$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft File: 1xhrKGW4YA1mKCKv65AVcAbg9BA.mft (raw, json) Hash identifier: LiyplLsmqBqJgROoxtOK3Wc/nnzz7E2d3VvZC3pi9k4= Subject key identifier: 1C:A5:67:C7:29:14:33:D5:9D:8D:54:8D:01:51:76:90:C9:89:70:10 Authority key identifier: D7:18:6B:28:65:B8:60:0D:66:28:22:AF:EB:90:15:70:06:E0:F4:10 Certificate issuer: /CN=A91F428C/serialNumber=D7186B2865B8600D662822AFEB90157006E0F410 Certificate serial: 3591 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xhrKGW4YA1mKCKv65AVcAbg9BA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft Manifest number: 3589 Signing time: Fri 02 Oct 2026 15:05:11 +0000 Manifest this update: Fri 02 Oct 2026 15:05:10 +0000 Manifest next update: Fri 09 Oct 2026 15:05:10 +0000 Files and hashes: 1: 1xhrKGW4YA1mKCKv65AVcAbg9BA.crl (hash: T5L7VTEQrCckzqKRedg6u5Yf2p4WJfD5k9V6fIDyYpw=) 2: B8201598BED111EC93B74C4FC4F9AE02.roa (hash: avjUCYfIUTnXlS17xW5tzr/N2L2zs3IwMpwbWsZCILA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.crl rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xhrKGW4YA1mKCKv65AVcAbg9BA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 15:05:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13713 (0x3591) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F428C, serialNumber=D7186B2865B8600D662822AFEB90157006E0F410 Validity Not Before: Oct 2 15:05:10 2026 GMT Not After : Oct 9 15:05:10 2026 GMT Subject: CN=6abfc826-cf7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:2a:5c:e6:e9:be:b0:36:89:97:12:5b:c1:c0: 00:c0:7a:35:f4:23:1f:80:d3:f6:74:20:8b:9f:a9: ab:b2:ae:69:59:84:88:58:4d:87:5a:14:3d:c0:0b: 23:b9:2d:29:d2:08:19:6b:fd:8e:e6:20:41:0e:7a: db:e0:bd:47:09:5f:e7:8b:9f:7a:a7:96:37:6d:09: 6b:6d:d1:81:d7:1d:e8:df:58:d3:5f:9a:17:5f:5d: 22:07:b8:d4:d2:31:87:1d:ca:06:39:07:67:35:7c: 56:f1:3b:5a:c2:64:77:6a:51:5e:00:55:28:9f:4e: c4:35:fb:1b:96:9b:8d:cd:6b:94:5d:89:a1:e3:67: c8:9e:03:03:0d:43:77:ff:38:08:6e:8c:40:46:ec: 26:44:d4:b1:ff:33:c0:2e:25:9a:0b:2b:00:2e:3d: 6a:a0:79:cf:d6:4f:85:84:d7:2e:31:65:59:04:9b: 2d:df:66:64:fa:3d:b4:cb:56:6d:53:ce:be:2e:78: 8d:81:62:ce:92:27:dd:69:66:45:88:0a:64:05:ba: 8c:79:80:e9:6b:78:3c:c5:9c:60:14:b9:ad:88:f1: 94:28:e5:43:a3:9b:b4:02:51:c0:a7:f4:31:cd:33: 6b:51:a6:09:ce:13:d5:77:d5:74:39:92:5f:77:7b: d8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:A5:67:C7:29:14:33:D5:9D:8D:54:8D:01:51:76:90:C9:89:70:10 X509v3 Authority Key Identifier: