$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.mft File: XEH4EDozCnVMPG44dNzKXcSOGwA.mft (raw, json) Hash identifier: EzvHXmplxs5OxqPejv4l0tiAxA79WQ7bVAVznyMequU= Subject key identifier: AD:B8:71:C7:64:5D:3A:42:5C:8C:A4:7C:EF:02:87:11:35:E7:6D:EF Authority key identifier: 5C:41:F8:10:3A:33:0A:75:4C:3C:6E:38:74:DC:CA:5D:C4:8E:1B:00 Certificate issuer: /CN=A91DDB11/serialNumber=5C41F8103A330A754C3C6E3874DCCA5DC48E1B00 Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XEH4EDozCnVMPG44dNzKXcSOGwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.mft Manifest number: 3F Signing time: Thu 03 Sep 2026 08:47:18 +0000 Manifest this update: Thu 03 Sep 2026 08:47:18 +0000 Manifest next update: Thu 10 Sep 2026 08:47:18 +0000 Files and hashes: 1: XEH4EDozCnVMPG44dNzKXcSOGwA.crl (hash: qcO6qC2Jz7jwjP0V6FdnmxnR9hj1igQREYdVrXPO8Oo=) 2: 055A1AFA4E0911F188B16820CA833773.roa (hash: cNvYO9Mx94LSKruAtGYqSyqtbxJvaQBMA0ykxsLIG5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.crl rsync://rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XEH4EDozCnVMPG44dNzKXcSOGwA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 08:47:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDB11, serialNumber=5C41F8103A330A754C3C6E3874DCCA5DC48E1B00 Validity Not Before: Sep 3 08:47:18 2026 GMT Not After : Sep 10 08:47:18 2026 GMT Subject: CN=6a993416-fad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d8:41:9e:d7:df:21:2b:32:25:e7:a2:e9:8d: 05:ee:3b:37:2a:c1:a3:bb:b9:f1:1f:ea:60:76:64: d8:fd:a2:39:15:a5:72:b2:60:21:c5:c9:fb:98:58: 4c:40:d2:3e:0c:f7:1a:f0:47:79:37:5f:a7:b5:ac: 0d:47:28:09:00:0f:cc:1f:3e:fe:11:eb:30:8d:db: 4e:6b:57:15:6a:e8:c6:68:9e:32:ca:a5:b9:d3:8b: 38:07:1d:19:0e:f5:75:fa:57:4f:4f:b3:0d:f3:b0: 57:6e:68:62:b6:09:42:85:ab:19:b9:58:6f:80:0e: 9f:52:9e:67:52:93:f0:db:06:ab:8b:9d:15:d0:da: bc:da:73:7b:4e:c8:32:02:8e:b0:49:2c:51:5c:8c: 97:33:28:c6:0b:64:62:85:67:c1:11:e8:f3:d0:c0: e2:df:af:eb:e6:94:59:68:16:f7:b3:4e:45:82:c7: e5:fc:e5:e6:9c:da:48:2f:09:29:d4:83:d2:d8:2d: a1:56:7a:46:f3:e2:97:bd:68:2b:fe:87:11:4b:1f: b5:e6:5a:8a:ff:7f:d6:45:e5:e9:58:ce:53:ef:1a: 3b:ee:21:04:f1:79:ee:36:48:48:56:eb:b8:ba:43: 58:c5:f4:83:f8:8c:ec:34:0e:60:84:22:e4:6f:a6: f7:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:B8:71:C7:64:5D:3A:42:5C:8C:A4:7C:EF:02:87:11:35:E7:6D:EF X509v3 Authority Key Identifier: keyid:5C:41:F8:10:3A:33:0A:75:4C:3C:6E:38:74:DC:CA:5D:C4:8E:1B:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XEH4EDozCnVMPG44dNzKXcSOGwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:7f:92:9d:dc:f2:ed:26:e0:2b:0c:0e:83:d4:95:e9:2e:c7: 91:1a:17:3f:7b:29:7e:71:19:d3:ab:fc:a2:1f:7a:2a:3b:1b: 31:25:89:38:06:37:ad:ce:c1:99:aa:2c:18:6d:6e:13:ab:c5: c5:1d:f8:28:21:5a:be:d4:60:c7:97:c4:69:a7:66:ae:92:ca: 97:12:b6:e4:87:64:bf:0d:07:61:7b:f4:28:38:96:74:2c:82: 59:7e:f4:55:ee:78:dd:16:bc:b9:e3:91:30:f8:cb:b7:9c:20: 0b:e9:df:05:c2:2b:67:dc:16:c4:fc:aa:35:8f:0b:8e:2c:2a: dc:cf:1e:58:80:08:3a:2c:30:f5:3f:09:1f:d5:e1:04:9a:73: ac:af:8d:ce:45:63:d9:ca:33:99:8d:57:97:36:c0:09:2d:b7: b4:03:36:fb:e0:6b:7d:47:e2:60:af:c6:50:72:d7:5b:d5:c5: ef:6e:68:7e:36:d1:3c:80:64:6c:64:ff:09:79:14:de:62:32: 1b:12:b9:ab:7d:66:7f:00:60:cf:2e:1d:7d:0d:39:81:db:f9: 84:a2:58:cc:d6:b5:12:6e:ee:40:28:53:81:eb:1a:b9:30:75: 71:43:67:0f:b1:2f:42:49:fd:1f:87:b5:41:d5:4e:24:3f:eb: 0a:46:af:9d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE REIxMTExMC8GA1UEBRMoNUM0MUY4MTAzQTMzMEE3NTRDM0M2RTM4NzREQ0NBNURD NDhFMUIwMDAeFw0yNjA5MDMwODQ3MThaFw0yNjA5MTAwODQ3MThaMBgxFjAUBgNV BAMTDTZhOTkzNDE2LWZhZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQ2EGe198hKzIl56LpjQXuOzcqwaO7ufEf6mB2ZNj9ojkVpXKyYCHFyfuYWExA 0j4M9xrwR3k3X6e1rA1HKAkAD8wfPv4R6zCN205rVxVq6MZonjLKpbnTizgHHRkO 9XX6V09Psw3zsFduaGK2CUKFqxm5WG+ADp9SnmdSk/DbBquLnRXQ2rzac3tOyDIC jrBJLFFcjJczKMYLZGKFZ8ER6PPQwOLfr+vmlFloFvezTkWCx+X85eac2kgvCSnU g9LYLaFWekbz4pe9aCv+hxFLH7XmWor/f9ZF5elYzlPvGjvuIQTxee42SEhW67i6 Q1jF9IP4jOw0DmCEIuRvpvcPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUrbhxx2Rd OkJcjKR87wKHETXnbe8wHwYDVR0jBBgwFoAUXEH4EDozCnVMPG44dNzKXcSOGwAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREQjExL0Q4NEMzRkUwNEUw NjExRjFBNjRCNjI5QUM5ODMzNzczL1hFSDRFRG96Q25WTVBHNDRkTnpLWGNTT0d3 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvWEVINEVEb3pDblZNUEc0NGROektYY1NPR3dBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE QjExL0Q4NEMzRkUwNEUwNjExRjFBNjRCNjI5QUM5ODMzNzczL1hFSDRFRG96Q25W TVBHNDRkTnpLWGNTT0d3QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAqf5Kd3PLtJuArDA6D1JXpLseRGhc/eyl+cRnTq/yiH3oqOxsxJYk4BjetzsGZ qiwYbW4Tq8XFHfgoIVq+1GDHl8Rpp2auksqXErbkh2S/DQdhe/QoOJZ0LIJZfvRV 7njdFry545Ew+Mu3nCAL6d8Fwitn3BbE/Ko1jwuOLCrczx5YgAg6LDD1Pwkf1eEE mnOsr43ORWPZyjOZjVeXNsAJLbe0Azb74Gt9R+Jgr8ZQctdb1cXvbmh+NtE8gGRs ZP8JeRTeYjIbErmrfWZ/AGDPLh19DTmB2/mEoljM1rUSbu5AKFOB6xq5MHVxQ2cP sS9CSf0fh7VB1U4kP+sKRq+d -----END CERTIFICATE-----Generated at Sat Sep 5 02:47:23 2026 by rpki-client