$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft File: XOe82cbkE4HMCvkJkN2gNpOF5lU.mft (raw, json) Hash identifier: iU/CZrxDuFUF7/1o5+JmAaMAOBqsSTZcSmUxOBBD1zY= Subject key identifier: 9B:C4:94:F1:49:30:AD:F7:39:2C:B0:07:55:8C:E3:77:24:2D:4E:A4 Authority key identifier: 5C:E7:BC:D9:C6:E4:13:81:CC:0A:F9:09:90:DD:A0:36:93:85:E6:55 Certificate issuer: /CN=A91EC3A8/serialNumber=5CE7BCD9C6E41381CC0AF90990DDA0369385E655 Certificate serial: 0575 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft Manifest number: 0560 Signing time: Thu 24 Sep 2026 23:14:03 +0000 Manifest this update: Thu 24 Sep 2026 23:14:03 +0000 Manifest next update: Thu 01 Oct 2026 23:14:03 +0000 Files and hashes: 1: XOe82cbkE4HMCvkJkN2gNpOF5lU.crl (hash: t+XV61RPXN4iZqhJUNkwMTwNwfQftBETWHLi6q0cr3o=) 2: 10A8D0E263F611ECB344F979C4F9AE02.roa (hash: SmcwGq0dD9iTZhV8jdPLgAp8Fs3hII4+H1WFKJpXd7c=) 3: 11330A4663F611ECB344F979C4F9AE02.roa (hash: 3M+74bn/sA2p4TiZmfBp8pwqRm0NY6QA2mPOgZx57gA=) 4: C71919900BEE11EDBB84E711C4F9AE02.roa (hash: kY65kJ7Z3Mu7QEVILrGdTmAvqTkSFv9BjhpNLh4YUPY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.crl rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 23:14:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1397 (0x575) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC3A8, serialNumber=5CE7BCD9C6E41381CC0AF90990DDA0369385E655 Validity Not Before: Sep 24 23:14:03 2026 GMT Not After : Oct 1 23:14:03 2026 GMT Subject: CN=6ab5aebb-f248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:07:4d:4a:8b:cd:a1:0a:08:f5:b7:dc:46:24: a9:f5:51:fa:af:34:36:c7:c2:92:2c:13:6c:3a:a1: d3:fd:82:dc:ab:f6:cc:d4:3a:a5:68:81:e4:65:b3: b0:3b:dd:a1:fd:50:f9:a6:59:8d:99:4e:e7:f9:58: 26:f2:18:5e:22:9e:c3:a7:73:69:39:e5:e8:fe:55: 37:9c:a1:5d:e7:2e:8a:b3:80:fd:fb:ba:53:10:e4: 3f:e6:a1:08:b9:19:63:5c:81:d6:32:da:b7:90:0c: 2e:15:e0:d1:88:b8:30:a6:42:a4:ad:e3:03:ce:33: ce:29:e5:a9:db:3e:45:0b:74:e1:3b:43:8b:be:c0: 3e:64:38:82:c7:59:08:a8:d7:15:99:2d:a9:ac:27: f3:c3:94:a0:c2:be:05:0f:01:8b:d3:ef:d1:0d:47: de:37:de:2c:0d:96:55:2e:a2:e8:e7:05:fb:4f:97: e6:a9:b8:4f:bf:ed:3d:20:48:81:bb:aa:e6:c3:68: 8c:71:8e:d8:1f:db:75:bd:ea:2f:57:db:d7:7e:a7: 0b:62:5b:b2:29:35:e8:3a:1c:4c:e7:57:c0:d9:37: f1:10:97:08:62:3f:d2:53:1b:23:e3:bc:69:1d:0c: c7:dc:c6:75:08:2c:5a:12:c4:06:f2:b7:e9:d8:f6: 92:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:C4:94:F1:49:30:AD:F7:39:2C:B0:07:55:8C:E3:77:24:2D:4E:A4 X509v3 Authority Key Identifier: