$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/xbajYOSK75Kf3CcpbR1S9b9umRY.mft File: xbajYOSK75Kf3CcpbR1S9b9umRY.mft (raw, json) Hash identifier: TQxG3ZMG5JHxDaI5wO6k+kvPf6Dh0T1AF0hgE1erJIA= Subject key identifier: DA:45:2A:4D:DF:BD:33:E0:61:F7:A7:A9:59:EB:C5:0A:04:F7:A1:34 Authority key identifier: C5:B6:A3:60:E4:8A:EF:92:9F:DC:27:29:6D:1D:52:F5:BF:6E:99:16 Certificate issuer: /CN=A91FD088/serialNumber=C5B6A360E48AEF929FDC27296D1D52F5BF6E9916 Certificate serial: 08B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbajYOSK75Kf3CcpbR1S9b9umRY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/xbajYOSK75Kf3CcpbR1S9b9umRY.mft Manifest number: 08AD Signing time: Tue 22 Sep 2026 20:21:57 +0000 Manifest this update: Tue 22 Sep 2026 20:21:56 +0000 Manifest next update: Tue 29 Sep 2026 20:21:56 +0000 Files and hashes: 1: xbajYOSK75Kf3CcpbR1S9b9umRY.crl (hash: qdkI4hGz/oViDo9Pp7bCLYAJ7HoavIqIoi34RDNe6S0=) 2: 423EA4CC039B11EBB3C1465CC4F9AE02.roa (hash: 6Topyg8bWLl5O5LsyGLXYfvkh05TDjr30BTYJNqKf6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/xbajYOSK75Kf3CcpbR1S9b9umRY.crl rsync://rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/xbajYOSK75Kf3CcpbR1S9b9umRY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbajYOSK75Kf3CcpbR1S9b9umRY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 20:21:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2232 (0x8b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD088, serialNumber=C5B6A360E48AEF929FDC27296D1D52F5BF6E9916 Validity Not Before: Sep 22 20:21:56 2026 GMT Not After : Sep 29 20:21:56 2026 GMT Subject: CN=6ab2e365-9c8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0e:0a:2b:41:76:ca:39:e9:03:16:cc:46:c8: 29:ac:49:35:ac:1f:14:e6:1f:99:4b:b3:0d:6a:3a: ff:a9:92:70:c2:e4:bf:50:f9:23:eb:1e:26:1d:88: 83:94:a0:ad:e0:bf:52:11:25:80:16:1b:f2:7b:54: ac:d4:46:31:19:42:2d:16:f3:2b:ac:c1:19:4b:65: 95:0f:d7:47:1e:46:32:93:5d:c9:f8:c2:34:cc:87: 91:6f:74:99:46:00:47:22:05:61:b4:2d:cf:77:85: 44:68:c3:5f:42:dd:6b:63:5a:0f:5a:dd:4f:87:16: 90:93:33:c9:6c:02:17:d8:d1:54:a6:2e:98:dc:f5: 79:bd:91:d2:e6:b4:67:1c:ec:08:79:15:a4:96:14: ba:d0:e1:54:c8:02:2c:f3:30:39:9a:33:29:d7:ba: 26:81:8d:9a:f6:f9:4f:63:9b:94:c3:84:9e:06:63: a2:38:a7:be:92:d8:34:11:07:44:a3:2b:1f:80:50: 38:84:12:b3:33:e3:13:7e:a3:6c:10:a3:bb:9c:13: 87:f0:6e:34:66:0c:e5:9d:43:6f:67:33:7e:af:69: 2c:66:02:d9:4d:9f:f0:5f:f3:a5:61:20:d2:54:ef: 94:df:da:52:f0:79:ef:5c:15:8a:62:44:d8:11:4c: 7b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:45:2A:4D:DF:BD:33:E0:61:F7:A7:A9:59:EB:C5:0A:04:F7:A1:34 X509v3 Authority Key Identifier: