$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.mft File: XU9BKuSAEP5Uh_AY8XGpxkadmsU.mft (raw, json) Hash identifier: 1t5vqtErPvnG2lHHzxbmrXMPku2y7p4s1LNVtC44v3c= Subject key identifier: 07:3B:05:CA:93:77:C9:CE:97:23:FF:10:70:B9:6F:BF:29:C1:F7:53 Authority key identifier: 5D:4F:41:2A:E4:80:10:FE:54:87:F0:18:F1:71:A9:C6:46:9D:9A:C5 Certificate issuer: /CN=A91BCA5B/serialNumber=5D4F412AE48010FE5487F018F171A9C6469D9AC5 Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XU9BKuSAEP5Uh_AY8XGpxkadmsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.mft Manifest number: A7 Signing time: Mon 21 Sep 2026 07:14:39 +0000 Manifest this update: Mon 21 Sep 2026 07:14:38 +0000 Manifest next update: Mon 28 Sep 2026 07:14:38 +0000 Files and hashes: 1: XU9BKuSAEP5Uh_AY8XGpxkadmsU.crl (hash: m9bcR91tUlGMJ474+MUXz84/Pz43Dns5inEvdkBmiLw=) 2: 40506BD64F6311F1B33586E9C4833773.roa (hash: /xujX/eflt5wRcWaBi7MbQ6JbnMkzZt1Nfl3vZK9gwA=) 3: 6273B5964F6411F1B5990A8BC5833773.roa (hash: y3V7Ac3VRTVKkf/zwxo2Yj3w4U6T8D7jfnzMbqhRIFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.crl rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XU9BKuSAEP5Uh_AY8XGpxkadmsU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:14:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCA5B, serialNumber=5D4F412AE48010FE5487F018F171A9C6469D9AC5 Validity Not Before: Sep 21 07:14:38 2026 GMT Not After : Sep 28 07:14:38 2026 GMT Subject: CN=6ab0d95f-4e91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:2b:30:9f:38:1d:a7:39:d0:53:7f:e7:c0:51: bb:bb:65:23:f8:e7:0d:81:fc:d5:39:08:89:74:b0: 6c:93:b6:b1:cf:32:39:f4:ac:af:81:b8:32:bf:93: df:54:c8:24:e6:88:f1:3f:b8:00:d3:40:1d:33:c1: 90:51:de:58:4d:e6:a5:c0:c9:98:4a:e8:33:c0:0c: b6:79:3a:0b:67:9d:c7:a2:8d:99:25:d7:42:2f:a1: fd:85:85:ea:d8:60:de:c8:81:34:50:53:ed:dc:97: 3f:5a:92:ae:4d:9b:f5:e9:c7:ef:87:66:7a:ec:e6: fb:db:e2:74:c5:0b:c6:5b:2e:81:23:89:8d:35:ff: ad:6f:6b:85:6c:9d:1b:39:5f:fe:50:4e:7b:a8:ba: c8:ba:6a:50:3c:ae:01:55:ca:00:4e:68:2f:76:19: 59:31:0b:4f:cf:dd:e4:7b:58:40:dc:37:e1:ab:a1: 86:d2:8f:14:4e:1f:1f:e3:a1:dd:31:17:d8:b4:93: f0:c7:41:46:14:a6:d0:af:ce:01:75:23:d8:21:71: a9:ef:6f:38:4b:47:4d:c2:3a:3c:8c:3a:a5:cb:47: 2f:84:82:37:1c:1a:d7:5f:af:71:4f:31:3e:b2:11: fb:f7:c0:e3:e9:a0:30:e6:c4:3b:31:5f:53:5c:e4: 33:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:3B:05:CA:93:77:C9:CE:97:23:FF:10:70:B9:6F:BF:29:C1:F7:53 X509v3 Authority Key Identifier: keyid:5D:4F:41:2A:E4:80:10:FE:54:87:F0:18:F1:71:A9:C6:46:9D:9A:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XU9BKuSAEP5Uh_AY8XGpxkadmsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:46:07:06:f4:60:ef:85:bf:48:ee:97:bd:ca:3f:37:e5:c7: 1a:d8:f7:f9:df:8f:66:f2:11:9a:62:23:98:dd:d4:9c:2b:cf: 43:32:a3:4c:c2:37:1f:70:7a:cd:ba:98:1c:2c:cb:ef:20:44: 6f:5b:c3:b1:ce:b5:ad:7a:c9:03:68:57:39:85:12:37:77:e0: 62:4f:0a:ae:90:e3:9a:a1:35:04:1a:1d:5d:5e:e1:12:83:1f: d9:56:56:d6:c0:6c:5e:94:34:52:a3:d1:f2:2c:5b:c7:d1:12: 8b:49:9e:5e:ab:73:4d:e9:0c:63:02:91:ad:77:3e:72:97:f6: 40:9a:3a:04:36:05:cd:28:ca:d8:91:b7:7f:ca:1c:69:61:c5: 34:31:f9:76:cb:12:a1:d9:bc:7c:0e:76:44:2e:2b:e4:18:e2: e6:73:5c:d1:6e:cd:1a:c5:d4:73:23:66:1a:6a:ab:50:63:29: b2:80:e2:9b:12:89:0e:e3:bc:2d:e3:4b:4a:16:6c:0b:a1:a2: 99:ac:f1:f1:32:63:62:88:69:cb:dd:82:8f:05:d1:c7:aa:f0: 9c:cf:8d:98:4c:86:d4:fb:3b:63:e9:62:3d:97:09:4b:d4:a7: d0:73:a5:94:d6:34:b8:83:42:a3:5a:84:c0:46:9b:d9:1a:9a: 28:76:e0:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkNBNUIxMTAvBgNVBAUTKDVENEY0MTJBRTQ4MDEwRkU1NDg3RjAxOEYxNzFBOUM2 NDY5RDlBQzUwHhcNMjYwOTIxMDcxNDM4WhcNMjYwOTI4MDcxNDM4WjAYMRYwFAYD VQQDEw02YWIwZDk1Zi00ZTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3CswnzgdpznQU3/nwFG7u2Uj+OcNgfzVOQiJdLBsk7axzzI59Kyvgbgyv5Pf VMgk5ojxP7gA00AdM8GQUd5YTealwMmYSugzwAy2eToLZ53Hoo2ZJddCL6H9hYXq 2GDeyIE0UFPt3Jc/WpKuTZv16cfvh2Z67Ob72+J0xQvGWy6BI4mNNf+tb2uFbJ0b OV/+UE57qLrIumpQPK4BVcoATmgvdhlZMQtPz93ke1hA3Dfhq6GG0o8UTh8f46Hd MRfYtJPwx0FGFKbQr84BdSPYIXGp7284S0dNwjo8jDqly0cvhII3HBrXX69xTzE+ shH798Dj6aAw5sQ7MV9TXOQzxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAc7BcqT d8nOlyP/EHC5b78pwfdTMB8GA1UdIwQYMBaAFF1PQSrkgBD+VIfwGPFxqcZGnZrF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0E1Qi9EMjVEODY4RUMw M0ExMUYwODhBMzQ2MkNDNEY5QUUwMi9YVTlCS3VTQUVQNVVoX0FZOFhHcHhrYWRt c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hVOUJLdVNBRVA1VWhfQVk4WEdweGthZG1zVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Q0E1Qi9EMjVEODY4RUMwM0ExMUYwODhBMzQ2MkNDNEY5QUUwMi9YVTlCS3VTQUVQ NVVoX0FZOFhHcHhrYWRtc1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATkYHBvRg74W/SO6Xvco/N+XHGtj3+d+PZvIRmmIjmN3UnCvPQzKjTMI3H3B6 zbqYHCzL7yBEb1vDsc61rXrJA2hXOYUSN3fgYk8KrpDjmqE1BBodXV7hEoMf2VZW 1sBsXpQ0UqPR8ixbx9ESi0meXqtzTekMYwKRrXc+cpf2QJo6BDYFzSjK2JG3f8oc aWHFNDH5dssSodm8fA52RC4r5Bji5nNc0W7NGsXUcyNmGmqrUGMpsoDimxKJDuO8 LeNLShZsC6Gimazx8TJjYohpy92CjwXRx6rwnM+NmEyG1Ps7Y+liPZcJS9Sn0HOl lNY0uINCo1qEwEab2RqaKHbgqA== -----END CERTIFICATE-----Generated at Tue Sep 22 03:07:07 2026 by rpki-client