keyid:5C:E7:BC:D9:C6:E4:13:81:CC:0A:F9:09:90:DD:A0:36:93:85:E6:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:93:44:8d:27:09:c6:9b:ec:4a:94:fb:be:ab:9a:2a:aa:c0: 99:3e:27:be:e6:53:47:ad:83:9c:f3:e7:18:0f:a8:c5:1c:74: d4:59:0f:2e:9c:03:ac:e3:8b:57:38:db:6c:3f:23:d5:f4:b2: b1:f2:0a:bd:1f:71:43:b6:f3:fb:22:dc:76:9a:2c:f4:07:36: c6:87:2d:72:0e:43:3c:cf:7c:67:03:75:f5:ca:33:41:5a:48: 18:8a:ed:5d:60:e5:ed:02:a8:94:2c:05:c9:a4:75:86:b1:37: f7:01:3c:03:06:fb:34:1b:cf:d6:8b:0b:d1:7e:be:4e:01:63: 0b:7a:c3:d8:9d:c1:1e:4f:53:cd:78:9b:16:19:25:46:0f:56: 0a:73:1d:bb:5b:b6:ee:f6:98:58:e5:f0:e6:19:28:07:d2:df: 59:bc:e2:65:d2:62:73:1b:4c:51:3f:cb:e4:78:ad:18:d1:fb: 5c:e9:e4:72:0a:f2:e0:d8:33:fc:7a:c8:ca:c0:03:82:33:d1: 01:28:bc:c0:9f:c4:c4:73:1a:54:1d:d9:5b:e9:c9:3f:a7:b8: 05:a3:dc:0f:9b:64:07:83:a6:4b:2b:e0:60:9b:4a:03:3c:be: 7a:85:4e:78:fd:4e:1e:1e:1c:1b:6a:53:e5:d6:03:ba:9f:f0: 75:93:cf:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUMzQTgxMTAvBgNVBAUTKDVDRTdCQ0Q5QzZFNDEzODFDQzBBRjkwOTkwRERBMDM2 OTM4NUU2NTUwHhcNMjYwOTI0MjMxNDAzWhcNMjYxMDAxMjMxNDAzWjAYMRYwFAYD VQQDEw02YWI1YWViYi1mMjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAowdNSovNoQoI9bfcRiSp9VH6rzQ2x8KSLBNsOqHT/YLcq/bM1DqlaIHkZbOw O92h/VD5plmNmU7n+Vgm8hheIp7Dp3NpOeXo/lU3nKFd5y6Ks4D9+7pTEOQ/5qEI uRljXIHWMtq3kAwuFeDRiLgwpkKkreMDzjPOKeWp2z5FC3ThO0OLvsA+ZDiCx1kI qNcVmS2prCfzw5Sgwr4FDwGL0+/RDUfeN94sDZZVLqLo5wX7T5fmqbhPv+09IEiB u6rmw2iMcY7YH9t1veovV9vXfqcLYluyKTXoOhxM51fA2TfxEJcIYj/SUxsj47xp HQzH3MZ1CCxaEsQG8rfp2PaSNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJvElPFJ MK33OSywB1WM43ckLU6kMB8GA1UdIwQYMBaAFFznvNnG5BOBzAr5CZDdoDaTheZV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzNBOC8yMUZBMDI3MjRD NkMxMUVDQkJDRkFEMjZDNEY5QUUwMi9YT2U4MmNia0U0SE1DdmtKa04yZ05wT0Y1 bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hPZTgyY2JrRTRITUN2a0prTjJnTnBPRjVsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzNBOC8yMUZBMDI3MjRDNkMxMUVDQkJDRkFEMjZDNEY5QUUwMi9YT2U4MmNia0U0 SE1DdmtKa04yZ05wT0Y1bFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGpNEjScJxpvsSpT7vquaKqrAmT4nvuZTR62DnPPnGA+oxRx01FkPLpwDrOOL VzjbbD8j1fSysfIKvR9xQ7bz+yLcdpos9Ac2xoctcg5DPM98ZwN19cozQVpIGIrt XWDl7QKolCwFyaR1hrE39wE8Awb7NBvP1osL0X6+TgFjC3rD2J3BHk9TzXibFhkl Rg9WCnMdu1u27vaYWOXw5hkoB9LfWbziZdJicxtMUT/L5HitGNH7XOnkcgry4Ngz /HrIysADgjPRASi8wJ/ExHMaVB3ZW+nJP6e4BaPcD5tkB4OmSyvgYJtKAzy+eoVO eP1OHh4cG2pT5dYDup/wdZPPVA== -----END CERTIFICATE-----Generated at Fri Sep 25 17:37:16 2026 by rpki-client