$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft File: 1xhrKGW4YA1mKCKv65AVcAbg9BA.mft (raw, json) Hash identifier: 5focoVQmiU7HiCrWroAh6XonFeDbkIHci6d4MZ3h6cE= Subject key identifier: 28:AE:FD:F6:62:3C:A1:D2:F1:CB:08:C2:62:3C:E3:D6:5D:9B:B1:2A Authority key identifier: D7:18:6B:28:65:B8:60:0D:66:28:22:AF:EB:90:15:70:06:E0:F4:10 Certificate issuer: /CN=A91F428C/serialNumber=D7186B2865B8600D662822AFEB90157006E0F410 Certificate serial: 3590 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xhrKGW4YA1mKCKv65AVcAbg9BA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft Manifest number: 3588 Signing time: Wed 30 Sep 2026 15:05:30 +0000 Manifest this update: Wed 30 Sep 2026 15:05:29 +0000 Manifest next update: Wed 07 Oct 2026 15:05:29 +0000 Files and hashes: 1: 1xhrKGW4YA1mKCKv65AVcAbg9BA.crl (hash: OfhZZ3MG0mYwa0Fo0PEIdI1NtPjLftcx4BoVlbWbc1o=) 2: B8201598BED111EC93B74C4FC4F9AE02.roa (hash: avjUCYfIUTnXlS17xW5tzr/N2L2zs3IwMpwbWsZCILA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.crl rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xhrKGW4YA1mKCKv65AVcAbg9BA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Oct 2026 15:05:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13712 (0x3590) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F428C, serialNumber=D7186B2865B8600D662822AFEB90157006E0F410 Validity Not Before: Sep 30 15:05:29 2026 GMT Not After : Oct 7 15:05:29 2026 GMT Subject: CN=6abd253a-efd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:29:a2:09:e0:a6:dd:e0:c1:4f:f6:f3:ff:b4: 60:f0:57:da:50:fd:46:09:9d:f4:b8:7d:e5:df:5a: 32:6a:58:11:d6:a5:e7:3a:09:4f:5e:ac:06:7d:70: 34:7b:15:3f:a0:62:bb:70:91:ee:af:94:95:1a:ca: 04:15:f9:92:33:da:f6:23:fe:98:24:9f:df:2f:e9: 31:4d:cf:16:35:c1:04:22:e4:3a:0d:07:4b:7d:9a: 25:ba:0f:bf:2c:50:bf:67:cd:a3:30:af:c8:f8:93: e3:87:17:ee:b1:b7:a5:8b:d0:33:49:e6:96:71:5e: 8f:5b:a1:ec:52:bb:09:fe:18:d6:3f:37:1a:b5:6a: 59:d5:14:c5:e6:04:20:fd:b7:92:93:c8:2d:44:6e: 68:cf:e8:9a:7e:62:a4:8b:e2:bc:0c:7f:fd:1d:d9: ac:3d:12:92:fa:de:16:d4:01:b2:0e:c4:19:7c:5c: 77:2f:dd:66:57:c6:bb:38:64:bd:b7:69:64:34:51: b7:de:19:1c:fd:4e:87:eb:80:42:74:6f:f6:83:5c: 1c:5c:22:a3:e4:af:ea:9d:a8:2a:54:b7:51:45:a5: 9c:8f:fa:db:6b:cb:29:99:ca:75:c1:26:75:58:6d: f5:c2:91:d8:79:ab:1d:fa:f7:f3:ac:ce:37:37:7a: 0f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:AE:FD:F6:62:3C:A1:D2:F1:CB:08:C2:62:3C:E3:D6:5D:9B:B1:2A X509v3 Authority Key Identifier: keyid:D7:18:6B:28:65:B8:60:0D:66:28:22:AF:EB:90:15:70:06:E0:F4:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xhrKGW4YA1mKCKv65AVcAbg9BA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:03:19:00:63:e3:f7:56:03:1d:a4:6d:b7:25:c9:c0:79:2b: 98:d8:2c:8a:ef:d5:7d:f5:0f:15:04:ea:7d:92:01:e5:95:4f: 2c:ce:0e:02:db:d7:00:d8:68:97:44:d8:17:a6:94:21:ed:a4: 91:a6:ae:51:25:9a:5b:77:dd:b4:61:65:81:f3:c8:e3:de:78: 6a:1f:72:1b:ac:ba:13:1f:dd:75:21:df:a8:2b:4a:cf:ff:e0: c2:9b:a0:a0:01:a8:cc:52:e1:94:3a:36:32:0c:f4:8b:d4:33: 52:b4:a9:79:80:d2:4a:5b:78:95:3d:92:80:a3:38:8f:42:f5: d1:96:28:1d:6a:62:2d:6d:95:8e:fa:29:40:7c:bb:51:53:10: b7:6f:93:f5:e0:ac:b4:12:2b:2f:79:00:b3:a9:55:8a:b4:fd: 0c:27:6f:0d:c0:14:1b:5a:5a:80:aa:a2:96:e0:90:f7:2f:ae: 8b:b7:d4:86:35:bc:1c:f4:26:50:2e:cc:50:dd:2e:ad:30:60: b5:69:24:b1:d7:9d:05:24:0c:d0:61:c0:91:82:63:79:48:4c: 9d:f4:d5:08:13:07:63:c7:62:1e:86:b5:80:be:42:9a:b1:b5: 9c:de:6f:0d:ae:51:11:ce:1d:d1:30:40:4f:1e:be:b7:d4:94: 99:4d:a1:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyOEMxMTAvBgNVBAUTKEQ3MTg2QjI4NjVCODYwMEQ2NjI4MjJBRkVCOTAxNTcw MDZFMEY0MTAwHhcNMjYwOTMwMTUwNTI5WhcNMjYxMDA3MTUwNTI5WjAYMRYwFAYD VQQDEw02YWJkMjUzYS1lZmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1imiCeCm3eDBT/bz/7Rg8FfaUP1GCZ30uH3l31oyalgR1qXnOglPXqwGfXA0 exU/oGK7cJHur5SVGsoEFfmSM9r2I/6YJJ/fL+kxTc8WNcEEIuQ6DQdLfZolug+/ LFC/Z82jMK/I+JPjhxfusbeli9AzSeaWcV6PW6HsUrsJ/hjWPzcatWpZ1RTF5gQg /beSk8gtRG5oz+iafmKki+K8DH/9HdmsPRKS+t4W1AGyDsQZfFx3L91mV8a7OGS9 t2lkNFG33hkc/U6H64BCdG/2g1wcXCKj5K/qnagqVLdRRaWcj/rba8spmcp1wSZ1 WG31wpHYeasd+vfzrM43N3oP0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCiu/fZi PKHS8csIwmI849Zdm7EqMB8GA1UdIwQYMBaAFNcYayhluGANZigir+uQFXAG4PQQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI4Qy81MkZDQzY0ODFE QTAxMUUyQjZEODcwOTEwOEIwMkNEMi8xeGhyS0dXNFlBMW1LQ0t2NjVBVmNBYmc5 QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF4aHJLR1c0WUExbUtDS3Y2NUFWY0FiZzlCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI4Qy81MkZDQzY0ODFEQTAxMUUyQjZEODcwOTEwOEIwMkNEMi8xeGhyS0dXNFlB MW1LQ0t2NjVBVmNBYmc5QkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGgMZAGPj91YDHaRttyXJwHkrmNgsiu/VffUPFQTqfZIB5ZVPLM4OAtvXANho l0TYF6aUIe2kkaauUSWaW3fdtGFlgfPI4954ah9yG6y6Ex/ddSHfqCtKz//gwpug oAGozFLhlDo2Mgz0i9QzUrSpeYDSSlt4lT2SgKM4j0L10ZYoHWpiLW2VjvopQHy7 UVMQt2+T9eCstBIrL3kAs6lVirT9DCdvDcAUG1pagKqiluCQ9y+ui7fUhjW8HPQm UC7MUN0urTBgtWkksdedBSQM0GHAkYJjeUhMnfTVCBMHY8diHoa1gL5CmrG1nN5v Da5REc4d0TBATx6+t9SUmU2h2w== -----END CERTIFICATE-----Generated at Wed Sep 30 22:42:16 2026 by rpki-client