$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F7113/CD67F3266AD511F1A1558F9E6C47A888/xBA2pq0HEadA_q5RVOE3zud7x7E.mft File: xBA2pq0HEadA_q5RVOE3zud7x7E.mft (raw, json) Hash identifier: 6hJFu+Ph4ozyw+LHN9xJgW8AgPFMBr/Rh2oGDkhbRlE= Subject key identifier: BA:7F:A0:77:95:BF:B6:F4:60:53:82:D2:EC:67:DC:3F:25:B8:65:ED Authority key identifier: C4:10:36:A6:AD:07:11:A7:40:FE:AE:51:54:E1:37:CE:E7:7B:C7:B1 Certificate issuer: /CN=A91F7113/serialNumber=C41036A6AD0711A740FEAE5154E137CEE77BC7B1 Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xBA2pq0HEadA_q5RVOE3zud7x7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7113/CD67F3266AD511F1A1558F9E6C47A888/xBA2pq0HEadA_q5RVOE3zud7x7E.mft Manifest number: 32 Signing time: Mon 21 Sep 2026 08:39:12 +0000 Manifest this update: Mon 21 Sep 2026 08:39:12 +0000 Manifest next update: Mon 28 Sep 2026 08:39:12 +0000 Files and hashes: 1: xBA2pq0HEadA_q5RVOE3zud7x7E.crl (hash: yZ0fUJa1N68pEi1SaSOgUrmhJDJsAyPobYKEuFpwOGo=) 2: CA0D122C6AD711F18FD2EC236D47A888.roa (hash: YHQct6L4pL/zTQ4jersZLzeD7JHF3Rv1GS4aJY0I1+c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7113/CD67F3266AD511F1A1558F9E6C47A888/xBA2pq0HEadA_q5RVOE3zud7x7E.crl rsync://rpki.apnic.net/member_repository/A91F7113/CD67F3266AD511F1A1558F9E6C47A888/xBA2pq0HEadA_q5RVOE3zud7x7E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xBA2pq0HEadA_q5RVOE3zud7x7E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:39:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7113, serialNumber=C41036A6AD0711A740FEAE5154E137CEE77BC7B1 Validity Not Before: Sep 21 08:39:12 2026 GMT Not After : Sep 28 08:39:12 2026 GMT Subject: CN=6ab0ed30-6f3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:34:a2:08:c0:07:82:9e:e6:bb:70:b2:1c:a7: 07:97:e4:c6:5b:dc:49:1a:07:fc:bb:ce:d4:b9:e5: d2:6a:2d:dc:3d:d7:c5:9c:4d:5b:6f:d9:be:ea:48: 46:5c:cf:89:ed:e5:9a:da:53:f1:9a:b4:f8:69:79: 4f:1a:b7:7b:15:95:d9:41:80:c2:18:d8:2f:b2:04: 88:a3:60:8f:84:2e:20:d8:ab:18:50:47:6a:40:40: af:78:d6:fa:4c:2b:25:47:13:e7:ec:35:3b:f0:c4: da:fe:f2:d2:64:cc:1f:f9:1f:70:59:69:06:3a:30: 70:c1:75:9c:2a:41:7b:85:da:9b:ed:4a:e5:1a:08: cb:46:11:e4:48:b2:31:b8:c5:a3:0f:34:db:20:29: 2f:4e:91:00:d1:8d:3d:2c:3d:70:72:dc:14:cf:90: 86:d5:bd:3f:37:5f:78:db:15:a3:69:36:3a:85:b7: a3:e4:22:10:53:7d:60:60:5b:e4:80:74:7f:05:a1: be:9d:15:17:cb:ce:ed:26:cc:f6:22:3b:7c:38:6a: eb:d5:bd:69:e5:1d:27:6c:1d:01:b7:9f:c4:1a:67: c3:11:e6:58:a6:a3:c0:30:80:b0:dd:1c:eb:b1:06: 41:74:91:56:e3:6c:6e:36:43:3b:47:c0:4f:f1:2b: 1c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:7F:A0:77:95:BF:B6:F4:60:53:82:D2:EC:67:DC:3F:25:B8:65:ED X509v3 Authority Key Identifier: