$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.mft File: XEH4EDozCnVMPG44dNzKXcSOGwA.mft (raw, json) Hash identifier: Cv50YNtJiH4Jky9db0S/jqqM3vBTDX84lpMG88rULNA= Subject key identifier: 07:64:EC:E2:63:59:F1:33:F2:78:D6:C8:5B:07:44:BC:06:1B:4E:38 Authority key identifier: 5C:41:F8:10:3A:33:0A:75:4C:3C:6E:38:74:DC:CA:5D:C4:8E:1B:00 Certificate issuer: /CN=A91DDB11/serialNumber=5C41F8103A330A754C3C6E3874DCCA5DC48E1B00 Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XEH4EDozCnVMPG44dNzKXcSOGwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.mft Manifest number: 49 Signing time: Wed 23 Sep 2026 08:11:29 +0000 Manifest this update: Wed 23 Sep 2026 08:11:29 +0000 Manifest next update: Wed 30 Sep 2026 08:11:29 +0000 Files and hashes: 1: XEH4EDozCnVMPG44dNzKXcSOGwA.crl (hash: p41lMBxltLnrdu1jq1nrgYiZ5MDPqI+ukTj0g/1dXhQ=) 2: 055A1AFA4E0911F188B16820CA833773.roa (hash: cNvYO9Mx94LSKruAtGYqSyqtbxJvaQBMA0ykxsLIG5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.crl rsync://rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XEH4EDozCnVMPG44dNzKXcSOGwA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:11:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDB11, serialNumber=5C41F8103A330A754C3C6E3874DCCA5DC48E1B00 Validity Not Before: Sep 23 08:11:29 2026 GMT Not After : Sep 30 08:11:29 2026 GMT Subject: CN=6ab389b1-882e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9d:6f:76:36:02:53:24:02:74:d4:db:ca:b0: 74:62:33:e9:a9:53:30:c5:e0:5a:7b:11:90:2f:a7: 15:d2:4f:b0:b3:8e:8e:4b:6a:87:86:33:24:91:01: 75:54:2a:c9:8b:dc:5c:59:14:89:3c:15:1c:2a:d3: a9:9a:e1:55:f4:76:15:b2:2d:b8:80:fd:cf:95:73: ba:9e:eb:3b:ae:e4:8b:54:b2:e2:8d:e8:05:ba:94: 48:d3:db:b0:82:71:9b:ed:3d:da:c7:74:0b:3e:73: 8e:f4:43:da:f4:8f:d9:d3:19:7a:68:84:9e:69:e8: db:c8:56:1b:e8:fa:a2:d6:85:45:b4:5a:39:76:c3: 0b:f9:7b:f4:16:eb:8b:3a:89:4c:e1:8d:17:90:69: fa:d3:5a:9f:82:93:f8:a8:a7:ff:c6:64:b5:9e:1f: 24:f4:e2:34:0e:f9:05:09:be:38:8d:13:88:67:4d: 16:dc:43:3e:d4:26:ee:ec:db:50:1f:ab:bb:ab:92: 62:8e:c8:a2:f9:53:24:57:3e:0a:19:da:21:1d:f2: 9a:27:8d:79:90:39:77:8c:a3:1e:8d:1d:8f:99:ae: e0:e3:c7:dd:67:ec:ed:dc:74:31:84:b6:5f:6f:9b: 3b:b5:1d:35:e8:9a:f6:d7:a2:6c:88:17:b2:ea:0a: 48:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:64:EC:E2:63:59:F1:33:F2:78:D6:C8:5B:07:44:BC:06:1B:4E:38 X509v3 Authority Key Identifier: keyid:5C:41:F8:10:3A:33:0A:75:4C:3C:6E:38:74:DC:CA:5D:C4:8E:1B:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XEH4EDozCnVMPG44dNzKXcSOGwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:c0:e9:5f:eb:b4:cc:a7:55:f8:b1:72:6b:ef:28:8e:1e:12: d8:e6:7d:16:48:86:03:d7:ab:de:6e:31:82:ab:b1:69:ef:6e: a3:97:2e:80:34:9d:1a:2a:45:71:97:f9:7c:b0:98:b5:c0:e2: cb:f0:e7:73:56:5f:3b:2c:d4:3e:08:50:6e:46:28:db:4e:79: af:29:54:bd:8e:2f:8d:e5:cf:7d:b8:3f:61:1a:dd:f4:4d:d5: 63:61:db:6f:67:c3:0f:88:5c:d5:3f:fd:50:9a:3b:0b:49:3f: ae:8b:3a:a4:96:1c:60:3f:47:71:d4:2e:2c:53:83:e4:d6:5a: f7:6e:1d:d6:3e:1a:4b:c7:9d:46:57:6d:cb:f9:07:7f:48:a2: db:ac:5d:f8:6b:df:e7:c9:b9:78:a5:b4:0f:2d:a7:37:c7:24: 1b:68:bc:85:4f:40:1d:3b:92:38:3b:52:57:9c:73:05:eb:1d: 89:c1:41:a9:a3:62:4b:d5:d2:24:1c:0b:32:bd:ec:ac:2b:de: 07:c8:9c:79:1a:fe:c0:01:0c:2c:4e:44:67:c0:22:44:44:9e: a9:85:a7:04:72:5e:b6:45:3f:6c:9a:68:ae:d9:fc:54:b9:38: 48:9d:0d:e5:75:9b:96:d1:27:70:4a:dd:f7:12:c5:54:8c:76: ae:ca:5d:7e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE REIxMTExMC8GA1UEBRMoNUM0MUY4MTAzQTMzMEE3NTRDM0M2RTM4NzREQ0NBNURD NDhFMUIwMDAeFw0yNjA5MjMwODExMjlaFw0yNjA5MzAwODExMjlaMBgxFjAUBgNV BAMTDTZhYjM4OWIxLTg4MmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtnW92NgJTJAJ01NvKsHRiM+mpUzDF4Fp7EZAvpxXST7Czjo5LaoeGMySRAXVU KsmL3FxZFIk8FRwq06ma4VX0dhWyLbiA/c+Vc7qe6zuu5ItUsuKN6AW6lEjT27CC cZvtPdrHdAs+c470Q9r0j9nTGXpohJ5p6NvIVhvo+qLWhUW0Wjl2wwv5e/QW64s6 iUzhjReQafrTWp+Ck/iop//GZLWeHyT04jQO+QUJvjiNE4hnTRbcQz7UJu7s21Af q7urkmKOyKL5UyRXPgoZ2iEd8ponjXmQOXeMox6NHY+ZruDjx91n7O3cdDGEtl9v mzu1HTXomvbXomyIF7LqCkgrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUB2Ts4mNZ 8TPyeNbIWwdEvAYbTjgwHwYDVR0jBBgwFoAUXEH4EDozCnVMPG44dNzKXcSOGwAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREQjExL0Q4NEMzRkUwNEUw NjExRjFBNjRCNjI5QUM5ODMzNzczL1hFSDRFRG96Q25WTVBHNDRkTnpLWGNTT0d3 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvWEVINEVEb3pDblZNUEc0NGROektYY1NPR3dBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE QjExL0Q4NEMzRkUwNEUwNjExRjFBNjRCNjI5QUM5ODMzNzczL1hFSDRFRG96Q25W TVBHNDRkTnpLWGNTT0d3QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCawOlf67TMp1X4sXJr7yiOHhLY5n0WSIYD16vebjGCq7Fp726jly6ANJ0aKkVx l/l8sJi1wOLL8OdzVl87LNQ+CFBuRijbTnmvKVS9ji+N5c99uD9hGt30TdVjYdtv Z8MPiFzVP/1QmjsLST+uizqklhxgP0dx1C4sU4Pk1lr3bh3WPhpLx51GV23L+Qd/ SKLbrF34a9/nybl4pbQPLac3xyQbaLyFT0AdO5I4O1JXnHMF6x2JwUGpo2JL1dIk HAsyveysK94HyJx5Gv7AAQwsTkRnwCJERJ6phacEcl62RT9smmiu2fxUuThInQ3l dZuW0SdwSt33EsVUjHauyl1+ -----END CERTIFICATE-----Generated at Thu Sep 24 14:05:39 2026 by rpki-client