$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft File: PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft (raw, json) Hash identifier: Sv6+MPf8gYOEaVa3hzeVbwqoWIua5D7I4yCTr+31VXw= Subject key identifier: A8:2E:9E:28:D6:4B:72:F7:C8:0E:6E:1A:0C:5E:6A:8F:BC:00:F9:1C Authority key identifier: 3D:77:B5:86:A3:F6:82:C5:63:B6:42:65:26:28:91:D4:DA:46:A7:A8 Certificate issuer: /CN=A91B10B9/serialNumber=3D77B586A3F682C563B64265262891D4DA46A7A8 Certificate serial: 0492 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXe1hqP2gsVjtkJlJiiR1NpGp6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft Manifest number: 0489 Signing time: Fri 18 Sep 2026 23:56:36 +0000 Manifest this update: Fri 18 Sep 2026 23:56:36 +0000 Manifest next update: Fri 25 Sep 2026 23:56:36 +0000 Files and hashes: 1: PXe1hqP2gsVjtkJlJiiR1NpGp6g.crl (hash: HV1vd+xyzWfYycZnJ9kLLkE9dy3hE8CsR3Bc+LPffCc=) 2: BCD0F6B0A0FF11EC924D4461C4F9AE02.roa (hash: qsMeSOsY/v4xDv51AL5EHgDhAsKeYHGqgfOVvrnOS5I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.crl rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXe1hqP2gsVjtkJlJiiR1NpGp6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1170 (0x492) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B10B9, serialNumber=3D77B586A3F682C563B64265262891D4DA46A7A8 Validity Not Before: Sep 18 23:56:36 2026 GMT Not After : Sep 25 23:56:36 2026 GMT Subject: CN=6aadcfb4-8699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:9f:4b:7d:d2:07:9b:d7:ff:de:23:2b:36:2c: 45:02:49:52:73:69:b8:e4:e9:7b:34:77:7b:c5:64: b2:05:b3:40:d2:76:3b:c6:17:0c:0e:09:7b:f2:8b: 92:a5:6f:20:c8:fe:0d:2f:6a:be:95:58:11:8b:50: 03:70:d6:c9:44:00:1d:b4:a1:8b:01:e9:c7:b3:39: 65:ca:07:c7:d0:ee:3a:05:ff:55:4e:78:74:57:38: d5:65:c0:5d:84:74:b1:f6:52:82:40:4b:c0:23:e4: f7:48:03:ce:08:72:3e:ad:be:de:eb:d7:24:78:33: 52:af:1b:44:90:fb:16:6f:82:44:ba:e2:49:18:e3: 5e:be:34:24:12:1f:d1:8c:21:e3:0d:9b:e3:eb:c6: e9:6d:05:a9:6c:0c:b3:5b:42:04:40:8e:39:70:ff: b8:ec:0b:eb:c7:14:9c:ed:aa:52:92:57:86:7e:3a: af:26:cf:8e:62:7e:15:c9:2c:e1:9f:f1:9a:43:ec: 11:a6:45:69:98:b5:f9:ba:b9:15:4f:6f:49:c0:30: c7:3c:e2:07:c0:62:54:c9:90:a4:1d:a6:3d:9d:4c: ac:82:b3:00:c2:ea:bb:20:ba:2f:f0:bf:52:07:89: e5:5d:f6:21:07:26:2d:0f:11:9f:f5:14:f2:b7:e8: 9c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:2E:9E:28:D6:4B:72:F7:C8:0E:6E:1A:0C:5E:6A:8F:BC:00:F9:1C X509v3 Authority Key Identifier: