$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft File: xOTw2gEK9YY3zFlihHHpmLckPFI.mft (raw, json) Hash identifier: l8xxfajy1zPbCMFVk2rSMGCMYdRqMRi8N7KGbOaQGw8= Subject key identifier: DE:88:0E:7D:1F:4F:ED:59:12:61:5B:81:AC:48:B0:D5:68:14:13:29 Authority key identifier: C4:E4:F0:DA:01:0A:F5:86:37:CC:59:62:84:71:E9:98:B7:24:3C:52 Certificate issuer: /CN=A91D83D0/serialNumber=C4E4F0DA010AF58637CC59628471E998B7243C52 Certificate serial: 0A12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xOTw2gEK9YY3zFlihHHpmLckPFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft Manifest number: 09E7 Signing time: Thu 24 Sep 2026 19:49:18 +0000 Manifest this update: Thu 24 Sep 2026 19:49:17 +0000 Manifest next update: Thu 01 Oct 2026 19:49:17 +0000 Files and hashes: 1: xOTw2gEK9YY3zFlihHHpmLckPFI.crl (hash: CBa0fC8ZzFUNVlqYalL0O4o6g6g9/INrazx2mdPUfNA=) 2: 863670328FD011EEB6FFC636C4F9AE02.roa (hash: soe5Moz4gQVVes64vfH27mxJAWxDV9xSP3vrYYcdBj8=) 3: F4E74AA8B99911EF9A0C3B63C4F9AE02.roa (hash: rC7/cLhAbtNiKypXkgnC2P4P5so5I+YnfNchz84YMA0=) 4: 2BFE357EF06211F08763644E5C6F56BC.roa (hash: 7NcbnhD/HJ8NBFUu7bu5fda+cHjTW1crabfldM6QJwo=) 5: 7B3252CC014911F1B56055C9516F56BC.roa (hash: Q4zhbv5IYafCWF+cKZ+N5EqVvhygYSFdunW/fgxR9Ms=) 6: 5353EA28781F11EEBA05B17FC4F9AE02.roa (hash: 95lSl7vVPRfDQ24xYlePTZRf3aCd1VmR4GdHAdsIHtU=) 7: 03706138786411EC8624EB12C4F9AE02.roa (hash: BrG7Q3Tkykmo9xilseoxsNjwLBVZ7ijytYCkK61f/ms=) 8: 6A6E4770A10F11EF840C2548C4F9AE02.roa (hash: +RYGeu7uX4uBBcHWusqQhkXqLpcB4R1AKfIKops3PNA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.crl rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xOTw2gEK9YY3zFlihHHpmLckPFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 19:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2578 (0xa12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D83D0, serialNumber=C4E4F0DA010AF58637CC59628471E998B7243C52 Validity Not Before: Sep 24 19:49:17 2026 GMT Not After : Oct 1 19:49:17 2026 GMT Subject: CN=6ab57ebe-9052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:31:8d:49:e4:f4:a5:37:33:6b:1f:00:08:18: 01:01:41:5a:d1:d8:ae:a4:e4:80:4f:2f:86:9d:2f: 20:4b:31:51:30:b8:11:8f:3f:a9:b4:bb:34:ec:0d: 3e:a1:d9:a8:29:65:5f:7d:e3:ce:5d:eb:00:0f:3f: 1d:5d:f9:92:7d:a8:5d:12:dd:66:46:b5:3b:b7:3c: 2e:60:e0:e8:00:ef:2a:4b:b0:bc:43:28:d7:bc:be: ff:4e:42:ae:d8:49:8a:c9:75:2a:1a:2f:cd:2c:98: ee:8b:3e:eb:f8:6c:f5:ed:00:50:ba:f4:e3:30:27: 09:2e:f5:d4:01:0f:49:9d:c2:a0:d5:32:23:d7:5f: c2:a2:53:68:56:f4:ed:c0:f5:49:a9:46:9f:22:73: 5c:2e:0a:f4:71:8b:8c:23:7e:d3:c3:9a:67:b3:aa: df:dd:ec:d3:28:95:a9:27:5e:c6:4c:42:f9:64:99: eb:1e:7a:28:37:94:a7:6d:d3:40:30:40:a8:47:40: 6c:0f:2b:7f:e7:ea:f2:d0:41:8a:da:cd:c7:0a:b3: c7:05:22:ce:c1:26:92:a2:03:de:1b:54:10:47:29: 8d:c9:d9:d8:6c:aa:06:b9:c7:a4:a8:60:75:b5:b9: 