$ rpki-client -vvvf rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft File: MdxLbDLXteXzqGAXOIWmRfT8AVI.mft (raw, json) Hash identifier: XZz5AqawfJyGlGa/1NLLm4JhGtZDQv2AHuA0cfQdd1U= Subject key identifier: 45:23:4E:44:27:3C:EF:13:B6:B1:52:5E:65:AD:6F:3E:1C:BA:B3:BE Authority key identifier: 31:DC:4B:6C:32:D7:B5:E5:F3:A8:60:17:38:85:A6:45:F4:FC:01:52 Certificate issuer: /CN=A91567D5/serialNumber=31DC4B6C32D7B5E5F3A860173885A645F4FC0152 Certificate serial: 01AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft Manifest number: 0450 Signing time: Sun 27 Sep 2026 01:53:49 +0000 Manifest this update: Sun 27 Sep 2026 01:53:48 +0000 Manifest next update: Sun 04 Oct 2026 01:53:48 +0000 Files and hashes: 1: MdxLbDLXteXzqGAXOIWmRfT8AVI.crl (hash: gQKd8hPlF+Nw6RdUUD6bddAwIUIDC0GU3jFe9Z3rDuE=) 2: FAE53ED6A73811F1BF9745F46911F970.roa (hash: brU3sJVZASTmjDKDyoZWg7U5ppo/gy0s1PTo3i/z3KQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.crl rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 01:53:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 426 (0x1aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91567D5, serialNumber=31DC4B6C32D7B5E5F3A860173885A645F4FC0152 Validity Not Before: Sep 27 01:53:48 2026 GMT Not After : Oct 4 01:53:48 2026 GMT Subject: CN=6ab8772d-b05f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:49:4f:1f:de:1c:57:c5:39:c2:bb:95:9e:a5: 7b:0d:40:4a:cb:e5:2b:10:94:b3:4b:9d:c9:63:9a: 39:83:f1:31:93:2d:1e:96:8a:31:83:c3:25:b9:51: 43:58:b0:7b:8d:7b:1a:dc:aa:31:20:a0:a3:23:c4: cf:a2:9d:f7:e0:29:e4:e2:d1:55:41:ff:a1:b2:9f: 52:d1:f3:0a:81:c0:bf:1b:a1:6c:02:f8:4a:6b:59: 76:6c:4c:d1:82:6c:36:5a:96:82:6e:b2:96:6d:51: 35:1e:12:fc:40:d6:3f:a1:1f:a3:2f:bd:14:69:ea: b0:58:02:d5:87:17:08:67:c4:fc:0c:a0:a0:88:92: 8b:1a:30:57:68:cb:0b:51:87:2d:5e:a7:a4:fe:99: 02:e0:87:87:a9:98:ab:a6:dc:cd:ee:2f:bd:5f:ae: dc:63:7c:45:c1:d3:3a:59:02:8c:9c:eb:13:56:fa: 0f:6c:bb:b2:2b:4c:c1:d2:03:39:dc:72:7c:b6:74: 0f:2d:a7:e1:b2:a9:9b:25:a9:e8:05:fe:a2:93:fe: c9:49:47:29:c0:8d:88:4d:22:0f:d7:98:f7:02:a1: 6f:1f:cd:fe:b8:65:3a:c4:c6:5a:be:c2:5b:54:8a: 23:1a:98:93:a0:6a:30:4d:2c:b3:17:53:cb:18:8e: f0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:23:4E:44:27:3C:EF:13:B6:B1:52:5E:65:AD:6F:3E:1C:BA:B3:BE X509v3 Authority Key Identifier: keyid:31:DC:4B:6C:32:D7:B5:E5:F3:A8:60:17:38:85:A6:45:F4:FC:01:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:df:59:6a:8b:a2:31:89:a8:dd:c3:01:22:84:16:68:bb:ef: c0:3d:7a:5b:0f:b0:7a:35:d7:60:ca:6c:a7:9a:d3:d6:38:ff: fb:3a:03:d5:81:34:38:df:3f:a2:6b:d7:12:0d:4d:97:9b:29: 90:81:67:1c:5b:a5:04:3a:f1:0b:24:13:bd:4b:45:92:9c:9f: ef:5e:09:ed:54:21:f0:89:1b:d1:1e:5d:bd:bb:af:7f:87:bd: 83:07:09:0e:69:79:a3:75:66:32:8a:7a:2a:49:18:e5:6a:bb: 74:db:bc:a5:5f:99:af:e7:07:aa:a7:3b:9b:37:ab:3b:ce:0a: 77:12:71:1e:9c:1a:9c:01:68:3c:68:a9:c8:ff:b7:4a:41:5a: 76:8a:f7:d5:29:90:58:30:ff:8b:c7:5e:60:a7:4c:70:66:6e: f6:26:07:4e:5f:70:b7:bf:01:0c:e9:9c:c8:0c:d7:64:6d:99: fd:ec:35:ac:e3:ad:4c:88:0f:e2:25:91:59:4d:f8:64:d1:b4: 17:59:bf:9a:c2:21:24:a3:82:be:1a:2f:26:0b:5e:0d:11:f1: ee:d4:15:f3:a6:cf:75:c9:1b:fd:24:06:64:0e:68:b7:50:a8: b9:d0:8b:a4:2f:ad:e7:4b:3a:51:76:5c:49:be:86:b4:61:1d: f0:a5:2e:3d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY3RDUxMTAvBgNVBAUTKDMxREM0QjZDMzJEN0I1RTVGM0E4NjAxNzM4ODVBNjQ1 RjRGQzAxNTIwHhcNMjYwOTI3MDE1MzQ4WhcNMjYxMDA0MDE1MzQ4WjAYMRYwFAYD VQQDEw02YWI4NzcyZC1iMDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzklPH94cV8U5wruVnqV7DUBKy+UrEJSzS53JY5o5g/Exky0elooxg8MluVFD WLB7jXsa3KoxIKCjI8TPop334Cnk4tFVQf+hsp9S0fMKgcC/G6FsAvhKa1l2bEzR gmw2WpaCbrKWbVE1HhL8QNY/oR+jL70UaeqwWALVhxcIZ8T8DKCgiJKLGjBXaMsL UYctXqek/pkC4IeHqZirptzN7i+9X67cY3xFwdM6WQKMnOsTVvoPbLuyK0zB0gM5 3HJ8tnQPLafhsqmbJanoBf6ik/7JSUcpwI2ITSIP15j3AqFvH83+uGU6xMZavsJb VIojGpiToGowTSyzF1PLGI7w3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEUjTkQn PO8TtrFSXmWtbz4curO+MB8GA1UdIwQYMBaAFDHcS2wy17Xl86hgFziFpkX0/AFS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjdENS9ERUZDQTQ1MkI0 MUIxMUVEQjZDOERENjdDNEY5QUUwMi9NZHhMYkRMWHRlWHpxR0FYT0lXbVJmVDhB VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01keExiRExYdGVYenFHQVhPSVdtUmZUOEFWSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjdENS9ERUZDQTQ1MkI0MUIxMUVEQjZDOERENjdDNEY5QUUwMi9NZHhMYkRMWHRl WHpxR0FYT0lXbVJmVDhBVkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZd9ZaouiMYmo3cMBIoQWaLvvwD16Ww+wejXXYMpsp5rT1jj/+zoD1YE0ON8/ omvXEg1Nl5spkIFnHFulBDrxCyQTvUtFkpyf714J7VQh8Ikb0R5dvbuvf4e9gwcJ Dml5o3VmMop6KkkY5Wq7dNu8pV+Zr+cHqqc7mzerO84KdxJxHpwanAFoPGipyP+3 SkFador31SmQWDD/i8deYKdMcGZu9iYHTl9wt78BDOmcyAzXZG2Z/ew1rOOtTIgP 4iWRWU34ZNG0F1m/msIhJKOCvhovJgteDRHx7tQV86bPdckb/SQGZA5ot1CoudCL pC+t50s6UXZcSb6GtGEd8KUuPQ== -----END CERTIFICATE-----Generated at Tue Sep 29 03:51:16 2026 by rpki-client