$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3BF2/509096A8F6C311EC833AEF39C4F9AE02/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.mft File: xHGlbulPBbQ3wJ7uD0QgP6RZJzY.mft (raw, json) Hash identifier: M62B467TuHOnwaU9BhEBWhIDzpkB3AY3/xp3ofiZnjc= Subject key identifier: BF:01:5A:32:A0:C9:A4:31:AE:A6:8A:CC:2E:81:BB:2E:FA:00:1F:62 Authority key identifier: C4:71:A5:6E:E9:4F:05:B4:37:C0:9E:EE:0F:44:20:3F:A4:59:27:36 Certificate issuer: /CN=A91E3BF2/serialNumber=C471A56EE94F05B437C09EEE0F44203FA4592736 Certificate serial: 03B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3BF2/509096A8F6C311EC833AEF39C4F9AE02/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.mft Manifest number: 03AA Signing time: Sun 27 Sep 2026 00:39:46 +0000 Manifest this update: Sun 27 Sep 2026 00:39:46 +0000 Manifest next update: Sun 04 Oct 2026 00:39:46 +0000 Files and hashes: 1: xHGlbulPBbQ3wJ7uD0QgP6RZJzY.crl (hash: On11DExmRNliT3XWVgdibviOwIfBajh2OasmwfR/sIw=) 2: 6B7C33C8F6C811ECBDF7DD40C4F9AE02.roa (hash: 9JY6uhEn8EF+36wJRXg1147V4xC6zP83VrmQeBhwfUg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3BF2/509096A8F6C311EC833AEF39C4F9AE02/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.crl rsync://rpki.apnic.net/member_repository/A91E3BF2/509096A8F6C311EC833AEF39C4F9AE02/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 00:39:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 947 (0x3b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3BF2, serialNumber=C471A56EE94F05B437C09EEE0F44203FA4592736 Validity Not Before: Sep 27 00:39:46 2026 GMT Not After : Oct 4 00:39:46 2026 GMT Subject: CN=6ab865d2-79e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:a4:ed:2a:2f:23:83:17:cc:a5:e8:76:b1:ae: 7c:d6:4f:2b:fa:81:2f:fc:f4:1b:b9:0d:d0:1b:04: c1:52:d5:e3:ac:03:a8:ea:91:f6:a1:ad:64:ef:1e: 3c:92:a3:f1:52:ba:c3:60:f7:56:1a:4f:9b:bc:fe: 4d:52:69:59:05:09:e2:3e:9c:b3:1b:07:b5:0d:ba: fa:c7:43:ce:cc:3c:a8:c2:3b:3b:3a:aa:2c:18:0a: e9:bd:ea:6e:ea:3a:50:17:c5:b7:cf:b3:26:8e:13: 37:ad:03:72:01:11:95:9d:32:f6:a1:fe:dd:f1:33: 4c:10:11:b5:f5:da:6d:7d:58:5c:e9:7c:4a:32:14: 6f:df:70:9d:8f:8f:34:95:1b:f2:0e:f8:b2:3c:24: 19:39:6e:57:65:cd:15:5a:6e:cc:66:f5:63:c0:71: f0:d0:e4:dd:6a:fa:c2:6e:b9:b9:96:aa:cf:d2:d9: 19:87:2d:0d:42:3b:36:af:74:82:6c:53:87:38:36: 6f:d4:ab:6d:a8:10:92:77:ca:2c:95:8b:9c:c5:c3: 64:0f:77:d5:e9:cd:db:6a:f6:5d:76:16:02:62:69: f0:f6:7e:d0:22:42:dd:02:71:35:fb:a2:dd:3d:2a: 7b:af:3c:59:2a:a8:80:95:e7:4d:b6:87:b0:ab:98: cb:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:01:5A:32:A0:C9:A4:31:AE:A6:8A:CC:2E:81:BB:2E:FA:00:1F:62 X509v3 Authority Key Identifier: keyid:C4:71:A5:6E:E9:4F:05:B4:37:C0:9E:EE:0F:44:20:3F:A4:59:27:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3BF2/509096A8F6C311EC833AEF39C4F9AE02/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3BF2/509096A8F6C311EC833AEF39C4F9AE02/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:8b:38:35:90:0c:92:70:50:3e:8b:ab:98:1a:89:08:cf:1c: 14:ff:98:29:1a:26:6d:e4:99:2c:6b:58:78:72:82:9d:88:eb: ca:3b:0f:c0:ef:51:ff:a3:3d:56:d3:60:f6:c2:7d:26:3a:04: 1f:43:45:ba:d2:db:d7:8e:18:d0:5f:67:34:9a:8e:d0:75:24: 4d:12:85:4c:dc:e5:c1:f2:8b:2e:b1:d0:b9:3b:a2:24:8d:47: cb:40:34:e4:f7:75:4a:cf:6d:c3:13:88:3d:67:23:52:83:5d: 21:81:0c:02:50:84:52:66:c5:f3:de:3d:fd:98:6d:37:31:5e: 1b:4b:11:ff:ba:79:92:c3:92:20:b1:ed:8f:1c:7e:97:de:5d: c0:72:c3:93:a2:b5:1d:19:0f:31:a4:29:ca:a1:e7:fc:2c:61: 73:c5:b9:f4:77:2d:0c:33:a1:15:e9:66:e3:12:db:f8:75:ac: 19:76:8c:ad:7e:9f:a3:e8:2e:19:da:f7:6d:0a:5b:91:8a:e2: 53:21:fa:49:f2:54:02:5d:98:03:2d:b0:0b:af:84:b0:3d:6e: 38:55:7b:ff:3b:bc:dd:09:56:9b:e0:d9:bd:df:8f:ce:cc:3e: 8f:c1:76:a0:95:f5:01:a6:4a:fb:69:74:35:f3:87:24:bf:eb: 3c:7f:17:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA7MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNCRjIxMTAvBgNVBAUTKEM0NzFBNTZFRTk0RjA1QjQzN0MwOUVFRTBGNDQyMDNG QTQ1OTI3MzYwHhcNMjYwOTI3MDAzOTQ2WhcNMjYxMDA0MDAzOTQ2WjAYMRYwFAYD VQQDEw02YWI4NjVkMi03OWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAg6TtKi8jgxfMpeh2sa581k8r+oEv/PQbuQ3QGwTBUtXjrAOo6pH2oa1k7x48 kqPxUrrDYPdWGk+bvP5NUmlZBQniPpyzGwe1Dbr6x0POzDyowjs7OqosGArpvepu 6jpQF8W3z7MmjhM3rQNyARGVnTL2of7d8TNMEBG19dptfVhc6XxKMhRv33Cdj480 lRvyDviyPCQZOW5XZc0VWm7MZvVjwHHw0OTdavrCbrm5lqrP0tkZhy0NQjs2r3SC bFOHODZv1KttqBCSd8oslYucxcNkD3fV6c3bavZddhYCYmnw9n7QIkLdAnE1+6Ld PSp7rzxZKqiAledNtoewq5jLVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL8BWjKg yaQxrqaKzC6Buy76AB9iMB8GA1UdIwQYMBaAFMRxpW7pTwW0N8Ce7g9EID+kWSc2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0JGMi81MDkwOTZBOEY2 QzMxMUVDODMzQUVGMzlDNEY5QUUwMi94SEdsYnVsUEJiUTN3Sjd1RDBRZ1A2UlpK elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hIR2xidWxQQmJRM3dKN3VEMFFnUDZSWkp6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0JGMi81MDkwOTZBOEY2QzMxMUVDODMzQUVGMzlDNEY5QUUwMi94SEdsYnVsUEJi UTN3Sjd1RDBRZ1A2UlpKelkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB4s4NZAMknBQPourmBqJCM8cFP+YKRombeSZLGtYeHKCnYjryjsPwO9R/6M9 VtNg9sJ9JjoEH0NFutLb144Y0F9nNJqO0HUkTRKFTNzlwfKLLrHQuTuiJI1Hy0A0 5Pd1Ss9twxOIPWcjUoNdIYEMAlCEUmbF8949/ZhtNzFeG0sR/7p5ksOSILHtjxx+ l95dwHLDk6K1HRkPMaQpyqHn/Cxhc8W59HctDDOhFelm4xLb+HWsGXaMrX6fo+gu Gdr3bQpbkYriUyH6SfJUAl2YAy2wC6+EsD1uOFV7/zu83QlWm+DZvd+Pzsw+j8F2 oJX1AaZK+2l0NfOHJL/rPH8XkQ== -----END CERTIFICATE-----Generated at Mon Sep 28 21:26:01 2026 by rpki-client