$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft File: xIKbbAf9gE3wklz_wWHGcCgHoCY.mft (raw, json) Hash identifier: 7DOU0/xewUyBgd1QJayq4DqRBCz3nCRy0r7vFi3NncA= Subject key identifier: C8:68:9C:90:60:6F:8F:41:81:B6:38:83:CE:DA:4D:0E:21:E0:CE:AD Authority key identifier: C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26 Certificate issuer: /CN=A91E7E45/serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026 Certificate serial: 0B0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft Manifest number: 0ACF Signing time: Tue 22 Sep 2026 19:19:42 +0000 Manifest this update: Tue 22 Sep 2026 19:19:41 +0000 Manifest next update: Tue 29 Sep 2026 19:19:41 +0000 Files and hashes: 1: xIKbbAf9gE3wklz_wWHGcCgHoCY.crl (hash: kkHuVjNgr4dPZmrxPoPnAt4oHROoYRjPEqp/WSR9rbc=) 2: 0FD437CAC11811EE8328EF7AC4F9AE02.roa (hash: 1oGgEhKuTYfIMH1bWvTdBPiLxB8rj3+diEjF16TDep8=) 3: FBA017C0B26F11EF9B327759C4F9AE02.roa (hash: Qmb5CZlRJ9SRPdF9+9wPc93vQjmXJvRUUhlA9HA/iv0=) 4: 7A976A4E0A7011F0AA901820C4F9AE02.roa (hash: lOSfBUeEb4G442+2bNGlYlivb25gkqMO2oRz4+FOtEQ=) 5: E8137EDEA29011EAA7A47878C4F9AE02.roa (hash: x+75KtA6yIXg16cK6d8RSXKx6oc30iJuxpXNxIM3qBk=) 6: 9406C1209FDB11EDB88C5662C4F9AE02.roa (hash: gA8IJGSCT4umqS8N4XtEGwWN2XXvpmZtzI2ciAxreo8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 15:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2831 (0xb0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7E45, serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026 Validity Not Before: Sep 22 19:19:41 2026 GMT Not After : Sep 29 19:19:41 2026 GMT Subject: CN=6ab2d4ce-e8dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ad:29:49:79:15:fc:1d:cb:99:3a:7d:81:69: 5c:c9:70:ee:12:dd:2d:9e:b9:9c:48:a6:a3:c0:53: 69:e3:36:d0:34:bc:9f:44:fa:f2:0e:27:97:47:95: 1f:af:02:9a:e2:a8:a2:85:40:0e:8d:02:f0:87:be: 01:9c:5c:a6:a8:2b:e6:d4:dd:a2:e2:80:c7:7b:34: 92:ed:ea:83:4f:10:15:ad:56:fd:ff:30:8f:18:4f: 25:40:90:42:2d:89:0e:e0:e2:05:83:fd:73:96:9d: da:7f:37:22:ff:a9:c8:be:38:82:e7:e9:cb:0f:17: e7:da:22:97:a3:f1:51:1c:0c:4a:a0:f3:7c:a7:92: cd:62:75:bd:52:b5:73:85:0f:12:5e:95:3a:f1:33: ab:66:c4:44:54:06:8d:4f:f4:d5:39:79:a3:e6:6a: 5b:d2:d0:44:df:52:63:8f:c9:dd:20:fa:2f:fd:6f: 09:bc:3c:00:1b:b0:ad:8a:4f:14:6a:b9:10:30:90: 86:58:e1:12:a5:73:73:f0:0b:a2:10:9d:f4:95:52: b2:d3:eb:7e:63:1d:e3:10:46:9d:b8:f6:9a:cd:b1: 86:cd:cf:bc:1a:82:12:9b:40:5c:e8:a7:7a:b4:14: 6f:c1:a8:c2:75:f7:34:c6:d4:4e:41:c4:a6:b8:ff: 73:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:68:9C:90:60:6F:8F:41:81:B6:38:83:CE:DA:4D:0E:21:E0:CE:AD