$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft File: xPY4wJ43IEbAHfRgTCgRZPasFiI.mft (raw, json) Hash identifier: AQAFz3JtBE6jcTCSWUDtEmduuSyNiHlgtCy7OgFpQ94= Subject key identifier: E9:E6:39:F6:F3:FA:DF:C8:E4:79:C1:8E:AE:C5:4B:EF:DE:8B:80:8A Authority key identifier: C4:F6:38:C0:9E:37:20:46:C0:1D:F4:60:4C:28:11:64:F6:AC:16:22 Certificate issuer: /CN=A91F33A5/serialNumber=C4F638C09E372046C01DF4604C281164F6AC1622 Certificate serial: 0437 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft Manifest number: 0415 Signing time: Fri 25 Sep 2026 00:13:57 +0000 Manifest this update: Fri 25 Sep 2026 00:13:57 +0000 Manifest next update: Fri 02 Oct 2026 00:13:57 +0000 Files and hashes: 1: xPY4wJ43IEbAHfRgTCgRZPasFiI.crl (hash: XBKui3zsACiZUZ/v/koaIYyPOJ0hKZq3LIQjVqdyv9E=) 2: 5E967DEE1ED711EDBD936A15C4F9AE02.roa (hash: EGdleIb96T/dyNjtpTIecOYDwXkp3tZlJT2oSvIkBZ8=) 3: 236D4FF0FD9D11EC868CDF5DC4F9AE02.roa (hash: P8bll9ajRrMsTsWzXR9IujfXZpjapqmg7wDaxKW00m4=) 4: 40838EC01EDA11ED90A3A71FC4F9AE02.roa (hash: mEMF2EAxQOT8HjksswAup4xTzv21CP0nOKEj71FqbXc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.crl rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 00:13:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1079 (0x437) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F33A5, serialNumber=C4F638C09E372046C01DF4604C281164F6AC1622 Validity Not Before: Sep 25 00:13:57 2026 GMT Not After : Oct 2 00:13:57 2026 GMT Subject: CN=6ab5bcc5-54a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:56:70:82:7a:42:6d:20:7e:f3:2c:39:bb:53: f8:c6:7d:6e:9f:9f:ba:b4:a3:be:75:0c:75:76:c5: 1f:9e:f0:c9:87:69:bb:10:92:20:21:c8:d2:38:0b: 3e:fa:d4:fc:88:7b:0e:04:dd:86:d3:01:a6:b5:19: 9d:de:5f:94:e7:f2:c4:c5:29:89:c2:57:1c:76:05: 8d:60:93:d6:50:f2:31:b5:dc:39:17:c9:a4:a7:c2: a7:24:d5:57:7a:c6:ed:19:63:cd:99:61:fa:43:05: 80:a4:01:a0:6e:6b:c6:67:2a:da:38:4b:24:2b:94: 76:58:26:c6:d3:8a:1b:31:b4:4c:c5:ef:3c:c9:88: 58:aa:f8:ef:a7:3f:48:32:ba:e2:61:e9:f9:d8:e7: 32:c9:c6:c3:8c:b1:54:1a:55:a5:05:60:cc:6d:02: 39:e4:d5:9c:ba:60:79:49:dd:07:c4:3f:73:31:e6: 3e:3b:07:7b:e4:b5:24:0a:ce:7e:52:1d:2a:ad:f3: 2a:80:ba:15:27:72:b9:dc:f9:52:82:3a:15:e7:fd: ef:86:28:01:d8:d6:db:76:3d:cf:8f:89:26:d6:ac: 6f:12:0a:04:fc:0f:6c:7a:6d:aa:b9:84:d5:d2:21: 56:52:38:bc:8d:4d:9d:99:4e:ab:f0:26:e1:e4:40: 59:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:E6:39:F6:F3:FA:DF:C8:E4:79:C1:8E:AE:C5:4B:EF:DE:8B:80:8A X509v3 Authority Key Identifier: