$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft File: XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft (raw, json) Hash identifier: 7NCQGcHbBmtGdlDr99KRAPFJiGZLnENGxbfdb33Z4Xc= Subject key identifier: 87:C6:EB:F2:B7:DC:AF:85:2E:72:95:E0:CA:73:8E:F6:15:79:CE:7B Authority key identifier: 5C:36:84:39:CB:C5:F5:A4:57:15:D6:47:6B:EA:A6:68:6D:09:51:B1 Certificate issuer: /CN=A91B23B3/serialNumber=5C368439CBC5F5A45715D6476BEAA6686D0951B1 Certificate serial: 0AB4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft Manifest number: 0A8B Signing time: Sun 20 Sep 2026 19:32:17 +0000 Manifest this update: Sun 20 Sep 2026 19:32:16 +0000 Manifest next update: Sun 27 Sep 2026 19:32:16 +0000 Files and hashes: 1: XDaEOcvF9aRXFdZHa-qmaG0JUbE.crl (hash: SHJNsC8ThdaaUPl39Qy914hcjULsQ3l3kUWLVdwVin8=) 2: 2109DFF2EFBB11EC95A1FD0DC4F9AE02.roa (hash: 72DcOTbzZF7+TCywcpXepZonikbAwf9INnwgkXqBzAU=) 3: 3818D9A09A9011EFB14F1729C4F9AE02.roa (hash: WPLajparplJU8xXoLqj3sJQqQv2qTK7SmIP3Bri0gcA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.crl rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 19:32:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2740 (0xab4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B23B3, serialNumber=5C368439CBC5F5A45715D6476BEAA6686D0951B1 Validity Not Before: Sep 20 19:32:16 2026 GMT Not After : Sep 27 19:32:16 2026 GMT Subject: CN=6ab034c1-8a43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:76:d1:e4:53:91:9c:da:9f:49:ed:09:c4:02: 4e:84:ea:69:1a:a0:22:36:a5:0e:bc:91:9d:e0:a3: d4:86:3b:b3:71:2e:d2:b3:53:94:4b:b7:ff:ef:b9: 96:ed:01:90:e3:48:c6:2d:07:7c:fd:24:a3:18:8b: 34:72:93:76:11:e2:df:d4:f6:91:4a:55:9a:d5:18: b5:cc:23:72:fb:c7:7b:f6:f4:bc:5d:e5:79:e9:06: 44:6d:bd:0a:30:9d:24:45:e8:c7:39:2a:56:dd:31: 08:6c:28:d1:e3:4d:c3:a9:9e:f0:12:f9:84:f9:5c: 99:1c:9a:fe:f8:34:ed:e2:8c:de:d9:78:fd:82:8e: 17:3b:89:16:14:11:ff:f5:39:df:56:e5:05:c6:5c: ad:fe:b5:23:d7:97:3a:e8:8c:0e:c6:2c:67:a3:79: d3:56:b5:e8:88:c2:85:03:8c:3b:1a:0f:37:b2:7c: b0:b2:ef:1b:f8:ce:fb:7c:8f:b6:41:12:f5:1b:f0: 45:41:45:07:6d:23:b2:6b:b3:e3:a1:7b:3e:52:1a: 93:6e:fa:65:16:62:85:46:cb:df:9b:a4:8a:44:53: 7f:14:79:e2:c0:da:d6:c9:f3:c5:76:48:fc:61:30: 98:c0:db:71:cf:ab:b4:1f:cc:a4:dc:a5:fa:19:4a: 6a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C6:EB:F2:B7:DC:AF:85:2E:72:95:E0:CA:73:8E:F6:15:79:CE:7B X509v3 Authority Key Identifier: keyid:5C:36:84:39:CB:C5:F5:A4:57:15:D6:47:6B:EA:A6:68:6D:09:51:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:03:10:2e:a9:9f:cd:4e:b7:08:fa:66:b5:49:d5:c4:69:90: 9f:1a:81:e3:7f:6c:68:1f:ab:09:7d:36:de:56:72:e0:4c:cf: 95:38:6d:55:a6:a2:61:a4:eb:7b:d4:34:b5:ae:2c:a7:0a:69: 93:6c:7c:3a:04:8a:68:40:2a:52:e2:53:b0:c3:4d:31:e8:2f: db:73:d7:26:ff:e5:8b:88:6d:17:fa:d2:18:5a:25:43:3c:cc: 30:9a:d6:08:ec:45:39:74:af:cf:19:47:73:96:1e:8b:90:1b: 87:53:d0:ed:ee:a4:18:5a:cf:53:f4:f5:c9:da:38:d4:18:1a: d0:ac:4d:79:db:f6:88:d6:6d:26:c9:57:23:37:20:8d:0a:14: 43:55:4a:08:8e:3f:6f:63:3a:e8:ad:37:7e:cb:6a:70:cc:81: a2:19:65:7d:1b:73:0f:b9:c1:62:42:b8:3b:91:59:8b:4d:34: 93:ee:41:23:22:51:1a:cc:ad:90:04:35:f2:f9:60:0e:8b:74: 5e:77:71:3d:c1:a1:77:f0:5a:8e:0b:7a:94:01:f6:ab:df:ef: 4a:88:75:58:d9:ed:f3:18:53:8f:c5:0a:d2:4a:27:d2:5f:3e: 9d:9a:09:ed:ee:a2:2d:ad:87:a7:49:44:33:0c:9c:27:03:a9: 92:aa:65:ca -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCrQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjIzQjMxMTAvBgNVBAUTKDVDMzY4NDM5Q0JDNUY1QTQ1NzE1RDY0NzZCRUFBNjY4 NkQwOTUxQjEwHhcNMjYwOTIwMTkzMjE2WhcNMjYwOTI3MTkzMjE2WjAYMRYwFAYD VQQDEw02YWIwMzRjMS04YTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlnbR5FORnNqfSe0JxAJOhOppGqAiNqUOvJGd4KPUhjuzcS7Ss1OUS7f/77mW 7QGQ40jGLQd8/SSjGIs0cpN2EeLf1PaRSlWa1Ri1zCNy+8d79vS8XeV56QZEbb0K MJ0kRejHOSpW3TEIbCjR403DqZ7wEvmE+VyZHJr++DTt4oze2Xj9go4XO4kWFBH/ 9TnfVuUFxlyt/rUj15c66IwOxixno3nTVrXoiMKFA4w7Gg83snywsu8b+M77fI+2 QRL1G/BFQUUHbSOya7PjoXs+UhqTbvplFmKFRsvfm6SKRFN/FHniwNrWyfPFdkj8 YTCYwNtxz6u0H8yk3KX6GUpqyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIfG6/K3 3K+FLnKV4MpzjvYVec57MB8GA1UdIwQYMBaAFFw2hDnLxfWkVxXWR2vqpmhtCVGx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjNCMy9FNjQ2NUExMDhF OTgxMUVBQUI1OEJEM0FDNEY5QUUwMi9YRGFFT2N2RjlhUlhGZFpIYS1xbWFHMEpV YkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hEYUVPY3ZGOWFSWEZkWkhhLXFtYUcwSlViRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjNCMy9FNjQ2NUExMDhFOTgxMUVBQUI1OEJEM0FDNEY5QUUwMi9YRGFFT2N2Rjlh UlhGZFpIYS1xbWFHMEpVYkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArQMQLqmfzU63CPpmtUnVxGmQnxqB439saB+rCX023lZy4EzPlThtVaaiYaTr e9Q0ta4spwppk2x8OgSKaEAqUuJTsMNNMegv23PXJv/li4htF/rSGFolQzzMMJrW COxFOXSvzxlHc5Yei5Abh1PQ7e6kGFrPU/T1ydo41Bga0KxNedv2iNZtJslXIzcg jQoUQ1VKCI4/b2M66K03fstqcMyBohllfRtzD7nBYkK4O5FZi000k+5BIyJRGsyt kAQ18vlgDot0XndxPcGhd/Bajgt6lAH2q9/vSoh1WNnt8xhTj8UK0kon0l8+nZoJ 7e6iLa2Hp0lEMwycJwOpkqplyg== -----END CERTIFICATE-----Generated at Mon Sep 21 20:13:33 2026 by rpki-client