$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft File: xE8qyrKneZlDFaqTsyPam0dce5o.mft (raw, json) Hash identifier: Tij+9bpcZQhz0QaCVjE36Q4lyB2hOfDFXZ28hvgEGPQ= Subject key identifier: 8B:B2:C1:DD:ED:E4:89:CE:11:39:46:DB:83:EC:C3:50:5F:0B:97:19 Authority key identifier: C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A Certificate issuer: /CN=A91BDCF1/serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A Certificate serial: 04F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft Manifest number: 04AB Signing time: Sun 20 Sep 2026 23:54:30 +0000 Manifest this update: Sun 20 Sep 2026 23:54:29 +0000 Manifest next update: Sun 27 Sep 2026 23:54:29 +0000 Files and hashes: 1: xE8qyrKneZlDFaqTsyPam0dce5o.crl (hash: m/7kvzzK4VfsKZY5O0juvordpbOMKXZlt2mQQ9Zg27s=) 2: 97F41C10818811F0AE59F81AC4F9AE02.roa (hash: ZlA781tNXPtHDv8gbQ6DMbr27sqCTQUDYyUqps9Yuss=) 3: 25985D28EE1411EFB4908431C4F9AE02.roa (hash: 4xc2eHMBANiDLGUopOzPmz/t979NlwB4OQ24UrePrZk=) 4: 4643A5E4703011EFA1A7CB20C4F9AE02.roa (hash: CNCgjqoVzyqxh93n0ZBsBcg25yxnaYEUJ+jXTOgpvUo=) 5: E2ADA1E4AE8311F196A6E2687011F970.roa (hash: pV7LACnAOovbk4kGz4yeqcGr1OmaV64Doq2AzSoU9ng=) 6: 0735D9BEEC5611F09B1B681B4A6F56BC.roa (hash: 9O8lYARfguAM8wZyrMjSX3M2SixgKtVusIr2gjU+hSU=) 7: 5C153EA0EC5811F0941546AF4A6F56BC.roa (hash: SESRFgYcB//TECdDuj/cs+vfm+TSag2D6w9sVIXdLb0=) 8: 977BACDA818811F0AE59F81AC4F9AE02.roa (hash: dEkGctGFRuV+92+6vy6IawdT4cLJk4p5FamFSDgRr5E=) 9: 366FD216EC5611F0B67F861C4A6F56BC.roa (hash: 8hEcxmIABfPcKgGp7REoiZjUChwO5uqaU2sng+eHPto=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 23:54:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1267 (0x4f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDCF1, serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A Validity Not Before: Sep 20 23:54:29 2026 GMT Not After : Sep 27 23:54:29 2026 GMT Subject: CN=6ab07236-f016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:55:6c:25:36:25:c6:91:c1:3a:2a:3b:97:83: 74:55:e9:79:37:5f:9f:ce:72:7d:1a:16:f3:b9:e0: ea:f1:ef:76:34:6e:ea:8e:0b:b5:41:de:1d:2a:5e: 43:4d:2f:4d:c5:9f:46:a5:eb:d6:48:4d:e3:f7:c7: 86:00:20:76:71:43:1f:c3:6e:b0:c5:21:dc:e5:7a: b3:6f:30:19:1e:7f:4b:54:93:45:e7:83:b3:4c:e7: 61:3a:1c:c7:38:54:d6:fd:2a:58:b0:b6:41:c9:bc: 88:35:90:f2:c7:d0:28:c6:41:4c:82:18:f2:c1:eb: 0c:7c:3d:65:f4:70:12:b0:ce:fe:5f:be:34:c7:3d: 14:35:71:3f:12:d9:4e:cf:f7:e5:2c:b0:a6:5d:ab: c9:31:1b:d2:9e:85:bf:c8:48:19:b2:41:58:7d:c8: 02:32:a3:71:b1:8f:ed:84:8e:b2:70:83:7c:05:64: c3:a9:91:8e:18:a5:1e:c6:60:51:0a:37:41:f9:bb: 56:7d:22:f6:4f:be:43:cd:1b:58:0c:8b:ff:66:63: 6e:20:c3:9b:47:3c:4c:a0:3a:2c:e9:a7:be:80:98: 