keyid:C4:F6:38:C0:9E:37:20:46:C0:1D:F4:60:4C:28:11:64:F6:AC:16:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:09:96:06:03:80:6f:e3:02:d5:d9:d6:0b:1b:44:8a:5d:29: 06:3a:8b:bd:50:f9:28:d6:3f:0c:51:2d:e7:f0:31:91:d1:2c: f3:8a:f1:5f:3e:77:5c:a9:24:cd:96:55:d9:a8:9d:d3:61:94: b7:a2:44:9b:0e:fc:1a:dd:ff:73:04:00:74:11:d9:a0:21:31: 75:fe:38:7b:22:3c:27:d8:58:f9:89:21:68:f1:7f:fd:52:ef: 85:80:40:41:c9:2f:b7:80:3f:ff:5f:a1:99:f2:4d:50:24:53: 7f:fc:a3:08:ed:92:3e:4b:ff:ce:33:87:9d:b8:8f:3d:97:a9: 67:38:ea:76:7f:44:06:93:dd:0d:34:d0:20:21:1b:76:99:05: 4f:3f:c9:78:3f:2c:66:d0:a6:6f:cd:64:f3:50:46:f5:b5:c1: a9:7a:f0:e4:e2:c9:00:c5:3d:75:22:d8:2d:f0:7c:f1:df:96: c4:4c:d2:45:30:81:b9:e7:d1:66:0a:fc:68:75:28:8a:2b:d9: 5b:7e:36:51:1e:19:b9:c5:11:cb:1d:f0:fb:6b:ba:0c:0c:a1: 01:f8:59:ad:95:c3:1c:85:60:d9:85:1b:8a:ca:11:23:89:7b: c6:1b:b2:03:c6:d9:75:1c:65:11:97:4d:e0:2a:77:66:ba:e9: d4:6f:57:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMzQTUxMTAvBgNVBAUTKEM0RjYzOEMwOUUzNzIwNDZDMDFERjQ2MDRDMjgxMTY0 RjZBQzE2MjIwHhcNMjYwOTI1MDAxMzU3WhcNMjYxMDAyMDAxMzU3WjAYMRYwFAYD VQQDEw02YWI1YmNjNS01NGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAslZwgnpCbSB+8yw5u1P4xn1un5+6tKO+dQx1dsUfnvDJh2m7EJIgIcjSOAs+ +tT8iHsOBN2G0wGmtRmd3l+U5/LExSmJwlccdgWNYJPWUPIxtdw5F8mkp8KnJNVX esbtGWPNmWH6QwWApAGgbmvGZyraOEskK5R2WCbG04obMbRMxe88yYhYqvjvpz9I MrriYen52OcyycbDjLFUGlWlBWDMbQI55NWcumB5Sd0HxD9zMeY+Owd75LUkCs5+ Uh0qrfMqgLoVJ3K53PlSgjoV5/3vhigB2Nbbdj3Pj4km1qxvEgoE/A9sem2quYTV 0iFWUji8jU2dmU6r8Cbh5EBZnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOnmOfbz +t/I5HnBjq7FS+/ei4CKMB8GA1UdIwQYMBaAFMT2OMCeNyBGwB30YEwoEWT2rBYi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzNBNS8xQzBFNzA2QUQ0 RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi94UFk0d0o0M0lFYkFIZlJnVENnUlpQYXNG aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQWTR3SjQzSUViQUhmUmdUQ2dSWlBhc0ZpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzNBNS8xQzBFNzA2QUQ0RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi94UFk0d0o0M0lF YkFIZlJnVENnUlpQYXNGaUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyAmWBgOAb+MC1dnWCxtEil0pBjqLvVD5KNY/DFEt5/AxkdEs84rxXz53XKkk zZZV2aid02GUt6JEmw78Gt3/cwQAdBHZoCExdf44eyI8J9hY+YkhaPF//VLvhYBA Qckvt4A//1+hmfJNUCRTf/yjCO2SPkv/zjOHnbiPPZepZzjqdn9EBpPdDTTQICEb dpkFTz/JeD8sZtCmb81k81BG9bXBqXrw5OLJAMU9dSLYLfB88d+WxEzSRTCBuefR Zgr8aHUoiivZW342UR4ZucURyx3w+2u6DAyhAfhZrZXDHIVg2YUbisoRI4l7xhuy A8bZdRxlEZdN4Cp3Zrrp1G9X1g== -----END CERTIFICATE-----Generated at Sat Sep 26 13:15:34 2026 by rpki-client