keyid:C5:B6:A3:60:E4:8A:EF:92:9F:DC:27:29:6D:1D:52:F5:BF:6E:99:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/xbajYOSK75Kf3CcpbR1S9b9umRY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbajYOSK75Kf3CcpbR1S9b9umRY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/xbajYOSK75Kf3CcpbR1S9b9umRY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:40:54:42:64:35:2d:59:ed:e7:3b:84:38:8b:2b:20:ea:6d: d4:a1:b4:f9:cb:e9:83:b3:36:14:67:b9:e7:14:23:3a:7e:6f: 71:2e:38:e8:03:e6:54:20:40:d9:bc:8f:91:8f:25:bb:46:df: 88:42:c1:e7:d2:a3:b4:0e:1d:06:64:9e:27:82:fa:ea:db:6d: a7:9d:f1:61:3c:7a:1a:1f:74:bf:4d:5a:32:b1:22:8e:f8:ea: 69:bf:31:3c:ce:ae:84:5e:f5:e1:8e:c6:e2:da:b4:1f:68:c2: 1f:a4:b6:15:f5:13:99:8d:b2:47:db:6e:7e:01:84:6f:14:01: 67:03:bc:2d:fd:d7:49:7f:05:76:8a:3e:83:95:47:bc:e0:3b: 48:f7:e8:64:e1:30:ca:c7:ee:d8:0a:2b:8b:21:96:34:75:e1: 57:eb:5a:c9:82:81:f6:c5:da:e8:d1:59:ea:f4:bf:b9:64:d7: ff:2c:fc:cc:80:7b:77:af:3f:9a:bc:e5:cb:1c:71:fe:e2:90: cd:c7:39:25:19:ff:48:1d:60:78:d9:94:43:65:54:d6:71:49: ad:93:62:5e:01:3a:f6:c4:33:a9:f2:bd:66:50:a4:76:e9:c5: cd:20:ae:d8:02:c4:6c:73:6f:4f:d3:96:0d:df:1b:c2:39:56: fd:c1:a1:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCLgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQwODgxMTAvBgNVBAUTKEM1QjZBMzYwRTQ4QUVGOTI5RkRDMjcyOTZEMUQ1MkY1 QkY2RTk5MTYwHhcNMjYwOTIyMjAyMTU2WhcNMjYwOTI5MjAyMTU2WjAYMRYwFAYD VQQDEw02YWIyZTM2NS05YzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqw4KK0F2yjnpAxbMRsgprEk1rB8U5h+ZS7MNajr/qZJwwuS/UPkj6x4mHYiD lKCt4L9SESWAFhvye1Ss1EYxGUItFvMrrMEZS2WVD9dHHkYyk13J+MI0zIeRb3SZ RgBHIgVhtC3Pd4VEaMNfQt1rY1oPWt1PhxaQkzPJbAIX2NFUpi6Y3PV5vZHS5rRn HOwIeRWklhS60OFUyAIs8zA5mjMp17omgY2a9vlPY5uUw4SeBmOiOKe+ktg0EQdE oysfgFA4hBKzM+MTfqNsEKO7nBOH8G40ZgzlnUNvZzN+r2ksZgLZTZ/wX/OlYSDS VO+U39pS8HnvXBWKYkTYEUx7TQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNpFKk3f vTPgYfenqVnrxQoE96E0MB8GA1UdIwQYMBaAFMW2o2Dkiu+Sn9wnKW0dUvW/bpkW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDA4OC80NEJBN0NBMkZE OUQxMUVBQTA0RUI4N0RDNEY5QUUwMi94YmFqWU9TSzc1S2YzQ2NwYlIxUzliOXVt UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hiYWpZT1NLNzVLZjNDY3BiUjFTOWI5dW1SWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDA4OC80NEJBN0NBMkZEOUQxMUVBQTA0RUI4N0RDNEY5QUUwMi94YmFqWU9TSzc1 S2YzQ2NwYlIxUzliOXVtUlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAe0BUQmQ1LVnt5zuEOIsrIOpt1KG0+cvpg7M2FGe55xQjOn5vcS446APmVCBA 2byPkY8lu0bfiELB59KjtA4dBmSeJ4L66tttp53xYTx6Gh90v01aMrEijvjqab8x PM6uhF714Y7G4tq0H2jCH6S2FfUTmY2yR9tufgGEbxQBZwO8Lf3XSX8Fdoo+g5VH vOA7SPfoZOEwysfu2AoriyGWNHXhV+tayYKB9sXa6NFZ6vS/uWTX/yz8zIB7d68/ mrzlyxxx/uKQzcc5JRn/SB1geNmUQ2VU1nFJrZNiXgE69sQzqfK9ZlCkdunFzSCu 2ALEbHNvT9OWDd8bwjlW/cGh+w== -----END CERTIFICATE-----Generated at Wed Sep 23 09:37:44 2026 by rpki-client