$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft File: xE8qyrKneZlDFaqTsyPam0dce5o.mft (raw, json) Hash identifier: Za5yogWDt3bN1Rj6IPtuTsce3BrlCRnFAUkWpFXZPsM= Subject key identifier: 2B:52:47:6E:98:72:0D:52:18:60:29:46:A1:4F:E5:F6:E5:9B:25:E1 Authority key identifier: C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A Certificate issuer: /CN=A91BDCF1/serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A Certificate serial: 04F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft Manifest number: 04A9 Signing time: Thu 17 Sep 2026 00:04:39 +0000 Manifest this update: Thu 17 Sep 2026 00:04:39 +0000 Manifest next update: Thu 24 Sep 2026 00:04:39 +0000 Files and hashes: 1: xE8qyrKneZlDFaqTsyPam0dce5o.crl (hash: r4dySV44wyjX5rFGndQ8le09LZOpaaSEhHBv3LMEZOY=) 2: 97F41C10818811F0AE59F81AC4F9AE02.roa (hash: ZlA781tNXPtHDv8gbQ6DMbr27sqCTQUDYyUqps9Yuss=) 3: 25985D28EE1411EFB4908431C4F9AE02.roa (hash: 4xc2eHMBANiDLGUopOzPmz/t979NlwB4OQ24UrePrZk=) 4: 4643A5E4703011EFA1A7CB20C4F9AE02.roa (hash: CNCgjqoVzyqxh93n0ZBsBcg25yxnaYEUJ+jXTOgpvUo=) 5: 977BACDA818811F0AE59F81AC4F9AE02.roa (hash: dEkGctGFRuV+92+6vy6IawdT4cLJk4p5FamFSDgRr5E=) 6: 366FD216EC5611F0B67F861C4A6F56BC.roa (hash: 8hEcxmIABfPcKgGp7REoiZjUChwO5uqaU2sng+eHPto=) 7: E2ADA1E4AE8311F196A6E2687011F970.roa (hash: pV7LACnAOovbk4kGz4yeqcGr1OmaV64Doq2AzSoU9ng=) 8: 0735D9BEEC5611F09B1B681B4A6F56BC.roa (hash: 9O8lYARfguAM8wZyrMjSX3M2SixgKtVusIr2gjU+hSU=) 9: 5C153EA0EC5811F0941546AF4A6F56BC.roa (hash: SESRFgYcB//TECdDuj/cs+vfm+TSag2D6w9sVIXdLb0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 00:04:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1265 (0x4f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDCF1, serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A Validity Not Before: Sep 17 00:04:39 2026 GMT Not After : Sep 24 00:04:39 2026 GMT Subject: CN=6aab2e97-4b50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6c:b3:1b:46:4f:17:5f:4c:e7:44:a4:6a:f8: 1b:29:08:7e:e9:c1:dd:89:9e:83:a5:f3:4c:30:64: 95:bb:ac:0a:0b:fd:67:de:a5:6f:3f:3d:09:5d:46: c8:9c:2d:d1:f6:72:e2:d9:68:d3:90:63:ad:28:9c: 02:03:18:ec:57:ee:6d:69:2c:36:33:08:de:2c:cd: 63:8d:b7:e7:d5:6e:80:22:49:83:37:d9:87:32:e6: 1a:07:cc:79:c0:8f:77:5f:3f:38:2b:52:ac:31:f4: 12:df:8b:a7:a1:75:f7:0f:fa:64:20:56:3c:47:2b: a7:2e:e2:d4:94:bc:4a:19:d1:74:53:a4:b4:e6:c1: de:c0:ca:64:36:24:c6:54:0e:99:6e:a8:6b:46:31: 3b:47:88:dd:22:fd:af:ca:40:ce:66:59:ce:ad:f6: 6e:af:02:a3:ce:25:75:c9:98:6b:e8:18:ea:be:33: da:16:b2:68:dd:52:75:b3:31:09:ec:86:4f:27:aa: 7f:68:8a:07:05:6c:c8:43:0b:cf:bf:9d:f3:a4:6e: 85:c3:c8:51:57:9d:cc:fc:00:2e:39:25:15:87:73: 