keyid:D7:18:6B:28:65:B8:60:0D:66:28:22:AF:EB:90:15:70:06:E0:F4:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xhrKGW4YA1mKCKv65AVcAbg9BA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:c1:23:e9:5a:30:d7:c2:77:cf:48:7e:31:db:93:db:43:11: 01:d1:6b:7a:f7:a8:a4:f5:a4:ea:e6:b2:4b:75:1f:e2:cc:9b: 6a:3b:a9:1a:11:5b:2d:bb:cc:a3:bf:48:a5:64:93:e1:7b:fc: ca:54:ea:33:84:c1:38:ab:d5:cb:07:e6:a8:bc:cd:07:23:0d: 55:67:53:21:49:88:e2:ba:da:eb:a7:66:6b:90:94:af:34:b0: d8:1c:47:a2:08:ca:de:85:5a:17:fd:23:1e:c1:c5:09:7c:99: d0:b8:e8:df:06:fb:c7:07:01:f7:4d:fe:b0:81:e2:e3:34:d7: 3a:1c:e3:82:3d:85:13:8b:25:d3:c4:58:7b:e9:07:ef:8d:96: c9:a0:73:c8:74:3c:92:10:4b:3c:f4:68:8d:77:1c:27:c5:d5: 09:a6:0e:07:d1:fd:a6:bb:9f:c2:37:66:4f:b1:8f:e4:80:18: 91:09:7d:9e:7a:9c:38:96:d4:78:b9:1b:63:28:0b:ab:34:55: 15:14:22:20:50:4c:07:dd:e2:e7:36:69:9c:35:b3:7a:6f:c8: d6:5c:f5:25:6a:1c:63:b4:25:1f:6d:5f:d4:19:29:69:16:c1: ec:e1:b8:e3:ac:79:75:a2:4b:f1:14:3a:2d:7f:8b:85:4a:4f: b8:c8:02:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyOEMxMTAvBgNVBAUTKEQ3MTg2QjI4NjVCODYwMEQ2NjI4MjJBRkVCOTAxNTcw MDZFMEY0MTAwHhcNMjYxMDAyMTUwNTEwWhcNMjYxMDA5MTUwNTEwWjAYMRYwFAYD VQQDEw02YWJmYzgyNi1jZjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjypc5um+sDaJlxJbwcAAwHo19CMfgNP2dCCLn6mrsq5pWYSIWE2HWhQ9wAsj uS0p0ggZa/2O5iBBDnrb4L1HCV/ni596p5Y3bQlrbdGB1x3o31jTX5oXX10iB7jU 0jGHHcoGOQdnNXxW8TtawmR3alFeAFUon07ENfsblpuNzWuUXYmh42fIngMDDUN3 /zgIboxARuwmRNSx/zPALiWaCysALj1qoHnP1k+FhNcuMWVZBJst32Zk+j20y1Zt U86+LniNgWLOkifdaWZFiApkBbqMeYDpa3g8xZxgFLmtiPGUKOVDo5u0AlHAp/Qx zTNrUaYJzhPVd9V0OZJfd3vY+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBylZ8cp FDPVnY1UjQFRdpDJiXAQMB8GA1UdIwQYMBaAFNcYayhluGANZigir+uQFXAG4PQQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI4Qy81MkZDQzY0ODFE QTAxMUUyQjZEODcwOTEwOEIwMkNEMi8xeGhyS0dXNFlBMW1LQ0t2NjVBVmNBYmc5 QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF4aHJLR1c0WUExbUtDS3Y2NUFWY0FiZzlCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI4Qy81MkZDQzY0ODFEQTAxMUUyQjZEODcwOTEwOEIwMkNEMi8xeGhyS0dXNFlB MW1LQ0t2NjVBVmNBYmc5QkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASMEj6Vow18J3z0h+MduT20MRAdFreveopPWk6uayS3Uf4sybajupGhFbLbvM o79IpWST4Xv8ylTqM4TBOKvVywfmqLzNByMNVWdTIUmI4rra66dma5CUrzSw2BxH ogjK3oVaF/0jHsHFCXyZ0Ljo3wb7xwcB903+sIHi4zTXOhzjgj2FE4sl08RYe+kH 742WyaBzyHQ8khBLPPRojXccJ8XVCaYOB9H9prufwjdmT7GP5IAYkQl9nnqcOJbU eLkbYygLqzRVFRQiIFBMB93i5zZpnDWzem/I1lz1JWocY7QlH21f1BkpaRbB7OG4 46x5daJL8RQ6LX+LhUpPuMgCoQ== -----END CERTIFICATE-----Generated at Sun Oct 4 05:28:09 2026 by rpki-client