$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft File: MxG_l-IbcmqcAFa75KhbH38pXzU.mft (raw, json) Hash identifier: /MvmMfynEop39fbPKa3dw8BZYNGF4lLGqX43TDpU0Nk= Subject key identifier: 19:0F:E7:0B:32:C1:D1:45:EE:EE:5D:9A:56:55:88:A8:33:0C:30:CF Authority key identifier: 33:11:BF:97:E2:1B:72:6A:9C:00:56:BB:E4:A8:5B:1F:7F:29:5F:35 Certificate issuer: /CN=A91D7454/serialNumber=3311BF97E21B726A9C0056BBE4A85B1F7F295F35 Certificate serial: 1250 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft Manifest number: 1242 Signing time: Sun 20 Sep 2026 17:04:34 +0000 Manifest this update: Sun 20 Sep 2026 17:04:33 +0000 Manifest next update: Sun 27 Sep 2026 17:04:33 +0000 Files and hashes: 1: MxG_l-IbcmqcAFa75KhbH38pXzU.crl (hash: FotxF9ZqgoxEovib65hO3Cl83FVrjxWVR2LMbM2bXLY=) 2: 51273D9A08EE11E99E30172AC4F9AE02.roa (hash: /gFPuZArkGe71y+RmxZKgGm693+bY0y50nJRlydDJi4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.crl rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 17:04:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4688 (0x1250) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7454, serialNumber=3311BF97E21B726A9C0056BBE4A85B1F7F295F35 Validity Not Before: Sep 20 17:04:33 2026 GMT Not After : Sep 27 17:04:33 2026 GMT Subject: CN=6ab01222-49cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:70:75:c0:2c:0f:74:57:f4:5c:57:bf:b4:92: 11:d7:07:20:c0:7f:9f:e9:e2:b8:bd:5c:2d:6c:e0: 07:c9:28:a8:a1:94:cf:e6:fb:3b:94:ad:f5:2b:b1: 0f:f3:d8:96:23:12:4f:6e:d5:db:d2:84:0b:52:17: cd:ed:39:2c:b9:08:64:aa:5f:ad:ab:26:e4:d6:fd: 6e:fe:7f:78:c7:68:37:21:00:33:1b:fc:77:1c:76: 7c:d0:58:35:6f:24:27:d9:34:55:aa:61:95:68:84: 3b:72:2a:e6:0e:f8:29:85:ea:06:64:48:6c:15:67: c4:be:e2:24:11:15:2a:4a:ae:ba:97:fe:26:4c:25: 95:db:7d:f2:22:a3:26:44:3e:72:76:9b:4f:21:5e: 4c:00:11:15:fc:51:d9:a2:db:6f:cc:97:9c:5b:30: 82:fb:3c:23:26:a0:37:02:1c:96:18:b0:df:bd:f0: 66:2a:d9:8c:44:12:18:6f:82:66:fa:77:9c:03:90: 6c:5f:e6:64:79:5f:d5:97:ca:b6:32:58:ac:e7:38: 4c:c9:3c:a2:30:20:03:35:6d:41:a2:29:fc:35:5f: 8d:7a:0c:70:06:83:99:32:bf:ec:2e:92:d7:3c:c3: d0:35:fa:82:6c:1f:29:76:73:97:d7:2f:0e:a5:b1: ce:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:0F:E7:0B:32:C1:D1:45:EE:EE:5D:9A:56:55:88:A8:33:0C:30:CF X509v3 Authority Key Identifier: keyid:33:11:BF:97:E2:1B:72:6A:9C:00:56:BB:E4:A8:5B:1F:7F:29:5F:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:05:93:40:a3:ab:82:af:ce:35:ca:b6:05:ec:88:a9:ec:07: 