$ rpki-client -vvvf rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft File: xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft (raw, json) Hash identifier: vA8wluF9OI2iLd9gi6zWqPgGtWBkXD9ETFAHXcl2jZs= Subject key identifier: D1:DB:DB:CF:97:48:DB:4D:F1:5D:83:8B:A8:3D:BF:8E:57:E3:C3:CB Authority key identifier: C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B Certificate issuer: /CN=A91955C8/serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B Certificate serial: 31CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft Manifest number: 3141 Signing time: Tue 22 Sep 2026 15:24:14 +0000 Manifest this update: Tue 22 Sep 2026 15:24:13 +0000 Manifest next update: Tue 29 Sep 2026 15:24:13 +0000 Files and hashes: 1: xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl (hash: 8V4eCpEin04uOltdDM9Ts8abWXKPfiFTiJSBw74frdQ=) 2: 3590603EEA9911EDA6A36E18C4F9AE02.roa (hash: KAOajreZKNs6OhlZEEuG6IUQi2eX+xK6ACMq1TNvAF4=) 3: E6B6BC0AE02E11EAA16EAA59C4F9AE02.roa (hash: aSXWB68fSWHHDo5FqMadmbWywQoiETk4RCpEwtCS3cM=) 4: F1A29F32843111F18303D56C65A30FBC.roa (hash: 5a8O9Z1V3ja/5ztqSfJLuOOFIOZvUJHqD1otnk0gm90=) 5: CECE54DE1BC611ECAE421168C4F9AE02.roa (hash: YJa/B3fmbY+Mqk52HoaoOUWCKj3EPvHiwST21gkBP+U=) 6: 12483942E09911EAB8D3B833C4F9AE02.roa (hash: MZaVNf7iRFX1/H8g/r1VAgxVC7qDm+ZemPCzX1+//wM=) 7: B9286BC4F33711EEAAA34C78C4F9AE02.roa (hash: I9JABl6/gzx03qs1VThcdC1FmK2YJXn7jMmQPHfDYxU=) 8: A4A3FAEAEDE811EFA5767A5DC4F9AE02.roa (hash: NR3htRP9a6F2ckA37vX/zVJgydrhk/y6ALKCOIGQr/c=) 9: 13A1C0BAE09911EAB8D3B833C4F9AE02.roa (hash: 7qL24XtJJGYddBNzZ1f8/6sYDORXFfhTRLN+KXoF1UE=) 10: 004E48CA008611EEA0F2B440C4F9AE02.roa (hash: JmBQKGLMvG7nf7IFULuzTixXWs552SXmenXllwOUSdI=) 11: 11BAFC08E09911EAB8D3B833C4F9AE02.roa (hash: /ot5DoHQF40alQvvcmtFXp57ebCwbLGHhRnrByVbsDA=) 12: 5B58485AB9DC11EEA6B2DC1DC4F9AE02.roa (hash: Hl3h+xajA6uyUcgR+szgYx0GkKpSQx8UaQOMAFI5mWs=) 13: 3503A838EA9911EDA6A36E18C4F9AE02.roa (hash: 0AZBDmh8J9l8VOqehLNqWYnMqjkmPYEkpVJJP0YL/UM=) 14: 7DDA28EC8D9511EB9ECE6042C4F9AE02.roa (hash: U3Ln4yzn8NQ06p1eFYCEFA90g6K7BH94tZxVPn7SxXk=) 15: AF6D4D44B73311EC8392922AC4F9AE02.roa (hash: 4oLyl9NCifHRKBU2NyGCAhBn5eVA7LF6waY1+/Z8kf0=) 16: FBFEBECA10B211EEA9B11345C4F9AE02.roa (hash: LToWIQ1COMbsBcEbH54cRu/d6HNi0lrBivKKu1OeKJk=) 17: 13065E72E09911EAB8D3B833C4F9AE02.roa (hash: Bh0KOlYAcUWAXt3WdoXHJOCw2Q1uBx39GJDLv8eD0T8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 15:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12750 (0x31ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91955C8, serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B Validity Not Before: Sep 22 15:24:13 2026 GMT Not After : Sep 29 15:24:13 2026 GMT Subject: CN=6ab29d9d-dd4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:46:e9:71:8a:37:ca:24:e2:6f:31:9e:80:6c: 27:46:74:a3:5f:20:4f:d9:fe:b3:c2:23:60:83:a5: 90:b9:ae:8f:c2:1a:cf:e7:94:09:d8:30:70:9b:f1: b8:ff:1c:eb:8c:ac:d7:b0:cd:d5:11:c9:ed:df:cf: 7b:be:a2:a0:0e:e3:1e:fc:7f:dc:e5:df:e9:df:8e: 32:09:fd:96:ce:a1:45:5d:a3:5c:0a:56:e7:18:60: 5a:7b:81:2d:ae:12:e0:ff:05:37:06:94:64:f9:46: 