$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft File: xPY4wJ43IEbAHfRgTCgRZPasFiI.mft (raw, json) Hash identifier: alU8CK7J4/k/Ax54H/l9Q8HIrhZlxQI2H/s1ygdr4Cc= Subject key identifier: 01:F6:A7:F2:AD:5B:D2:B3:FB:8C:6A:03:1D:9A:17:FF:EE:36:55:E8 Authority key identifier: C4:F6:38:C0:9E:37:20:46:C0:1D:F4:60:4C:28:11:64:F6:AC:16:22 Certificate issuer: /CN=A91F33A5/serialNumber=C4F638C09E372046C01DF4604C281164F6AC1622 Certificate serial: 0436 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft Manifest number: 0414 Signing time: Wed 23 Sep 2026 00:01:34 +0000 Manifest this update: Wed 23 Sep 2026 00:01:33 +0000 Manifest next update: Wed 30 Sep 2026 00:01:33 +0000 Files and hashes: 1: xPY4wJ43IEbAHfRgTCgRZPasFiI.crl (hash: jfzXMtUZgdd5j6Q8yL+fxi5heToxxxNyCJg8POilwD4=) 2: 40838EC01EDA11ED90A3A71FC4F9AE02.roa (hash: mEMF2EAxQOT8HjksswAup4xTzv21CP0nOKEj71FqbXc=) 3: 5E967DEE1ED711EDBD936A15C4F9AE02.roa (hash: EGdleIb96T/dyNjtpTIecOYDwXkp3tZlJT2oSvIkBZ8=) 4: 236D4FF0FD9D11EC868CDF5DC4F9AE02.roa (hash: P8bll9ajRrMsTsWzXR9IujfXZpjapqmg7wDaxKW00m4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.crl rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 00:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1078 (0x436) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F33A5, serialNumber=C4F638C09E372046C01DF4604C281164F6AC1622 Validity Not Before: Sep 23 00:01:33 2026 GMT Not After : Sep 30 00:01:33 2026 GMT Subject: CN=6ab316de-65bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:79:dd:15:a0:8f:d6:86:9b:da:d9:16:a8:3d: bb:a8:30:60:1f:d1:09:c3:36:1e:ec:0c:30:ef:a2: 1f:e8:16:a2:ca:8b:8b:27:4d:6d:56:d2:f5:30:52: fd:4b:e1:59:6c:7a:f2:4c:15:47:f8:6c:94:11:fa: 51:7c:1b:36:a7:9f:e8:ce:39:36:5b:3e:f5:ac:f3: bd:e0:c9:51:54:a3:37:0b:d2:0c:4f:df:71:eb:5c: c7:ca:6f:fc:87:e1:7a:72:bb:55:3b:d8:1f:a9:6c: ae:dc:e8:0b:4c:d8:ce:87:d4:b5:93:19:99:7b:94: 7d:14:ee:2e:e8:28:ac:cf:45:47:f9:d2:3a:16:bf: e0:8e:8a:55:c4:a2:4c:b0:af:24:01:f2:21:7a:43: af:d5:8a:31:ae:2d:a9:eb:fe:70:df:e8:95:8f:95: 5c:f4:4a:1d:21:c9:d4:ff:c6:94:39:2b:14:5d:a2: 14:6d:52:3f:3a:db:86:5f:93:80:9b:18:68:77:98: 18:d2:fa:78:22:96:4a:d0:2f:9c:c8:b2:bd:f2:0b: 7d:c4:b6:ce:64:30:a7:82:bf:8c:99:06:45:e3:fe: 40:e7:c5:ff:9c:3e:cd:f5:25:d0:b9:da:24:28:d3: 8b:22:b6:1c:ae:c2:24:6b:bc:43:99:b6:cb:05:b7: a0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:F6:A7:F2:AD:5B:D2:B3:FB:8C:6A:03:1D:9A:17:FF:EE:36:55:E8 X509v3 Authority Key Identifier: