$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F92B3/F1A4448A72CB11F188D4BF8072A30FBC/xEbdiAEzWRNcPwbWL_xcLl2BjZA.mft File: xEbdiAEzWRNcPwbWL_xcLl2BjZA.mft (raw, json) Hash identifier: VPjNTXMulRHa+Z+T9VOLuCGQNdtqaq5qTZGAKOMmijY= Subject key identifier: 59:EC:39:3A:F7:97:A9:C2:5A:06:35:48:91:CE:1B:E1:E6:76:B8:B2 Authority key identifier: C4:46:DD:88:01:33:59:13:5C:3F:06:D6:2F:FC:5C:2E:5D:81:8D:90 Certificate issuer: /CN=A91F92B3/serialNumber=C446DD88013359135C3F06D62FFC5C2E5D818D90 Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEbdiAEzWRNcPwbWL_xcLl2BjZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F92B3/F1A4448A72CB11F188D4BF8072A30FBC/xEbdiAEzWRNcPwbWL_xcLl2BjZA.mft Manifest number: 2D Signing time: Mon 21 Sep 2026 08:41:39 +0000 Manifest this update: Mon 21 Sep 2026 08:41:39 +0000 Manifest next update: Mon 28 Sep 2026 08:41:39 +0000 Files and hashes: 1: xEbdiAEzWRNcPwbWL_xcLl2BjZA.crl (hash: Gkfcxpz8Q8E6KBwdivyiBzCftESRi3EI/gVEaJw8qlQ=) 2: 9CF5B0DA72CC11F1892D329F73A30FBC.roa (hash: eAY3YSVsrWhOYnMgrblEMg4l4JfsISH9fA2P7mQ1Kgo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F92B3/F1A4448A72CB11F188D4BF8072A30FBC/xEbdiAEzWRNcPwbWL_xcLl2BjZA.crl rsync://rpki.apnic.net/member_repository/A91F92B3/F1A4448A72CB11F188D4BF8072A30FBC/xEbdiAEzWRNcPwbWL_xcLl2BjZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEbdiAEzWRNcPwbWL_xcLl2BjZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:41:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F92B3, serialNumber=C446DD88013359135C3F06D62FFC5C2E5D818D90 Validity Not Before: Sep 21 08:41:39 2026 GMT Not After : Sep 28 08:41:39 2026 GMT Subject: CN=6ab0edc3-35d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0a:b6:0e:4e:41:67:9c:54:c6:ec:bc:4f:bb: ef:61:fc:fd:2f:20:6b:04:3b:6c:d9:23:02:28:ee: 52:2f:e0:6b:e1:ee:67:30:5b:90:49:68:6c:2d:c1: 3d:d2:0d:62:89:fe:ff:af:22:ec:91:9c:4e:a8:86: 85:f4:8d:b9:36:4a:88:10:11:a8:7e:db:be:00:14: 2b:7a:a8:a8:a5:20:66:92:bf:b3:4a:85:6e:3a:c0: 9f:f5:18:2c:5a:fb:82:2e:09:2b:2c:11:ef:d5:d2: ef:24:b1:d3:61:47:1e:ff:a0:f7:92:2d:e4:24:7d: 79:bf:c1:32:4f:53:7d:be:41:92:69:d3:03:9e:c2: 57:30:52:83:36:f5:e2:a1:00:f5:35:36:24:f0:bf: e7:93:c5:58:91:cd:f2:b1:26:90:f9:63:9c:4f:a0: a2:cc:41:b8:29:71:63:5a:25:0e:4e:85:29:1c:c3: ee:a2:24:2a:6d:ad:20:33:65:89:9b:50:56:40:03: 07:2c:bc:83:20:27:f8:b9:4c:23:98:cc:ff:f5:69: 02:ef:26:ca:05:54:c8:76:39:11:ce:49:eb:99:37: a2:e3:3e:c0:be:8b:27:28:a3:79:cb:87:b7:10:c0: 31:67:75:7a:a8:39:cf:ac:5d:97:58:dc:36:00:9d: 49:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:EC:39:3A:F7:97:A9:C2:5A:06:35:48:91:CE:1B:E1:E6:76:B8:B2 X509v3 Authority Key Identifier: