$ rpki-client -vvvf rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft File: xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft (raw, json) Hash identifier: b54C2LjGYPxMvSMsve+b5SqqVZtRaG/7kMgf+gxvttM= Subject key identifier: C9:F0:17:5C:A7:5B:72:54:17:76:C0:96:AA:A7:E7:93:FA:A3:CC:DD Authority key identifier: C6:A5:76:F0:8C:D4:A7:3E:A9:DD:97:50:3B:C9:D2:8B:05:91:1B:9C Certificate issuer: /CN=A91423FF/serialNumber=C6A576F08CD4A73EA9DD97503BC9D28B05911B9C Certificate serial: 0243 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqV28IzUpz6p3ZdQO8nSiwWRG5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft Manifest number: 023C Signing time: Mon 21 Sep 2026 02:33:45 +0000 Manifest this update: Mon 21 Sep 2026 02:33:45 +0000 Manifest next update: Mon 28 Sep 2026 02:33:45 +0000 Files and hashes: 1: xqV28IzUpz6p3ZdQO8nSiwWRG5w.crl (hash: zQm9TWhy4gZEx3OcNqbfVAmVmBzqyjPwQrU/QdceJKU=) 2: 278C467E4DF911EE8927F265C4F9AE02.roa (hash: Q+PqjUyyIbMBWSpORGj6TQ+PmdOe/qs7/MICLEALP84=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.crl rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqV28IzUpz6p3ZdQO8nSiwWRG5w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:33:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 579 (0x243) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91423FF, serialNumber=C6A576F08CD4A73EA9DD97503BC9D28B05911B9C Validity Not Before: Sep 21 02:33:45 2026 GMT Not After : Sep 28 02:33:45 2026 GMT Subject: CN=6ab09789-9a96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a7:69:b5:36:a9:c3:20:f7:8f:a0:db:eb:35: 07:d3:c0:79:94:86:96:70:b3:91:26:a6:5f:a6:5d: 65:8e:e7:8c:c6:cb:bb:8c:7f:ab:14:e2:bf:ce:47: 6a:8b:88:df:56:65:09:ee:01:77:19:f7:72:a1:91: ed:8a:03:4d:c5:4b:3b:01:de:a5:f4:fc:68:4d:cc: ef:2d:63:5e:be:3a:c3:2d:94:be:64:60:97:1e:dd: 00:9e:e6:b2:b4:0e:13:54:84:b3:9f:7e:70:9c:4f: f1:8b:ae:87:39:1c:95:a8:81:5e:e6:ca:15:80:e8: 93:96:56:16:40:d7:aa:d5:96:e4:1a:33:dc:a3:de: b1:f2:07:f1:db:8a:76:70:5a:16:a3:aa:6a:b9:68: f7:f9:25:60:99:23:e1:1f:b0:33:c8:b6:fa:04:b8: 61:bd:55:8c:93:51:a8:04:96:74:4e:59:46:dc:be: 7d:89:f4:bf:d9:17:25:2b:9b:9d:eb:d6:e8:aa:0b: 91:ed:23:f1:6f:ce:5a:9a:43:cb:58:20:94:09:00: b3:a4:00:ea:52:f7:3a:e9:b1:48:9b:27:9f:aa:13: b9:9e:59:46:5c:92:4b:81:27:5b:60:d7:3e:00:8b: 30:df:2b:d6:68:00:26:15:8f:34:6f:d1:22:ef:8b: d3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:F0:17:5C:A7:5B:72:54:17:76:C0:96:AA:A7:E7:93:FA:A3:CC:DD X509v3 Authority Key Identifier: keyid:C6:A5:76:F0:8C:D4:A7:3E:A9:DD:97:50:3B:C9:D2:8B:05:91:1B:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqV28IzUpz6p3ZdQO8nSiwWRG5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:bd:66:35:21:4c:d5:6d:b2:0b:38:39:22:ac:05:8f:d4:c3: 17:c4:f6:52:44:df:cf:67:b1:7f:3f:7a:9b:7d:15:ca:b3:42: 69:f0:7f:02:78:2f:56:76:b2:a2:f6:b2:2f:2a:c0:9f:7e:a1: 12:1e:99:47:da:1b:ca:d8:f1:ba:31:d8:7a:e3:ac:f4:21:2d: 4a:58:c7:40:98:af:65:89:ec:73:fc:a8:0f:eb:46:63:7e:0e: 05:4d:4d:60:59:17:cf:b5:28:94:33:f8:32:1d:a4:43:e7:70: 73:48:51:78:7f:28:f4:20:de:45:9e:91:6a:f4:46:ab:1b:9d: 01:8f:36:3e:33:19:d7:0e:f8:54:77:11:96:c1:c9:9d:f1:5a: 14:4f:d1:0c:f0:24:9a:95:24:ae:62:36:ea:59:b9:ba:cb:65: 58:6e:79:3a:21:ab:32:9d:80:dc:f2:54:e9:fa:8b:f5:c0:71: 8a:ee:62:be:06:85:ff:d3:1c:b0:45:84:db:56:bb:f4:7f:90: ac:6b:a3:64:ad:21:24:cd:35:27:52:bf:2e:10:96:65:9b:83: 04:69:26:2f:a5:72:e3:bd:62:67:ea:ee:51:bf:f9:c5:ec:42: ca:ce:0f:7e:51:a8:f0:10:1c:04:3d:86:8a:c5:06:09:6b:dc: 4b:f4:4a:88 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIzRkYxMTAvBgNVBAUTKEM2QTU3NkYwOENENEE3M0VBOUREOTc1MDNCQzlEMjhC MDU5MTFCOUMwHhcNMjYwOTIxMDIzMzQ1WhcNMjYwOTI4MDIzMzQ1WjAYMRYwFAYD VQQDEw02YWIwOTc4OS05YTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1KdptTapwyD3j6Db6zUH08B5lIaWcLORJqZfpl1ljueMxsu7jH+rFOK/zkdq i4jfVmUJ7gF3GfdyoZHtigNNxUs7Ad6l9PxoTczvLWNevjrDLZS+ZGCXHt0Anuay tA4TVISzn35wnE/xi66HORyVqIFe5soVgOiTllYWQNeq1ZbkGjPco96x8gfx24p2 cFoWo6pquWj3+SVgmSPhH7AzyLb6BLhhvVWMk1GoBJZ0TllG3L59ifS/2RclK5ud 69boqguR7SPxb85amkPLWCCUCQCzpADqUvc66bFImyefqhO5nllGXJJLgSdbYNc+ AIsw3yvWaAAmFY80b9Ei74vTqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMnwF1yn W3JUF3bAlqqn55P6o8zdMB8GA1UdIwQYMBaAFMaldvCM1Kc+qd2XUDvJ0osFkRuc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjNGRi9EODVBMEI3QzRE RjgxMUVFODg2ODdCNjVDNEY5QUUwMi94cVYyOEl6VXB6NnAzWmRRTzhuU2l3V1JH NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hxVjI4SXpVcHo2cDNaZFFPOG5TaXdXUkc1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjNGRi9EODVBMEI3QzRERjgxMUVFODg2ODdCNjVDNEY5QUUwMi94cVYyOEl6VXB6 NnAzWmRRTzhuU2l3V1JHNXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvr1mNSFM1W2yCzg5IqwFj9TDF8T2UkTfz2exfz96m30VyrNCafB/AngvVnay ovayLyrAn36hEh6ZR9obytjxujHYeuOs9CEtSljHQJivZYnsc/yoD+tGY34OBU1N YFkXz7UolDP4Mh2kQ+dwc0hReH8o9CDeRZ6RavRGqxudAY82PjMZ1w74VHcRlsHJ nfFaFE/RDPAkmpUkrmI26lm5ustlWG55OiGrMp2A3PJU6fqL9cBxiu5ivgaF/9Mc sEWE21a79H+QrGujZK0hJM01J1K/LhCWZZuDBGkmL6Vy471iZ+ruUb/5xexCys4P flGo8BAcBD2GisUGCWvcS/RKiA== -----END CERTIFICATE-----Generated at Tue Sep 22 06:29:32 2026 by rpki-client