$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.mft File: XEH4EDozCnVMPG44dNzKXcSOGwA.mft (raw, json) Hash identifier: 1agjT0cTxzyJiNHXC2pZJfuTfyQ0Tds0JbQsi93Bp5M= Subject key identifier: A9:6B:46:F7:9A:E1:04:40:62:CD:4E:A0:F4:92:D4:BD:EE:D9:A7:F3 Authority key identifier: 5C:41:F8:10:3A:33:0A:75:4C:3C:6E:38:74:DC:CA:5D:C4:8E:1B:00 Certificate issuer: /CN=A91DDB11/serialNumber=5C41F8103A330A754C3C6E3874DCCA5DC48E1B00 Certificate serial: 4A Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XEH4EDozCnVMPG44dNzKXcSOGwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.mft Manifest number: 48 Signing time: Mon 21 Sep 2026 08:26:34 +0000 Manifest this update: Mon 21 Sep 2026 08:26:33 +0000 Manifest next update: Mon 28 Sep 2026 08:26:33 +0000 Files and hashes: 1: XEH4EDozCnVMPG44dNzKXcSOGwA.crl (hash: F9SINPxPexIGngrsMoSnCbk/8vSXGyBT5rynwHmUG+k=) 2: 055A1AFA4E0911F188B16820CA833773.roa (hash: cNvYO9Mx94LSKruAtGYqSyqtbxJvaQBMA0ykxsLIG5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.crl rsync://rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XEH4EDozCnVMPG44dNzKXcSOGwA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:26:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDB11, serialNumber=5C41F8103A330A754C3C6E3874DCCA5DC48E1B00 Validity Not Before: Sep 21 08:26:33 2026 GMT Not After : Sep 28 08:26:33 2026 GMT Subject: CN=6ab0ea3a-80ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:32:9b:58:20:81:65:c4:b7:b6:db:ca:ef:1d: 4d:21:1f:5c:59:9f:b0:2a:da:b8:ae:b0:36:25:cd: 5d:c1:95:be:75:28:8a:3e:66:58:7e:95:b0:19:f0: 03:50:f4:83:0e:09:97:da:0c:04:a9:90:a6:eb:0b: 0c:ff:fe:cd:1c:ba:ef:c3:2e:bb:80:aa:7b:00:00: 90:21:bb:d9:ac:d9:3e:28:01:2b:0c:98:74:24:f9: f0:83:1a:d9:2d:05:44:19:93:d7:63:48:79:9c:4b: 04:a2:6a:9f:0b:1a:cd:d8:b3:c9:3c:5b:fe:4d:20: 02:8d:49:a9:f5:2e:f9:e8:96:fb:6e:48:57:a6:c1: fb:ce:e3:85:f7:79:58:53:47:26:ce:31:59:0c:9e: 16:44:aa:c1:de:a9:ee:1e:88:c6:58:d7:67:c2:2f: aa:4b:0b:b5:92:47:d0:25:ae:3a:d2:f9:31:75:f2: 03:e2:06:2f:0f:2f:d1:cb:23:8f:d0:e8:7e:df:d6: 0b:1e:cf:0a:3a:63:cb:ff:02:14:d7:dd:bc:b6:c2: d7:14:74:54:08:d2:27:3a:57:79:90:88:b8:4c:a1: 11:e9:20:78:8b:73:7c:62:0b:96:27:c7:6e:36:7a: ce:60:e7:14:8e:88:1f:a8:0a:4b:cf:89:f4:df:a2: 9f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:6B:46:F7:9A:E1:04:40:62:CD:4E:A0:F4:92:D4:BD:EE:D9:A7:F3 X509v3 Authority Key Identifier: keyid:5C:41:F8:10:3A:33:0A:75:4C:3C:6E:38:74:DC:CA:5D:C4:8E:1B:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XEH4EDozCnVMPG44dNzKXcSOGwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:d9:c7:00:c6:05:3a:ab:db:25:69:7d:41:cc:26:e1:6e:fa: ee:82:ec:26:97:1f:94:be:03:bc:f6:5a:ea:b6:f5:cd:09:8a: c3:46:f5:40:6a:66:cb:46:3c:5f:e7:2c:29:ef:03:37:8b:71: 7c:b9:bf:76:e7:ca:de:37:d7:ea:53:48:e0:dc:8b:4c:24:3d: 8c:05:69:8f:9e:6a:de:8d:88:0f:01:0a:88:de:a1:99:63:5b: 1b:5c:ae:4e:08:d1:97:d4:47:c5:69:ea:8c:51:e0:33:1f:ad: 3c:3e:99:43:c7:11:a2:d7:36:2f:98:71:72:7d:8c:ce:60:a2: 54:14:ba:a5:b2:94:7c:47:60:eb:d8:63:ea:bd:b9:b6:5b:dd: f1:f8:46:96:1f:9e:e2:60:97:37:50:a4:a3:42:05:0c:ea:62: 8d:e8:97:9a:64:91:83:fe:d8:90:1f:c4:26:82:94:e4:d4:d5: 93:de:10:48:c0:98:0b:b7:46:fd:86:02:2e:47:59:2c:62:38: 6a:d6:a3:b1:07:d1:1f:81:99:5b:75:df:46:f3:51:9a:67:b0: b4:2d:cc:3b:86:8e:b8:eb:43:d1:2e:da:0f:b6:b5:00:2d:ad: bf:f8:fa:48:15:46:c2:a0:55:cc:f1:95:14:d1:5e:14:cd:47: 7e:6c:99:e3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE REIxMTExMC8GA1UEBRMoNUM0MUY4MTAzQTMzMEE3NTRDM0M2RTM4NzREQ0NBNURD NDhFMUIwMDAeFw0yNjA5MjEwODI2MzNaFw0yNjA5MjgwODI2MzNaMBgxFjAUBgNV BAMTDTZhYjBlYTNhLTgwYWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNMptYIIFlxLe228rvHU0hH1xZn7Aq2riusDYlzV3Blb51KIo+Zlh+lbAZ8ANQ 9IMOCZfaDASpkKbrCwz//s0cuu/DLruAqnsAAJAhu9ms2T4oASsMmHQk+fCDGtkt BUQZk9djSHmcSwSiap8LGs3Ys8k8W/5NIAKNSan1LvnolvtuSFemwfvO44X3eVhT RybOMVkMnhZEqsHeqe4eiMZY12fCL6pLC7WSR9AlrjrS+TF18gPiBi8PL9HLI4/Q 6H7f1gsezwo6Y8v/AhTX3by2wtcUdFQI0ic6V3mQiLhMoRHpIHiLc3xiC5Ynx242 es5g5xSOiB+oCkvPifTfop9FAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUqWtG95rh BEBizU6g9JLUve7Zp/MwHwYDVR0jBBgwFoAUXEH4EDozCnVMPG44dNzKXcSOGwAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREQjExL0Q4NEMzRkUwNEUw NjExRjFBNjRCNjI5QUM5ODMzNzczL1hFSDRFRG96Q25WTVBHNDRkTnpLWGNTT0d3 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvWEVINEVEb3pDblZNUEc0NGROektYY1NPR3dBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE QjExL0Q4NEMzRkUwNEUwNjExRjFBNjRCNjI5QUM5ODMzNzczL1hFSDRFRG96Q25W TVBHNDRkTnpLWGNTT0d3QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCg2ccAxgU6q9slaX1BzCbhbvruguwmlx+UvgO89lrqtvXNCYrDRvVAambLRjxf 5ywp7wM3i3F8ub9258reN9fqU0jg3ItMJD2MBWmPnmrejYgPAQqI3qGZY1sbXK5O CNGX1EfFaeqMUeAzH608PplDxxGi1zYvmHFyfYzOYKJUFLqlspR8R2Dr2GPqvbm2 W93x+EaWH57iYJc3UKSjQgUM6mKN6JeaZJGD/tiQH8QmgpTk1NWT3hBIwJgLt0b9 hgIuR1ksYjhq1qOxB9EfgZlbdd9G81GaZ7C0Lcw7ho6460PRLtoPtrUALa2/+PpI FUbCoFXM8ZUU0V4UzUd+bJnj -----END CERTIFICATE-----Generated at Wed Sep 23 05:44:47 2026 by rpki-client