$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.mft File: XerjhTD4FfvwubP472N1B4bIrAo.mft (raw, json) Hash identifier: ZmNi9HzteH7z2phxFcXgy42nNSLJc4qpx3i5zaM86wY= Subject key identifier: EC:38:FA:08:05:1F:79:85:4B:16:EB:80:32:D0:38:32:8E:EA:54:7D Authority key identifier: 5D:EA:E3:85:30:F8:15:FB:F0:B9:B3:F8:EF:63:75:07:86:C8:AC:0A Certificate issuer: /CN=A91A4481/serialNumber=5DEAE38530F815FBF0B9B3F8EF63750786C8AC0A Certificate serial: 01C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XerjhTD4FfvwubP472N1B4bIrAo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.mft Manifest number: 01C3 Signing time: Mon 21 Sep 2026 03:49:28 +0000 Manifest this update: Mon 21 Sep 2026 03:49:27 +0000 Manifest next update: Mon 28 Sep 2026 03:49:27 +0000 Files and hashes: 1: XerjhTD4FfvwubP472N1B4bIrAo.crl (hash: hUTsBVmpUTqiMzO67z5l37g5RpJ/zbXUjAuZ98H7RK8=) 2: 5B08B12602C211EF9A1E4567C4F9AE02.roa (hash: 3K3ILgZCY+aW8Uz31syQLaXzVT7Ru8BASPjTSZG08co=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.crl rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XerjhTD4FfvwubP472N1B4bIrAo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 03:49:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 457 (0x1c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4481, serialNumber=5DEAE38530F815FBF0B9B3F8EF63750786C8AC0A Validity Not Before: Sep 21 03:49:27 2026 GMT Not After : Sep 28 03:49:27 2026 GMT Subject: CN=6ab0a948-040e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5e:15:00:69:7a:7a:0e:e8:60:0c:74:d9:84: 01:28:4f:a4:78:01:57:ad:4d:b5:dd:bd:87:af:f3: e4:ed:63:3c:4b:8e:c7:ea:8d:ee:1e:6b:3b:b0:3d: 2c:88:39:39:72:28:78:f1:ab:d2:28:d1:89:8c:b4: 75:f2:94:06:cc:cc:0c:29:d2:b1:1b:8e:80:5d:80: 5b:3b:4e:95:7b:e1:00:bf:1c:7f:e0:91:68:9c:98: fc:5a:52:3e:24:bf:b9:c6:4e:5b:b9:8a:e9:18:4e: 1c:d9:be:10:e1:ca:b5:2f:07:95:d0:ff:09:42:5d: c6:75:d9:83:1f:03:84:e4:01:ca:31:f9:87:a5:ee: 06:18:61:df:d8:ca:fa:0c:9f:5e:05:fb:e1:dd:a2: 5e:2b:90:01:b6:27:0d:fe:67:d0:b3:d2:9b:d7:84: e4:a1:5e:df:b9:04:45:a6:5d:95:46:95:6c:1d:ea: cd:26:54:d2:0e:36:1a:d0:db:7a:db:f5:94:b2:94: 9b:f9:70:a5:c9:1b:b5:9b:59:59:4e:eb:e3:13:ad: 72:cc:1b:46:89:51:d7:19:48:61:56:d3:54:d2:51: 41:34:42:86:f0:be:6b:a3:b6:76:79:4a:31:cf:29: 09:40:85:d4:63:ac:35:e7:78:4b:02:02:6c:dc:3d: a9:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:38:FA:08:05:1F:79:85:4B:16:EB:80:32:D0:38:32:8E:EA:54:7D X509v3 Authority Key Identifier: keyid:5D:EA:E3:85:30:F8:15:FB:F0:B9:B3:F8:EF:63:75:07:86:C8:AC:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XerjhTD4FfvwubP472N1B4bIrAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:e9:fd:e2:42:e9:e5:67:77:e4:12:c9:3a:73:56:fc:f8:bb: 0b:2f:a6:33:ac:94:be:8c:ac:36:74:7a:1a:21:3c:59:7e:ef: d5:c8:8f:f1:9e:fc:71:7e:0a:e0:62:b4:84:cd:04:ca:6a:f0: c4:45:29:86:93:f7:c4:49:a3:d3:fb:e2:0e:a3:4b:8a:74:59: 99:1a:d7:7a:ed:38:9b:0e:7a:21:f8:c6:98:50:52:01:a9:ac: 27:41:95:7e:2e:27:c6:ec:92:20:d0:b0:3c:f9:32:ef:d9:c1: 98:2d:bc:ff:79:14:ae:33:7b:18:45:7c:85:27:fc:7d:c0:51: 20:c7:0a:5f:85:11:a0:8d:f0:c9:73:72:3c:ac:cc:3e:5d:97: a2:2e:fb:ba:e3:47:f5:25:ec:89:ef:fd:3b:bf:cd:ad:81:81: ba:1c:43:c8:47:d5:7c:e5:61:01:77:74:a2:0e:56:66:04:1b: 62:ad:b3:e9:b9:8e:86:12:ea:8e:24:d3:da:73:b8:e7:e0:3e: 7c:74:f4:0c:2c:d9:0b:0b:96:d2:6a:f7:f1:4c:f2:f1:50:bd: 5f:17:21:7b:4d:1b:b3:fd:4d:e5:a6:6d:7e:f0:16:68:a5:7d: 1e:a7:30:28:6d:ed:b0:c3:78:a5:c8:6c:b3:a4:90:d8:85:8b: fb:ee:51:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0ODExMTAvBgNVBAUTKDVERUFFMzg1MzBGODE1RkJGMEI5QjNGOEVGNjM3NTA3 ODZDOEFDMEEwHhcNMjYwOTIxMDM0OTI3WhcNMjYwOTI4MDM0OTI3WjAYMRYwFAYD VQQDEw02YWIwYTk0OC0wNDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv14VAGl6eg7oYAx02YQBKE+keAFXrU213b2Hr/Pk7WM8S47H6o3uHms7sD0s iDk5cih48avSKNGJjLR18pQGzMwMKdKxG46AXYBbO06Ve+EAvxx/4JFonJj8WlI+ JL+5xk5buYrpGE4c2b4Q4cq1LweV0P8JQl3GddmDHwOE5AHKMfmHpe4GGGHf2Mr6 DJ9eBfvh3aJeK5ABticN/mfQs9Kb14TkoV7fuQRFpl2VRpVsHerNJlTSDjYa0Nt6 2/WUspSb+XClyRu1m1lZTuvjE61yzBtGiVHXGUhhVtNU0lFBNEKG8L5ro7Z2eUox zykJQIXUY6w153hLAgJs3D2pawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOw4+ggF H3mFSxbrgDLQODKO6lR9MB8GA1UdIwQYMBaAFF3q44Uw+BX78Lmz+O9jdQeGyKwK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQ4MS9CQzg0MEY0NjAy QzExMUVGQUYzQ0I0NjVDNEY5QUUwMi9YZXJqaFRENEZmdnd1YlA0NzJOMUI0Ykly QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hlcmpoVEQ0RmZ2d3ViUDQ3Mk4xQjRiSXJBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDQ4MS9CQzg0MEY0NjAyQzExMUVGQUYzQ0I0NjVDNEY5QUUwMi9YZXJqaFRENEZm dnd1YlA0NzJOMUI0YklyQW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh+n94kLp5Wd35BLJOnNW/Pi7Cy+mM6yUvoysNnR6GiE8WX7v1ciP8Z78cX4K 4GK0hM0EymrwxEUphpP3xEmj0/viDqNLinRZmRrXeu04mw56IfjGmFBSAamsJ0GV fi4nxuySINCwPPky79nBmC28/3kUrjN7GEV8hSf8fcBRIMcKX4URoI3wyXNyPKzM Pl2Xoi77uuNH9SXsie/9O7/NrYGBuhxDyEfVfOVhAXd0og5WZgQbYq2z6bmOhhLq jiTT2nO45+A+fHT0DCzZCwuW0mr38Uzy8VC9Xxche00bs/1N5aZtfvAWaKV9Hqcw KG3tsMN4pchss6SQ2IWL++5R1A== -----END CERTIFICATE-----Generated at Mon Sep 21 20:27:56 2026 by rpki-client