$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.mft File: xIoOQPt_45dbEsI-AwrFTFIFcWM.mft (raw, json) Hash identifier: bIlRoL8bJ5iomk4bx+ydDMn+LSAuEocklRpym+x9Onk= Subject key identifier: 81:0A:43:E9:38:3D:0D:39:EF:A1:9B:E8:F3:CC:D0:64:B5:FD:F1:4B Authority key identifier: C4:8A:0E:40:FB:7F:E3:97:5B:12:C2:3E:03:0A:C5:4C:52:05:71:63 Certificate issuer: /CN=A91D28BC/serialNumber=C48A0E40FB7FE3975B12C23E030AC54C52057163 Certificate serial: 0658 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIoOQPt_45dbEsI-AwrFTFIFcWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.mft Manifest number: 0651 Signing time: Thu 24 Sep 2026 22:32:09 +0000 Manifest this update: Thu 24 Sep 2026 22:32:09 +0000 Manifest next update: Thu 01 Oct 2026 22:32:09 +0000 Files and hashes: 1: xIoOQPt_45dbEsI-AwrFTFIFcWM.crl (hash: geBBB+x+GX11DDY3gcrYP3YOjIvD8cXD/dre2lpionM=) 2: 2B07FA82EADC11EBBE430B5EC4F9AE02.roa (hash: bBojOiS31o6PX2SPb7aw0i/v7gUX2MMQIPUxqEZpkrw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.crl rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIoOQPt_45dbEsI-AwrFTFIFcWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 22:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1624 (0x658) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D28BC, serialNumber=C48A0E40FB7FE3975B12C23E030AC54C52057163 Validity Not Before: Sep 24 22:32:09 2026 GMT Not After : Oct 1 22:32:09 2026 GMT Subject: CN=6ab5a4e9-96f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:da:b2:f8:32:08:27:bb:e1:67:78:1f:38:cc: 45:4c:c1:97:82:ca:b1:8d:1a:01:e9:38:52:aa:42: d4:c0:c2:5c:2f:b4:a2:92:dd:29:3b:8f:02:62:1b: d0:f6:16:1c:3e:f9:6f:ab:4f:b4:1f:15:ec:64:ab: fa:8f:e8:f3:8c:80:05:09:06:00:58:55:cf:0a:6f: 6d:3a:c1:9b:22:bd:48:5c:00:98:f6:95:73:a7:77: 6c:c4:78:89:7f:0d:d7:6b:4c:46:1c:b0:b0:be:1f: 0b:89:36:b3:87:02:e5:bf:c4:86:84:c7:5c:ee:df: d6:44:1a:2f:85:78:59:3d:69:99:14:3c:ab:1b:ed: a2:5b:ee:20:7c:53:35:09:73:71:10:e2:f3:fe:01: 39:cc:fb:af:7e:1f:c6:9a:a1:91:e6:3e:15:21:97: 46:d2:dc:c1:04:2a:34:8e:ca:89:1b:cf:f7:02:45: b3:11:42:7a:eb:48:5d:a8:8c:6f:d2:da:c3:b6:39: 18:9f:27:e8:b8:5b:86:6f:9e:61:e7:36:c8:0b:3f: fc:26:c6:10:5a:b8:63:b5:2b:38:a1:ea:af:49:f1: 80:f4:d9:52:44:08:9c:7f:6e:9b:74:99:4c:2e:0c: af:a6:93:e6:e7:6a:aa:8e:ae:67:ff:5e:6e:1b:c5: 36:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:0A:43:E9:38:3D:0D:39:EF:A1:9B:E8:F3:CC:D0:64:B5:FD:F1:4B X509v3 Authority Key Identifier: keyid:C4:8A:0E:40:FB:7F:E3:97:5B:12:C2:3E:03:0A:C5:4C:52:05:71:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIoOQPt_45dbEsI-AwrFTFIFcWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:3e:4a:00:ae:c6:64:f7:b8:4e:88:ab:e0:b8:d7:1a:bb:1b: 71:9a:12:e0:f0:89:3a:0c:44:f3:9d:5e:0c:b5:c4:23:af:94: 21:2f:8b:0a:97:2d:d0:e4:7f:1d:50:a9:03:70:a8:7c:ce:c6: af:36:f2:06:e9:58:27:ac:d7:90:a6:de:ff:1b:f8:c7:5c:62: 11:93:48:03:c2:03:94:70:a2:73:db:39:47:b0:68:d9:b0:3c: 8c:83:33:87:22:2d:dd:53:c3:b6:8b:b4:89:cc:fd:d4:68:9d: 4b:3d:04:96:a0:ad:96:ab:a7:97:12:40:08:d4:9e:ef:e6:e7: 60:f1:99:82:61:66:f8:4c:8c:f8:51:99:49:40:77:48:c7:a2: 27:92:9c:05:eb:5c:bd:12:0e:f9:02:9c:c6:c0:06:2b:41:d3: 0e:fd:61:0d:03:ba:2b:fb:68:be:df:f0:ec:23:f1:4e:c9:ae: 98:db:97:c7:53:4c:45:5f:c2:64:d4:1f:45:17:83:19:d6:68: 9d:e1:81:c2:45:2a:77:32:de:5a:a9:26:8a:d8:cf:a2:20:30: 41:4e:59:fb:a7:8b:91:06:ae:0c:08:2e:11:fc:34:f9:c6:40: 6f:e9:74:47:e1:0d:93:56:86:71:a9:e1:7e:32:cf:a4:c3:9c: 6c:01:62:4e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI4QkMxMTAvBgNVBAUTKEM0OEEwRTQwRkI3RkUzOTc1QjEyQzIzRTAzMEFDNTRD NTIwNTcxNjMwHhcNMjYwOTI0MjIzMjA5WhcNMjYxMDAxMjIzMjA5WjAYMRYwFAYD VQQDEw02YWI1YTRlOS05NmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwtqy+DIIJ7vhZ3gfOMxFTMGXgsqxjRoB6ThSqkLUwMJcL7Sikt0pO48CYhvQ 9hYcPvlvq0+0HxXsZKv6j+jzjIAFCQYAWFXPCm9tOsGbIr1IXACY9pVzp3dsxHiJ fw3Xa0xGHLCwvh8LiTazhwLlv8SGhMdc7t/WRBovhXhZPWmZFDyrG+2iW+4gfFM1 CXNxEOLz/gE5zPuvfh/GmqGR5j4VIZdG0tzBBCo0jsqJG8/3AkWzEUJ660hdqIxv 0trDtjkYnyfouFuGb55h5zbICz/8JsYQWrhjtSs4oeqvSfGA9NlSRAicf26bdJlM LgyvppPm52qqjq5n/15uG8U26QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIEKQ+k4 PQ0576Gb6PPM0GS1/fFLMB8GA1UdIwQYMBaAFMSKDkD7f+OXWxLCPgMKxUxSBXFj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjhCQy85MjA5MjM5MEVB RDgxMUVCQkQyQ0M3NThDNEY5QUUwMi94SW9PUVB0XzQ1ZGJFc0ktQXdyRlRGSUZj V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hJb09RUHRfNDVkYkVzSS1Bd3JGVEZJRmNXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjhCQy85MjA5MjM5MEVBRDgxMUVCQkQyQ0M3NThDNEY5QUUwMi94SW9PUVB0XzQ1 ZGJFc0ktQXdyRlRGSUZjV00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfz5KAK7GZPe4Toir4LjXGrsbcZoS4PCJOgxE851eDLXEI6+UIS+LCpct0OR/ HVCpA3CofM7GrzbyBulYJ6zXkKbe/xv4x1xiEZNIA8IDlHCic9s5R7Bo2bA8jIMz hyIt3VPDtou0icz91GidSz0ElqCtlqunlxJACNSe7+bnYPGZgmFm+EyM+FGZSUB3 SMeiJ5KcBetcvRIO+QKcxsAGK0HTDv1hDQO6K/tovt/w7CPxTsmumNuXx1NMRV/C ZNQfRReDGdZoneGBwkUqdzLeWqkmitjPoiAwQU5Z+6eLkQauDAguEfw0+cZAb+l0 R+ENk1aGcanhfjLPpMOcbAFiTg== -----END CERTIFICATE-----Generated at Sat Sep 26 23:22:48 2026 by rpki-client