$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft File: xPfGGVRtktYGb7L0x2VFqc4v4wM.mft (raw, json) Hash identifier: d8NEFwUfJmz09UH2Lgvrn3btRSpG2mBAj2GYym/KIpg= Subject key identifier: 0E:60:98:FF:2F:0E:6E:D7:FA:7C:2D:56:42:DF:4E:A0:D1:92:87:AC Authority key identifier: C4:F7:C6:19:54:6D:92:D6:06:6F:B2:F4:C7:65:45:A9:CE:2F:E3:03 Certificate issuer: /CN=A91DC0C0/serialNumber=C4F7C619546D92D6066FB2F4C76545A9CE2FE303 Certificate serial: 094B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft Manifest number: 0939 Signing time: Sun 20 Sep 2026 20:06:37 +0000 Manifest this update: Sun 20 Sep 2026 20:06:37 +0000 Manifest next update: Sun 27 Sep 2026 20:06:37 +0000 Files and hashes: 1: xPfGGVRtktYGb7L0x2VFqc4v4wM.crl (hash: G9xBG+C8rW8PfP3cWxharf/GDHAK/6C2XGbD2EAPwVs=) 2: BEB276EECCE311EAA397205EC4F9AE02.roa (hash: eazjY0QI0IkousembgiUMF6ex//mtspG+XkKlVCT+t4=) 3: BE243D98CCE311EAA397205EC4F9AE02.roa (hash: u1RDbYNdHTAW3BTDzKScEWLA3q8xl+IocU5STlH9Ois=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.crl rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 20:06:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2379 (0x94b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC0C0, serialNumber=C4F7C619546D92D6066FB2F4C76545A9CE2FE303 Validity Not Before: Sep 20 20:06:37 2026 GMT Not After : Sep 27 20:06:37 2026 GMT Subject: CN=6ab03ccd-fcf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:7a:db:a0:2d:82:76:f2:6a:ed:b9:38:10:25: 11:27:84:eb:7e:0c:0e:6b:6d:05:eb:74:cb:04:f0: 45:28:e1:94:da:69:8a:af:44:bb:86:d7:aa:e4:db: 0e:f9:6f:d9:d6:8a:31:03:31:bc:41:49:d0:57:f1: 22:e6:d0:20:26:2e:3d:de:c6:21:37:24:e1:7d:68: 8a:1d:89:c7:64:a2:c2:17:17:35:f0:3b:d4:b6:26: 9c:0d:e9:3c:d3:4c:bb:d1:dd:b6:cf:53:17:42:b2: 2e:5c:51:ba:d9:ae:be:26:7f:54:52:a1:e0:7f:45: 13:40:6f:53:49:0e:05:ef:b8:92:ed:87:db:df:20: 7f:7a:86:58:8a:49:5e:e7:25:3b:15:c7:00:cb:f7: c2:63:42:3b:4e:ac:04:a6:22:78:f7:af:48:5a:4e: 1f:f3:3e:cd:03:99:55:58:c6:7c:4f:05:5e:c3:0f: db:a9:82:ed:2d:09:f0:66:fd:ea:b7:3f:e4:5e:43: 7f:22:bb:eb:46:6b:31:d1:6d:9d:09:c3:be:68:c1: 28:6c:97:73:e3:15:d7:71:f7:25:c2:ba:51:0d:7b: cd:cf:02:7c:fb:cb:27:94:77:f1:4c:36:b9:cb:0d: 73:dc:4a:40:a5:15:9a:90:96:c4:30:97:f7:ba:5c: 5f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:60:98:FF:2F:0E:6E:D7:FA:7C:2D:56:42:DF:4E:A0:D1:92:87:AC X509v3 Authority Key Identifier: keyid:C4:F7:C6:19:54:6D:92:D6:06:6F:B2:F4:C7:65:45:A9:CE:2F:E3:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:10:7c:76:0e:2d:6f:33:bf:f4:73:c3:7a:d1:d5:46:8a:f6: 90:24:5a:b2:98:48:29:20:a0:4d:07:f0:93:26:61:5f:5a:19: b0:7f:6f:83:f0:51:9b:ac:c6:5c:59:5b:9e:cf:b1:32:7c:c1: b0:a9:3c:48:90:84:3a:c9:44:c1:35:83:f4:62:c5:c8:22:fd: d1:c6:3d:d4:8a:ae:0e:26:d4:d5:c4:5f:ee:1c:64:41:db:49: 43:da:1f:f1:5e:6d:93:83:8e:a0:15:e1:0b:74:e6:76:67:10: 00:d0:6f:58:e4:21:48:d4:e4:cd:f4:1f:55:4a:f0:13:ce:01: c2:a1:5a:33:96:8d:e2:69:90:31:f4:77:37:2b:7a:48:9f:43: 06:9a:3b:12:e6:3a:4f:cf:d0:2e:67:ce:fb:76:9f:ea:c3:c9: c3:d6:b9:8a:f2:14:60:1a:dc:85:16:3a:e4:0e:2e:9d:5d:eb: ec:e1:61:fb:14:25:c1:c9:4c:4b:5d:8c:8f:00:e5:49:b4:d3: 14:2a:fa:dd:56:74:0d:fd:82:34:07:b9:1e:f7:d8:cb:06:4b: bc:0a:5c:4f:9d:61:d6:f0:b0:28:60:0e:22:a8:bd:98:2d:c0: f2:1e:a4:0f:77:50:de:49:cf:31:9b:aa:98:c3:ac:d3:9e:8a: f5:1a:0b:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwQzAxMTAvBgNVBAUTKEM0RjdDNjE5NTQ2RDkyRDYwNjZGQjJGNEM3NjU0NUE5 Q0UyRkUzMDMwHhcNMjYwOTIwMjAwNjM3WhcNMjYwOTI3MjAwNjM3WjAYMRYwFAYD VQQDEw02YWIwM2NjZC1mY2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3nrboC2CdvJq7bk4ECURJ4TrfgwOa20F63TLBPBFKOGU2mmKr0S7hteq5NsO +W/Z1ooxAzG8QUnQV/Ei5tAgJi493sYhNyThfWiKHYnHZKLCFxc18DvUtiacDek8 00y70d22z1MXQrIuXFG62a6+Jn9UUqHgf0UTQG9TSQ4F77iS7Yfb3yB/eoZYikle 5yU7FccAy/fCY0I7TqwEpiJ4969IWk4f8z7NA5lVWMZ8TwVeww/bqYLtLQnwZv3q tz/kXkN/IrvrRmsx0W2dCcO+aMEobJdz4xXXcfclwrpRDXvNzwJ8+8snlHfxTDa5 yw1z3EpApRWakJbEMJf3ulxfTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA5gmP8v Dm7X+nwtVkLfTqDRkoesMB8GA1UdIwQYMBaAFMT3xhlUbZLWBm+y9MdlRanOL+MD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzBDMC8wMjJEQkNBNEND RTMxMUVBQUY3M0ZDNURDNEY5QUUwMi94UGZHR1ZSdGt0WUdiN0wweDJWRnFjNHY0 d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQZkdHVlJ0a3RZR2I3TDB4MlZGcWM0djR3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzBDMC8wMjJEQkNBNENDRTMxMUVBQUY3M0ZDNURDNEY5QUUwMi94UGZHR1ZSdGt0 WUdiN0wweDJWRnFjNHY0d00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA0xB8dg4tbzO/9HPDetHVRor2kCRasphIKSCgTQfwkyZhX1oZsH9vg/BRm6zG XFlbns+xMnzBsKk8SJCEOslEwTWD9GLFyCL90cY91IquDibU1cRf7hxkQdtJQ9of 8V5tk4OOoBXhC3TmdmcQANBvWOQhSNTkzfQfVUrwE84BwqFaM5aN4mmQMfR3Nyt6 SJ9DBpo7EuY6T8/QLmfO+3af6sPJw9a5ivIUYBrchRY65A4unV3r7OFh+xQlwclM S12MjwDlSbTTFCr63VZ0Df2CNAe5HvfYywZLvApcT51h1vCwKGAOIqi9mC3A8h6k D3dQ3knPMZuqmMOs056K9RoLcA== -----END CERTIFICATE-----Generated at Tue Sep 22 10:51:06 2026 by rpki-client