27:55:7a:88:16:bd:e3:a6: e8:83:aa:47:7b:c5:84:27:39:17:7e:09:63:9d:a7: 6c:5a:6d:fe:f9:85:f0:c4:65:53:79:35:61:df:03: b6:2d:5a:a6:6c:2c:07:db:28:aa:de:de:00:2b:cc: 33:46:fe:15:30:45:3e:05:3b:74:c9:ea:c9:55:63: 73:00:5a:74:f8:4e:0d:62:00:59:bc:4d:08:12:4b: 86:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:28:84:00:03:46:D0:60:25:B3:6C:84:F6:78:F0:73:99:4A:3A:D1 X509v3 Authority Key Identifier: keyid:F9:72:E7:5E:3D:03:E5:CE:19:01:93:0C:43:D1:6D:C4:A8:9C:47:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:0a:cc:b4:fe:c8:d3:9d:45:e8:27:a0:f1:ec:6b:80:e2:8c: 40:c5:68:60:2b:0b:fd:22:4b:06:36:f9:c2:e4:bb:7f:fe:38: a8:ba:49:b5:b2:b2:09:0e:58:d8:2b:36:de:b7:f6:ff:d2:06: 63:4a:ee:49:dd:ed:0a:4b:32:ba:9e:9d:0a:79:a2:37:bd:c9: 66:a3:97:1e:a1:b4:92:c2:41:7b:6b:00:2a:72:e0:61:17:3e: 58:04:e5:43:61:10:4c:f6:c2:5d:14:21:50:3d:3e:81:47:15: 31:6c:eb:53:28:cc:45:83:ef:c4:30:d1:27:f8:fa:d8:82:c4: 26:9e:64:09:28:e1:ff:62:56:38:49:1f:b0:10:f1:7e:dd:ed: 0b:9c:fc:61:d5:b6:b6:12:6d:70:75:23:95:45:44:ec:df:a2: d7:ce:7e:0d:f4:12:22:5a:48:8f:2d:9b:03:79:a7:d0:3d:8c: 76:9f:20:df:c4:74:45:b1:bb:f3:58:b6:aa:86:78:4e:ab:6d: ab:da:2e:b8:3c:82:3a:d9:30:80:55:d2:45:bb:4c:7d:2c:40: 9b:6e:d3:f4:af:12:9c:63:2b:53:fa:85:50:de:ed:dc:d0:56: 30:8c:f9:84:de:7e:7b:6e:04:40:aa:55:a5:e4:ce:cd:e1:0d: 0a:31:07:1d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk0ODQxMTAvBgNVBAUTKEY5NzJFNzVFM0QwM0U1Q0UxOTAxOTMwQzQzRDE2REM0 QTg5QzQ3OTIwHhcNMjYwOTI0MTQ0NjI0WhcNMjYxMDAxMTQ0NjI0WjAYMRYwFAYD VQQDEw02YWI1MzdjMS04M2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmw9Y0GuHze50rNJ/gfHDzynPsC5tj+iWUpg+clc5AJ2D99Z1jFTVj5GKF6Jj x0yHQMIO2hcUK3RbjoRva3IDsiGNyS9MmdzHjyVyMg1bInaW3nvMk553djyAeQ4y KzQhKxfuTyKH9ig54fzhEYB16Pi55xIpDYZj8kBEqTobepPdaFnWYA1fu0ih9k8A jHAWoE0QinyhtTQDOWCgw2SGoZSdxYhOvkUBwinVJ1V6iBa946bog6pHe8WEJzkX fgljnadsWm3++YXwxGVTeTVh3wO2LVqmbCwH2yiq3t4AK8wzRv4VMEU+BTt0yerJ VWNzAFp0+E4NYgBZvE0IEkuGrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDAohAAD RtBgJbNshPZ48HOZSjrRMB8GA1UdIwQYMBaAFPly5149A+XOGQGTDEPRbcSonEeS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTQ4NC82RkYwRERFMDFE OTQxMUUyOURFQ0I1RjgwOEIwMkNEMi8tWExuWGowRDVjNFpBWk1NUTlGdHhLaWNS NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YTG5YajBENWM0WkFaTU1ROUZ0eEtpY1I1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTQ4NC82RkYwRERFMDFEOTQxMUUyOURFQ0I1RjgwOEIwMkNEMi8tWExuWGowRDVj NFpBWk1NUTlGdHhLaWNSNUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABQrMtP7I051F6Ceg8exrgOKMQMVoYCsL/SJLBjb5wuS7f/44qLpJtbKyCQ5Y 2Cs23rf2/9IGY0ruSd3tCksyup6dCnmiN73JZqOXHqG0ksJBe2sAKnLgYRc+WATl Q2EQTPbCXRQhUD0+gUcVMWzrUyjMRYPvxDDRJ/j62ILEJp5kCSjh/2JWOEkfsBDx ft3tC5z8YdW2thJtcHUjlUVE7N+i185+DfQSIlpIjy2bA3mn0D2Mdp8g38R0RbG7 81i2qoZ4Tqttq9ouuDyCOtkwgFXSRbtMfSxAm27T9K8SnGMrU/qFUN7t3NBWMIz5 hN5+e24EQKpVpeTOzeENCjEHHQ== -----END CERTIFICATE-----Generated at Sat Sep 26 09:24:19 2026 by rpki-client