33:10:88:2e:f4:79:c3:ab:6d:3d:dc:ec:36:5a:b1: 43:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:88:0E:7D:1F:4F:ED:59:12:61:5B:81:AC:48:B0:D5:68:14:13:29 X509v3 Authority Key Identifier: keyid:C4:E4:F0:DA:01:0A:F5:86:37:CC:59:62:84:71:E9:98:B7:24:3C:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xOTw2gEK9YY3zFlihHHpmLckPFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:88:d4:be:48:77:29:e8:fd:2c:91:dc:86:0a:a7:a6:e1:08: 84:d5:f9:c9:f7:a9:f6:3d:2b:0d:14:a3:d2:66:53:e0:c4:ea: 33:1e:2e:e9:71:87:43:4a:45:94:53:83:d2:97:65:08:5a:a9: 5e:41:8f:60:2f:4a:e9:2d:d8:b8:9a:b0:82:b4:7c:9d:5e:5a: 70:f6:2c:e0:46:9a:20:c1:b1:f6:18:18:20:bb:ad:ef:5d:17: 1d:d0:de:81:c8:e4:20:ee:da:0b:69:7a:b8:02:44:d3:94:1f: 90:7c:9e:f2:7c:cd:01:cc:dd:b8:6a:7e:0b:bb:67:42:7a:49: 7d:c9:ee:1f:f5:18:37:ad:a0:1b:8a:6d:03:49:52:73:1a:ec: 45:a8:cb:d0:27:4b:fa:9f:7e:8c:7c:b6:4f:55:14:66:02:3f: 3b:32:97:6b:0c:ed:27:c1:eb:aa:cd:5d:0e:62:06:9f:80:4a: 6d:41:69:5d:99:81:30:77:9b:3f:95:eb:7f:af:ad:cf:c9:a3: 69:7f:9b:18:0a:96:d9:46:55:6f:9f:d9:78:2e:83:0c:7e:29: ed:6f:f6:fb:71:8c:24:32:d4:6a:55:bc:c8:ac:b2:fc:6c:b9: f5:ce:ff:be:d6:d6:75:03:84:c3:5c:7e:c5:8e:16:b1:b6:da: a1:6d:c6:48 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICChIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgzRDAxMTAvBgNVBAUTKEM0RTRGMERBMDEwQUY1ODYzN0NDNTk2Mjg0NzFFOTk4 QjcyNDNDNTIwHhcNMjYwOTI0MTk0OTE3WhcNMjYxMDAxMTk0OTE3WjAYMRYwFAYD VQQDEw02YWI1N2ViZS05MDUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsTGNSeT0pTczax8ACBgBAUFa0diupOSATy+GnS8gSzFRMLgRjz+ptLs07A0+ odmoKWVffePOXesADz8dXfmSfahdEt1mRrU7tzwuYODoAO8qS7C8QyjXvL7/TkKu 2EmKyXUqGi/NLJjuiz7r+Gz17QBQuvTjMCcJLvXUAQ9JncKg1TIj11/ColNoVvTt wPVJqUafInNcLgr0cYuMI37Tw5pns6rf3ezTKJWpJ17GTEL5ZJnrHnooN5SnbdNA MECoR0BsDyt/5+ry0EGK2s3HCrPHBSLOwSaSogPeG1QQRymNydnYbKoGucekqGB1 tbkzEIgu9HnDq2093Ow2WrFD9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN6IDn0f T+1ZEmFbgaxIsNVoFBMpMB8GA1UdIwQYMBaAFMTk8NoBCvWGN8xZYoRx6Zi3JDxS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODNEMC8wQTE2MjA4QUFG QkMxMUVBQTk2MUNCODZDNEY5QUUwMi94T1R3MmdFSzlZWTN6RmxpaEhIcG1MY2tQ RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hPVHcyZ0VLOVlZM3pGbGloSEhwbUxja1BGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODNEMC8wQTE2MjA4QUFGQkMxMUVBQTk2MUNCODZDNEY5QUUwMi94T1R3MmdFSzlZ WTN6RmxpaEhIcG1MY2tQRkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT4jUvkh3Kej9LJHchgqnpuEIhNX5yfep9j0rDRSj0mZT4MTqMx4u6XGHQ0pF lFOD0pdlCFqpXkGPYC9K6S3YuJqwgrR8nV5acPYs4EaaIMGx9hgYILut710XHdDe gcjkIO7aC2l6uAJE05QfkHye8nzNAczduGp+C7tnQnpJfcnuH/UYN62gG4ptA0lS cxrsRajL0CdL+p9+jHy2T1UUZgI/OzKXawztJ8Hrqs1dDmIGn4BKbUFpXZmBMHeb P5Xrf6+tz8mjaX+bGAqW2UZVb5/ZeC6DDH4p7W/2+3GMJDLUalW8yKyy/Gy59c7/ vtbWdQOEw1x+xY4WsbbaoW3GSA== -----END CERTIFICATE-----Generated at Fri Sep 25 07:55:50 2026 by rpki-client