keyid:C4:F6:38:C0:9E:37:20:46:C0:1D:F4:60:4C:28:11:64:F6:AC:16:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:28:24:51:d1:ba:5a:09:b0:11:30:f7:13:20:5c:0e:06:c4: c9:0e:90:ac:17:82:58:05:88:c1:6c:fe:10:3b:e0:9b:5b:98: 9b:68:e4:13:53:8d:7a:c7:02:bd:5e:79:ae:85:02:58:83:5c: de:07:50:1a:5d:6e:62:ac:d7:0f:c0:3e:6e:67:bd:ac:2c:45: 7d:45:00:8b:63:a4:c9:56:84:ba:2e:d5:3e:e7:a9:44:ee:75: 55:0a:de:d0:ef:4d:99:63:37:85:48:81:df:46:6b:e2:e6:29: c6:84:80:f6:9c:0b:38:43:5c:76:c7:8a:1f:2a:e4:59:7d:3f: dc:76:a5:c6:bd:16:07:62:5c:bd:1c:dd:2f:f7:ab:3b:7c:12: 7e:1f:29:a5:f7:0b:5f:b5:f3:97:72:cc:e6:38:82:aa:d1:7a: 39:97:48:a7:44:06:f2:69:36:ba:5c:3f:48:85:33:86:da:63: de:10:c2:30:ac:cf:31:31:94:37:42:a4:9d:1e:dc:2a:d1:3e: 24:16:1f:c1:90:ab:d3:84:3f:0c:b9:5f:22:3c:ed:cc:ac:c6: 54:d3:1a:cc:e6:a3:c6:71:47:cb:6d:20:9a:74:a4:6e:4d:43: ce:a0:55:46:bf:93:e0:1b:3c:d1:ff:a2:4c:52:db:8c:55:6d: a1:94:97:e4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBDYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMzQTUxMTAvBgNVBAUTKEM0RjYzOEMwOUUzNzIwNDZDMDFERjQ2MDRDMjgxMTY0 RjZBQzE2MjIwHhcNMjYwOTIzMDAwMTMzWhcNMjYwOTMwMDAwMTMzWjAYMRYwFAYD VQQDEw02YWIzMTZkZS02NWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv3ndFaCP1oab2tkWqD27qDBgH9EJwzYe7Aww76If6BaiyouLJ01tVtL1MFL9 S+FZbHryTBVH+GyUEfpRfBs2p5/ozjk2Wz71rPO94MlRVKM3C9IMT99x61zHym/8 h+F6crtVO9gfqWyu3OgLTNjOh9S1kxmZe5R9FO4u6Cisz0VH+dI6Fr/gjopVxKJM sK8kAfIhekOv1Yoxri2p6/5w3+iVj5Vc9EodIcnU/8aUOSsUXaIUbVI/OtuGX5OA mxhod5gY0vp4IpZK0C+cyLK98gt9xLbOZDCngr+MmQZF4/5A58X/nD7N9SXQudok KNOLIrYcrsIka7xDmbbLBbeg+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAH2p/Kt W9Kz+4xqAx2aF//uNlXoMB8GA1UdIwQYMBaAFMT2OMCeNyBGwB30YEwoEWT2rBYi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzNBNS8xQzBFNzA2QUQ0 RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi94UFk0d0o0M0lFYkFIZlJnVENnUlpQYXNG aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQWTR3SjQzSUViQUhmUmdUQ2dSWlBhc0ZpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzNBNS8xQzBFNzA2QUQ0RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi94UFk0d0o0M0lF YkFIZlJnVENnUlpQYXNGaUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAigkUdG6WgmwETD3EyBcDgbEyQ6QrBeCWAWIwWz+EDvgm1uYm2jkE1ONescC vV55roUCWINc3gdQGl1uYqzXD8A+bme9rCxFfUUAi2OkyVaEui7VPuepRO51VQre 0O9NmWM3hUiB30Zr4uYpxoSA9pwLOENcdseKHyrkWX0/3Halxr0WB2JcvRzdL/er O3wSfh8ppfcLX7Xzl3LM5jiCqtF6OZdIp0QG8mk2ulw/SIUzhtpj3hDCMKzPMTGU N0KknR7cKtE+JBYfwZCr04Q/DLlfIjztzKzGVNMazOajxnFHy20gmnSkbk1DzqBV Rr+T4Bs80f+iTFLbjFVtoZSX5A== -----END CERTIFICATE-----Generated at Thu Sep 24 11:38:46 2026 by rpki-client