$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft File: Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft (raw, json) Hash identifier: l12Qzv5vELaPqMw/+e4Bb74lgGOCYx2dRSwHeXEFKb8= Subject key identifier: 6B:07:BF:74:8F:EC:05:D5:57:B5:FD:41:25:D6:AC:3E:8A:7B:E5:69 Authority key identifier: 5D:DF:DD:38:31:56:FA:5B:65:34:11:2E:9C:8E:15:3B:B2:00:57:C6 Certificate issuer: /CN=A91CB6E8/serialNumber=5DDFDD383156FA5B6534112E9C8E153BB20057C6 Certificate serial: BA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xd_dODFW-ltlNBEunI4VO7IAV8Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft Manifest number: B4 Signing time: Fri 25 Sep 2026 07:09:05 +0000 Manifest this update: Fri 25 Sep 2026 07:09:05 +0000 Manifest next update: Fri 02 Oct 2026 07:09:05 +0000 Files and hashes: 1: Xd_dODFW-ltlNBEunI4VO7IAV8Y.crl (hash: KReNywf6H6fr6D4M/xZXQUbQg7+sh1SmWh1BMgCjx5M=) 2: 1104D6A2AF1611F0AF70E679C4F9AE02.roa (hash: /VVN1pVbvBgJGM41ZpQK+E66Yb+yIlM6xDFzrudcVdc=) 3: 65FAD636AF1411F0BE4BF94FC4F9AE02.roa (hash: 9hr6Mrcekj4wBtLXcM+jj6TwfopvR4qZFirKjaGVgSI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.crl rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xd_dODFW-ltlNBEunI4VO7IAV8Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 07:09:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 186 (0xba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB6E8, serialNumber=5DDFDD383156FA5B6534112E9C8E153BB20057C6 Validity Not Before: Sep 25 07:09:05 2026 GMT Not After : Oct 2 07:09:05 2026 GMT Subject: CN=6ab61e11-68d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:38:1c:e6:16:1e:77:4f:30:36:18:30:95:21: d3:40:27:49:55:ad:ed:54:57:ba:de:96:07:5a:d2: 09:11:03:c1:b2:0c:0e:b9:a2:75:92:6a:e6:52:10: 1a:cc:e9:52:82:fc:d1:35:40:ee:21:ad:4f:1d:b0: 2f:27:e3:37:6b:40:b0:36:0b:2b:39:e9:a1:62:e1: 1a:18:f4:81:2e:23:0c:a0:7f:49:3f:96:ca:c8:db: 9a:65:ee:3d:f8:95:57:ee:51:9a:4d:18:a6:f6:1b: f0:5d:38:f5:17:85:f0:1a:f5:f2:1f:5c:b3:34:3b: 98:51:92:16:d4:59:ff:e5:45:60:1c:3a:04:08:0f: cb:77:dd:f3:9b:21:17:5b:79:74:83:d3:84:0b:40: 01:96:0a:c5:ce:25:01:21:52:8c:71:53:c0:27:28: e3:88:70:cc:95:8e:18:a4:0f:f2:cf:f6:22:f3:02: 73:c1:6d:66:19:04:26:0d:93:f0:ff:a5:21:83:13: f2:d8:43:dc:86:01:c1:40:b6:a3:08:ca:be:c1:ba: 7d:14:d7:36:24:d3:3d:21:36:49:77:5f:58:ad:f4: 26:fc:b9:52:11:00:83:04:52:ee:2b:98:06:19:14: c6:6a:7f:c5:56:5e:98:ee:e5:6f:2d:7b:42:36:e6: ba:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:07:BF:74:8F:EC:05:D5:57:B5:FD:41:25:D6:AC:3E:8A:7B:E5:69 X509v3 Authority Key Identifier: keyid:5D:DF:DD:38:31:56:FA:5B:65:34:11:2E:9C:8E:15:3B:B2:00:57:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xd_dODFW-ltlNBEunI4VO7IAV8Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:71:d5:13:8a:7d:87:36:04:c6:49:10:ff:84:83:97:4b:f1: 94:d3:96:38:ee:b9:06:da:00:53:a3:22:7e:15:49:bd:47:87: 93:28:7e:8b:01:f1:0b:33:0f:d6:47:aa:42:a6:bd:68:62:89: 23:64:62:0e:96:75:9a:1d:2a:7f:c7:7f:9a:b6:b3:6c:1f:5a: 1c:3b:25:11:e2:87:c5:d8:81:6f:7d:81:d3:fe:ef:02:72:1e: 4e:8e:30:f5:cd:ee:db:86:77:76:4a:d6:d1:ae:49:fa:6e:cb: 0f:10:93:cc:93:17:c3:67:fe:83:b9:c7:9a:4c:a0:04:9e:b9: 50:b4:ec:0e:2e:7f:43:bf:a9:72:fc:66:5c:ee:af:e6:81:42: d3:77:d6:4c:7a:43:88:ac:0c:99:67:20:5f:99:bc:94:3c:9b: 74:4b:2c:f9:e4:49:39:e7:95:21:49:24:7d:35:a3:09:bc:5b: 2f:28:15:ff:0a:98:b9:34:9c:be:21:eb:7d:47:07:17:83:23: d6:f3:45:86:8c:c2:ca:88:00:8d:e4:58:bd:78:4b:f4:dd:d4: 72:74:a6:df:36:02:b9:48:8e:7c:33:68:c4:97:43:b4:eb:45: 02:ff:84:12:8c:3c:85:6e:06:b4:f8:1e:21:d1:c9:a4:57:88: 2b:68:99:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I2RTgxMTAvBgNVBAUTKDVEREZERDM4MzE1NkZBNUI2NTM0MTEyRTlDOEUxNTNC QjIwMDU3QzYwHhcNMjYwOTI1MDcwOTA1WhcNMjYxMDAyMDcwOTA1WjAYMRYwFAYD VQQDEw02YWI2MWUxMS02OGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsjgc5hYed08wNhgwlSHTQCdJVa3tVFe63pYHWtIJEQPBsgwOuaJ1kmrmUhAa zOlSgvzRNUDuIa1PHbAvJ+M3a0CwNgsrOemhYuEaGPSBLiMMoH9JP5bKyNuaZe49 +JVX7lGaTRim9hvwXTj1F4XwGvXyH1yzNDuYUZIW1Fn/5UVgHDoECA/Ld93zmyEX W3l0g9OEC0ABlgrFziUBIVKMcVPAJyjjiHDMlY4YpA/yz/Yi8wJzwW1mGQQmDZPw /6UhgxPy2EPchgHBQLajCMq+wbp9FNc2JNM9ITZJd19YrfQm/LlSEQCDBFLuK5gG GRTGan/FVl6Y7uVvLXtCNua6mQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGsHv3SP 7AXVV7X9QSXWrD6Ke+VpMB8GA1UdIwQYMBaAFF3f3TgxVvpbZTQRLpyOFTuyAFfG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjZFOC9GOUIwMjg4OEFF RkUxMUYwODhCOTlDMjdDNEY5QUUwMi9YZF9kT0RGVy1sdGxOQkV1bkk0Vk83SUFW OFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hkX2RPREZXLWx0bE5CRXVuSTRWTzdJQVY4WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjZFOC9GOUIwMjg4OEFFRkUxMUYwODhCOTlDMjdDNEY5QUUwMi9YZF9kT0RGVy1s dGxOQkV1bkk0Vk83SUFWOFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOnHVE4p9hzYExkkQ/4SDl0vxlNOWOO65BtoAU6MifhVJvUeHkyh+iwHxCzMP 1keqQqa9aGKJI2RiDpZ1mh0qf8d/mrazbB9aHDslEeKHxdiBb32B0/7vAnIeTo4w 9c3u24Z3dkrW0a5J+m7LDxCTzJMXw2f+g7nHmkygBJ65ULTsDi5/Q7+pcvxmXO6v 5oFC03fWTHpDiKwMmWcgX5m8lDybdEss+eRJOeeVIUkkfTWjCbxbLygV/wqYuTSc viHrfUcHF4Mj1vNFhozCyogAjeRYvXhL9N3UcnSm3zYCuUiOfDNoxJdDtOtFAv+E Eow8hW4GtPgeIdHJpFeIK2iZMA== -----END CERTIFICATE-----Generated at Fri Sep 25 19:18:02 2026 by rpki-client