20:9a:b1:2f:78:54:65:30:c0:72:6d:36:5b:db:35: a5:e8:6f:93:98:fa:26:5f:2d:17:ef:1a:04:a9:d9: ec:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:52:47:6E:98:72:0D:52:18:60:29:46:A1:4F:E5:F6:E5:9B:25:E1 X509v3 Authority Key Identifier: keyid:C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:5b:1b:a2:e9:db:69:97:4b:bd:50:aa:cc:22:e0:8c:af:20: d1:3a:43:70:52:8e:e3:7b:73:e3:3a:34:6a:5c:25:d8:26:79: d5:37:7b:ff:8c:96:28:08:96:8d:de:ef:de:51:97:dc:8c:0d: d7:e3:95:ec:47:fc:85:c1:19:24:83:5c:2c:f4:6c:bd:0a:1a: 41:a1:84:6b:2f:d9:13:09:ff:52:29:ef:2f:8f:c9:36:ed:18: 7f:ee:69:82:8b:96:e6:f4:f6:57:96:7a:a7:ca:41:ed:03:97: c4:96:79:5d:55:07:9d:78:a7:a5:6a:29:99:57:2e:4e:80:ec: 63:5b:21:ce:dd:6c:da:e0:ac:61:2b:f0:c8:13:f6:27:eb:e3: f0:23:6b:52:07:1b:b0:84:ef:1a:c3:58:06:10:6b:15:9f:97: cb:12:79:4c:ed:92:ba:fd:05:50:57:bf:03:e8:a1:29:5b:b3: 6b:ad:2e:82:09:ec:70:4f:67:34:b7:c3:7c:9a:76:6f:9a:4a: 9e:3f:73:80:d5:aa:6d:22:2e:ca:99:c4:3f:9c:68:98:27:07: 0d:3c:a8:4b:0d:e5:d8:f6:6b:9d:f1:54:06:56:73:83:ed:3e: 19:5e:33:50:e7:a9:27:ee:51:49:76:20:a6:b3:7a:e6:b1:6b: 70:68:c2:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRDRjExMTAvBgNVBAUTKEM0NEYyQUNBQjJBNzc5OTk0MzE1QUE5M0IzMjNEQTlC NDc1QzdCOUEwHhcNMjYwOTE3MDAwNDM5WhcNMjYwOTI0MDAwNDM5WjAYMRYwFAYD VQQDEw02YWFiMmU5Ny00YjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq2yzG0ZPF19M50SkavgbKQh+6cHdiZ6DpfNMMGSVu6wKC/1n3qVvPz0JXUbI nC3R9nLi2WjTkGOtKJwCAxjsV+5taSw2MwjeLM1jjbfn1W6AIkmDN9mHMuYaB8x5 wI93Xz84K1KsMfQS34unoXX3D/pkIFY8RyunLuLUlLxKGdF0U6S05sHewMpkNiTG VA6ZbqhrRjE7R4jdIv2vykDOZlnOrfZurwKjziV1yZhr6BjqvjPaFrJo3VJ1szEJ 7IZPJ6p/aIoHBWzIQwvPv53zpG6Fw8hRV53M/AAuOSUVh3MgmrEveFRlMMBybTZb 2zWl6G+TmPomXy0X7xoEqdns1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCtSR26Y cg1SGGApRqFP5fblmyXhMB8GA1UdIwQYMBaAFMRPKsqyp3mZQxWqk7Mj2ptHXHua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRENGMS9FQjU5MTEyMkE4 M0MxMUVDQTNBNEYzMjVDNEY5QUUwMi94RThxeXJLbmVabERGYXFUc3lQYW0wZGNl NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hFOHF5cktuZVpsREZhcVRzeVBhbTBkY2U1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RENGMS9FQjU5MTEyMkE4M0MxMUVDQTNBNEYzMjVDNEY5QUUwMi94RThxeXJLbmVa bERGYXFUc3lQYW0wZGNlNW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUFsbounbaZdLvVCqzCLgjK8g0TpDcFKO43tz4zo0alwl2CZ51Td7/4yWKAiW jd7v3lGX3IwN1+OV7Ef8hcEZJINcLPRsvQoaQaGEay/ZEwn/UinvL4/JNu0Yf+5p gouW5vT2V5Z6p8pB7QOXxJZ5XVUHnXinpWopmVcuToDsY1shzt1s2uCsYSvwyBP2 J+vj8CNrUgcbsITvGsNYBhBrFZ+XyxJ5TO2Suv0FUFe/A+ihKVuza60uggnscE9n NLfDfJp2b5pKnj9zgNWqbSIuypnEP5xomCcHDTyoSw3l2PZrnfFUBlZzg+0+GV4z UOepJ+5RSXYgprN65rFrcGjCIw== -----END CERTIFICATE-----Generated at Fri Sep 18 22:59:16 2026 by rpki-client