$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft File: xPY4wJ43IEbAHfRgTCgRZPasFiI.mft (raw, json) Hash identifier: oivVa4Q7FAU+5YR7jlOzWle37/k2SiGrira/18pRnjc= Subject key identifier: FE:1A:D9:E7:FD:5B:3C:53:50:70:86:BF:79:69:64:83:B0:CA:C2:B6 Authority key identifier: C4:F6:38:C0:9E:37:20:46:C0:1D:F4:60:4C:28:11:64:F6:AC:16:22 Certificate issuer: /CN=A91F33A5/serialNumber=C4F638C09E372046C01DF4604C281164F6AC1622 Certificate serial: 043D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft Manifest number: 041B Signing time: Wed 07 Oct 2026 00:30:45 +0000 Manifest this update: Wed 07 Oct 2026 00:30:44 +0000 Manifest next update: Wed 14 Oct 2026 00:30:44 +0000 Files and hashes: 1: xPY4wJ43IEbAHfRgTCgRZPasFiI.crl (hash: QmmIsukvWv1KoBxaUyR6LsrJFJoGrSbzwbXTMEXoLRY=) 2: 236D4FF0FD9D11EC868CDF5DC4F9AE02.roa (hash: P8bll9ajRrMsTsWzXR9IujfXZpjapqmg7wDaxKW00m4=) 3: 5E967DEE1ED711EDBD936A15C4F9AE02.roa (hash: EGdleIb96T/dyNjtpTIecOYDwXkp3tZlJT2oSvIkBZ8=) 4: 40838EC01EDA11ED90A3A71FC4F9AE02.roa (hash: mEMF2EAxQOT8HjksswAup4xTzv21CP0nOKEj71FqbXc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.crl rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 00:30:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1085 (0x43d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F33A5, serialNumber=C4F638C09E372046C01DF4604C281164F6AC1622 Validity Not Before: Oct 7 00:30:44 2026 GMT Not After : Oct 14 00:30:44 2026 GMT Subject: CN=6ac592b5-34fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a1:b0:07:d8:1e:0e:22:89:8d:7a:2e:a2:34: e6:a4:9f:1c:e5:7b:8f:41:40:00:49:de:ad:a5:a0: 01:77:49:df:27:6f:d8:0f:5a:f2:61:37:a4:c6:3c: 71:23:46:d3:6d:0b:52:e4:f8:c2:a0:39:db:fd:d2: 7e:c6:92:26:63:37:ba:3d:f1:dd:07:a1:85:eb:61: 47:52:b6:e8:df:64:82:38:03:63:34:48:6a:b6:b3: e6:b7:3c:24:98:9c:93:47:9d:ec:e6:d6:60:86:5a: ef:b7:f2:84:a4:80:ae:d4:c3:d0:78:b4:fa:56:b0: 11:ee:cb:34:dc:22:70:a9:fe:fb:e0:56:3d:d5:d7: 71:45:51:c7:33:5b:88:c7:cf:42:e1:9a:94:1a:c2: 09:a1:a3:03:3c:15:b3:dd:9a:58:b0:1d:6a:61:3e: b8:d5:35:ee:48:97:28:39:1a:65:63:7b:a5:bc:1e: 71:6d:5b:1d:f4:7f:d0:3f:78:a2:cb:96:25:95:65: d4:d9:25:44:17:bf:c2:47:cf:c9:b4:19:da:90:d8: 42:c8:81:4b:1d:4f:9e:27:c4:57:b7:30:7a:b1:c8: e0:25:57:1d:33:97:d0:d7:d4:6a:31:3e:79:c1:cb: 8b:bc:8a:c0:0a:05:c2:63:59:ad:4a:3a:c3:18:61: b2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:1A:D9:E7:FD:5B:3C:53:50:70:86:BF:79:69:64:83:B0:CA:C2:B6 X509v3 Authority Key Identifier: keyid:C4:F6:38:C0:9E:37:20:46:C0:1D:F4:60:4C:28:11:64:F6:AC:16:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:1f:ec:82:88:00:ab:a9:b5:af:67:9a:11:ff:df:8e:3f:db: a1:ac:28:20:02:d3:13:fc:39:a2:79:24:b3:24:2a:64:3f:3f: 9c:f5:50:1d:fa:e1:1b:57:61:16:d7:f3:9f:ea:11:05:3a:a1: 2f:ff:e0:2e:74:15:d6:fe:1c:ad:84:6d:7d:8c:f3:1f:a8:e6: d6:72:43:1c:1d:d1:77:3e:ea:e1:47:cc:ce:18:87:01:ec:28: 34:e8:6e:96:c3:ae:7f:16:fb:fe:24:cd:98:35:6b:a1:6f:43: 6a:7a:84:f2:2a:2a:34:31:80:74:8f:aa:c1:9a:f9:94:ea:99: f1:12:9e:24:95:24:eb:c8:86:45:df:cd:53:1b:34:24:41:be: e3:20:51:fa:2e:d8:9e:a9:d1:b0:4c:5e:65:06:cb:13:bc:c6: d3:2a:e2:12:75:b8:32:71:3b:10:6b:0e:b5:1c:a5:51:41:a7: f6:63:f9:75:7f:da:7e:41:e2:ec:85:3e:87:28:8e:19:23:6d: 58:c1:d1:61:89:c2:95:6a:fe:83:ee:25:2c:24:98:4b:29:09: 8e:ac:04:d4:31:90:3c:f3:41:fb:d3:0c:50:78:a3:17:ad:76: 7b:a7:84:62:b9:98:41:cd:65:2d:1c:ca:08:71:7c:dd:0d:3f: f6:95:d5:a0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMzQTUxMTAvBgNVBAUTKEM0RjYzOEMwOUUzNzIwNDZDMDFERjQ2MDRDMjgxMTY0 RjZBQzE2MjIwHhcNMjYxMDA3MDAzMDQ0WhcNMjYxMDE0MDAzMDQ0WjAYMRYwFAYD VQQDEw02YWM1OTJiNS0zNGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA26GwB9geDiKJjXouojTmpJ8c5XuPQUAASd6tpaABd0nfJ2/YD1ryYTekxjxx I0bTbQtS5PjCoDnb/dJ+xpImYze6PfHdB6GF62FHUrbo32SCOANjNEhqtrPmtzwk mJyTR53s5tZghlrvt/KEpICu1MPQeLT6VrAR7ss03CJwqf774FY91ddxRVHHM1uI x89C4ZqUGsIJoaMDPBWz3ZpYsB1qYT641TXuSJcoORplY3ulvB5xbVsd9H/QP3ii y5YllWXU2SVEF7/CR8/JtBnakNhCyIFLHU+eJ8RXtzB6scjgJVcdM5fQ19RqMT55 wcuLvIrACgXCY1mtSjrDGGGyNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP4a2ef9 WzxTUHCGv3lpZIOwysK2MB8GA1UdIwQYMBaAFMT2OMCeNyBGwB30YEwoEWT2rBYi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzNBNS8xQzBFNzA2QUQ0 RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi94UFk0d0o0M0lFYkFIZlJnVENnUlpQYXNG aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQWTR3SjQzSUViQUhmUmdUQ2dSWlBhc0ZpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzNBNS8xQzBFNzA2QUQ0RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi94UFk0d0o0M0lF YkFIZlJnVENnUlpQYXNGaUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIh/sgogAq6m1r2eaEf/fjj/boawoIALTE/w5onkksyQqZD8/nPVQHfrhG1dh Ftfzn+oRBTqhL//gLnQV1v4crYRtfYzzH6jm1nJDHB3Rdz7q4UfMzhiHAewoNOhu lsOufxb7/iTNmDVroW9DanqE8ioqNDGAdI+qwZr5lOqZ8RKeJJUk68iGRd/NUxs0 JEG+4yBR+i7YnqnRsExeZQbLE7zG0yriEnW4MnE7EGsOtRylUUGn9mP5dX/afkHi 7IU+hyiOGSNtWMHRYYnClWr+g+4lLCSYSykJjqwE1DGQPPNB+9MMUHijF612e6eE YrmYQc1lLRzKCHF83Q0/9pXVoA== -----END CERTIFICATE-----Generated at Wed Oct 7 13:04:57 2026 by rpki-client