$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft File: XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft (raw, json) Hash identifier: NwgjncWx63v8Bxw5bSzrNF6LiHw8weE4972X4FTcncY= Subject key identifier: 03:18:A1:02:9F:6A:B3:B4:FF:4A:B9:78:93:31:20:69:BB:45:9E:AD Authority key identifier: 5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7 Certificate issuer: /CN=A91E3C76/serialNumber=5F02248C9C5C94F153C59F56772C5FDA7F8D71E7 Certificate serial: 01BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft Manifest number: 01AE Signing time: Sat 03 Oct 2026 04:44:35 +0000 Manifest this update: Sat 03 Oct 2026 04:44:34 +0000 Manifest next update: Sat 10 Oct 2026 04:44:34 +0000 Files and hashes: 1: XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl (hash: br3hUTGcmMatZxjBJKOmYMAL9zzLkkWhTnLqDR2/MAE=) 2: 50F0AF8EB2BE11EFA108946DC4F9AE02.roa (hash: zFIoI885tqgmIc+TzAmT9MM/Zj8hlNvuKZSxFX8e55k=) 3: 51BBEE10B2BE11EFA108946DC4F9AE02.roa (hash: qus/VWO/zFuK4o4owMyuzTPVboELwpYdKngfvhC2x7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 04:44:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 442 (0x1ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3C76, serialNumber=5F02248C9C5C94F153C59F56772C5FDA7F8D71E7 Validity Not Before: Oct 3 04:44:34 2026 GMT Not After : Oct 10 04:44:34 2026 GMT Subject: CN=6ac08832-176f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6e:9c:f4:c2:a4:bd:eb:06:65:34:7b:00:1c: 74:a7:24:86:c2:6c:e6:9f:58:ee:b5:a4:70:35:d7: 32:15:79:27:96:55:58:c8:45:15:10:42:d5:2d:60: f9:48:6d:e2:68:e4:f9:b8:59:19:c3:11:66:8c:3a: 2d:11:ba:8f:4f:ab:7d:2f:d0:6a:7a:25:27:18:18: a2:45:14:ee:ec:31:01:10:fe:7b:9c:f5:8e:b9:d4: 97:25:5e:fb:21:d9:47:70:12:57:b3:07:e8:6b:41: cf:a8:ae:ce:f8:f6:ca:19:98:0b:17:a0:56:43:34: d5:58:93:aa:e5:53:6d:0d:5b:8a:3f:35:e8:a3:52: 8e:ac:ac:a8:68:60:24:82:d7:9e:fc:c2:9e:0e:ca: 7e:93:ed:74:fa:66:6a:92:14:87:9e:53:23:40:5a: 0e:87:26:6e:47:9c:4d:1f:a3:43:d9:01:a5:df:60: 78:d5:47:8a:cf:35:ec:8f:a0:04:d2:57:84:d0:c9: 2a:d7:eb:bf:c8:cf:53:5a:e7:fb:fb:28:6f:4a:16: 35:cb:24:ce:e4:f4:78:81:ba:7a:cf:90:0a:cb:a8: a1:28:35:99:dc:71:1c:ad:de:92:d1:28:79:42:64: fa:dd:3b:df:5a:c0:05:7f:6d:3e:d1:18:eb:f4:f5: 9c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:18:A1:02:9F:6A:B3:B4:FF:4A:B9:78:93:31:20:69:BB:45:9E:AD X509v3 Authority Key Identifier: keyid:5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:34:d2:4e:38:ff:44:05:12:14:c1:b5:f7:2c:4f:71:69:63: 31:79:09:b4:f7:bf:c6:cd:c5:5e:5d:e7:36:47:5c:c5:a9:4a: f0:d8:74:23:4c:6f:76:f9:35:d1:c9:16:ce:f0:92:3b:7f:ac: 32:e2:27:c7:e2:4f:d4:db:b7:34:48:5f:9f:4a:64:b9:92:5b: 38:2f:1f:b9:e0:19:54:02:dd:9b:e8:84:c7:81:32:65:d4:e3: 52:44:ed:2e:91:b2:a8:56:fd:19:20:56:2f:ec:71:d6:eb:bb: 88:6d:6a:0a:d4:47:80:12:3a:ff:eb:07:f5:98:97:e7:d8:35: c2:d9:bb:c7:15:79:e9:1a:98:23:a6:32:92:be:5b:64:4c:cb: f2:5c:68:12:6f:ca:1a:13:63:40:52:dd:ca:bd:7f:b1:4f:50: ac:9b:33:fd:53:56:c1:09:7b:f0:12:56:f0:3b:56:62:48:a8: 0e:11:82:93:80:95:21:db:e4:2d:df:fd:bd:6b:32:a9:0e:6f: 0c:1a:15:14:31:83:81:d2:c1:b3:7c:56:1c:18:ba:d9:ef:23: b9:68:ff:cf:6a:60:6b:12:bd:4c:af:da:d3:bd:d6:13:10:04: 7d:76:ae:47:d2:47:c2:90:58:a7:19:8f:61:46:64:fe:dd:3c: 34:f5:80:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNDNzYxMTAvBgNVBAUTKDVGMDIyNDhDOUM1Qzk0RjE1M0M1OUY1Njc3MkM1RkRB N0Y4RDcxRTcwHhcNMjYxMDAzMDQ0NDM0WhcNMjYxMDEwMDQ0NDM0WjAYMRYwFAYD VQQDEw02YWMwODgzMi0xNzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzG6c9MKkvesGZTR7ABx0pySGwmzmn1jutaRwNdcyFXknllVYyEUVEELVLWD5 SG3iaOT5uFkZwxFmjDotEbqPT6t9L9BqeiUnGBiiRRTu7DEBEP57nPWOudSXJV77 IdlHcBJXswfoa0HPqK7O+PbKGZgLF6BWQzTVWJOq5VNtDVuKPzXoo1KOrKyoaGAk gtee/MKeDsp+k+10+mZqkhSHnlMjQFoOhyZuR5xNH6ND2QGl32B41UeKzzXsj6AE 0leE0Mkq1+u/yM9TWuf7+yhvShY1yyTO5PR4gbp6z5AKy6ihKDWZ3HEcrd6S0Sh5 QmT63TvfWsAFf20+0Rjr9PWcrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAMYoQKf arO0/0q5eJMxIGm7RZ6tMB8GA1UdIwQYMBaAFF8CJIycXJTxU8WfVncsX9p/jXHn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0M3Ni9CNDk5MkQ1MjM0 NTgxMUVGQjQyRjlEMzdDNEY5QUUwMi9Yd0lrakp4Y2xQRlR4WjlXZHl4ZjJuLU5j ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h3SWtqSnhjbFBGVHhaOVdkeXhmMm4tTmNlYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0M3Ni9CNDk5MkQ1MjM0NTgxMUVGQjQyRjlEMzdDNEY5QUUwMi9Yd0lrakp4Y2xQ RlR4WjlXZHl4ZjJuLU5jZWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGDTSTjj/RAUSFMG19yxPcWljMXkJtPe/xs3FXl3nNkdcxalK8Nh0I0xvdvk1 0ckWzvCSO3+sMuInx+JP1Nu3NEhfn0pkuZJbOC8fueAZVALdm+iEx4EyZdTjUkTt LpGyqFb9GSBWL+xx1uu7iG1qCtRHgBI6/+sH9ZiX59g1wtm7xxV56RqYI6Yykr5b ZEzL8lxoEm/KGhNjQFLdyr1/sU9QrJsz/VNWwQl78BJW8DtWYkioDhGCk4CVIdvk Ld/9vWsyqQ5vDBoVFDGDgdLBs3xWHBi62e8juWj/z2pgaxK9TK/a073WExAEfXau R9JHwpBYpxmPYUZk/t08NPWACg== -----END CERTIFICATE-----Generated at Sun Oct 4 15:44:50 2026 by rpki-client