$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft File: XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft (raw, json) Hash identifier: M4Auk+eoyoqbJfUcxk6HnPNtLaLbajyLMCU5TF870ac= Subject key identifier: 02:8D:4E:B3:67:21:69:AD:8E:FD:F9:DA:4A:58:78:44:4B:A6:BB:EA Authority key identifier: 5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7 Certificate issuer: /CN=A91E3C76/serialNumber=5F02248C9C5C94F153C59F56772C5FDA7F8D71E7 Certificate serial: 01B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft Manifest number: 01AB Signing time: Sun 27 Sep 2026 04:33:18 +0000 Manifest this update: Sun 27 Sep 2026 04:33:17 +0000 Manifest next update: Sun 04 Oct 2026 04:33:17 +0000 Files and hashes: 1: XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl (hash: 6ql9tWoY65peGqgHwXMoO2kfHKVsYaaFk7E0jmTDcns=) 2: 50F0AF8EB2BE11EFA108946DC4F9AE02.roa (hash: zFIoI885tqgmIc+TzAmT9MM/Zj8hlNvuKZSxFX8e55k=) 3: 51BBEE10B2BE11EFA108946DC4F9AE02.roa (hash: qus/VWO/zFuK4o4owMyuzTPVboELwpYdKngfvhC2x7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 04:33:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 439 (0x1b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3C76, serialNumber=5F02248C9C5C94F153C59F56772C5FDA7F8D71E7 Validity Not Before: Sep 27 04:33:17 2026 GMT Not After : Oct 4 04:33:17 2026 GMT Subject: CN=6ab89c8d-6c73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:68:e1:27:fe:c4:ba:d1:c7:6d:3e:a2:5f:52: c0:9c:84:f7:b2:33:a3:d1:5c:af:2b:c0:51:3c:d8: d4:17:ad:6a:3a:5e:81:34:20:99:3e:d8:95:43:65: d3:ea:f4:70:6c:a8:1f:71:51:83:8c:e4:3c:db:3a: 4f:49:9c:a1:42:6f:40:c3:70:cf:b8:fd:a4:96:72: 32:e9:9d:dd:c2:80:e5:1e:33:83:75:f8:3c:87:ca: 85:e8:d7:b8:ae:7e:46:5e:15:bb:16:0d:68:2a:53: de:9d:ac:54:11:fd:4e:cb:26:be:0a:27:ca:56:6d: 20:7a:31:81:82:ea:73:01:55:34:ef:d7:94:16:76: b2:26:25:54:da:64:6d:05:b2:ca:6e:7c:1f:c6:20: 30:f7:8b:bb:b3:f8:ab:54:b9:dd:4c:cb:c0:64:2e: 49:a8:bf:3c:29:ec:87:7f:22:f8:75:4d:a2:11:bf: a3:58:24:c4:f0:cd:cd:51:62:5a:2d:a4:6f:27:4e: 07:e4:98:f2:c1:2d:f1:85:5b:60:1c:0f:33:7e:d0: 7f:f7:46:ff:78:cd:d6:cf:70:ff:28:fe:c3:4a:08: 10:9f:9c:bc:6e:b9:f7:c6:70:17:4c:9f:18:0b:25: a3:a6:3d:6f:08:4c:8b:8b:3b:0a:7e:cc:95:7d:07: 1a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:8D:4E:B3:67:21:69:AD:8E:FD:F9:DA:4A:58:78:44:4B:A6:BB:EA X509v3 Authority Key Identifier: keyid:5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:7e:1e:7c:e9:10:32:f1:93:c6:fe:7c:d4:04:93:fa:0e:61: d4:5f:bd:7e:66:d2:79:1a:df:e6:9b:f2:b1:4a:19:b7:9a:6c: cd:2b:65:8d:83:06:23:5b:e1:bc:cf:df:65:8b:6d:b2:e1:88: 2e:a4:c5:42:38:3e:34:63:84:49:41:a6:71:7f:5d:64:ad:b0: 1b:5e:12:39:e2:ff:9c:a5:25:38:db:fd:b3:bc:14:cd:37:61: c0:61:48:6a:29:11:8b:88:27:ed:9e:b9:af:58:fa:c3:d6:24: 89:ef:87:9b:24:c6:4a:22:d3:5a:50:43:68:b5:90:af:82:6c: 3d:d8:9e:88:8f:ac:3d:81:ca:5d:8c:6e:00:49:74:42:b8:02: 71:76:c1:83:cc:71:c3:19:82:67:fd:60:6f:63:fa:50:dd:fd: 2f:9a:62:8f:d0:8a:a2:dd:6e:11:5f:e7:ac:59:dc:e9:19:3e: 33:c5:b3:85:86:3f:81:d8:28:5b:ec:b9:13:7f:a5:89:85:ec: 06:f0:4d:ab:9d:22:84:55:87:04:7c:b4:2b:b5:ba:4f:eb:66: 0e:49:d4:06:fe:cc:91:88:ad:fa:df:cc:c6:99:45:1b:ff:c6: 96:30:a9:24:02:2b:6f:bc:bd:8d:40:84:f2:27:97:31:b8:26: 8a:bb:fa:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNDNzYxMTAvBgNVBAUTKDVGMDIyNDhDOUM1Qzk0RjE1M0M1OUY1Njc3MkM1RkRB N0Y4RDcxRTcwHhcNMjYwOTI3MDQzMzE3WhcNMjYxMDA0MDQzMzE3WjAYMRYwFAYD VQQDEw02YWI4OWM4ZC02YzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr2jhJ/7EutHHbT6iX1LAnIT3sjOj0VyvK8BRPNjUF61qOl6BNCCZPtiVQ2XT 6vRwbKgfcVGDjOQ82zpPSZyhQm9Aw3DPuP2klnIy6Z3dwoDlHjODdfg8h8qF6Ne4 rn5GXhW7Fg1oKlPenaxUEf1Oyya+CifKVm0gejGBgupzAVU079eUFnayJiVU2mRt BbLKbnwfxiAw94u7s/irVLndTMvAZC5JqL88KeyHfyL4dU2iEb+jWCTE8M3NUWJa LaRvJ04H5JjywS3xhVtgHA8zftB/90b/eM3Wz3D/KP7DSggQn5y8brn3xnAXTJ8Y CyWjpj1vCEyLizsKfsyVfQcaqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAKNTrNn IWmtjv352kpYeERLprvqMB8GA1UdIwQYMBaAFF8CJIycXJTxU8WfVncsX9p/jXHn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0M3Ni9CNDk5MkQ1MjM0 NTgxMUVGQjQyRjlEMzdDNEY5QUUwMi9Yd0lrakp4Y2xQRlR4WjlXZHl4ZjJuLU5j ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h3SWtqSnhjbFBGVHhaOVdkeXhmMm4tTmNlYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0M3Ni9CNDk5MkQ1MjM0NTgxMUVGQjQyRjlEMzdDNEY5QUUwMi9Yd0lrakp4Y2xQ RlR4WjlXZHl4ZjJuLU5jZWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAi34efOkQMvGTxv581AST+g5h1F+9fmbSeRrf5pvysUoZt5pszStljYMGI1vh vM/fZYttsuGILqTFQjg+NGOESUGmcX9dZK2wG14SOeL/nKUlONv9s7wUzTdhwGFI aikRi4gn7Z65r1j6w9Ykie+HmyTGSiLTWlBDaLWQr4JsPdieiI+sPYHKXYxuAEl0 QrgCcXbBg8xxwxmCZ/1gb2P6UN39L5pij9CKot1uEV/nrFnc6Rk+M8WzhYY/gdgo W+y5E3+liYXsBvBNq50ihFWHBHy0K7W6T+tmDknUBv7MkYit+t/MxplFG//GljCp JAIrb7y9jUCE8ieXMbgmirv65w== -----END CERTIFICATE-----Generated at Sun Sep 27 08:35:45 2026 by rpki-client