keyid:3D:77:B5:86:A3:F6:82:C5:63:B6:42:65:26:28:91:D4:DA:46:A7:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXe1hqP2gsVjtkJlJiiR1NpGp6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:24:1e:e6:c8:57:9a:e9:52:ab:09:15:fb:10:50:64:ab:3a: ea:57:d5:ab:98:22:f2:ff:fd:86:e7:fc:68:2d:e9:b2:90:02: 5f:e4:7e:5c:bb:bb:cf:13:ba:3f:7a:4c:b3:bd:7e:17:1a:7a: 26:bb:0d:11:8c:93:0d:b5:92:cb:82:0c:4d:78:4b:85:6b:26: 9f:8a:18:98:cc:c4:ab:c2:b2:0e:04:2c:7a:e0:ad:f2:80:ec: 3c:12:b0:d4:5a:e1:72:27:b1:e4:fd:67:25:34:1d:7d:92:e4: bd:23:ae:47:30:31:97:74:27:ff:5f:bd:02:7b:80:4c:11:b5: d7:2e:31:c7:03:8c:6a:17:ea:9a:ac:31:04:39:4b:ff:c4:c9: ff:61:fc:e4:1c:3b:5d:6a:e5:6f:53:bc:af:03:36:54:11:25: 88:37:40:75:71:da:ef:45:31:a1:2a:07:7c:e7:e8:89:69:15: 48:fa:ed:73:30:8c:4f:fa:a4:bb:43:0a:3b:16:bf:5b:fa:ab: 28:d8:08:ac:87:c9:a9:66:4b:99:ee:93:83:05:7d:a7:ec:65: 63:25:bb:48:c3:40:73:47:3d:f2:52:36:c8:e3:e0:2f:89:88: b7:47:0c:ef:3b:1d:c0:d6:d7:ca:83:cc:4d:f4:17:8a:4a:96: 52:6e:0e:ff -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjEwQjkxMTAvBgNVBAUTKDNENzdCNTg2QTNGNjgyQzU2M0I2NDI2NTI2Mjg5MUQ0 REE0NkE3QTgwHhcNMjYwOTE4MjM1NjM2WhcNMjYwOTI1MjM1NjM2WjAYMRYwFAYD VQQDEw02YWFkY2ZiNC04Njk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Z9LfdIHm9f/3iMrNixFAklSc2m45Ol7NHd7xWSyBbNA0nY7xhcMDgl78ouS pW8gyP4NL2q+lVgRi1ADcNbJRAAdtKGLAenHszllygfH0O46Bf9VTnh0VzjVZcBd hHSx9lKCQEvAI+T3SAPOCHI+rb7e69ckeDNSrxtEkPsWb4JEuuJJGONevjQkEh/R jCHjDZvj68bpbQWpbAyzW0IEQI45cP+47AvrxxSc7apSkleGfjqvJs+OYn4VySzh n/GaQ+wRpkVpmLX5urkVT29JwDDHPOIHwGJUyZCkHaY9nUysgrMAwuq7ILov8L9S B4nlXfYhByYtDxGf9RTyt+ictwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKgunijW S3L3yA5uGgxeao+8APkcMB8GA1UdIwQYMBaAFD13tYaj9oLFY7ZCZSYokdTaRqeo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTBCOS9EMTNCRUFBQUEw RkIxMUVDQTVEMURGNUJDNEY5QUUwMi9QWGUxaHFQMmdzVmp0a0psSmlpUjFOcEdw NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BYZTFocVAyZ3NWanRrSmxKaWlSMU5wR3A2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTBCOS9EMTNCRUFBQUEwRkIxMUVDQTVEMURGNUJDNEY5QUUwMi9QWGUxaHFQMmdz Vmp0a0psSmlpUjFOcEdwNmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmCQe5shXmulSqwkV+xBQZKs66lfVq5gi8v/9huf8aC3pspACX+R+XLu7zxO6 P3pMs71+Fxp6JrsNEYyTDbWSy4IMTXhLhWsmn4oYmMzEq8KyDgQseuCt8oDsPBKw 1Frhciex5P1nJTQdfZLkvSOuRzAxl3Qn/1+9AnuATBG11y4xxwOMahfqmqwxBDlL /8TJ/2H85Bw7XWrlb1O8rwM2VBEliDdAdXHa70UxoSoHfOfoiWkVSPrtczCMT/qk u0MKOxa/W/qrKNgIrIfJqWZLme6TgwV9p+xlYyW7SMNAc0c98lI2yOPgL4mIt0cM 7zsdwNbXyoPMTfQXikqWUm4O/w== -----END CERTIFICATE-----Generated at Sun Sep 20 23:38:17 2026 by rpki-client