$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D824A/4ADF33FC5B9A11EF8307F540C4F9AE02/XHIqJhQciPfNQPObN0raf7wfmx8.mft File: XHIqJhQciPfNQPObN0raf7wfmx8.mft (raw, json) Hash identifier: PQzLTS7uZgUOhuUIQ0shh2xtXZwqphzHiDZBcah5ZT8= Subject key identifier: 67:90:BE:30:72:51:D2:59:20:52:E7:57:6C:7C:0D:9D:25:36:E6:C9 Authority key identifier: 5C:72:2A:26:14:1C:88:F7:CD:40:F3:9B:37:4A:DA:7F:BC:1F:9B:1F Certificate issuer: /CN=A91D824A/serialNumber=5C722A26141C88F7CD40F39B374ADA7FBC1F9B1F Certificate serial: 01AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XHIqJhQciPfNQPObN0raf7wfmx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D824A/4ADF33FC5B9A11EF8307F540C4F9AE02/XHIqJhQciPfNQPObN0raf7wfmx8.mft Manifest number: 0195 Signing time: Fri 25 Sep 2026 04:30:00 +0000 Manifest this update: Fri 25 Sep 2026 04:29:59 +0000 Manifest next update: Fri 02 Oct 2026 04:29:59 +0000 Files and hashes: 1: XHIqJhQciPfNQPObN0raf7wfmx8.crl (hash: pf9wRT9Uz79LHu1mkKfyHohtSrpFwlPhefwq+WGtJL8=) 2: D956F03AAB0211F083CD7E11C4F9AE02.roa (hash: rrKRhHeiohcyIqeCIJv+44R0SbRHPDcNTcaSyqFnNBQ=) 3: F0FCC9ECABF411F0B9E4F837C4F9AE02.roa (hash: yjLxdwzIuckVEpvjPtBFZMr56OhqZEN8C8fQw3Xhxos=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D824A/4ADF33FC5B9A11EF8307F540C4F9AE02/XHIqJhQciPfNQPObN0raf7wfmx8.crl rsync://rpki.apnic.net/member_repository/A91D824A/4ADF33FC5B9A11EF8307F540C4F9AE02/XHIqJhQciPfNQPObN0raf7wfmx8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XHIqJhQciPfNQPObN0raf7wfmx8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 04:29:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 426 (0x1aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D824A, serialNumber=5C722A26141C88F7CD40F39B374ADA7FBC1F9B1F Validity Not Before: Sep 25 04:29:59 2026 GMT Not After : Oct 2 04:29:59 2026 GMT Subject: CN=6ab5f8c7-1c3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:58:1b:d3:a2:74:26:fe:51:f5:2b:d1:8d:8e: 1b:32:1d:c4:72:ae:14:5a:a3:de:fd:6e:03:96:79: e4:c3:ea:64:06:cf:18:9f:49:25:9c:3a:75:85:4a: 38:50:30:95:f2:58:48:29:4a:46:25:5a:f4:a6:0b: 02:c9:4d:dc:d3:25:c2:ac:45:72:fb:23:a9:49:25: cf:47:be:be:97:9b:6b:9d:d3:c6:f9:04:69:60:27: f3:5e:de:ad:56:39:22:38:f6:3c:8f:39:79:02:5a: 21:3c:3e:f7:f3:99:c2:ab:ea:9c:a3:b9:e9:80:52: 73:9f:2b:3f:5a:71:11:cd:c0:c8:cd:a6:b8:9a:36: cf:ec:de:53:d7:f6:f7:eb:51:80:a6:30:e0:d3:99: 57:dd:d3:11:d0:ec:7f:67:d2:ac:ac:14:26:60:8e: 58:35:96:c7:76:9b:03:23:26:4c:5c:e9:48:92:87: 58:ed:0e:03:7e:5b:6a:42:5b:8e:af:d0:40:29:58: e1:bd:f6:aa:60:a1:8e:84:b0:38:bb:a6:17:69:c4: e9:c9:8b:cf:de:58:f4:f0:61:1c:2a:10:ab:98:75: bd:3e:ba:44:38:c8:05:3c:0b:35:4b:48:7d:f5:1b: e2:ff:56:c6:32:93:1d:0a:78:99:2e:38:3e:c1:51: aa:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:90:BE:30:72:51:D2:59:20:52:E7:57:6C:7C:0D:9D:25:36:E6:C9 X509v3 Authority