$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft File: -xEsrVYxm_qsoasoznvX9MsmjOk.mft (raw, json) Hash identifier: 3XWxr/QGqfmDeNAPCvxAEZpcNB7n+eUvdeqIoVwSy+U= Subject key identifier: 72:A7:A1:A9:8C:E3:72:6C:68:98:63:48:BD:E5:2E:D7:0B:BD:5A:2F Authority key identifier: FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9 Certificate issuer: /CN=A91ADDD5/serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9 Certificate serial: 0682 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft Manifest number: 066C Signing time: Wed 16 Sep 2026 22:36:53 +0000 Manifest this update: Wed 16 Sep 2026 22:36:53 +0000 Manifest next update: Wed 23 Sep 2026 22:36:53 +0000 Files and hashes: 1: -xEsrVYxm_qsoasoznvX9MsmjOk.crl (hash: 05LaGRrtBvAwlShIGibBkVnDM1x+SL4RpxjcfRcQd0M=) 2: 128DFF02E14611EE80D6C425C4F9AE02.roa (hash: O4RI8nFWIUHGr3lrmWvMSynoOuRE0fzWotx1sdpRx0k=) 3: F50A884C5DDF11F197B40288B8833773.roa (hash: q5ErDtvJGiFQsfi0aNFW5nSZE39VbQoqOQCebpIWByc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 22:36:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1666 (0x682) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADDD5, serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9 Validity Not Before: Sep 16 22:36:53 2026 GMT Not After : Sep 23 22:36:53 2026 GMT Subject: CN=6aab1a05-24e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b8:69:ad:8b:e6:1a:eb:be:98:bc:fa:7a:26: a4:2e:f8:6b:fc:7e:50:8a:45:f5:13:d4:d8:29:5c: 1b:ff:df:b7:10:5c:3e:9d:5a:84:4c:e2:dd:02:0d: 72:5d:89:a4:2e:94:88:f8:46:80:84:03:fa:be:47: 98:37:b8:af:a4:4a:63:e7:8b:7a:d6:24:66:a1:e2: 98:65:0d:ef:8e:53:31:be:39:91:b0:c0:b2:03:0b: 79:fc:49:f5:2f:54:c6:42:0d:f0:e5:c2:48:93:28: af:0a:6a:f6:8d:3e:a2:d0:a2:32:f0:59:d8:50:87: 7a:e6:67:5c:3c:8c:63:94:d3:bb:e3:3c:e3:af:f9: 3f:8c:9b:e6:ce:2f:9e:49:63:8e:73:20:23:86:3a: c7:86:ee:00:c7:2b:71:d7:c3:36:2b:e0:64:c7:f8: 93:5d:4d:18:65:cb:84:20:c3:30:0c:29:c6:de:43: 94:2f:d0:ef:d2:22:12:ea:5a:d9:e8:1a:f1:4f:f5: 9a:c8:d4:04:43:ca:3e:54:70:69:10:ba:15:2e:92: bd:67:a5:5d:4e:44:a7:c9:d5:84:f8:62:59:32:ed: 5e:dc:56:73:0f:85:b3:06:94:e3:b1:17:93:46:db: 66:85:7b:db:3e:7d:07:fa:93:59:20:42:8e:99:06: c6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:A7:A1:A9:8C:E3:72:6C:68:98:63:48:BD:E5:2E:D7:0B:BD:5A:2F X509v3 Authority Key Identifier: keyid:FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:5b:f8:f7:57:52:26:3a:73:98:92:85:88:36:f6:61:bf:15: 