$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E78B5/C0E1253C9FC311F185E331305311F970/xzzR1KOVMbsSy-v8HkDk1NsFkp0.mft File: xzzR1KOVMbsSy-v8HkDk1NsFkp0.mft (raw, json) Hash identifier: zcO1HhwUL9ve4+bOZq9Xy1VMLOOEyIZ9o+GkfNrT38A= Subject key identifier: A1:67:6E:1D:01:EB:4A:D7:6F:A7:C1:D7:80:99:C8:D9:93:78:1D:C2 Authority key identifier: C7:3C:D1:D4:A3:95:31:BB:12:CB:EB:FC:1E:40:E4:D4:DB:05:92:9D Certificate issuer: /CN=A91E78B5/serialNumber=C73CD1D4A39531BB12CBEBFC1E40E4D4DB05929D Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xzzR1KOVMbsSy-v8HkDk1NsFkp0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E78B5/C0E1253C9FC311F185E331305311F970/xzzR1KOVMbsSy-v8HkDk1NsFkp0.mft Manifest number: 12 Signing time: Sat 19 Sep 2026 09:08:03 +0000 Manifest this update: Sat 19 Sep 2026 09:08:02 +0000 Manifest next update: Sat 26 Sep 2026 09:08:02 +0000 Files and hashes: 1: xzzR1KOVMbsSy-v8HkDk1NsFkp0.crl (hash: nEQhiBMrAWelWNzL4NUJv49pwHz8CbwYQggKknxxJdI=) 2: EETTppjEYUf_m8voifsJ8sVQbnc.asa (hash: Cgu9fsEEcet/RCuYUFKNrT86EyCVpyYdWfbU51GWOhc=) 3: 2F09D8DCA03D11F1ACAFAFF83911F970.roa (hash: iSOyyo5mav1l9HpQwTOIdfMcOvVhaxQGyBb2UEsq09U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E78B5/C0E1253C9FC311F185E331305311F970/xzzR1KOVMbsSy-v8HkDk1NsFkp0.crl rsync://rpki.apnic.net/member_repository/A91E78B5/C0E1253C9FC311F185E331305311F970/xzzR1KOVMbsSy-v8HkDk1NsFkp0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xzzR1KOVMbsSy-v8HkDk1NsFkp0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E78B5, serialNumber=C73CD1D4A39531BB12CBEBFC1E40E4D4DB05929D Validity Not Before: Sep 19 09:08:02 2026 GMT Not After : Sep 26 09:08:02 2026 GMT Subject: CN=6aae50f2-9217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:78:7f:ff:5b:e1:dd:a2:fb:6f:75:c0:e1:62: 41:03:57:9f:7b:05:cb:14:03:66:4e:45:8a:e3:2b: 97:27:48:75:5a:e4:cd:4b:ff:02:cd:6f:83:98:6d: 13:3c:fb:44:dd:20:97:86:4b:69:a0:16:bf:a6:5d: 41:62:bf:6b:17:6f:c1:a5:49:bc:4b:95:14:c0:21: 5a:82:db:47:ef:a7:02:58:4c:70:62:17:59:d3:3d: 86:b0:04:7b:9e:8a:69:8d:46:c5:22:51:90:d6:ab: 2f:da:f8:84:92:57:51:32:cf:13:d3:32:96:57:d1: 1f:5d:7a:9d:2d:7d:02:a4:36:ae:be:84:bb:ed:04: f2:0c:05:a8:0b:e5:de:40:3c:5f:48:eb:a0:91:16: c6:c6:ad:51:2b:f0:20:00:68:a5:a2:85:b0:68:a7: 46:8b:76:90:38:ad:0e:79:83:c9:f1:65:fb:dd:6e: 90:e6:8d:6f:b8:d0:bf:db:7c:ef:2c:cf:0f:c2:ac: d2:00:2d:5d:7b:1c:e3:91:13:ef:e5:13:80:5b:da: 6f:b7:40:2b:71:bb:be:53:a5:61:25:e8:65:14:63: d3:24:d7:61:07:0f:c8:d0:4b:24:9f:a8:4f:f3:06: 27:d5:b4:f3:40:81:d6:28:04:e7:f6:30:b1:e0:7d: 26:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:67:6E:1D:01:EB:4A:D7:6F:A7:C1:D7:80:99:C8:D9:93:78:1D:C2 X509v3 Authority Key Identifier: keyid:C7:3C:D1:D4:A3:95:31:BB:12:CB:EB:FC:1E:40:E4:D4:DB:05:92:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E78B5/C0E1253C9FC311F185E331305311F970/xzzR1KOVMbsSy-v8HkDk1NsFkp0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xzzR1KOVMbsSy-v8HkDk1NsFkp0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E78B5/C0E1253C9FC311F185E331305311F970/xzzR1KOVMbsSy-v8HkDk1NsFkp0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:36:d8:b2:0d:6c:c4:3a:94:e4:db:0f:94:67:aa:4a:d7:1b: 95:d2:2c:3c:c7:04:32:5d:5d:e4:3f:3d:e7:b8:65:2f:8d:92: b0:28:b4:04:48:93:6c:fa:02:3f:7a:6f:8a:07:6b:8c:24:5e: 6b:a5:6e:ee:50:ed:0a:4f:04:cb:c1:e8:ab:6d:15:f3:10:af: 76:9e:73:b6:63:cd:b6:6e:14:ed:91:a1:e0:82:94:40:9d:41: 29:1e:9e:3d:96:16:7a:38:06:22:dc:6c:21:d9:94:69:69:b9: df:16:90:af:98:83:b7:bc:69:05:28:40:8d:3c:af:45:35:5f: 5e:11:70:f0:84:cf:87:cc:fb:17:be:eb:95:49:e9:89:07:38: f7:aa:c4:91:64:aa:6b:7d:9c:c0:28:24:47:f4:cb:54:71:8b: ba:98:d1:58:14:ae:30:f4:41:26:02:dc:20:55:a1:e6:1e:24: f4:15:b9:28:77:92:cb:da:6e:d1:0d:3b:1a:1d:e2:46:d1:b7: c1:30:f7:b4:37:0c:c1:02:fe:32:8a:69:0d:61:1f:ea:69:b6: dd:7f:ba:3a:0e:42:18:18:97:0a:bb:7f:7c:aa:21:e1:b4:77: 8f:c1:36:ce:f3:b4:56:7e:cc:33:0d:63:3b:92:07:bf:cf:b4: 81:43:03:d7 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NzhCNTExMC8GA1UEBRMoQzczQ0QxRDRBMzk1MzFCQjEyQ0JFQkZDMUU0MEU0RDRE QjA1OTI5RDAeFw0yNjA5MTkwOTA4MDJaFw0yNjA5MjYwOTA4MDJaMBgxFjAUBgNV BAMTDTZhYWU1MGYyLTkyMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjeH//W+HdovtvdcDhYkEDV597BcsUA2ZORYrjK5cnSHVa5M1L/wLNb4OYbRM8 +0TdIJeGS2mgFr+mXUFiv2sXb8GlSbxLlRTAIVqC20fvpwJYTHBiF1nTPYawBHue immNRsUiUZDWqy/a+ISSV1EyzxPTMpZX0R9dep0tfQKkNq6+hLvtBPIMBagL5d5A PF9I66CRFsbGrVEr8CAAaKWihbBop0aLdpA4rQ55g8nxZfvdbpDmjW+40L/bfO8s zw/CrNIALV17HOORE+/lE4Bb2m+3QCtxu75TpWEl6GUUY9Mk12EHD8jQSySfqE/z BifVtPNAgdYoBOf2MLHgfSabAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUoWduHQHr Stdvp8HXgJnI2ZN4HcIwHwYDVR0jBBgwFoAUxzzR1KOVMbsSy+v8HkDk1NsFkp0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU3OEI1L0MwRTEyNTNDOUZD MzExRjE4NUUzMzEzMDUzMTFGOTcwL3h6elIxS09WTWJzU3ktdjhIa0RrMU5zRmtw MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveHp6UjFLT1ZNYnNTeS12OEhrRGsxTnNGa3AwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU3 OEI1L0MwRTEyNTNDOUZDMzExRjE4NUUzMzEzMDUzMTFGOTcwL3h6elIxS09WTWJz U3ktdjhIa0RrMU5zRmtwMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCzNtiyDWzEOpTk2w+UZ6pK1xuV0iw8xwQyXV3kPz3nuGUvjZKwKLQESJNs+gI/ em+KB2uMJF5rpW7uUO0KTwTLweirbRXzEK92nnO2Y822bhTtkaHggpRAnUEpHp49 lhZ6OAYi3Gwh2ZRpabnfFpCvmIO3vGkFKECNPK9FNV9eEXDwhM+HzPsXvuuVSemJ Bzj3qsSRZKprfZzAKCRH9MtUcYu6mNFYFK4w9EEmAtwgVaHmHiT0Fbkod5LL2m7R DTsaHeJG0bfBMPe0NwzBAv4yimkNYR/qabbdf7o6DkIYGJcKu398qiHhtHePwTbO 87RWfswzDWM7kge/z7SBQwPX -----END CERTIFICATE-----Generated at Sun Sep 20 14:33:38 2026 by rpki-client