Key Identifier: keyid:5C:72:2A:26:14:1C:88:F7:CD:40:F3:9B:37:4A:DA:7F:BC:1F:9B:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D824A/4ADF33FC5B9A11EF8307F540C4F9AE02/XHIqJhQciPfNQPObN0raf7wfmx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XHIqJhQciPfNQPObN0raf7wfmx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D824A/4ADF33FC5B9A11EF8307F540C4F9AE02/XHIqJhQciPfNQPObN0raf7wfmx8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:39:98:2c:63:f1:8b:09:f3:fc:b0:3b:37:74:1b:e0:0d:9d: 1c:51:cd:b2:29:e2:1e:ab:c9:10:0d:a0:1a:f8:ee:38:25:4d: 3f:c8:a4:75:ab:68:3f:f5:c3:ff:d3:d6:78:af:60:56:62:0b: ad:df:75:a6:6e:65:d6:30:10:e1:a5:11:74:6e:09:00:b6:b9: 66:93:46:30:85:dd:cf:0b:05:05:b9:2d:07:ff:f9:cb:d4:c6: 56:ec:fe:d0:be:ff:22:e7:77:a9:a4:8a:5b:cb:1c:f4:ec:6e: 4d:60:58:32:e3:ca:43:5d:a9:ad:d9:bf:89:f0:79:c1:48:ee: df:4e:26:8c:6f:d7:0e:a5:a5:f6:ca:8b:81:45:9e:0c:65:fa: e2:1c:bc:d1:95:18:e0:08:0f:47:9b:a5:ca:a1:1e:d7:47:8e: 95:dd:f6:ba:6c:b0:2e:3f:73:eb:76:95:92:88:d0:f9:f6:39: 7d:d1:df:fb:8a:53:db:a7:f1:1a:fc:de:a8:23:db:5a:63:23: 12:fb:74:ba:09:89:54:a8:db:f2:64:e9:08:8d:3a:9d:42:f0: 34:f4:3f:bf:c5:66:78:43:56:5e:cd:a4:50:96:62:ba:c2:65: 6b:21:2f:d9:85:ea:c6:b6:61:58:e6:6e:2a:d7:8c:c8:24:27: bd:cd:18:3f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgyNEExMTAvBgNVBAUTKDVDNzIyQTI2MTQxQzg4RjdDRDQwRjM5QjM3NEFEQTdG QkMxRjlCMUYwHhcNMjYwOTI1MDQyOTU5WhcNMjYxMDAyMDQyOTU5WjAYMRYwFAYD VQQDEw02YWI1ZjhjNy0xYzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwFgb06J0Jv5R9SvRjY4bMh3Ecq4UWqPe/W4Dlnnkw+pkBs8Yn0klnDp1hUo4 UDCV8lhIKUpGJVr0pgsCyU3c0yXCrEVy+yOpSSXPR76+l5trndPG+QRpYCfzXt6t VjkiOPY8jzl5AlohPD7385nCq+qco7npgFJznys/WnERzcDIzaa4mjbP7N5T1/b3 61GApjDg05lX3dMR0Ox/Z9KsrBQmYI5YNZbHdpsDIyZMXOlIkodY7Q4DfltqQluO r9BAKVjhvfaqYKGOhLA4u6YXacTpyYvP3lj08GEcKhCrmHW9PrpEOMgFPAs1S0h9 9Rvi/1bGMpMdCniZLjg+wVGqywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGeQvjBy UdJZIFLnV2x8DZ0lNubJMB8GA1UdIwQYMBaAFFxyKiYUHIj3zUDzmzdK2n+8H5sf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODI0QS80QURGMzNGQzVC OUExMUVGODMwN0Y1NDBDNEY5QUUwMi9YSElxSmhRY2lQZk5RUE9iTjByYWY3d2Zt eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hISXFKaFFjaVBmTlFQT2JOMHJhZjd3Zm14OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODI0QS80QURGMzNGQzVCOUExMUVGODMwN0Y1NDBDNEY5QUUwMi9YSElxSmhRY2lQ Zk5RUE9iTjByYWY3d2ZteDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArzmYLGPxiwnz/LA7N3Qb4A2dHFHNsiniHqvJEA2gGvjuOCVNP8ikdatoP/XD /9PWeK9gVmILrd91pm5l1jAQ4aURdG4JALa5ZpNGMIXdzwsFBbktB//5y9TGVuz+ 0L7/Iud3qaSKW8sc9OxuTWBYMuPKQ12prdm/ifB5wUju304mjG/XDqWl9sqLgUWe DGX64hy80ZUY4AgPR5ulyqEe10eOld32umywLj9z63aVkojQ+fY5fdHf+4pT26fx GvzeqCPbWmMjEvt0ugmJVKjb8mTpCI06nULwNPQ/v8VmeENWXs2kUJZiusJlayEv 2YXqxrZhWOZuKteMyCQnvc0YPw== -----END CERTIFICATE-----Generated at Sat Sep 26 16:54:44 2026 by rpki-client