77:1b:64:84:55:b6:4e:16:4d:ee:b0:ac:b4:46:fe: 90:87:63:65:ae:a7:77:bb:5c:60:d5:b7:e8:ee:b3: ba:92:d1:37:66:4b:9d:35:52:35:b1:c0:24:db:9d: cd:1e:c8:50:c3:98:8c:07:ec:0f:74:9c:bd:32:f9: 02:f8:ad:e0:46:99:6a:1d:dd:15:de:7d:d4:4b:3c: eb:3f:4c:f1:cd:8a:28:c9:34:57:55:b7:ae:0f:d4: dc:55:58:81:a5:8e:57:69:c5:1c:44:45:ac:f8:26: 01:4d:70:ec:5a:d8:d4:bc:30:13:4c:94:dc:50:e7: de:6e:75:70:72:6e:df:4a:47:52:a3:18:93:7e:26: a1:f2:8d:03:94:fb:bf:a3:a6:a2:d4:21:d6:5f:ea: 8a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:DB:DB:CF:97:48:DB:4D:F1:5D:83:8B:A8:3D:BF:8E:57:E3:C3:CB X509v3 Authority Key Identifier: keyid:C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:58:da:c8:1d:64:39:a1:31:26:79:27:20:3b:ae:7c:15:02: 07:01:7b:40:af:8d:57:a3:ad:1f:47:81:60:fa:ac:53:3c:fc: 8f:a0:8b:09:51:ab:0e:cb:85:18:bb:22:ae:fe:92:59:4a:01: 52:d1:a3:90:2a:30:05:ef:39:c7:24:a6:b5:b7:37:60:16:cc: 82:c2:eb:f5:29:cd:fe:54:0d:c2:f2:4e:72:f3:42:87:c2:d9: 97:0c:b5:6c:ab:d2:75:d2:00:bb:fc:25:21:2a:bb:f2:f9:54: 8a:26:c5:ec:06:0e:cb:8b:f6:2f:6e:92:e0:01:62:c3:8b:49: 4a:9c:b1:8a:5e:e2:2c:32:9d:88:00:82:a0:8b:ed:3a:64:da: 0b:e3:23:a4:51:92:63:8c:0b:d3:e2:12:7b:a9:cc:2d:5e:b5: f5:98:20:75:9e:35:1e:38:71:b8:7a:68:8a:fb:61:62:72:d0: 12:9b:f8:a5:ef:42:9b:9f:b1:18:ca:cc:5d:42:07:4a:e2:1a: 76:33:42:0a:34:8a:f2:c1:ac:80:ac:8b:f3:a6:fc:77:22:f9: 64:79:c7:c2:92:49:52:0f:c4:16:88:ef:5c:27:5a:e2:aa:f0: 1f:42:77:d7:51:7c:e7:fe:e3:2d:cd:c8:e4:81:0e:99:a4:9d: 7b:46:e6:62 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICMc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU1QzgxMTAvBgNVBAUTKEM2NjczRDM2NDhGNDNGNDY3NEY1RjVFQkZDQkZBMzFC Qjk2NEY2NEIwHhcNMjYwOTIyMTUyNDEzWhcNMjYwOTI5MTUyNDEzWjAYMRYwFAYD VQQDEw02YWIyOWQ5ZC1kZDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0EbpcYo3yiTibzGegGwnRnSjXyBP2f6zwiNgg6WQua6PwhrP55QJ2DBwm/G4 /xzrjKzXsM3VEcnt3897vqKgDuMe/H/c5d/p344yCf2WzqFFXaNcClbnGGBae4Et rhLg/wU3BpRk+UZ3G2SEVbZOFk3usKy0Rv6Qh2Nlrqd3u1xg1bfo7rO6ktE3Zkud NVI1scAk253NHshQw5iMB+wPdJy9MvkC+K3gRplqHd0V3n3USzzrP0zxzYooyTRX VbeuD9TcVViBpY5XacUcREWs+CYBTXDsWtjUvDATTJTcUOfebnVwcm7fSkdSoxiT fiah8o0DlPu/o6ai1CHWX+qKPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNHb28+X SNtN8V2Di6g9v45X48PLMB8GA1UdIwQYMBaAFMZnPTZI9D9GdPX16/y/oxu5ZPZL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTVDOC85Q0QzRThGNkZG NTgxMUUyQkI0QjJFM0Y1OTExRUEzMi94bWM5TmtqMFAwWjA5ZlhyX0wtakc3bGs5 a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3htYzlOa2owUDBaMDlmWHJfTC1qRzdsazlrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTVDOC85Q0QzRThGNkZGNTgxMUUyQkI0QjJFM0Y1OTExRUEzMi94bWM5TmtqMFAw WjA5ZlhyX0wtakc3bGs5a3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPljayB1kOaExJnknIDuufBUCBwF7QK+NV6OtH0eBYPqsUzz8j6CLCVGrDsuF GLsirv6SWUoBUtGjkCowBe85xySmtbc3YBbMgsLr9SnN/lQNwvJOcvNCh8LZlwy1 bKvSddIAu/wlISq78vlUiibF7AYOy4v2L26S4AFiw4tJSpyxil7iLDKdiACCoIvt OmTaC+MjpFGSY4wL0+ISe6nMLV619ZggdZ41HjhxuHpoivthYnLQEpv4pe9Cm5+x GMrMXUIHSuIadjNCCjSK8sGsgKyL86b8dyL5ZHnHwpJJUg/EFojvXCda4qrwH0J3 11F85/7jLc3I5IEOmaSde0bmYg== -----END CERTIFICATE-----Generated at Tue Sep 22 19:03:44 2026 by rpki-client