$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft File: xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft (raw, json) Hash identifier: 2Z/yTrIS3LX6pPtbAS3i91Hdrv6vnZZNGQUgsA1A5TA= Subject key identifier: 2E:7A:DE:A4:98:C5:E9:45:F4:70:1F:F6:54:18:A1:F4:14:08:F9:E0 Authority key identifier: C4:9E:51:83:EA:2F:C4:9B:8A:83:C9:20:52:BC:E2:A8:B6:57:6C:70 Certificate issuer: /CN=A91DF937/serialNumber=C49E5183EA2FC49B8A83C92052BCE2A8B6576C70 Certificate serial: 2011 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft Manifest number: 2001 Signing time: Sun 30 Aug 2026 15:57:04 +0000 Manifest this update: Sun 30 Aug 2026 15:57:04 +0000 Manifest next update: Sun 06 Sep 2026 15:57:04 +0000 Files and hashes: 1: xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl (hash: tHzlDAPbQsV9A9DZ64z4iZyPTjM1ObKawRfcfNWbhO4=) 2: E723101E553D11E7B552CE31C4F9AE02.roa (hash: w2DU193yd2F7A76EdcHPjGzbuA2IEC9BLibhAE+t7oo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Sep 2026 15:57:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8209 (0x2011) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF937, serialNumber=C49E5183EA2FC49B8A83C92052BCE2A8B6576C70 Validity Not Before: Aug 30 15:57:04 2026 GMT Not After : Sep 6 15:57:04 2026 GMT Subject: CN=6a9452d0-3785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ba:1e:e1:60:12:c5:e8:ec:e2:8b:8d:1b:ea: 81:a3:fb:76:83:0e:24:a6:fe:ea:43:91:6e:26:e1: 02:a8:bd:b5:dd:b6:4b:c8:68:66:7a:d1:8a:a3:11: 32:0f:4c:3f:67:7a:75:3e:50:d5:e2:f9:3e:42:27: 6e:14:79:c9:50:bf:ed:68:89:44:c5:4c:ea:05:cd: 65:43:55:7f:63:65:0c:ef:c0:c4:fa:00:71:0f:5b: e9:2c:e0:b2:55:bf:a4:58:0a:b4:66:20:db:f6:af: 6d:31:01:06:44:0a:2b:43:ba:e5:e3:6c:c3:48:36: 5a:bc:30:fa:ab:88:ef:38:05:87:12:19:63:cc:bd: a6:39:5e:9b:fe:c1:09:a9:01:dd:a5:72:0d:1e:b0: d7:ad:15:ec:1d:89:8b:db:06:e8:6e:52:3d:9d:7d: 54:10:7a:68:e6:05:8f:3c:58:30:04:aa:51:09:5e: e9:90:35:74:aa:48:ef:ec:ba:85:2a:c2:cc:6b:0e: 3a:36:57:97:90:5d:22:b2:79:af:68:83:83:01:6e: d3:ae:47:50:68:bd:36:6e:dd:59:c1:2e:88:2f:1c: 69:f6:e8:a2:67:e6:34:b0:e3:93:ae:d0:70:af:1c: a2:0b:cf:36:b5:f1:ac:6f:39:4d:7a:82:38:a2:41: 24:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:7A:DE:A4:98:C5:E9:45:F4:70:1F:F6:54:18:A1:F4:14:08:F9:E0 X509v3 Authority Key Identifier: keyid:C4:9E:51:83:EA:2F:C4:9B:8A:83:C9:20:52:BC:E2:A8:B6:57:6C:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:69:fa:bd:88:69:02:2c:79:7c:c0:d2:15:87:b3:2d:ea:1b: aa:2c:ef:f4:31:f3:ee:90:72:28:d9:68:7d:78:f2:43:48:15: 97:99:c1:a2:d8:9c:bd:0d:d8:a1:1c:50:df:35:0f:15:95:58: 95:12:fa:95:95:35:8b:5a:d7:49:f4:ce:4a:1e:6c:6e:97:1f: 36:ec:c9:94:be:4d:21:98:6d:fd:0a:57:95:f6:39:39:e3:13: 78:6f:97:19:c4:d0:c7:60:96:c3:30:50:ea:cc:4d:21:f9:7a: 95:b7:ec:b7:c3:9a:0e:0e:42:03:5a:74:53:ab:a1:d5:6c:36: 4d:a9:ab:28:94:69:48:fa:6f:df:9d:1b:be:24:a0:6f:3e:06: c5:b2:81:41:64:72:05:2b:6d:be:e5:11:eb:29:58:77:b6:ac: 2a:9f:8a:1f:1e:6f:f5:3a:73:d6:e6:63:3e:77:d5:ce:49:59: a7:8c:8d:00:66:7d:3f:f5:0c:9f:8d:f1:f6:68:f6:f2:26:82: b6:29:3b:71:5b:ac:da:90:d3:7c:a8:c0:ef:c8:b1:d7:9a:5c: d5:0f:e0:dd:e0:81:ce:40:dc:39:67:b2:68:df:bb:91:b7:4d: 78:c1:9e:16:9a:67:3f:5a:41:3d:7f:ba:82:cd:03:1b:a0:4e: 84:6f:30:9b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIBEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY5MzcxMTAvBgNVBAUTKEM0OUU1MTgzRUEyRkM0OUI4QTgzQzkyMDUyQkNFMkE4 QjY1NzZDNzAwHhcNMjYwODMwMTU1NzA0WhcNMjYwOTA2MTU1NzA0WjAYMRYwFAYD VQQDEw02YTk0NTJkMC0zNzg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo7oe4WASxejs4ouNG+qBo/t2gw4kpv7qQ5FuJuECqL213bZLyGhmetGKoxEy D0w/Z3p1PlDV4vk+QiduFHnJUL/taIlExUzqBc1lQ1V/Y2UM78DE+gBxD1vpLOCy Vb+kWAq0ZiDb9q9tMQEGRAorQ7rl42zDSDZavDD6q4jvOAWHEhljzL2mOV6b/sEJ qQHdpXINHrDXrRXsHYmL2wboblI9nX1UEHpo5gWPPFgwBKpRCV7pkDV0qkjv7LqF KsLMaw46NleXkF0isnmvaIODAW7TrkdQaL02bt1ZwS6ILxxp9uiiZ+Y0sOOTrtBw rxyiC882tfGsbzlNeoI4okEk9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC563qSY xelF9HAf9lQYofQUCPngMB8GA1UdIwQYMBaAFMSeUYPqL8SbioPJIFK84qi2V2xw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjkzNy9BNDQ3QkZEQzU1 MzAxMUU2QTM2NDI3NDVDNEY5QUUwMi94SjVSZy1vdnhKdUtnOGtnVXJ6aXFMWlhi SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hKNVJnLW92eEp1S2c4a2dVcnppcUxaWGJIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjkzNy9BNDQ3QkZEQzU1MzAxMUU2QTM2NDI3NDVDNEY5QUUwMi94SjVSZy1vdnhK dUtnOGtnVXJ6aXFMWlhiSEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcGn6vYhpAix5fMDSFYezLeobqizv9DHz7pByKNlofXjyQ0gVl5nBoticvQ3Y oRxQ3zUPFZVYlRL6lZU1i1rXSfTOSh5sbpcfNuzJlL5NIZht/QpXlfY5OeMTeG+X GcTQx2CWwzBQ6sxNIfl6lbfst8OaDg5CA1p0U6uh1Ww2TamrKJRpSPpv350bviSg bz4GxbKBQWRyBSttvuUR6ylYd7asKp+KHx5v9Tpz1uZjPnfVzklZp4yNAGZ9P/UM n43x9mj28iaCtik7cVus2pDTfKjA78ix15pc1Q/g3eCBzkDcOWeyaN+7kbdNeMGe FppnP1pBPX+6gs0DG6BOhG8wmw== -----END CERTIFICATE-----Generated at Mon Aug 31 13:24:09 2026 by rpki-client