$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft File: XhBeDvkNGLn6S4j640EMah3vcZA.mft (raw, json) Hash identifier: vrL++CSZpVKM5/krRiPjnraKOwFQ6fdY9CFhSFA2uz8= Subject key identifier: EB:6E:7A:BC:DE:67:93:8E:E6:D9:8C:8F:51:00:BE:09:FA:EC:46:D9 Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90 Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190 Certificate serial: 0D19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft Manifest number: 0BB8 Signing time: Thu 24 Sep 2026 19:34:47 +0000 Manifest this update: Thu 24 Sep 2026 19:34:46 +0000 Manifest next update: Thu 01 Oct 2026 19:34:46 +0000 Files and hashes: 1: XhBeDvkNGLn6S4j640EMah3vcZA.crl (hash: /Jwkfez7y/sNKvdxfyEMBfLOlyEtHpmWzs8pBZrQLiI=) 2: 89135068FD2911F09BBA873E426F56BC.roa (hash: np1cCQT3Z8T0a/K62I87d+sS1BjH51JLf0R+orXtPQ0=) 3: 7E4EFF5473E611F1BA32CE558DA30FBC.roa (hash: /qdXqDETNSkJ6n82kqpRqP50JWmOn7LFngEl+ouOmqc=) 4: 6DB93158AB7911F1BECE43F54111F970.roa (hash: Pmlth6zyV6lEJPUH1Sf8ljrZ430hgW1A3tmXOdMiLcU=) 5: DE2C490EFDDA11F08A9BDF026F6F56BC.roa (hash: Z3tocqDvxgNFiVLEFGrW231lwMOw2lUJRT3l/w/+dQM=) 6: 37778C1E130A11F18BFDFDDD163D8C67.roa (hash: l1zoV8YMkz182prac5V7xhNJKApd98lXHWiX3aITc0k=) 7: F0DB98A21BA811F1919C26950A3D8C67.roa (hash: W1SvR8VBpoaYboSXm9ZQu3OoFgTqug+theCclHE52hI=) 8: FA6E449673E611F1867DB2D08DA30FBC.roa (hash: qFCEXJTn4iJvoESQwG6WxnOgI5lZXUUBZeocE2HyJhU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 19:34:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3353 (0xd19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F69E7, serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190 Validity Not Before: Sep 24 19:34:46 2026 GMT Not After : Oct 1 19:34:46 2026 GMT Subject: CN=6ab57b57-1461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fe:f7:28:84:b5:53:b7:79:92:ae:d4:9f:88: 54:dd:23:5a:8c:1e:23:72:05:17:b4:7d:f3:38:ae: 45:9e:3f:2b:ce:09:e7:08:67:81:e3:7c:a6:2b:25: 7a:85:23:e5:fd:72:04:f8:2d:4a:d7:17:18:1a:6e: 45:a5:7a:7b:4e:67:62:8b:ff:12:c4:a2:14:1a:4c: 99:eb:22:c7:fd:32:5b:18:9c:9d:2f:c9:b6:85:3c: ad:98:08:8a:30:9c:38:05:48:65:60:89:01:4e:99: ad:1c:0a:c3:4f:86:92:f8:fb:46:92:9a:cc:73:c4: 5e:e4:6c:68:b3:62:0a:44:62:59:a6:0b:dd:7d:b4: 53:ba:52:b9:8d:bf:2b:3a:ff:b2:f4:65:3a:35:b7: 0d:ae:de:ba:9d:9e:99:48:c2:e6:16:7f:f8:d6:c9: 49:71:40:fc:05:db:6b:c0:82:7b:b7:80:54:90:1a: f7:66:70:61:a5:28:ec:74:27:0a:42:40:b6:e4:88: 31:60:47:83:0c:b5:2f:63:0f:11:94:56:c6:2a:ba: a5:a3:56:69:60:65:86:24:ef:d7:8c:bd:10:43:6e: ef:f6:24:c1:95:67:64:c3:27:62:ef:36:e8:9a:4a: cf:a9:ad:b7:c7:98:af:7f:4e:cb:e8:92:36:4a:4b: 14:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:6E:7A:BC:DE:67:93:8E:E6:D9:8C:8F:51:00:BE:09:FA:EC:46:D9 X509v3 Authority Key Identifier: keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:0c:5c:37:4a:e4:18:7b:99:57:a6:67:35:e8:b3:84:dc:b6: 27:c2:33:4b:a9:30:71:4d:62:76:cd:b7:d8:07:d8:37:d1:73: f8:13:32:34:a5:cb:0c:f2:07:16:11:25:5a:29:10:3c:f3:ab: 65:e0:97:b4:70:ac:72:dd:f0:d4:d5:5a:11:fb:98:c5:cf:47: 58:44:16:9d:fb:59:3e:e6:08:9a:29:b9:77:25:c6:e4:cb:99: b4:28:6e:cf:68:97:ff:19:04:76:21:22:66:62:dd:26:45:d1: 64:fa:7c:f8:43:42:1b:fb:ba:5e:c0:08:ef:2f:a7:e9:a3:f5: ad:e1:70:eb:37:ff:08:8a:af:86:97:40:f8:95:52:52:30:4e: 1f:cc:ab:b9:c7:b0:fa:af:b0:fa:9f:0e:6a:4a:12:8a:33:fd: 72:06:31:ac:c0:6d:68:1f:60:31:3f:e3:2a:10:97:1e:e2:cb: b3:a1:54:e2:21:c1:1f:6b:f6:d0:43:bf:80:f1:06:fb:32:75: d2:73:ba:73:d5:eb:78:c4:5f:19:94:18:e9:6f:1f:5e:54:64: 64:9c:d4:b8:76:e4:ca:32:e1:a8:c3:5b:32:5e:72:f9:a1:c1: 9f:0f:e8:51:2b:76:01:44:f7:13:16:26:b9:2c:1f:5d:13:41: bf:c9:70:5f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDRkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY5RTcxMTAvBgNVBAUTKDVFMTA1RTBFRjkwRDE4QjlGQTRCODhGQUUzNDEwQzZB MURFRjcxOTAwHhcNMjYwOTI0MTkzNDQ2WhcNMjYxMDAxMTkzNDQ2WjAYMRYwFAYD VQQDEw02YWI1N2I1Ny0xNDYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqf73KIS1U7d5kq7Un4hU3SNajB4jcgUXtH3zOK5Fnj8rzgnnCGeB43ymKyV6 hSPl/XIE+C1K1xcYGm5FpXp7Tmdii/8SxKIUGkyZ6yLH/TJbGJydL8m2hTytmAiK MJw4BUhlYIkBTpmtHArDT4aS+PtGkprMc8Re5Gxos2IKRGJZpgvdfbRTulK5jb8r Ov+y9GU6NbcNrt66nZ6ZSMLmFn/41slJcUD8BdtrwIJ7t4BUkBr3ZnBhpSjsdCcK QkC25IgxYEeDDLUvYw8RlFbGKrqlo1ZpYGWGJO/XjL0QQ27v9iTBlWdkwydi7zbo mkrPqa23x5ivf07L6JI2SksUSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOtuerze Z5OO5tmMj1EAvgn67EbZMB8GA1UdIwQYMBaAFF4QXg75DRi5+kuI+uNBDGod73GQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjlFNy80NkFBRDZCMjkw NDAxMUVBQTY4OEJFNDVDNEY5QUUwMi9YaEJlRHZrTkdMbjZTNGo2NDBFTWFoM3Zj WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hoQmVEdmtOR0xuNlM0ajY0MEVNYWgzdmNaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjlFNy80NkFBRDZCMjkwNDAxMUVBQTY4OEJFNDVDNEY5QUUwMi9YaEJlRHZrTkdM bjZTNGo2NDBFTWFoM3ZjWkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIQxcN0rkGHuZV6ZnNeizhNy2J8IzS6kwcU1ids232AfYN9Fz+BMyNKXLDPIH FhElWikQPPOrZeCXtHCsct3w1NVaEfuYxc9HWEQWnftZPuYImim5dyXG5MuZtChu z2iX/xkEdiEiZmLdJkXRZPp8+ENCG/u6XsAI7y+n6aP1reFw6zf/CIqvhpdA+JVS UjBOH8yrucew+q+w+p8OakoSijP9cgYxrMBtaB9gMT/jKhCXHuLLs6FU4iHBH2v2 0EO/gPEG+zJ10nO6c9XreMRfGZQY6W8fXlRkZJzUuHbkyjLhqMNbMl5y+aHBnw/o USt2AUT3ExYmuSwfXRNBv8lwXw== -----END CERTIFICATE-----Generated at Fri Sep 25 18:15:29 2026 by rpki-client