X509v3 Authority Key Identifier: keyid:C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:23:87:80:ed:3a:ee:c8:68:55:14:96:91:ae:b7:52:af:c2: 67:1e:8d:83:34:78:50:98:be:b2:a0:94:65:37:7c:dd:60:cd: cb:f4:59:37:74:34:a8:67:e7:c1:5f:ee:15:e9:f7:7a:be:07: 46:c3:15:37:da:10:bf:b7:f9:9a:43:63:09:f7:f5:28:11:e3: dd:9b:2a:8e:ca:94:23:83:16:39:18:75:62:54:6f:69:0c:00: 25:f1:d9:64:19:10:11:b7:86:be:56:bf:d5:50:58:d0:ad:e0: 92:19:14:ae:4f:5c:dd:94:b8:39:61:ba:01:0e:e4:50:bc:d1: eb:36:70:1f:6c:c2:42:72:b9:2c:a3:50:17:78:80:5a:5b:ab: 8b:7c:ae:f7:ea:7d:5e:2a:3e:bd:d8:af:1b:fc:84:38:22:42: 55:08:2b:77:c6:39:57:38:f7:32:1a:09:39:d7:b1:04:cc:6c: 6c:e5:f1:af:e0:f4:4b:98:1d:08:46:2f:71:a5:76:30:33:73: d6:a8:1d:9b:71:1f:7c:cc:1d:e9:8f:2c:1a:cf:89:30:3c:d3: 24:2d:04:44:7d:ec:ed:9c:4d:87:7c:cc:23:0e:fc:05:93:dc: bf:c6:d5:a1:e5:16:6d:5d:71:22:b4:39:ea:1d:e9:25:85:86: 49:00:cd:df -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCw8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdFNDUxMTAvBgNVBAUTKEM0ODI5QjZDMDdGRDgwNERGMDkyNUNGRkMxNjFDNjcw MjgwN0EwMjYwHhcNMjYwOTIyMTkxOTQxWhcNMjYwOTI5MTkxOTQxWjAYMRYwFAYD VQQDEw02YWIyZDRjZS1lOGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0q0pSXkV/B3LmTp9gWlcyXDuEt0tnrmcSKajwFNp4zbQNLyfRPryDieXR5Uf rwKa4qiihUAOjQLwh74BnFymqCvm1N2i4oDHezSS7eqDTxAVrVb9/zCPGE8lQJBC LYkO4OIFg/1zlp3afzci/6nIvjiC5+nLDxfn2iKXo/FRHAxKoPN8p5LNYnW9UrVz hQ8SXpU68TOrZsREVAaNT/TVOXmj5mpb0tBE31Jjj8ndIPov/W8JvDwAG7Ctik8U arkQMJCGWOESpXNz8AuiEJ30lVKy0+t+Yx3jEEaduPaazbGGzc+8GoISm0Bc6Kd6 tBRvwajCdfc0xtROQcSmuP9zowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMhonJBg b49BgbY4g87aTQ4h4M6tMB8GA1UdIwQYMBaAFMSCm2wH/YBN8JJc/8FhxnAoB6Am MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0U0NS8wNkM4NTYzQzgz RDkxMUVBQTMxMjRGNUNDNEY5QUUwMi94SUtiYkFmOWdFM3drbHpfd1dIR2NDZ0hv Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hJS2JiQWY5Z0Uzd2tsel93V0hHY0NnSG9DWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0U0NS8wNkM4NTYzQzgzRDkxMUVBQTMxMjRGNUNDNEY5QUUwMi94SUtiYkFmOWdF M3drbHpfd1dIR2NDZ0hvQ1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVyOHgO067shoVRSWka63Uq/CZx6NgzR4UJi+sqCUZTd83WDNy/RZN3Q0qGfn wV/uFen3er4HRsMVN9oQv7f5mkNjCff1KBHj3ZsqjsqUI4MWORh1YlRvaQwAJfHZ ZBkQEbeGvla/1VBY0K3gkhkUrk9c3ZS4OWG6AQ7kULzR6zZwH2zCQnK5LKNQF3iA Wluri3yu9+p9Xio+vdivG/yEOCJCVQgrd8Y5Vzj3MhoJOdexBMxsbOXxr+D0S5gd CEYvcaV2MDNz1qgdm3EffMwd6Y8sGs+JMDzTJC0ERH3s7ZxNh3zMIw78BZPcv8bV oeUWbV1xIrQ56h3pJYWGSQDN3w== -----END CERTIFICATE-----Generated at Tue Sep 22 23:47:41 2026 by rpki-client