35:40:9f:01:87:b7:22:c3:c8:f5:df:5a:f5:ac:e0:ea:10:14: b2:9f:ca:e3:d4:85:22:bc:d5:66:d8:0c:9c:81:ec:e1:86:b8: 13:ab:51:5f:c3:3b:ad:ab:58:d1:8e:6d:66:27:03:92:bc:72: 11:3e:bf:8a:0a:04:7f:ff:f7:54:c4:b1:72:ca:8b:aa:f0:86: c6:06:5b:7a:d4:e1:a9:b2:23:d6:80:c7:73:d3:0b:0c:62:64: 8f:f5:87:4a:8a:21:34:07:50:c2:ad:53:e8:04:88:b6:d5:cb: 5d:1d:e2:90:39:40:2b:73:96:07:a8:53:ac:c3:c9:62:2a:a1: f3:19:b5:bd:c2:eb:b3:69:61:88:97:83:82:cf:01:aa:bb:71: 0d:2f:82:67:40:57:74:29:9c:92:52:f4:13:35:05:3d:05:59: 4f:f7:aa:1f:ef:10:40:c8:6e:09:30:fc:17:5e:20:4b:87:20: d7:72:5f:81:2b:1a:28:c8:3f:0b:59:59:c4:48:8f:e2:20:31: 4f:6e:31:6b:ad:66:50:81:ca:70:19:b2:f6:70:1f:b4:82:44: 81:61:b3:c1:63:d2:bb:63:93:e7:75:24:57:b5:74:57:e3:e3: 4b:3a:9b:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURERDUxMTAvBgNVBAUTKEZCMTEyQ0FENTYzMTlCRkFBQ0ExQUIyOENFN0JEN0Y0 Q0IyNjhDRTkwHhcNMjYwOTE2MjIzNjUzWhcNMjYwOTIzMjIzNjUzWjAYMRYwFAYD VQQDEw02YWFiMWEwNS0yNGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7hprYvmGuu+mLz6eiakLvhr/H5QikX1E9TYKVwb/9+3EFw+nVqETOLdAg1y XYmkLpSI+EaAhAP6vkeYN7ivpEpj54t61iRmoeKYZQ3vjlMxvjmRsMCyAwt5/En1 L1TGQg3w5cJIkyivCmr2jT6i0KIy8FnYUId65mdcPIxjlNO74zzjr/k/jJvmzi+e SWOOcyAjhjrHhu4Axytx18M2K+Bkx/iTXU0YZcuEIMMwDCnG3kOUL9Dv0iIS6lrZ 6BrxT/WayNQEQ8o+VHBpELoVLpK9Z6VdTkSnydWE+GJZMu1e3FZzD4WzBpTjsReT RttmhXvbPn0H+pNZIEKOmQbGzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHKnoamM 43JsaJhjSL3lLtcLvVovMB8GA1UdIwQYMBaAFPsRLK1WMZv6rKGrKM571/TLJozp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRERENS84QjBEMEZGMkUz RjgxMUVCOUUwOERCMTRDNEY5QUUwMi8teEVzclZZeG1fcXNvYXNvem52WDlNc21q T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy14RXNyVll4bV9xc29hc296bnZYOU1zbWpPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RERENS84QjBEMEZGMkUzRjgxMUVCOUUwOERCMTRDNEY5QUUwMi8teEVzclZZeG1f cXNvYXNvem52WDlNc21qT2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcFv491dSJjpzmJKFiDb2Yb8VNUCfAYe3IsPI9d9a9azg6hAUsp/K49SFIrzV ZtgMnIHs4Ya4E6tRX8M7ratY0Y5tZicDkrxyET6/igoEf//3VMSxcsqLqvCGxgZb etThqbIj1oDHc9MLDGJkj/WHSoohNAdQwq1T6ASIttXLXR3ikDlAK3OWB6hTrMPJ Yiqh8xm1vcLrs2lhiJeDgs8BqrtxDS+CZ0BXdCmcklL0EzUFPQVZT/eqH+8QQMhu CTD8F14gS4cg13JfgSsaKMg/C1lZxEiP4iAxT24xa61mUIHKcBmy9nAftIJEgWGz wWPSu2OT53UkV7V0V+PjSzqb1g== -----END CERTIFICATE-----Generated at Fri Sep 18 23:03:32 2026 by rpki-client