$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft File: -XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft (raw, json) Hash identifier: V5knYisavpPor4PPxhYPy1v/R+lW7qQp2Xa5scQPGl4= Subject key identifier: D6:17:9E:BD:AF:A3:86:27:93:D2:7D:12:94:49:26:46:15:5B:AD:7C Authority key identifier: F9:72:E7:5E:3D:03:E5:CE:19:01:93:0C:43:D1:6D:C4:A8:9C:47:92 Certificate issuer: /CN=A91C9484/serialNumber=F972E75E3D03E5CE1901930C43D16DC4A89C4792 Certificate serial: 35C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft Manifest number: 35A7 Signing time: Mon 28 Sep 2026 14:47:37 +0000 Manifest this update: Mon 28 Sep 2026 14:47:37 +0000 Manifest next update: Mon 05 Oct 2026 14:47:37 +0000 Files and hashes: 1: -XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl (hash: e84AZVqps84eKq4QnECwBobI8lEFNVUjb9AHDNhyWfA=) 2: FFC89DF8CECD11EEA4AA6D44C4F9AE02.roa (hash: osZQLIbEE9CPRDR3SQRnuDCeiOuIIdsDuYiVKSiLftE=) 3: 49036D2CB0D711E58B185E0FC4F9AE02.roa (hash: Enuh5vYdCazpiTDLPGcNHLroVZqxWGLRitR4CBJmyQM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 14:47:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13766 (0x35c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9484, serialNumber=F972E75E3D03E5CE1901930C43D16DC4A89C4792 Validity Not Before: Sep 28 14:47:37 2026 GMT Not After : Oct 5 14:47:37 2026 GMT Subject: CN=6aba7e09-589b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cc:ea:1e:e0:b1:c5:bb:a5:03:c7:d4:a7:d9: 58:3b:ad:a5:a8:63:2f:86:a5:00:da:54:2b:8e:1f: d7:f0:1f:49:ea:a4:46:d4:7e:07:0d:46:71:80:f9: 4a:4f:0a:81:f8:c7:9f:c2:4d:7d:01:04:8b:bc:97: 9c:2f:ac:48:90:6f:ee:ee:35:54:2e:2c:8d:0f:ea: 5c:75:7c:3f:54:ad:8b:eb:ae:71:94:64:ce:d3:b1: de:6e:60:e2:62:d2:68:04:30:a4:25:63:54:ac:35: 5d:f4:93:c2:db:a6:c0:3e:98:5b:f0:ee:df:8d:78: 5b:ea:7d:f7:a6:9d:b8:b3:01:a9:dc:83:49:76:66: bc:bf:1b:47:da:e0:53:e1:73:1d:9c:5a:e7:84:93: fd:a0:d5:4f:71:98:4b:89:7d:49:cb:25:7d:1a:b3: 6f:d7:36:aa:fc:19:c1:c3:35:83:02:18:8e:e5:29: 44:b8:2d:fe:d4:68:84:74:14:48:99:fb:6c:de:84: be:96:26:82:99:70:82:77:e3:89:dd:30:db:be:7a: 44:0e:41:15:09:0c:71:e8:8e:14:09:7d:c4:62:0d: 03:ec:33:3d:59:43:63:50:fb:76:71:a3:4f:47:d2: cf:53:11:5c:15:8c:2b:4f:e5:c7:51:c6:6b:1c:fa: 15:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:17:9E:BD:AF:A3:86:27:93:D2:7D:12:94:49:26:46:15:5B:AD:7C X509v3 Authority Key Identifier: keyid:F9:72:E7:5E:3D:03:E5:CE:19:01:93:0C:43:D1:6D:C4:A8:9C:47:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:6c:8e:8e:8b:95:82:d9:4b:09:f9:9c:d1:76:27:d6:86:ed: 32:38:00:25:69:97:df:38:d6:06:60:2d:fc:34:4e:21:cf:d4: 0f:0a:f2:64:08:b9:3d:41:14:a8:53:f0:27:8f:17:1d:aa:f6: a9:22:5a:2b:33:43:9f:91:2c:4f:89:e0:04:37:56:fd:72:7b: 23:34:0c:91:5a:64:a7:c0:57:f4:5c:d8:e0:c1:a4:ca:74:1e: e2:93:65:8e:ac:89:3a:ed:96:76:80:1d:a1:96:f3:82:46:28: 36:bd:d8:c6:ba:13:46:c0:27:dc:b7:1a:26:e7:db:98:6c:ff: ac:51:15:b9:f1:6d:5b:82:b7:d1:92:79:d5:a1:aa:02:41:51: fe:4a:d4:4e:f2:bb:08:d4:97:f8:0b:b0:b1:dc:37:eb:f1:f9: aa:0c:71:dd:77:86:23:23:0f:b4:24:95:a1:f2:86:4f:4e:8c: 81:9c:4f:b7:e2:15:09:1b:ca:88:40:bf:79:01:b2:10:7e:aa: e0:76:6c:6d:f9:24:93:c0:d8:04:a5:60:68:40:89:08:b4:b7: e8:55:70:0b:6a:de:fa:67:3d:05:92:83:b8:22:46:f5:07:f4: 0f:13:3b:6f:81:9a:e5:c9:3c:73:22:42:42:c7:e2:8f:93:9e: 26:79:5a:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk0ODQxMTAvBgNVBAUTKEY5NzJFNzVFM0QwM0U1Q0UxOTAxOTMwQzQzRDE2REM0 QTg5QzQ3OTIwHhcNMjYwOTI4MTQ0NzM3WhcNMjYxMDA1MTQ0NzM3WjAYMRYwFAYD VQQDEw02YWJhN2UwOS01ODliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuczqHuCxxbulA8fUp9lYO62lqGMvhqUA2lQrjh/X8B9J6qRG1H4HDUZxgPlK TwqB+Mefwk19AQSLvJecL6xIkG/u7jVULiyND+pcdXw/VK2L665xlGTO07HebmDi YtJoBDCkJWNUrDVd9JPC26bAPphb8O7fjXhb6n33pp24swGp3INJdma8vxtH2uBT 4XMdnFrnhJP9oNVPcZhLiX1JyyV9GrNv1zaq/BnBwzWDAhiO5SlEuC3+1GiEdBRI mfts3oS+liaCmXCCd+OJ3TDbvnpEDkEVCQxx6I4UCX3EYg0D7DM9WUNjUPt2caNP R9LPUxFcFYwrT+XHUcZrHPoVlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNYXnr2v o4Ynk9J9EpRJJkYVW618MB8GA1UdIwQYMBaAFPly5149A+XOGQGTDEPRbcSonEeS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTQ4NC82RkYwRERFMDFE OTQxMUUyOURFQ0I1RjgwOEIwMkNEMi8tWExuWGowRDVjNFpBWk1NUTlGdHhLaWNS NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YTG5YajBENWM0WkFaTU1ROUZ0eEtpY1I1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTQ4NC82RkYwRERFMDFEOTQxMUUyOURFQ0I1RjgwOEIwMkNEMi8tWExuWGowRDVj NFpBWk1NUTlGdHhLaWNSNUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZWyOjouVgtlLCfmc0XYn1obtMjgAJWmX3zjWBmAt/DROIc/UDwryZAi5PUEU qFPwJ48XHar2qSJaKzNDn5EsT4ngBDdW/XJ7IzQMkVpkp8BX9FzY4MGkynQe4pNl jqyJOu2WdoAdoZbzgkYoNr3YxroTRsAn3LcaJufbmGz/rFEVufFtW4K30ZJ51aGq AkFR/krUTvK7CNSX+Auwsdw36/H5qgxx3XeGIyMPtCSVofKGT06MgZxPt+IVCRvK iEC/eQGyEH6q4HZsbfkkk8DYBKVgaECJCLS36FVwC2re+mc9BZKDuCJG9Qf0DxM7 b4Ga5ck8cyJCQsfij5OeJnlaxw== -----END CERTIFICATE-----Generated at Mon Sep 28 21:54:57 2026 by rpki-client