$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft File: sxnfFFXYouFJjNxdSRVpgxxa_aE.mft (raw, json) Hash identifier: QaZJoBI1MB/D1AsFdo68EoaHobDe3lnHr+/Q5nIb2Z4= Subject key identifier: D6:83:7A:EF:33:43:0D:54:AF:63:47:E0:2C:7E:D5:1F:01:4A:C0:F7 Authority key identifier: B3:19:DF:14:55:D8:A2:E1:49:8C:DC:5D:49:15:69:83:1C:5A:FD:A1 Certificate issuer: /CN=A91F87BB/serialNumber=B319DF1455D8A2E1498CDC5D491569831C5AFDA1 Certificate serial: 0500 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft Manifest number: 04EC Signing time: Tue 22 Sep 2026 23:23:04 +0000 Manifest this update: Tue 22 Sep 2026 23:23:03 +0000 Manifest next update: Tue 29 Sep 2026 23:23:03 +0000 Files and hashes: 1: sxnfFFXYouFJjNxdSRVpgxxa_aE.crl (hash: AsWo0arCIborzTneAT8/Ry2ZZXCA9wCNN2nKNR8owPI=) 2: 176210F23FF611F182DAE6C398833773.roa (hash: w9aUmyYLLIpCKQS6vxeVDWsnqw2NjIzSp/vkd/WGYr8=) 3: DDCB6B02D9D311EEBB3BDF10C4F9AE02.roa (hash: KU0ufVeci0w9ovxEyLq7SERtD22aftIPEj3L8PrHlJE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.crl rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 23:23:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1280 (0x500) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F87BB, serialNumber=B319DF1455D8A2E1498CDC5D491569831C5AFDA1 Validity Not Before: Sep 22 23:23:03 2026 GMT Not After : Sep 29 23:23:03 2026 GMT Subject: CN=6ab30dd7-5bed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a9:82:2e:66:38:15:b6:f1:3e:02:20:5e:48: 73:fd:c8:79:0b:13:74:bc:9b:32:a4:ff:95:17:52: d7:5b:be:d8:d5:fa:dc:b2:53:12:8e:b7:2d:3f:d6: cc:3b:7c:9c:2b:91:40:85:b4:95:cf:29:d4:55:3a: b0:f5:a5:06:30:fe:9b:dd:06:5e:f0:f9:65:ee:fa: ac:19:e8:74:ba:1c:0a:ee:c0:cc:25:b0:79:b0:c5: a8:51:32:57:9e:0c:7d:ce:7e:93:45:c7:e0:47:c8: e3:a8:e5:74:3d:6f:13:9a:19:0d:bd:6a:31:2d:cc: 91:5f:3c:7a:aa:9b:4c:93:71:c2:f0:06:78:b0:fc: 3a:7c:d2:95:ed:b1:15:83:d2:2b:ab:c4:d2:97:01: db:42:18:17:dc:94:54:ef:05:e0:1c:e1:7c:c2:bc: 6a:9e:fc:08:0d:2d:42:a4:c9:5f:26:49:bf:ee:3b: 0e:85:53:8f:d2:95:1c:04:54:6b:6c:6e:db:79:6e: ce:21:c8:01:e6:54:fb:77:20:67:6d:f0:80:4c:56: eb:6c:ed:36:21:86:00:55:ce:d1:c4:0e:7d:25:f0: 2b:f8:fb:d5:5b:7f:11:b9:c2:ee:17:39:83:2f:15: 2f:17:62:01:7c:10:a9:50:e9:9b:65:cb:11:de:c6: 86:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:83:7A:EF:33:43:0D:54:AF:63:47:E0:2C:7E:D5:1F:01:4A:C0:F7 X509v3 Authority Key Identifier: keyid:B3:19:DF:14:55:D8:A2:E1:49:8C:DC:5D:49:15:69:83:1C:5A:FD:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:72:70:94:63:e4:40:66:e4:df:f0:7a:e4:66:42:a2:ca:56: 42:14:20:fb:20:5f:7f:b9:a5:74:2c:51:7a:99:f7:c3:c6:22: 26:89:92:41:9c:74:5b:4c:4d:90:15:a7:6e:76:28:7f:5e:ba: f6:79:37:df:de:58:14:21:42:04:59:7e:0e:71:c6:27:fb:7a: 82:59:76:7d:33:a3:03:bc:9f:65:3c:ec:fb:a9:60:db:f3:4f: cd:de:9a:be:e0:b4:de:2f:73:54:34:30:c4:d4:79:81:ae:a6: dd:07:5b:ac:c1:45:3c:73:f0:12:ca:1f:1c:6e:7a:3b:b1:6c: 43:b7:c4:94:4f:1d:74:bf:f3:85:e5:cc:e4:3c:f5:c7:fd:ad: c4:2a:5b:d9:43:54:a7:03:14:d9:46:7e:e5:97:82:5a:ca:f2: 02:12:b2:76:3d:5d:13:ad:ca:cd:b9:9b:f9:3d:12:4f:31:a5: e4:24:72:ac:a6:52:c6:27:4f:77:b9:ab:4f:9f:79:e4:39:76: d7:cd:91:9f:97:49:1c:48:ce:80:a7:2f:8d:16:30:c9:f9:3a: b9:e6:69:6f:4e:ba:fb:45:7a:e4:2c:3d:a7:8e:2f:e6:c9:3f: de:37:a1:a1:c9:c8:af:f1:47:b1:ca:03:42:e3:bb:12:c5:06: 0e:f2:1a:0b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg3QkIxMTAvBgNVBAUTKEIzMTlERjE0NTVEOEEyRTE0OThDREM1RDQ5MTU2OTgz MUM1QUZEQTEwHhcNMjYwOTIyMjMyMzAzWhcNMjYwOTI5MjMyMzAzWjAYMRYwFAYD VQQDEw02YWIzMGRkNy01YmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp6mCLmY4FbbxPgIgXkhz/ch5CxN0vJsypP+VF1LXW77Y1frcslMSjrctP9bM O3ycK5FAhbSVzynUVTqw9aUGMP6b3QZe8Pll7vqsGeh0uhwK7sDMJbB5sMWoUTJX ngx9zn6TRcfgR8jjqOV0PW8TmhkNvWoxLcyRXzx6qptMk3HC8AZ4sPw6fNKV7bEV g9Irq8TSlwHbQhgX3JRU7wXgHOF8wrxqnvwIDS1CpMlfJkm/7jsOhVOP0pUcBFRr bG7beW7OIcgB5lT7dyBnbfCATFbrbO02IYYAVc7RxA59JfAr+PvVW38RucLuFzmD LxUvF2IBfBCpUOmbZcsR3saGnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNaDeu8z Qw1Ur2NH4Cx+1R8BSsD3MB8GA1UdIwQYMBaAFLMZ3xRV2KLhSYzcXUkVaYMcWv2h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODdCQi85REYwREZCRTdE RTkxMUVDQkVBMDhFMEZDNEY5QUUwMi9zeG5mRkZYWW91RkpqTnhkU1JWcGd4eGFf YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N4bmZGRlhZb3VGSmpOeGRTUlZwZ3h4YV9hRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODdCQi85REYwREZCRTdERTkxMUVDQkVBMDhFMEZDNEY5QUUwMi9zeG5mRkZYWW91 RkpqTnhkU1JWcGd4eGFfYUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANXJwlGPkQGbk3/B65GZCospWQhQg+yBff7mldCxRepn3w8YiJomSQZx0W0xN kBWnbnYof1669nk3395YFCFCBFl+DnHGJ/t6gll2fTOjA7yfZTzs+6lg2/NPzd6a vuC03i9zVDQwxNR5ga6m3QdbrMFFPHPwEsofHG56O7FsQ7fElE8ddL/zheXM5Dz1 x/2txCpb2UNUpwMU2UZ+5ZeCWsryAhKydj1dE63Kzbmb+T0STzGl5CRyrKZSxidP d7mrT5955Dl2182Rn5dJHEjOgKcvjRYwyfk6ueZpb066+0V65Cw9p44v5sk/3jeh ocnIr/FHscoDQuO7EsUGDvIaCw== -----END CERTIFICATE-----Generated at Thu Sep 24 08:02:07 2026 by rpki-client