$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft File: 1xhrKGW4YA1mKCKv65AVcAbg9BA.mft (raw, json) Hash identifier: 12Tq9E6AI42UzPJgiBzj1u4/zE/qZd3aC61Yt+eyOd8= Subject key identifier: 5E:1C:A9:9B:17:5B:EA:72:32:FB:37:69:3F:BF:CC:92:E8:2C:05:D8 Authority key identifier: D7:18:6B:28:65:B8:60:0D:66:28:22:AF:EB:90:15:70:06:E0:F4:10 Certificate issuer: /CN=A91F428C/serialNumber=D7186B2865B8600D662822AFEB90157006E0F410 Certificate serial: 358B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xhrKGW4YA1mKCKv65AVcAbg9BA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft Manifest number: 3583 Signing time: Sun 20 Sep 2026 15:01:18 +0000 Manifest this update: Sun 20 Sep 2026 15:01:18 +0000 Manifest next update: Sun 27 Sep 2026 15:01:18 +0000 Files and hashes: 1: 1xhrKGW4YA1mKCKv65AVcAbg9BA.crl (hash: I7Qcka1XfQT8741D2o1wnmMvX54xtn7CNXrx/rKsVic=) 2: B8201598BED111EC93B74C4FC4F9AE02.roa (hash: avjUCYfIUTnXlS17xW5tzr/N2L2zs3IwMpwbWsZCILA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.crl rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xhrKGW4YA1mKCKv65AVcAbg9BA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13707 (0x358b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F428C, serialNumber=D7186B2865B8600D662822AFEB90157006E0F410 Validity Not Before: Sep 20 15:01:18 2026 GMT Not After : Sep 27 15:01:18 2026 GMT Subject: CN=6aaff53e-9d76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:91:7c:db:88:dc:84:24:48:f5:48:fe:f2:93: e9:b1:57:73:65:3f:44:fa:c3:e7:d6:38:15:44:74: ee:c6:81:29:62:6b:94:ee:c0:bf:36:01:83:e9:6a: 26:ee:f9:05:79:1e:14:73:5d:af:c1:6d:59:97:13: 31:94:4a:ea:51:0d:cf:9d:88:66:9f:f5:c7:c3:70: ca:22:8b:96:35:43:b9:47:14:e3:9b:69:ba:60:f5: f0:ab:4a:5c:55:bd:e1:c1:01:53:b1:65:27:95:bd: 15:63:d9:7e:53:05:08:aa:98:73:02:31:6d:06:de: 7c:d8:57:9a:4b:b2:08:c3:2f:ff:5b:86:d2:74:b1: ce:2d:45:96:1d:29:96:b1:22:55:14:6e:7f:74:87: a3:84:37:24:f1:da:ef:8b:d3:63:42:fa:81:17:e1: 98:87:50:7f:7b:71:30:ab:25:a3:11:09:58:e9:35: 62:3f:a5:8c:44:81:52:b5:70:1f:74:10:ab:f0:b7: aa:ea:34:88:55:e2:e3:58:b0:08:fb:b9:d5:58:7e: a3:0b:5f:26:c5:cc:4f:89:a5:0f:51:81:d9:38:dc: 33:78:45:d6:21:43:94:2c:d8:81:33:e2:f1:db:0d: d8:22:36:bf:1d:71:ef:52:74:8d:92:55:59:a2:ea: 2a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:1C:A9:9B:17:5B:EA:72:32:FB:37:69:3F:BF:CC:92:E8:2C:05:D8 X509v3 Authority Key Identifier: keyid:D7:18:6B:28:65:B8:60:0D:66:28:22:AF:EB:90:15:70:06:E0:F4:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xhrKGW4YA1mKCKv65AVcAbg9BA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption f1:e7:03:78:fd:7d:1d:e9:77:77:b6:be:47:86:4e:26:72:35: 55:7c:71:b2:16:3d:d3:99:43:18:bc:c3:56:b2:7f:ca:97:88: e4:13:34:9f:36:51:96:ab:57:15:e2:a2:3a:72:05:40:83:cd: f5:c1:ea:aa:b5:d2:38:c1:42:36:20:3c:a1:df:cd:74:d2:c9: e4:86:bd:fa:fd:d5:05:ad:1a:9d:7a:ec:21:0c:8b:10:e9:5e: 5a:45:e0:72:a6:da:f5:e1:51:90:be:d4:34:25:7d:9d:79:02: 8f:f8:92:00:92:c1:1e:5c:4d:63:81:d4:14:b6:1c:b6:b9:45: 14:2a:67:96:36:e7:0c:3e:60:03:2b:5c:95:1b:bd:9e:fe:33: 05:2d:9e:8c:61:8c:3f:04:48:4b:b7:1a:5d:b8:c5:02:42:14: 83:93:37:01:f9:a6:c9:6d:20:88:a4:66:bd:c7:af:0f:03:36: 96:7a:3b:5c:21:67:8e:3b:5a:38:b0:7b:3e:fd:ba:98:44:53: fc:c2:33:47:3d:2d:4c:50:54:fd:c4:22:70:60:d6:67:8d:61: ab:0a:bf:c0:5e:22:3f:ce:22:b1:a1:77:c0:ee:d3:77:ab:7c: 9a:14:5a:7a:cd:ae:37:61:36:4d:a1:dd:3a:df:1b:84:20:5e: fa:49:9e:16 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyOEMxMTAvBgNVBAUTKEQ3MTg2QjI4NjVCODYwMEQ2NjI4MjJBRkVCOTAxNTcw MDZFMEY0MTAwHhcNMjYwOTIwMTUwMTE4WhcNMjYwOTI3MTUwMTE4WjAYMRYwFAYD VQQDEw02YWFmZjUzZS05ZDc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0pF824jchCRI9Uj+8pPpsVdzZT9E+sPn1jgVRHTuxoEpYmuU7sC/NgGD6Wom 7vkFeR4Uc12vwW1ZlxMxlErqUQ3PnYhmn/XHw3DKIouWNUO5RxTjm2m6YPXwq0pc Vb3hwQFTsWUnlb0VY9l+UwUIqphzAjFtBt582FeaS7IIwy//W4bSdLHOLUWWHSmW sSJVFG5/dIejhDck8drvi9NjQvqBF+GYh1B/e3EwqyWjEQlY6TViP6WMRIFStXAf dBCr8Leq6jSIVeLjWLAI+7nVWH6jC18mxcxPiaUPUYHZONwzeEXWIUOULNiBM+Lx 2w3YIja/HXHvUnSNklVZouoq7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF4cqZsX W+pyMvs3aT+/zJLoLAXYMB8GA1UdIwQYMBaAFNcYayhluGANZigir+uQFXAG4PQQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI4Qy81MkZDQzY0ODFE QTAxMUUyQjZEODcwOTEwOEIwMkNEMi8xeGhyS0dXNFlBMW1LQ0t2NjVBVmNBYmc5 QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF4aHJLR1c0WUExbUtDS3Y2NUFWY0FiZzlCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI4Qy81MkZDQzY0ODFEQTAxMUUyQjZEODcwOTEwOEIwMkNEMi8xeGhyS0dXNFlB MW1LQ0t2NjVBVmNBYmc5QkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA8ecDeP19Hel3d7a+R4ZOJnI1VXxxshY905lDGLzDVrJ/ypeI5BM0nzZRlqtX FeKiOnIFQIPN9cHqqrXSOMFCNiA8od/NdNLJ5Ia9+v3VBa0anXrsIQyLEOleWkXg cqba9eFRkL7UNCV9nXkCj/iSAJLBHlxNY4HUFLYctrlFFCpnljbnDD5gAytclRu9 nv4zBS2ejGGMPwRIS7caXbjFAkIUg5M3AfmmyW0giKRmvcevDwM2lno7XCFnjjta OLB7Pv26mERT/MIzRz0tTFBU/cQicGDWZ41hqwq/wF4iP84isaF3wO7Td6t8mhRa es2uN2E2TaHdOt8bhCBe+kmeFg== -----END CERTIFICATE-----Generated at Mon Sep 21 06:10:38 2026 by rpki-client