$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E9D1A/C59B02DA1D7011E286F147B508B02CD2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.mft File: CXb8PSMYbUjGcXc3QIkc9U4xuA4.mft (raw, json) Hash identifier: +4+QoDXpHYqPB1DTdzn17wVulOPiU83PIEjfyR/c9mw= Subject key identifier: 8E:7C:48:C8:76:49:D9:B8:B0:DF:1D:8A:F1:D4:D0:E2:3D:B0:AD:8B Authority key identifier: 09:76:FC:3D:23:18:6D:48:C6:71:77:37:40:89:1C:F5:4E:31:B8:0E Certificate issuer: /CN=A91E9D1A/serialNumber=0976FC3D23186D48C671773740891CF54E31B80E Certificate serial: 35C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9D1A/C59B02DA1D7011E286F147B508B02CD2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.mft Manifest number: 35A3 Signing time: Sun 20 Sep 2026 14:19:11 +0000 Manifest this update: Sun 20 Sep 2026 14:19:11 +0000 Manifest next update: Sun 27 Sep 2026 14:19:11 +0000 Files and hashes: 1: CXb8PSMYbUjGcXc3QIkc9U4xuA4.crl (hash: FuEkBsGhNniuHgXbCcdZiaSonBZm590oOIOT5VnLv2A=) 2: 77WwVdlWOllQ_9nqw0OJxL5S230.asa (hash: 4G+8eHZ/yV9ZB1VW22OiyhYdNPjveNdtUIFCgVDff7Y=) 3: 81C9B5A4BBFA11ED99272016C4F9AE02.roa (hash: XQiiRoZi6pRqCcdlCvd3IdGsHWdpm/jnCGN7DrFAwWE=) 4: E404430CB0F811E595E0F761C4F9AE02.roa (hash: dh5lUduMwHSl3wThPTXL9P/yi+GXIfLIHScJbSj8Rp0=) 5: Hc9HIXtMSG_5N_vBQ1tiTJyx4Uc.asa (hash: Hn+LrBWls+8N6/ROjuDSjCe4xS9yFFqp8inB56Ippe4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9D1A/C59B02DA1D7011E286F147B508B02CD2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.crl rsync://rpki.apnic.net/member_repository/A91E9D1A/C59B02DA1D7011E286F147B508B02CD2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 14:19:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13769 (0x35c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9D1A, serialNumber=0976FC3D23186D48C671773740891CF54E31B80E Validity Not Before: Sep 20 14:19:11 2026 GMT Not After : Sep 27 14:19:11 2026 GMT Subject: CN=6aafeb5f-3460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e9:c9:b1:37:f2:42:cc:10:85:73:62:f4:9f: 30:05:9c:9b:2c:62:98:0c:fd:06:9a:f9:d6:f5:38: eb:6e:ab:84:6e:0d:c3:41:43:3f:82:07:58:3c:79: 2d:e1:f0:8c:71:21:36:2f:09:fe:b3:a7:2b:ca:46: 58:1b:7f:0a:d6:50:5b:bb:c1:c7:ca:56:20:38:03: a3:81:cf:2f:f4:bc:b4:ff:7a:d3:d8:e8:3a:e1:c4: 0d:ce:7d:f4:cd:e0:95:f8:e9:ff:fb:a3:e6:bd:df: 2a:15:a3:36:14:e5:9f:dd:59:49:f8:67:61:aa:f2: 23:cb:d3:a1:29:98:e9:62:8b:56:a1:b7:e3:fc:f7: dc:93:3d:6a:bc:dd:eb:62:4e:cc:fd:92:c2:59:35: 45:c0:c1:8a:65:af:ac:91:2b:37:0d:e7:54:94:b5: f5:50:1b:3b:7c:07:5f:e1:6c:ab:de:9f:8e:a9:9d: bd:57:39:02:07:19:a1:7f:68:14:d4:ae:d5:59:45: 58:de:11:ac:79:16:5a:20:c0:39:2a:02:4e:33:e6: 12:4f:79:da:87:e0:43:6f:ab:5b:80:03:bc:22:a9: 35:ca:02:e9:46:69:63:9c:97:84:02:11:92:6f:a2: f3:78:aa:6e:70:eb:6d:66:e9:67:68:e2:5a:6b:f7: 19:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:7C:48:C8:76:49:D9:B8:B0:DF:1D:8A:F1:D4:D0:E2:3D:B0:AD:8B X509v3 Authority Key Identifier: keyid:09:76:FC:3D:23:18:6D:48:C6:71:77:37:40:89:1C:F5:4E:31:B8:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9D1A/C59B02DA1D7011E286F147B508B02CD2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9D1A/C59B02DA1D7011E286F147B508B02CD2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:47:10:28:5f:7b:61:ba:f4:4d:5f:d9:b8:c3:6c:98:82:67: b6:6b:36:25:5d:52:0a:39:31:48:28:0d:92:ba:8d:7b:fb:60: ab:fd:0b:26:08:c1:f0:3a:9b:cf:4a:09:ed:71:6b:1a:f8:90: 68:75:0b:f7:de:66:b0:84:80:a5:67:27:ec:bd:12:b1:74:70: e9:a9:6d:4c:55:3c:ac:45:50:b5:74:cc:9c:c3:59:27:20:31: ca:87:35:3d:a5:f2:66:77:20:34:f7:fe:2a:ab:f0:7e:1d:aa: cf:3a:37:e6:73:14:f6:15:16:eb:97:51:3a:5a:50:da:d4:b3: 7b:2b:31:34:bc:28:77:ac:c8:52:b8:fe:4d:e8:75:f1:5d:b5: 03:91:c3:da:80:0a:49:70:3a:43:0b:5e:d1:17:83:b2:17:65: ea:a6:cb:70:8f:d1:c0:a6:2d:f7:3d:19:72:11:92:02:44:a6: 12:77:45:c4:c9:27:d8:70:01:d3:c1:fb:9b:ce:9a:e5:a6:3c: 3b:6e:00:af:56:2d:19:01:94:89:c4:5f:eb:80:19:fb:a1:7d: 3e:5a:27:d8:31:53:e9:a3:7e:c3:06:2e:4d:f3:c5:f8:7a:e3: 86:33:71:1f:c9:28:0f:47:8f:5f:22:3f:47:a0:bd:5c:a9:cb: 9b:6f:4d:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlEMUExMTAvBgNVBAUTKDA5NzZGQzNEMjMxODZENDhDNjcxNzczNzQwODkxQ0Y1 NEUzMUI4MEUwHhcNMjYwOTIwMTQxOTExWhcNMjYwOTI3MTQxOTExWjAYMRYwFAYD VQQDEw02YWFmZWI1Zi0zNDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4enJsTfyQswQhXNi9J8wBZybLGKYDP0GmvnW9TjrbquEbg3DQUM/ggdYPHkt 4fCMcSE2Lwn+s6crykZYG38K1lBbu8HHylYgOAOjgc8v9Ly0/3rT2Og64cQNzn30 zeCV+On/+6Pmvd8qFaM2FOWf3VlJ+GdhqvIjy9OhKZjpYotWobfj/Pfckz1qvN3r Yk7M/ZLCWTVFwMGKZa+skSs3DedUlLX1UBs7fAdf4Wyr3p+OqZ29VzkCBxmhf2gU 1K7VWUVY3hGseRZaIMA5KgJOM+YST3nah+BDb6tbgAO8Iqk1ygLpRmljnJeEAhGS b6LzeKpucOttZulnaOJaa/cZ5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI58SMh2 Sdm4sN8divHU0OI9sK2LMB8GA1UdIwQYMBaAFAl2/D0jGG1IxnF3N0CJHPVOMbgO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUQxQS9DNTlCMDJEQTFE NzAxMUUyODZGMTQ3QjUwOEIwMkNEMi9DWGI4UFNNWWJVakdjWGMzUUlrYzlVNHh1 QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NYYjhQU01ZYlVqR2NYYzNRSWtjOVU0eHVBNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUQxQS9DNTlCMDJEQTFENzAxMUUyODZGMTQ3QjUwOEIwMkNEMi9DWGI4UFNNWWJV akdjWGMzUUlrYzlVNHh1QTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVEcQKF97Ybr0TV/ZuMNsmIJntms2JV1SCjkxSCgNkrqNe/tgq/0LJgjB8Dqb z0oJ7XFrGviQaHUL995msISApWcn7L0SsXRw6altTFU8rEVQtXTMnMNZJyAxyoc1 PaXyZncgNPf+Kqvwfh2qzzo35nMU9hUW65dROlpQ2tSzeysxNLwod6zIUrj+Teh1 8V21A5HD2oAKSXA6Qwte0ReDshdl6qbLcI/RwKYt9z0ZchGSAkSmEndFxMkn2HAB 08H7m86a5aY8O24Ar1YtGQGUicRf64AZ+6F9Plon2DFT6aN+wwYuTfPF+HrjhjNx H8koD0ePXyI/R6C9XKnLm29NkA== -----END CERTIFICATE-----Generated at Mon Sep 21 16:43:21 2026 by rpki-client