$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft File: xHENSLTk8rc1vksbXJDtuI0mmyw.mft (raw, json) Hash identifier: iBPFxMpz48tmvq9Q03eL8z7fdApw4d25Kl3rpbfE3+w= Subject key identifier: F7:71:F1:48:BB:EE:65:F2:3E:83:94:B8:DD:09:3A:66:79:57:EE:EA Authority key identifier: C4:71:0D:48:B4:E4:F2:B7:35:BE:4B:1B:5C:90:ED:B8:8D:26:9B:2C Certificate issuer: /CN=A91BC2E3/serialNumber=C4710D48B4E4F2B735BE4B1B5C90EDB88D269B2C Certificate serial: 02C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHENSLTk8rc1vksbXJDtuI0mmyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft Manifest number: 02B9 Signing time: Mon 21 Sep 2026 01:23:48 +0000 Manifest this update: Mon 21 Sep 2026 01:23:47 +0000 Manifest next update: Mon 28 Sep 2026 01:23:47 +0000 Files and hashes: 1: xHENSLTk8rc1vksbXJDtuI0mmyw.crl (hash: ADbwGUz6UeIwc/BtCGSe1XUj6pDAT3ohw2IJDIwlggc=) 2: 0DC2D3EC8D7A11EDBFA7C381C4F9AE02.roa (hash: caBGpQ3sxKtg4mxskMeTrM5eCKMi3Wf+XfGL8QuMB48=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.crl rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHENSLTk8rc1vksbXJDtuI0mmyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 01:23:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 708 (0x2c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC2E3, serialNumber=C4710D48B4E4F2B735BE4B1B5C90EDB88D269B2C Validity Not Before: Sep 21 01:23:47 2026 GMT Not After : Sep 28 01:23:47 2026 GMT Subject: CN=6ab08724-4ae2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:59:38:c4:a2:c8:29:70:fd:c2:60:68:ca:2c: 99:8a:66:91:2c:3d:fc:bb:d1:66:ee:8a:cc:d1:68: 0c:70:2c:7c:2d:99:2a:cf:34:4f:44:17:02:30:a0: 77:0e:bb:be:9b:71:2f:a5:85:c2:e3:72:f1:2d:a4: 6b:1a:63:fa:a2:e8:bb:63:6a:58:23:44:cb:74:08: 85:49:22:39:82:d8:58:43:ff:80:5e:21:ec:d3:51: 28:9d:ff:0c:a6:c5:e9:88:fc:b9:22:da:1a:22:a5: c2:b5:f3:29:5d:d4:74:28:cc:32:f5:d9:38:d4:83: 30:57:ae:82:02:05:48:14:ba:50:89:05:0c:b9:c6: d6:7e:1f:cf:6d:39:67:66:de:8a:b6:5e:75:b0:5c: f1:94:11:3f:66:6c:15:56:b9:cb:e6:ba:c7:9d:4b: c2:64:1f:59:92:f5:c9:a7:e4:40:5d:5f:0b:c2:d0: 8b:f2:3d:54:e7:c7:4c:e5:5f:8d:b0:5d:d2:61:de: 1a:5c:fa:d3:30:5b:ed:99:8c:3b:01:91:d2:3b:d4: 20:be:c5:e0:70:4b:a2:94:f6:d6:89:58:7f:0c:74: e0:f3:fa:c1:04:f3:45:3d:da:eb:9a:73:c9:af:da: fb:ec:7f:9b:55:d3:9d:12:36:33:74:db:c3:75:91: d9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:71:F1:48:BB:EE:65:F2:3E:83:94:B8:DD:09:3A:66:79:57:EE:EA X509v3 Authority Key Identifier: keyid:C4:71:0D:48:B4:E4:F2:B7:35:BE:4B:1B:5C:90:ED:B8:8D:26:9B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHENSLTk8rc1vksbXJDtuI0mmyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:ce:03:26:96:5a:db:01:bd:c1:a1:c8:5d:b5:ae:9e:ae:63: 93:3b:1d:25:1c:09:73:b8:78:46:65:7f:59:1b:72:33:01:39: fa:18:cb:c4:4e:11:fb:d4:74:7b:fc:e0:75:c0:29:cb:66:a9: 78:10:5e:7b:ff:50:ec:78:79:8a:1e:17:53:cf:fa:2e:c6:1d: cb:1d:4f:c5:79:8b:9d:13:e2:d2:28:ea:6f:53:09:ed:89:35: 3b:ea:3a:0e:52:73:0c:15:43:75:68:be:9d:f6:ee:d5:a5:e7: 20:b3:cb:84:71:0f:95:fb:7a:0f:78:63:c9:79:51:5c:5d:4b: b3:78:70:08:40:58:9e:f4:33:b8:7c:2a:40:01:96:76:4e:03: da:16:46:43:00:8e:b5:d7:cb:ab:9b:5e:d9:ad:9d:59:53:c5: 22:b8:bb:d0:12:d6:77:2b:91:fb:1f:2e:79:df:b9:1c:2c:4a: a6:7b:9c:2e:47:1a:4e:58:1a:88:07:d2:bd:03:87:d5:0d:94: 64:12:f8:fb:cc:35:a1:01:76:f9:a8:ad:b6:27:49:9c:88:53: 88:32:fc:d2:61:33:cd:ca:6b:75:ff:af:d6:7e:60:d7:87:08: 63:a9:47:c9:61:9c:a8:f5:53:6b:c6:c9:7e:75:5f:0e:ac:d0: d4:54:c8:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAsQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMyRTMxMTAvBgNVBAUTKEM0NzEwRDQ4QjRFNEYyQjczNUJFNEIxQjVDOTBFREI4 OEQyNjlCMkMwHhcNMjYwOTIxMDEyMzQ3WhcNMjYwOTI4MDEyMzQ3WjAYMRYwFAYD VQQDEw02YWIwODcyNC00YWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwlk4xKLIKXD9wmBoyiyZimaRLD38u9Fm7orM0WgMcCx8LZkqzzRPRBcCMKB3 Dru+m3EvpYXC43LxLaRrGmP6oui7Y2pYI0TLdAiFSSI5gthYQ/+AXiHs01Eonf8M psXpiPy5ItoaIqXCtfMpXdR0KMwy9dk41IMwV66CAgVIFLpQiQUMucbWfh/PbTln Zt6Ktl51sFzxlBE/ZmwVVrnL5rrHnUvCZB9ZkvXJp+RAXV8LwtCL8j1U58dM5V+N sF3SYd4aXPrTMFvtmYw7AZHSO9QgvsXgcEuilPbWiVh/DHTg8/rBBPNFPdrrmnPJ r9r77H+bVdOdEjYzdNvDdZHZdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPdx8Ui7 7mXyPoOUuN0JOmZ5V+7qMB8GA1UdIwQYMBaAFMRxDUi05PK3Nb5LG1yQ7biNJpss MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzJFMy85QjRBNDg5MDg5 QTAxMUVEODM3NTkzNDZDNEY5QUUwMi94SEVOU0xUazhyYzF2a3NiWEpEdHVJMG1t eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hIRU5TTFRrOHJjMXZrc2JYSkR0dUkwbW15dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzJFMy85QjRBNDg5MDg5QTAxMUVEODM3NTkzNDZDNEY5QUUwMi94SEVOU0xUazhy YzF2a3NiWEpEdHVJMG1teXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM84DJpZa2wG9waHIXbWunq5jkzsdJRwJc7h4RmV/WRtyMwE5+hjLxE4R+9R0 e/zgdcApy2apeBBee/9Q7Hh5ih4XU8/6LsYdyx1PxXmLnRPi0ijqb1MJ7Yk1O+o6 DlJzDBVDdWi+nfbu1aXnILPLhHEPlft6D3hjyXlRXF1Ls3hwCEBYnvQzuHwqQAGW dk4D2hZGQwCOtdfLq5te2a2dWVPFIri70BLWdyuR+x8ued+5HCxKpnucLkcaTlga iAfSvQOH1Q2UZBL4+8w1oQF2+aittidJnIhTiDL80mEzzcprdf+v1n5g14cIY6lH yWGcqPVTa8bJfnVfDqzQ1FTIgw== -----END CERTIFICATE-----Generated at Tue Sep 22 04:31:04 2026 by rpki-client