keyid:C4:10:36:A6:AD:07:11:A7:40:FE:AE:51:54:E1:37:CE:E7:7B:C7:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7113/CD67F3266AD511F1A1558F9E6C47A888/xBA2pq0HEadA_q5RVOE3zud7x7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xBA2pq0HEadA_q5RVOE3zud7x7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7113/CD67F3266AD511F1A1558F9E6C47A888/xBA2pq0HEadA_q5RVOE3zud7x7E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:87:51:21:42:73:5f:91:cd:92:01:2c:88:ef:97:65:39:fc: 9b:cc:05:9c:2c:e3:88:1f:fe:95:a3:f7:7a:65:04:5f:99:e6: f9:8d:62:d6:bd:8b:fb:d9:d3:91:69:65:d2:d1:55:75:9e:2d: eb:97:0d:29:7f:55:e7:69:f0:63:d8:32:b9:4e:90:ab:f8:06: 61:85:d5:90:74:61:b5:44:67:2a:c5:86:6c:e8:f2:5e:0b:6c: 8a:64:9e:d5:cf:cf:9d:93:b4:64:01:bd:2b:d6:73:bc:73:2e: 78:f2:09:ee:3e:91:4b:ee:1c:58:e1:e3:b9:57:06:ac:e7:c9: 10:6b:ed:d2:49:1d:4e:1b:6b:f5:5c:7c:3e:57:7c:ed:d2:e5: b8:89:fe:b2:ee:cc:f5:b4:14:7f:81:be:1b:11:65:fb:8b:65: b5:9a:8d:a8:8b:34:a0:9b:0e:be:2e:58:23:40:2e:ee:29:36: b0:47:54:01:e7:62:b8:4c:99:5b:3f:66:a7:5e:5d:15:eb:d7: 2a:70:26:6c:c2:e6:82:3b:ef:6c:2f:71:5e:2e:36:c7:e7:1a: 5f:27:32:93:b7:84:89:4f:bc:96:f2:32:67:7f:f3:fd:32:85: 70:21:33:85:61:6b:3a:b1:61:31:82:2e:51:24:4b:00:4b:61: a5:95:ff:73 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NzExMzExMC8GA1UEBRMoQzQxMDM2QTZBRDA3MTFBNzQwRkVBRTUxNTRFMTM3Q0VF NzdCQzdCMTAeFw0yNjA5MjEwODM5MTJaFw0yNjA5MjgwODM5MTJaMBgxFjAUBgNV BAMTDTZhYjBlZDMwLTZmM2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoNKIIwAeCnua7cLIcpweX5MZb3EkaB/y7ztS55dJqLdw918WcTVtv2b7qSEZc z4nt5ZraU/GatPhpeU8at3sVldlBgMIY2C+yBIijYI+ELiDYqxhQR2pAQK941vpM KyVHE+fsNTvwxNr+8tJkzB/5H3BZaQY6MHDBdZwqQXuF2pvtSuUaCMtGEeRIsjG4 xaMPNNsgKS9OkQDRjT0sPXBy3BTPkIbVvT83X3jbFaNpNjqFt6PkIhBTfWBgW+SA dH8Fob6dFRfLzu0mzPYiO3w4auvVvWnlHSdsHQG3n8QaZ8MR5limo8AwgLDdHOux BkF0kVbjbG42QztHwE/xKxzLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUun+gd5W/ tvRgU4LS7GfcPyW4Ze0wHwYDVR0jBBgwFoAUxBA2pq0HEadA/q5RVOE3zud7x7Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3MTEzL0NENjdGMzI2NkFE NTExRjFBMTU1OEY5RTZDNDdBODg4L3hCQTJwcTBIRWFkQV9xNVJWT0UzenVkN3g3 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveEJBMnBxMEhFYWRBX3E1UlZPRTN6dWQ3eDdFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3 MTEzL0NENjdGMzI2NkFENTExRjFBMTU1OEY5RTZDNDdBODg4L3hCQTJwcTBIRWFk QV9xNVJWT0UzenVkN3g3RS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAeh1EhQnNfkc2SASyI75dlOfybzAWcLOOIH/6Vo/d6ZQRfmeb5jWLWvYv72dOR aWXS0VV1ni3rlw0pf1XnafBj2DK5TpCr+AZhhdWQdGG1RGcqxYZs6PJeC2yKZJ7V z8+dk7RkAb0r1nO8cy548gnuPpFL7hxY4eO5Vwas58kQa+3SSR1OG2v1XHw+V3zt 0uW4if6y7sz1tBR/gb4bEWX7i2W1mo2oizSgmw6+LlgjQC7uKTawR1QB52K4TJlb P2anXl0V69cqcCZswuaCO+9sL3FeLjbH5xpfJzKTt4SJT7yW8jJnf/P9MoVwITOF YWs6sWExgi5RJEsAS2Gllf9z -----END CERTIFICATE-----Generated at Tue Sep 22 07:09:08 2026 by rpki-client