$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft File: XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft (raw, json) Hash identifier: oUu3r5VFl3/Go9WEX3mwC5DiQpce4pc8c943FdSC0xY= Subject key identifier: C1:C8:47:F3:F9:0F:21:38:31:90:A0:5F:C4:2E:2F:98:E5:3E:14:C3 Authority key identifier: 5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7 Certificate issuer: /CN=A91E3C76/serialNumber=5F02248C9C5C94F153C59F56772C5FDA7F8D71E7 Certificate serial: 01B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft Manifest number: 01A8 Signing time: Mon 21 Sep 2026 04:09:34 +0000 Manifest this update: Mon 21 Sep 2026 04:09:33 +0000 Manifest next update: Mon 28 Sep 2026 04:09:33 +0000 Files and hashes: 1: XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl (hash: y/bfY0FDJ1GuGYm8rOzdnJbXhEhkcLMM+x7TxlHiasU=) 2: 51BBEE10B2BE11EFA108946DC4F9AE02.roa (hash: qus/VWO/zFuK4o4owMyuzTPVboELwpYdKngfvhC2x7c=) 3: 50F0AF8EB2BE11EFA108946DC4F9AE02.roa (hash: zFIoI885tqgmIc+TzAmT9MM/Zj8hlNvuKZSxFX8e55k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 04:09:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 436 (0x1b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3C76, serialNumber=5F02248C9C5C94F153C59F56772C5FDA7F8D71E7 Validity Not Before: Sep 21 04:09:33 2026 GMT Not After : Sep 28 04:09:33 2026 GMT Subject: CN=6ab0adfd-64ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:78:c6:9d:16:ef:31:8f:40:b8:58:1f:be:53: b2:f4:50:37:e5:5b:76:77:ee:46:33:db:a2:88:6e: 72:97:4e:93:51:4c:6e:18:6f:dc:7e:d8:1b:5b:4c: f0:8a:b7:7d:8f:bd:4a:87:20:61:c8:b7:0a:e0:98: 1c:3b:c0:72:d6:51:41:17:65:a2:49:6c:ac:ed:78: 3c:c9:e3:34:d5:5f:75:44:b9:2f:20:0e:ae:cf:ca: 1d:e0:19:93:29:5b:d7:52:69:40:52:fb:2f:c2:d8: 27:c0:eb:5e:b7:e9:15:fa:4b:a4:70:96:bb:16:0c: a6:72:08:1b:c7:af:0b:49:ce:2a:87:ff:8e:c1:00: 86:67:4b:88:55:5a:28:15:af:a0:c0:34:a0:52:e4: bf:ad:79:71:47:5a:57:7d:6e:80:59:e9:e8:42:46: 75:0f:4e:d5:73:5a:35:70:8e:40:bf:44:6d:af:f9: 39:f8:87:4c:f2:ce:c3:ff:c6:e8:b8:ef:a7:ee:ba: 41:aa:b2:7b:42:8c:d9:83:18:15:31:d4:d3:7d:7b: 16:18:42:be:f7:6a:35:f1:e3:28:8e:76:f7:b1:b7: a9:98:b1:0b:e6:3e:bb:1c:a1:67:4f:e8:9a:a1:81: d9:98:66:e2:77:c5:41:94:14:ba:ff:b7:93:df:98: 89:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:C8:47:F3:F9:0F:21:38:31:90:A0:5F:C4:2E:2F:98:E5:3E:14:C3 X509v3 Authority Key Identifier: keyid:5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:3d:46:ba:da:0a:71:c2:ac:11:e9:0c:6f:7d:d9:3c:ce:4b: 5d:66:73:af:96:97:01:d1:97:0d:47:e6:ee:67:0d:1c:bd:dc: 04:cd:d2:85:37:5c:9a:cb:53:bb:b4:e9:b7:25:be:ad:5d:4d: d0:c3:a1:18:2b:31:e6:41:d3:64:95:a2:ae:fd:d0:aa:f4:da: 08:06:12:56:3f:e2:8a:49:5a:dc:a2:16:ec:29:8f:6d:d4:fc: fe:bc:83:64:a9:92:d9:15:4b:45:9f:e5:58:99:fe:7a:be:c9: c7:8a:66:af:7c:80:81:02:ab:da:5d:e3:27:1d:24:24:35:04: 03:19:ed:55:e9:22:5f:cd:cb:8e:1c:70:65:03:b0:dc:c4:14: 2d:1d:b2:13:bf:e2:93:9b:19:36:52:e0:a2:8e:d2:bb:37:4a: e9:3f:f2:6c:c9:93:eb:29:67:fc:8d:71:59:5e:be:ca:fd:71: 72:c9:8a:55:03:6e:cc:07:c3:8a:ae:d7:fe:30:4c:1a:94:ed: 2b:c4:ce:e5:27:95:2d:58:bc:df:55:cd:ce:8a:ec:a0:be:99: 9a:42:3d:eb:45:15:bc:d2:c7:27:01:b9:03:03:3c:17:d9:44: 98:18:e2:dc:9c:86:79:16:7b:ab:b7:0c:92:e1:00:4a:be:99: 36:8c:81:9d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNDNzYxMTAvBgNVBAUTKDVGMDIyNDhDOUM1Qzk0RjE1M0M1OUY1Njc3MkM1RkRB N0Y4RDcxRTcwHhcNMjYwOTIxMDQwOTMzWhcNMjYwOTI4MDQwOTMzWjAYMRYwFAYD VQQDEw02YWIwYWRmZC02NGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqHjGnRbvMY9AuFgfvlOy9FA35Vt2d+5GM9uiiG5yl06TUUxuGG/cftgbW0zw ird9j71KhyBhyLcK4JgcO8By1lFBF2WiSWys7Xg8yeM01V91RLkvIA6uz8od4BmT KVvXUmlAUvsvwtgnwOtet+kV+kukcJa7Fgymcggbx68LSc4qh/+OwQCGZ0uIVVoo Fa+gwDSgUuS/rXlxR1pXfW6AWenoQkZ1D07Vc1o1cI5Av0Rtr/k5+IdM8s7D/8bo uO+n7rpBqrJ7QozZgxgVMdTTfXsWGEK+92o18eMojnb3sbepmLEL5j67HKFnT+ia oYHZmGbid8VBlBS6/7eT35iJ7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMHIR/P5 DyE4MZCgX8QuL5jlPhTDMB8GA1UdIwQYMBaAFF8CJIycXJTxU8WfVncsX9p/jXHn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0M3Ni9CNDk5MkQ1MjM0 NTgxMUVGQjQyRjlEMzdDNEY5QUUwMi9Yd0lrakp4Y2xQRlR4WjlXZHl4ZjJuLU5j ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h3SWtqSnhjbFBGVHhaOVdkeXhmMm4tTmNlYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0M3Ni9CNDk5MkQ1MjM0NTgxMUVGQjQyRjlEMzdDNEY5QUUwMi9Yd0lrakp4Y2xQ RlR4WjlXZHl4ZjJuLU5jZWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJj1GutoKccKsEekMb33ZPM5LXWZzr5aXAdGXDUfm7mcNHL3cBM3ShTdcmstT u7TptyW+rV1N0MOhGCsx5kHTZJWirv3QqvTaCAYSVj/iikla3KIW7CmPbdT8/ryD ZKmS2RVLRZ/lWJn+er7Jx4pmr3yAgQKr2l3jJx0kJDUEAxntVekiX83LjhxwZQOw 3MQULR2yE7/ik5sZNlLgoo7SuzdK6T/ybMmT6yln/I1xWV6+yv1xcsmKVQNuzAfD iq7X/jBMGpTtK8TO5SeVLVi831XNzorsoL6ZmkI960UVvNLHJwG5AwM8F9lEmBji 3JyGeRZ7q7cMkuEASr6ZNoyBnQ== -----END CERTIFICATE-----Generated at Tue Sep 22 18:46:45 2026 by rpki-client