$ rpki-client -vvvf rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.mft File: XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.mft (raw, json) Hash identifier: AiKJ1IwhlGczzJcmYVA2Xg2/fC+iKBdB6pM2Pk/9l4E= Subject key identifier: 91:98:14:EE:DE:6F:23:E9:5A:4E:E0:D1:59:5F:2E:E8:B0:F0:C0:30 Authority key identifier: 5C:5A:4F:AE:4A:F0:1F:FD:C9:27:53:55:CC:BA:B8:C8:10:18:9F:54 Certificate issuer: /CN=A918B0B9/serialNumber=5C5A4FAE4AF01FFDC9275355CCBAB8C810189F54 Certificate serial: 0AA3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.mft Manifest number: 0A87 Signing time: Tue 22 Sep 2026 19:26:36 +0000 Manifest this update: Tue 22 Sep 2026 19:26:36 +0000 Manifest next update: Tue 29 Sep 2026 19:26:36 +0000 Files and hashes: 1: XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.crl (hash: nnYQtZO1RWaBCHZ9xTC5V+ChD0YbBdud16flbx1J7Sc=) 2: BED54F1A9B1611EA939F5A3FC4F9AE02.roa (hash: X8e6yUeB/PRsPPF+C3MHmJi3qUuiq3zf6vIdK4BxUh8=) 3: 52F955A89B1511EA9BEFA53BC4F9AE02.roa (hash: QxpDSJ07LckMEIu/DE0y0sMsWiKkQU5kLHdPOI9l4t8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.crl rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 19:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2723 (0xaa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B0B9, serialNumber=5C5A4FAE4AF01FFDC9275355CCBAB8C810189F54 Validity Not Before: Sep 22 19:26:36 2026 GMT Not After : Sep 29 19:26:36 2026 GMT Subject: CN=6ab2d66c-c509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b6:60:dd:98:f0:a7:22:46:91:2a:5a:06:e6: ef:52:ef:0d:b8:97:f2:43:01:d1:13:a1:67:02:a9: 87:9e:3c:93:da:a9:44:34:5b:c4:f7:09:ae:e7:82: 42:f9:c3:73:59:81:eb:28:f9:5d:af:2d:f2:db:e9: a6:e0:6b:c0:b5:cb:d8:46:30:46:11:dd:2a:6e:19: f6:a2:66:09:3c:b9:0c:ae:9a:e1:ae:e6:56:50:11: a4:1f:47:51:24:59:27:7e:87:63:4d:0e:43:5a:ba: 1a:c3:6f:4b:d6:fa:5e:b3:a5:31:fc:93:f9:5f:73: e8:06:ba:5f:2a:62:17:13:1c:ef:e0:db:b8:94:59: 9c:25:54:f1:3e:61:30:c9:70:83:23:46:6f:81:ea: e0:af:b7:61:71:58:11:17:02:f6:be:e5:7e:6d:07: 30:c2:8d:b5:31:43:17:2c:2a:87:ad:8f:89:4c:31: ea:b1:31:5e:42:fd:62:44:aa:4f:48:66:de:bf:f9: 70:c4:33:91:78:d0:bf:20:a3:9c:49:b3:a0:e9:27: d6:73:e2:d6:23:a7:44:d4:c1:90:5d:67:a1:2f:81: 59:4a:e1:3d:15:de:7c:3a:6a:63:62:64:3f:ac:01: cb:72:32:23:a3:95:2b:b6:ec:43:9e:c1:37:43:d2: 38:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:98:14:EE:DE:6F:23:E9:5A:4E:E0:D1:59:5F:2E:E8:B0:F0:C0:30 X509v3 Authority Key Identifier: keyid:5C:5A:4F:AE:4A:F0:1F:FD:C9:27:53:55:CC:BA:B8:C8:10:18:9F:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:0e:5b:96:1b:e7:cf:82:b6:4b:38:ad:61:a0:71:1f:d0:eb: a1:ce:b7:69:ba:4e:32:75:a9:d8:11:82:8c:11:a5:a2:ea:0f: ea:b6:78:b0:b3:20:8b:cf:18:a7:d1:6e:b0:07:fa:51:e2:17: 18:03:d5:a7:e3:7b:9d:74:55:9b:13:e1:45:4f:09:c4:cd:0c: 8e:7f:ef:4e:de:74:0e:f9:4c:b7:bd:e5:ea:2d:a4:ee:a6:9c: 2a:21:53:98:b3:62:3b:64:17:40:71:0f:b0:ab:b9:75:4c:3d: bb:eb:71:cc:0d:f1:7b:42:1b:5e:b3:52:d5:5c:3e:53:29:de: 25:8d:5b:00:e8:89:af:81:19:72:30:a4:04:d9:16:51:b4:10: da:61:a9:30:23:c7:d0:48:f3:0e:c3:ec:a5:b3:9b:c0:78:ea: a7:fc:bf:17:e1:5d:ec:72:cd:63:7c:ee:b4:5f:5e:6c:ce:f9: 9d:be:a6:17:a2:1e:61:a9:36:3d:b7:0b:61:0c:ce:a0:1d:85: 19:12:42:05:47:86:2b:b3:28:d8:38:a4:2a:98:29:50:d2:73: 55:9f:24:20:cf:62:31:c3:85:0a:7d:72:f8:ca:9f:85:56:f6: 8d:e2:56:6b:4c:84:62:a9:7a:8e:1f:41:a0:cc:7b:e4:43:ba: 4f:3b:a1:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEIwQjkxMTAvBgNVBAUTKDVDNUE0RkFFNEFGMDFGRkRDOTI3NTM1NUNDQkFCOEM4 MTAxODlGNTQwHhcNMjYwOTIyMTkyNjM2WhcNMjYwOTI5MTkyNjM2WjAYMRYwFAYD VQQDEw02YWIyZDY2Yy1jNTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk7Zg3ZjwpyJGkSpaBubvUu8NuJfyQwHRE6FnAqmHnjyT2qlENFvE9wmu54JC +cNzWYHrKPldry3y2+mm4GvAtcvYRjBGEd0qbhn2omYJPLkMrprhruZWUBGkH0dR JFknfodjTQ5DWroaw29L1vpes6Ux/JP5X3PoBrpfKmIXExzv4Nu4lFmcJVTxPmEw yXCDI0Zvgergr7dhcVgRFwL2vuV+bQcwwo21MUMXLCqHrY+JTDHqsTFeQv1iRKpP SGbev/lwxDOReNC/IKOcSbOg6SfWc+LWI6dE1MGQXWehL4FZSuE9Fd58OmpjYmQ/ rAHLcjIjo5UrtuxDnsE3Q9I4fQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJGYFO7e byPpWk7g0VlfLuiw8MAwMB8GA1UdIwQYMBaAFFxaT65K8B/9ySdTVcy6uMgQGJ9U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjBCOS85Q0JGM0Q5MDhG QTAxMUVBQUE5QkJBMThDNEY5QUUwMi9YRnBQcmtyd0hfM0pKMU5WekxxNHlCQVlu MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hGcFBya3J3SF8zSkoxTlZ6THE0eUJBWW4xUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjBCOS85Q0JGM0Q5MDhGQTAxMUVBQUE5QkJBMThDNEY5QUUwMi9YRnBQcmtyd0hf M0pKMU5WekxxNHlCQVluMVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUQ5blhvnz4K2SzitYaBxH9Droc63abpOMnWp2BGCjBGlouoP6rZ4sLMgi88Y p9FusAf6UeIXGAPVp+N7nXRVmxPhRU8JxM0Mjn/vTt50DvlMt73l6i2k7qacKiFT mLNiO2QXQHEPsKu5dUw9u+txzA3xe0IbXrNS1Vw+UyneJY1bAOiJr4EZcjCkBNkW UbQQ2mGpMCPH0EjzDsPspbObwHjqp/y/F+Fd7HLNY3zutF9ebM75nb6mF6IeYak2 PbcLYQzOoB2FGRJCBUeGK7Mo2DikKpgpUNJzVZ8kIM9iMcOFCn1y+MqfhVb2jeJW a0yEYql6jh9BoMx75EO6Tzuh8g== -----END CERTIFICATE-----Generated at Thu Sep 24 19:25:29 2026 by rpki-client