2a:2c:7e:17:4d:e2:95:2f:04:b4:c1:35:05:f9:ee: 84:ff:ad:d1:2a:01:f3:90:b2:de:5d:ad:47:80:02: 10:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:B2:C1:DD:ED:E4:89:CE:11:39:46:DB:83:EC:C3:50:5F:0B:97:19 X509v3 Authority Key Identifier: keyid:C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:65:e8:ce:3b:e6:80:ea:3a:a8:54:59:c6:99:d7:25:56:eb: d2:3d:b3:37:11:a1:77:46:46:86:af:b1:dd:9b:b6:55:51:2a: c3:31:2b:32:05:b0:a6:f7:c7:0c:b6:25:9d:5b:6b:40:07:fa: 19:6c:61:8e:00:c0:3e:77:cf:2c:3c:9f:3f:0e:a4:a5:3b:ca: cc:73:5b:83:10:e6:ef:5d:7b:4f:d8:36:ee:9c:99:23:2a:eb: ee:68:5f:9d:82:d0:80:b0:40:d0:b2:82:73:1a:4d:75:0d:24: 11:a6:5f:d6:49:f7:41:8e:bc:a4:d2:eb:ab:e2:e4:59:b3:4a: c4:92:3a:de:58:43:32:f2:d2:40:d0:f4:18:32:df:4f:c9:14: 46:0c:2d:5b:9d:55:9e:c3:1d:fc:75:6a:7e:1e:50:14:6e:f9: 82:de:64:fa:68:20:0c:38:78:1e:0c:9c:e3:69:b4:b5:da:4a: 51:f6:7f:07:58:ab:46:84:31:62:b8:8a:be:22:a6:16:05:95: 73:41:37:8f:27:a7:bf:6a:ae:34:24:9d:ff:1f:45:6f:1c:59: 93:37:07:ef:8c:ad:b2:b2:bb:9e:2e:1f:2d:55:bd:5d:ba:df: 4a:0f:98:82:88:53:48:59:f6:d3:29:13:04:db:a8:25:89:8f: 96:0c:0d:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRDRjExMTAvBgNVBAUTKEM0NEYyQUNBQjJBNzc5OTk0MzE1QUE5M0IzMjNEQTlC NDc1QzdCOUEwHhcNMjYwOTIwMjM1NDI5WhcNMjYwOTI3MjM1NDI5WjAYMRYwFAYD VQQDEw02YWIwNzIzNi1mMDE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFVsJTYlxpHBOio7l4N0Vel5N1+fznJ9GhbzueDq8e92NG7qjgu1Qd4dKl5D TS9NxZ9GpevWSE3j98eGACB2cUMfw26wxSHc5XqzbzAZHn9LVJNF54OzTOdhOhzH OFTW/SpYsLZBybyINZDyx9AoxkFMghjywesMfD1l9HASsM7+X740xz0UNXE/EtlO z/flLLCmXavJMRvSnoW/yEgZskFYfcgCMqNxsY/thI6ycIN8BWTDqZGOGKUexmBR CjdB+btWfSL2T75DzRtYDIv/ZmNuIMObRzxMoDos6ae+gJgqLH4XTeKVLwS0wTUF +e6E/63RKgHzkLLeXa1HgAIQcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIuywd3t 5InOETlG24Psw1BfC5cZMB8GA1UdIwQYMBaAFMRPKsqyp3mZQxWqk7Mj2ptHXHua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRENGMS9FQjU5MTEyMkE4 M0MxMUVDQTNBNEYzMjVDNEY5QUUwMi94RThxeXJLbmVabERGYXFUc3lQYW0wZGNl NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hFOHF5cktuZVpsREZhcVRzeVBhbTBkY2U1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RENGMS9FQjU5MTEyMkE4M0MxMUVDQTNBNEYzMjVDNEY5QUUwMi94RThxeXJLbmVa bERGYXFUc3lQYW0wZGNlNW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlGXozjvmgOo6qFRZxpnXJVbr0j2zNxGhd0ZGhq+x3Zu2VVEqwzErMgWwpvfH DLYlnVtrQAf6GWxhjgDAPnfPLDyfPw6kpTvKzHNbgxDm7117T9g27pyZIyrr7mhf nYLQgLBA0LKCcxpNdQ0kEaZf1kn3QY68pNLrq+LkWbNKxJI63lhDMvLSQND0GDLf T8kURgwtW51VnsMd/HVqfh5QFG75gt5k+mggDDh4Hgyc42m0tdpKUfZ/B1irRoQx YriKviKmFgWVc0E3jyenv2quNCSd/x9FbxxZkzcH74ytsrK7ni4fLVW9XbrfSg+Y gohTSFn20ykTBNuoJYmPlgwNUg== -----END CERTIFICATE-----Generated at Mon Sep 21 17:57:38 2026 by rpki-client