5f:86:51:f9:d4:06:9f:5a:0f:91:85:e8:f1:01:34:14:2e:38: 9d:9a:7a:15:bf:84:d7:9d:f4:0c:9c:07:2d:6f:ba:b7:1b:10: ac:b7:dc:82:72:94:e5:95:3b:f5:aa:0a:e2:52:a0:0f:4d:2e: 59:0d:07:b0:fd:7a:87:a7:10:01:40:e3:69:1c:d9:75:0f:e6: c0:fe:01:23:2c:c7:e6:0f:70:d1:88:d6:35:24:12:5e:d1:31: 6f:66:5f:65:6c:1f:96:a7:8e:2e:40:cc:fe:a8:15:9e:a3:e1: 45:fc:88:73:90:92:59:d9:56:82:9a:71:81:cb:87:cc:1a:47: 24:e6:cb:ff:df:8c:06:d5:c7:8d:7f:80:2c:f2:be:98:29:18: 2a:3e:6a:84:83:da:c8:1c:2f:4b:07:a2:4e:0c:46:a3:cf:f1: cc:5f:f1:f0:1e:28:0d:67:6c:ad:f7:75:b9:e2:2d:86:54:1d: 3b:af:5c:87:62:d4:f3:4c:4b:0f:4c:c0:1c:98:ac:b5:39:d8: 50:20:a7:45:b2:71:52:09:95:b3:a6:21:88:85:b9:ce:81:f5: fa:f6:fe:8b:94:f5:a4:34:74:da:bf:3d:f4:0e:d6:92:74:b6: f3:cd:3a:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICElAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc0NTQxMTAvBgNVBAUTKDMzMTFCRjk3RTIxQjcyNkE5QzAwNTZCQkU0QTg1QjFG N0YyOTVGMzUwHhcNMjYwOTIwMTcwNDMzWhcNMjYwOTI3MTcwNDMzWjAYMRYwFAYD VQQDEw02YWIwMTIyMi00OWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3B1wCwPdFf0XFe/tJIR1wcgwH+f6eK4vVwtbOAHySiooZTP5vs7lK31K7EP 89iWIxJPbtXb0oQLUhfN7TksuQhkql+tqybk1v1u/n94x2g3IQAzG/x3HHZ80Fg1 byQn2TRVqmGVaIQ7cirmDvgpheoGZEhsFWfEvuIkERUqSq66l/4mTCWV233yIqMm RD5ydptPIV5MABEV/FHZottvzJecWzCC+zwjJqA3AhyWGLDfvfBmKtmMRBIYb4Jm +necA5BsX+ZkeV/Vl8q2Mlis5zhMyTyiMCADNW1Boin8NV+NegxwBoOZMr/sLpLX PMPQNfqCbB8pdnOX1y8OpbHOnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBkP5wsy wdFF7u5dmlZViKgzDDDPMB8GA1UdIwQYMBaAFDMRv5fiG3JqnABWu+SoWx9/KV81 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzQ1NC83OUM2MUU3QzA4 RUIxMUU5QUY4QkNEMjNDNEY5QUUwMi9NeEdfbC1JYmNtcWNBRmE3NUtoYkgzOHBY elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL014R19sLUliY21xY0FGYTc1S2hiSDM4cFh6VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzQ1NC83OUM2MUU3QzA4RUIxMUU5QUY4QkNEMjNDNEY5QUUwMi9NeEdfbC1JYmNt cWNBRmE3NUtoYkgzOHBYelUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARQWTQKOrgq/ONcq2BeyIqewHX4ZR+dQGn1oPkYXo8QE0FC44nZp6Fb+E1530 DJwHLW+6txsQrLfcgnKU5ZU79aoK4lKgD00uWQ0HsP16h6cQAUDjaRzZdQ/mwP4B IyzH5g9w0YjWNSQSXtExb2ZfZWwflqeOLkDM/qgVnqPhRfyIc5CSWdlWgppxgcuH zBpHJObL/9+MBtXHjX+ALPK+mCkYKj5qhIPayBwvSweiTgxGo8/xzF/x8B4oDWds rfd1ueIthlQdO69ch2LU80xLD0zAHJistTnYUCCnRbJxUgmVs6YhiIW5zoH1+vb+ i5T1pDR02r899A7WknS28806Rw== -----END CERTIFICATE-----Generated at Tue Sep 22 15:16:17 2026 by rpki-client