keyid:C4:46:DD:88:01:33:59:13:5C:3F:06:D6:2F:FC:5C:2E:5D:81:8D:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F92B3/F1A4448A72CB11F188D4BF8072A30FBC/xEbdiAEzWRNcPwbWL_xcLl2BjZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEbdiAEzWRNcPwbWL_xcLl2BjZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F92B3/F1A4448A72CB11F188D4BF8072A30FBC/xEbdiAEzWRNcPwbWL_xcLl2BjZA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:a7:f6:79:c7:a6:09:58:83:e5:bd:1e:9c:1e:f5:c1:10:60: 40:2a:59:16:de:05:a4:00:66:ad:e7:c6:d0:80:74:0e:43:91: e4:37:80:0f:fe:52:fe:38:33:a1:07:45:1a:36:f2:f4:f9:5c: cc:4c:08:bf:62:da:6f:9f:b7:b4:20:03:76:3d:0c:26:8c:09: ec:cc:64:52:08:e7:b7:5e:4d:75:cc:76:38:cb:8b:34:85:22: 21:d8:68:e8:44:79:ba:47:af:04:6f:cc:89:57:56:2c:5d:f0: d6:b5:e0:67:23:51:5f:9b:85:8c:76:b7:56:2b:7f:80:b3:31: 81:2b:5c:94:11:03:59:4a:57:8f:d3:ea:18:2f:42:5a:ce:5f: 3a:e0:51:75:62:54:db:58:26:5b:b3:6f:08:c1:d7:4d:57:25: 83:52:f1:40:3d:bf:ba:d4:d1:2e:d1:27:15:87:3e:10:56:25: 9e:46:44:c5:7e:b5:22:48:79:a1:e1:6c:e8:6b:02:5a:2a:e9: 03:6c:dc:a4:17:a2:d1:4d:ca:9e:dd:52:7e:fe:4e:46:f9:99: ed:37:a2:89:9d:10:8e:10:52:45:00:8c:94:b8:28:d2:18:dc: 25:b2:ad:6c:57:e0:66:db:84:b0:21:40:44:ea:63:de:41:10: b5:b1:b5:f3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG OTJCMzExMC8GA1UEBRMoQzQ0NkREODgwMTMzNTkxMzVDM0YwNkQ2MkZGQzVDMkU1 RDgxOEQ5MDAeFw0yNjA5MjEwODQxMzlaFw0yNjA5MjgwODQxMzlaMBgxFjAUBgNV BAMTDTZhYjBlZGMzLTM1ZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJCrYOTkFnnFTG7LxPu+9h/P0vIGsEO2zZIwIo7lIv4Gvh7mcwW5BJaGwtwT3S DWKJ/v+vIuyRnE6ohoX0jbk2SogQEah+274AFCt6qKilIGaSv7NKhW46wJ/1GCxa +4IuCSssEe/V0u8ksdNhRx7/oPeSLeQkfXm/wTJPU32+QZJp0wOewlcwUoM29eKh APU1NiTwv+eTxViRzfKxJpD5Y5xPoKLMQbgpcWNaJQ5OhSkcw+6iJCptrSAzZYmb UFZAAwcsvIMgJ/i5TCOYzP/1aQLvJsoFVMh2ORHOSeuZN6LjPsC+iycoo3nLh7cQ wDFndXqoOc+sXZdY3DYAnUnvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUWew5OveX qcJaBjVIkc4b4eZ2uLIwHwYDVR0jBBgwFoAUxEbdiAEzWRNcPwbWL/xcLl2BjZAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5MkIzL0YxQTQ0NDhBNzJD QjExRjE4OEQ0QkY4MDcyQTMwRkJDL3hFYmRpQUV6V1JOY1B3YldMX3hjTGwyQmpa QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveEViZGlBRXpXUk5jUHdiV0xfeGNMbDJCalpBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5 MkIzL0YxQTQ0NDhBNzJDQjExRjE4OEQ0QkY4MDcyQTMwRkJDL3hFYmRpQUV6V1JO Y1B3YldMX3hjTGwyQmpaQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCAp/Z5x6YJWIPlvR6cHvXBEGBAKlkW3gWkAGat58bQgHQOQ5HkN4AP/lL+ODOh B0UaNvL0+VzMTAi/Ytpvn7e0IAN2PQwmjAnszGRSCOe3Xk11zHY4y4s0hSIh2Gjo RHm6R68Eb8yJV1YsXfDWteBnI1Ffm4WMdrdWK3+AszGBK1yUEQNZSleP0+oYL0Ja zl864FF1YlTbWCZbs28IwddNVyWDUvFAPb+61NEu0ScVhz4QViWeRkTFfrUiSHmh 4WzoawJaKukDbNykF6LRTcqe3VJ+/k5G+ZntN6KJnRCOEFJFAIyUuCjSGNwlsq1s V+Bm24SwIUBE6mPeQRC1sbXz -----END CERTIFICATE-----Generated at Tue Sep 22 17:59:34 2026 by rpki-client