$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft File: Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft (raw, json) Hash identifier: zjqI4VF0zd0iTE8xaAD8EO0mv0fbMSeYSsj2x7zf29g= Subject key identifier: 44:E7:4F:2C:9F:1D:AB:AE:C6:68:6A:BA:9B:FB:E1:74:52:89:B1:8D Authority key identifier: 5D:DF:DD:38:31:56:FA:5B:65:34:11:2E:9C:8E:15:3B:B2:00:57:C6 Certificate issuer: /CN=A91CB6E8/serialNumber=5DDFDD383156FA5B6534112E9C8E153BB20057C6 Certificate serial: B0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xd_dODFW-ltlNBEunI4VO7IAV8Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft Manifest number: AA Signing time: Sat 05 Sep 2026 06:53:30 +0000 Manifest this update: Sat 05 Sep 2026 06:53:29 +0000 Manifest next update: Sat 12 Sep 2026 06:53:29 +0000 Files and hashes: 1: Xd_dODFW-ltlNBEunI4VO7IAV8Y.crl (hash: +C57yd0U9rPiOYUe/Pa6fKC/X6d03MkCQ0TnW7GTqHE=) 2: 1104D6A2AF1611F0AF70E679C4F9AE02.roa (hash: /VVN1pVbvBgJGM41ZpQK+E66Yb+yIlM6xDFzrudcVdc=) 3: 65FAD636AF1411F0BE4BF94FC4F9AE02.roa (hash: 9hr6Mrcekj4wBtLXcM+jj6TwfopvR4qZFirKjaGVgSI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.crl rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xd_dODFW-ltlNBEunI4VO7IAV8Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 04:31:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 176 (0xb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB6E8, serialNumber=5DDFDD383156FA5B6534112E9C8E153BB20057C6 Validity Not Before: Sep 5 06:53:29 2026 GMT Not After : Sep 12 06:53:29 2026 GMT Subject: CN=6a9bbc6a-47ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b8:2a:81:49:c8:63:41:67:48:1e:42:06:45: 59:80:c3:2d:e1:bf:0d:90:5a:ba:32:f2:81:ac:db: d0:b0:b5:9a:67:a7:76:01:60:a0:78:22:1c:6b:a4: f5:33:25:67:cb:a0:b1:f4:1d:f5:54:32:30:e1:b3: 7c:02:cf:46:86:20:3a:79:96:e3:a7:37:c9:5f:c7: f8:2c:59:33:02:ef:96:ba:f5:d0:8b:f3:14:b7:db: 94:de:7e:22:26:fa:0a:91:85:4a:76:0b:4e:c8:d8: 27:c5:7e:11:c9:d9:8d:03:f1:1a:64:71:9f:61:39: fc:82:8f:2e:56:c4:79:62:a3:6e:e6:37:c1:fc:f9: d2:b0:85:29:9b:e3:64:fe:dc:ff:31:90:dc:4f:51: 87:71:84:33:fa:35:60:bb:7f:5f:68:96:11:42:5e: 7a:89:e8:2d:8a:7f:a3:bb:4e:46:34:34:69:df:9e: 7c:87:d5:15:c6:7b:96:a5:f9:59:96:f0:9a:63:54: 44:bb:39:a1:0f:ad:da:f8:93:d5:ac:01:1f:9f:ae: f2:05:95:b3:44:74:3d:e7:1e:4c:11:73:97:5b:ee: b0:d8:41:9e:08:81:44:f2:99:5d:ca:98:63:30:c8: 26:ce:8b:47:3c:f2:48:4f:25:52:6d:18:e8:c5:fb: 93:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:E7:4F:2C:9F:1D:AB:AE:C6:68:6A:BA:9B:FB:E1:74:52:89:B1:8D X509v3 Authority Key Identifier: keyid:5D:DF:DD:38:31:56:FA:5B:65:34:11:2E:9C:8E:15:3B:B2:00:57:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xd_dODFW-ltlNBEunI4VO7IAV8Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:a3:5a:9b:f1:43:19:30:f9:8f:34:e5:6d:97:67:c9:b7:1b: 74:6f:83:d6:e3:39:5c:fb:71:14:9d:23:ed:01:8c:9c:b7:13: 45:fd:87:ec:6c:05:28:13:d3:3d:a6:38:bf:71:bc:3a:2b:2f: eb:73:5d:b0:c2:c2:46:49:5e:00:83:23:50:e5:6a:27:91:98: 84:06:f1:26:ea:c9:31:11:d3:26:86:b8:6f:9a:92:20:a5:80: 29:05:bb:ba:5a:86:52:ec:d4:d5:06:9e:23:fe:7d:b8:ac:3a: fc:81:e2:36:5c:94:3f:e0:73:ac:22:1e:96:31:bb:c8:aa:6f: 9e:65:9b:e4:0e:44:32:0c:48:35:eb:51:42:77:d5:91:fa:e5: 83:06:7e:7d:c5:c1:c2:7b:f4:e7:95:f3:07:b7:55:eb:d8:86: 73:fa:41:6f:d7:70:3d:c7:af:02:e3:0d:38:42:be:2e:ff:68: e2:c9:7e:44:dd:80:2c:6e:81:3a:a6:2e:e2:4e:04:22:34:ab: 8c:6e:e2:34:27:4d:7f:e9:2c:b4:bd:fe:b4:3c:77:37:38:5a: 8d:6f:a7:3a:d4:40:96:14:82:e4:f8:31:f0:59:ee:d1:96:fc: 28:d2:94:98:bc:cf:c0:6b:25:a2:56:e6:5e:1f:51:85:2b:e2: 32:d6:25:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I2RTgxMTAvBgNVBAUTKDVEREZERDM4MzE1NkZBNUI2NTM0MTEyRTlDOEUxNTNC QjIwMDU3QzYwHhcNMjYwOTA1MDY1MzI5WhcNMjYwOTEyMDY1MzI5WjAYMRYwFAYD VQQDEw02YTliYmM2YS00N2VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp7gqgUnIY0FnSB5CBkVZgMMt4b8NkFq6MvKBrNvQsLWaZ6d2AWCgeCIca6T1 MyVny6Cx9B31VDIw4bN8As9GhiA6eZbjpzfJX8f4LFkzAu+WuvXQi/MUt9uU3n4i JvoKkYVKdgtOyNgnxX4RydmNA/EaZHGfYTn8go8uVsR5YqNu5jfB/PnSsIUpm+Nk /tz/MZDcT1GHcYQz+jVgu39faJYRQl56iegtin+ju05GNDRp3558h9UVxnuWpflZ lvCaY1REuzmhD63a+JPVrAEfn67yBZWzRHQ95x5MEXOXW+6w2EGeCIFE8pldyphj MMgmzotHPPJITyVSbRjoxfuTDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFETnTyyf Hauuxmhqupv74XRSibGNMB8GA1UdIwQYMBaAFF3f3TgxVvpbZTQRLpyOFTuyAFfG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjZFOC9GOUIwMjg4OEFF RkUxMUYwODhCOTlDMjdDNEY5QUUwMi9YZF9kT0RGVy1sdGxOQkV1bkk0Vk83SUFW OFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hkX2RPREZXLWx0bE5CRXVuSTRWTzdJQVY4WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjZFOC9GOUIwMjg4OEFFRkUxMUYwODhCOTlDMjdDNEY5QUUwMi9YZF9kT0RGVy1s dGxOQkV1bkk0Vk83SUFWOFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAe6Nam/FDGTD5jzTlbZdnybcbdG+D1uM5XPtxFJ0j7QGMnLcTRf2H7GwFKBPT PaY4v3G8Oisv63NdsMLCRkleAIMjUOVqJ5GYhAbxJurJMRHTJoa4b5qSIKWAKQW7 ulqGUuzU1QaeI/59uKw6/IHiNlyUP+BzrCIeljG7yKpvnmWb5A5EMgxINetRQnfV kfrlgwZ+fcXBwnv055XzB7dV69iGc/pBb9dwPcevAuMNOEK+Lv9o4sl+RN2ALG6B OqYu4k4EIjSrjG7iNCdNf+kstL3+tDx3NzhajW+nOtRAlhSC5Pgx8Fnu0Zb8KNKU mLzPwGslolbmXh9RhSviMtYlcA== -----END CERTIFICATE-----Generated at Sat Sep 5 11:44:29 2026 by rpki-client