$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F92B3/F1A4448A72CB11F188D4BF8072A30FBC/xEbdiAEzWRNcPwbWL_xcLl2BjZA.mft File: xEbdiAEzWRNcPwbWL_xcLl2BjZA.mft (raw, json) Hash identifier: RFKu9EjJlF+wLWDBIAJMig9fU7c2lOVIhdxIawIZvTI= Subject key identifier: 0F:22:D3:8B:B1:39:DC:D9:A9:9A:68:52:1E:A8:51:DE:1E:7B:AD:FE Authority key identifier: C4:46:DD:88:01:33:59:13:5C:3F:06:D6:2F:FC:5C:2E:5D:81:8D:90 Certificate issuer: /CN=A91F92B3/serialNumber=C446DD88013359135C3F06D62FFC5C2E5D818D90 Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEbdiAEzWRNcPwbWL_xcLl2BjZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F92B3/F1A4448A72CB11F188D4BF8072A30FBC/xEbdiAEzWRNcPwbWL_xcLl2BjZA.mft Manifest number: 2F Signing time: Fri 25 Sep 2026 08:49:55 +0000 Manifest this update: Fri 25 Sep 2026 08:49:55 +0000 Manifest next update: Fri 02 Oct 2026 08:49:55 +0000 Files and hashes: 1: xEbdiAEzWRNcPwbWL_xcLl2BjZA.crl (hash: VphLuDM1toe9RKGui4v5i+/Zs47edAynaCJz6m18zsg=) 2: 9CF5B0DA72CC11F1892D329F73A30FBC.roa (hash: eAY3YSVsrWhOYnMgrblEMg4l4JfsISH9fA2P7mQ1Kgo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F92B3/F1A4448A72CB11F188D4BF8072A30FBC/xEbdiAEzWRNcPwbWL_xcLl2BjZA.crl rsync://rpki.apnic.net/member_repository/A91F92B3/F1A4448A72CB11F188D4BF8072A30FBC/xEbdiAEzWRNcPwbWL_xcLl2BjZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEbdiAEzWRNcPwbWL_xcLl2BjZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 08:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F92B3, serialNumber=C446DD88013359135C3F06D62FFC5C2E5D818D90 Validity Not Before: Sep 25 08:49:55 2026 GMT Not After : Oct 2 08:49:55 2026 GMT Subject: CN=6ab635b3-99fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f0:0a:2d:9f:6f:be:84:2a:09:d3:a4:14:20: aa:85:fc:ee:27:51:1b:d5:5b:b2:ca:2c:d7:17:f7: ed:6e:77:0a:f3:41:62:1b:2f:cb:41:05:1e:4a:fb: dc:73:75:71:4d:1d:a1:75:40:0e:4e:ed:e5:30:d3: 31:af:1b:57:5f:14:0a:8b:81:6e:4a:53:b9:78:ef: 63:59:87:59:c5:e4:32:a0:f1:7a:07:d7:e7:fd:b1: 5b:eb:95:01:e5:68:f3:97:df:f4:65:32:84:77:a2: 0b:f3:a1:e8:eb:5b:03:0a:58:02:ab:85:59:46:dc: 40:b1:49:92:7b:d5:c0:a3:fe:fa:c4:e5:9e:e8:5f: 49:77:fa:57:bb:bb:1e:c2:21:d6:de:8a:72:ec:31: b8:a0:da:0f:0a:37:31:14:2b:bc:7b:3c:dc:70:8b: 1e:e7:01:cc:0f:a9:74:d4:3b:48:29:e3:54:bb:e7: 0f:5c:01:85:1e:2f:b6:02:09:2b:9a:f9:6f:0b:04: 6a:22:3f:5d:4c:11:02:42:dd:a0:38:74:6a:9b:75: 49:0f:d6:94:2e:39:ea:73:72:b5:bc:2b:bf:96:21: 66:6e:8d:dc:a8:17:22:b0:8d:3c:32:5b:f1:df:06: fe:df:c5:cf:97:e6:a7:e4:20:da:5a:f7:7b:0c:15: fd:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:22:D3:8B:B1:39:DC:D9:A9:9A:68:52:1E:A8:51:DE:1E:7B:AD:FE X509v3 Authority Key Identifier: keyid:C4:46:DD:88:01:33:59:13:5C:3F:06:D6:2F:FC:5C:2E:5D:81:8D:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F92B3/F1A4448A72CB11F188D4BF8072A30FBC/xEbdiAEzWRNcPwbWL_xcLl2BjZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEbdiAEzWRNcPwbWL_xcLl2BjZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F92B3/F1A4448A72CB11F188D4BF8072A30FBC/xEbdiAEzWRNcPwbWL_xcLl2BjZA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:67:6a:cb:22:b0:94:12:a1:c4:a3:e6:37:b0:5d:f7:04:61: 32:9e:2d:fc:40:f9:2e:4f:9b:32:25:60:9b:6f:b1:b0:32:30: 1e:3b:99:13:47:36:42:9f:25:3a:c9:fb:02:ae:5c:f6:6f:28: 5d:45:ff:a7:31:cf:1e:9e:a8:a2:77:49:3d:44:cb:b4:29:03: c4:25:01:d3:63:c3:94:c6:7b:9c:15:17:71:19:1b:43:0c:cd: b2:49:22:cc:de:20:d9:0c:3a:1c:04:0e:2f:18:55:ac:53:fa: d8:73:e0:0f:61:b1:07:0b:87:6c:52:0f:05:12:f9:d7:ad:28: bc:64:c5:dc:0a:4c:17:53:f3:cb:2d:a8:02:6d:3d:2f:c0:61: 12:f1:31:aa:83:bc:08:0a:a0:13:88:dc:0d:8b:b8:6d:ca:8a: 86:1a:b1:52:e7:25:83:d6:a8:cf:95:db:a9:3c:de:14:42:96: 3c:36:1d:3f:ad:67:f5:1f:36:7f:ee:1e:da:35:08:39:00:08: 3b:df:1a:e5:02:0f:bd:b3:ca:c5:a5:12:dd:02:00:1f:3c:bf: 18:91:5e:20:a2:b3:3d:ed:87:a7:7d:b8:f0:a5:dd:d3:71:d6: 71:96:fb:a3:20:12:09:e8:0d:f8:10:32:55:bf:f8:f6:7b:7f: 4c:b2:94:6d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG OTJCMzExMC8GA1UEBRMoQzQ0NkREODgwMTMzNTkxMzVDM0YwNkQ2MkZGQzVDMkU1 RDgxOEQ5MDAeFw0yNjA5MjUwODQ5NTVaFw0yNjEwMDIwODQ5NTVaMBgxFjAUBgNV BAMTDTZhYjYzNWIzLTk5ZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC18Aotn2++hCoJ06QUIKqF/O4nURvVW7LKLNcX9+1udwrzQWIbL8tBBR5K+9xz dXFNHaF1QA5O7eUw0zGvG1dfFAqLgW5KU7l472NZh1nF5DKg8XoH1+f9sVvrlQHl aPOX3/RlMoR3ogvzoejrWwMKWAKrhVlG3ECxSZJ71cCj/vrE5Z7oX0l3+le7ux7C IdbeinLsMbig2g8KNzEUK7x7PNxwix7nAcwPqXTUO0gp41S75w9cAYUeL7YCCSua +W8LBGoiP11MEQJC3aA4dGqbdUkP1pQuOepzcrW8K7+WIWZujdyoFyKwjTwyW/Hf Bv7fxc+X5qfkINpa93sMFf1fAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUDyLTi7E5 3NmpmmhSHqhR3h57rf4wHwYDVR0jBBgwFoAUxEbdiAEzWRNcPwbWL/xcLl2BjZAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5MkIzL0YxQTQ0NDhBNzJD QjExRjE4OEQ0QkY4MDcyQTMwRkJDL3hFYmRpQUV6V1JOY1B3YldMX3hjTGwyQmpa QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveEViZGlBRXpXUk5jUHdiV0xfeGNMbDJCalpBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5 MkIzL0YxQTQ0NDhBNzJDQjExRjE4OEQ0QkY4MDcyQTMwRkJDL3hFYmRpQUV6V1JO Y1B3YldMX3hjTGwyQmpaQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCQZ2rLIrCUEqHEo+Y3sF33BGEyni38QPkuT5syJWCbb7GwMjAeO5kTRzZCnyU6 yfsCrlz2byhdRf+nMc8enqiid0k9RMu0KQPEJQHTY8OUxnucFRdxGRtDDM2ySSLM 3iDZDDocBA4vGFWsU/rYc+APYbEHC4dsUg8FEvnXrSi8ZMXcCkwXU/PLLagCbT0v wGES8TGqg7wICqATiNwNi7htyoqGGrFS5yWD1qjPldupPN4UQpY8Nh0/rWf1HzZ/ 7h7aNQg5AAg73xrlAg+9s8rFpRLdAgAfPL8YkV4gorM97Yenfbjwpd3TcdZxlvuj IBIJ6A34EDJVv/j2e39MspRt -----END CERTIFICATE-----Generated at Sat Sep 26 04:48:27 2026 by rpki-client