$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft File: xzON8bdowFB0za7Q_bGkwUrfuLU.mft (raw, json) Hash identifier: S5qMOORlcR/oVIc5q3ev/z+0YCnK3fHrejnrpiYCpiM= Subject key identifier: A4:F3:0C:A7:F3:AE:9F:BC:FD:4B:C3:1D:49:E0:41:55:8F:11:5D:98 Authority key identifier: C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5 Certificate issuer: /CN=A91C167F/serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5 Certificate serial: 0232 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft Manifest number: 0213 Signing time: Wed 23 Sep 2026 03:13:51 +0000 Manifest this update: Wed 23 Sep 2026 03:13:51 +0000 Manifest next update: Wed 30 Sep 2026 03:13:51 +0000 Files and hashes: 1: xzON8bdowFB0za7Q_bGkwUrfuLU.crl (hash: l8eaENlK97TXSKO0kPDiaIDP2WiSst7/4tfpVI7wDXw=) 2: A2516E42DE4511EF8C37E320C4F9AE02.roa (hash: xo/EJ3CaHdIPdWdGQ1WzSAADuENiwShLJFxclFWUKsM=) 3: 7DA50F9C3E0B11F09779DF13C4F9AE02.roa (hash: A2+Rc3xoTrncaTR95Sq9MBAmQnYMit+OOLZAoM52Nuk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.crl rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 03:13:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 562 (0x232) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C167F, serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5 Validity Not Before: Sep 23 03:13:51 2026 GMT Not After : Sep 30 03:13:51 2026 GMT Subject: CN=6ab343ef-c1ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b0:c6:57:22:4b:ee:f2:76:ef:2d:ef:55:5f: 07:ca:a2:d0:8c:d0:91:0e:34:83:3a:ca:6a:52:51: 12:22:33:e2:b7:a0:06:89:52:14:61:13:11:d6:8c: 87:02:2b:59:a8:af:33:95:3b:cc:38:e1:72:52:9d: b4:c1:a8:99:14:f2:2a:89:8e:23:8f:6e:ab:5d:93: 58:c1:11:e2:9a:6d:37:ab:f0:ef:4f:02:c1:74:95: 4f:7c:27:73:9c:05:5d:d0:de:4c:73:3e:90:ea:2c: af:9f:4a:3d:0b:9a:ae:a5:b3:88:73:20:48:3b:07: 7f:16:e4:be:86:9e:18:38:e0:7e:54:e4:73:ad:3f: d4:01:8f:df:8a:c4:5c:3e:a6:7d:ef:b8:21:c7:02: c5:ed:b9:e6:d7:bf:28:e2:29:60:a7:14:34:41:15: 92:b5:38:bf:35:0b:8a:46:9f:df:10:67:e1:3b:41: fd:e1:4a:20:6f:de:08:8b:31:97:91:8a:5d:08:ab: fa:dc:a4:55:d0:11:3a:05:a3:85:b0:5f:9e:4a:81: 0c:27:bf:f4:ed:ae:27:3d:7c:f5:33:a2:2b:fa:cb: cd:b8:2d:aa:19:e8:43:3c:62:06:2b:bd:dc:32:3e: aa:1e:b7:bf:8c:70:47:57:d1:e7:e9:ba:a2:12:7f: 6d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:F3:0C:A7:F3:AE:9F:BC:FD:4B:C3:1D:49:E0:41:55:8F:11:5D:98 X509v3 Authority Key Identifier: keyid:C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:89:dc:29:8b:4f:ad:6e:f1:cb:ec:4d:9e:06:66:f5:18:ab: aa:53:23:3c:c3:5f:ce:d9:76:31:98:6b:5d:d0:d3:98:3a:c1: bc:e9:a0:45:c3:a8:e7:23:01:8e:aa:c6:85:5a:a1:54:97:29: bc:7b:33:b1:ad:2b:a8:fa:6c:b6:98:d8:9b:eb:bc:4a:27:b9: 48:5b:5b:20:7c:94:bd:89:99:8b:23:74:c5:34:36:97:4d:60: a7:0e:ea:ca:49:db:13:cb:8f:d7:c4:3d:af:b1:a3:87:a4:b1: 21:c3:de:7c:c9:7a:0d:6c:48:43:d9:7a:c5:59:c7:ec:89:06: 1b:e9:02:a6:b7:87:5f:47:ce:8d:4b:ea:c0:b7:d8:4f:2d:3c: eb:f6:2b:67:d3:c7:d2:90:40:d7:31:ea:ce:14:22:5e:f4:68: e3:da:94:5c:95:8f:53:4b:6b:5e:10:07:72:20:78:02:f4:8d: 6e:1f:cf:c5:c0:5f:4a:f4:b9:3e:a0:30:61:97:ef:c9:59:16: 5d:a6:c0:c8:c7:8f:d7:f2:6d:2f:78:9e:64:40:59:46:35:7d: 31:87:98:19:42:54:29:e3:e5:13:c8:40:c4:40:86:87:aa:b0: c2:86:9b:72:ba:35:9f:88:20:23:48:54:0f:4c:c7:a2:b9:ce: 15:bb:7d:df -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE2N0YxMTAvBgNVBAUTKEM3MzM4REYxQjc2OEMwNTA3NENEQUVEMEZEQjFBNEMx NEFERkI4QjUwHhcNMjYwOTIzMDMxMzUxWhcNMjYwOTMwMDMxMzUxWjAYMRYwFAYD VQQDEw02YWIzNDNlZi1jMWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz7DGVyJL7vJ27y3vVV8HyqLQjNCRDjSDOspqUlESIjPit6AGiVIUYRMR1oyH AitZqK8zlTvMOOFyUp20waiZFPIqiY4jj26rXZNYwRHimm03q/DvTwLBdJVPfCdz nAVd0N5Mcz6Q6iyvn0o9C5qupbOIcyBIOwd/FuS+hp4YOOB+VORzrT/UAY/fisRc PqZ977ghxwLF7bnm178o4ilgpxQ0QRWStTi/NQuKRp/fEGfhO0H94Uogb94IizGX kYpdCKv63KRV0BE6BaOFsF+eSoEMJ7/07a4nPXz1M6Ir+svNuC2qGehDPGIGK73c Mj6qHre/jHBHV9Hn6bqiEn9towIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKTzDKfz rp+8/UvDHUngQVWPEV2YMB8GA1UdIwQYMBaAFMczjfG3aMBQdM2u0P2xpMFK37i1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTY3Ri80QUFCN0JDQUM0 N0QxMUVFOUZDN0M4MEZDNEY5QUUwMi94ek9OOGJkb3dGQjB6YTdRX2JHa3dVcmZ1 TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3h6T044YmRvd0ZCMHphN1FfYkdrd1VyZnVMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTY3Ri80QUFCN0JDQUM0N0QxMUVFOUZDN0M4MEZDNEY5QUUwMi94ek9OOGJkb3dG QjB6YTdRX2JHa3dVcmZ1TFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ4ncKYtPrW7xy+xNngZm9RirqlMjPMNfztl2MZhrXdDTmDrBvOmgRcOo5yMB jqrGhVqhVJcpvHszsa0rqPpstpjYm+u8Sie5SFtbIHyUvYmZiyN0xTQ2l01gpw7q yknbE8uP18Q9r7Gjh6SxIcPefMl6DWxIQ9l6xVnH7IkGG+kCpreHX0fOjUvqwLfY Ty086/YrZ9PH0pBA1zHqzhQiXvRo49qUXJWPU0trXhAHciB4AvSNbh/PxcBfSvS5 PqAwYZfvyVkWXabAyMeP1/JtL3ieZEBZRjV9MYeYGUJUKePlE8hAxECGh6qwwoab cro1n4ggI0hUD0zHornOFbt93w== -----END CERTIFICATE-----Generated at Fri Sep 25 04:26:27 2026 by rpki-client