$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.mft File: XsGmrXajq_3B4TKesmN8AYZLSAg.mft (raw, json) Hash identifier: s4E281DtSqZNA0knqt6fvvsO9410eST4VFq5lhAv9V4= Subject key identifier: 9F:04:EC:95:FC:B3:D0:78:BB:30:32:71:19:A6:C3:61:9F:6A:96:CA Authority key identifier: 5E:C1:A6:AD:76:A3:AB:FD:C1:E1:32:9E:B2:63:7C:01:86:4B:48:08 Certificate issuer: /CN=A91AB20B/serialNumber=5EC1A6AD76A3ABFDC1E1329EB2637C01864B4808 Certificate serial: 08FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.mft Manifest number: 08AB Signing time: Tue 22 Sep 2026 20:35:32 +0000 Manifest this update: Tue 22 Sep 2026 20:35:32 +0000 Manifest next update: Tue 29 Sep 2026 20:35:32 +0000 Files and hashes: 1: XsGmrXajq_3B4TKesmN8AYZLSAg.crl (hash: phEUwH047D7JGLWbg88NRUb2IsrbK7TBA0xtu1nMuUg=) 2: 46D6261876A511EB82E04A2FC4F9AE02.roa (hash: 07NAb6FOG0gx0PdJkYwOwcdGyYjuHpfxXfS2cSkaRXw=) 3: B512A570109211ECA693D74EC4F9AE02.roa (hash: 9tEYbLo4J/q4bdTITxYsX4xnTZVHf91U/YEcnlXDHcc=) 4: 046130D225FC11EC9D57EA7CC4F9AE02.roa (hash: rcktpjixp8+kv2v9P4xwVuhqs7pakt81L9C+JW+4rmo=) 5: E3AAE94243B511EB8DA3F473C4F9AE02.roa (hash: jmySrqpn+S69gbBWSjHPk8y6x2hnK6aVJ0YM9ayH/ko=) 6: 82BB885E4B9811EB85F74960C4F9AE02.roa (hash: k/6Ci5PJ0I5HgjHi9Xl2j9V/6QNxgQYLkDLQ1Xnljkc=) 7: CF41132A1DE811EB9DE34963C4F9AE02.roa (hash: 55hIZj5ZQRW1RQ54R3T9P5BrRnq55XVLivdxd6+SglM=) 8: 7CF84F084B9111EBBA09CA72C4F9AE02.roa (hash: kW+oZOkQ4kbBTg7mSMXsEsEa3+LYsouxCCV7XsV4Buk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.crl rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 20:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2303 (0x8ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB20B, serialNumber=5EC1A6AD76A3ABFDC1E1329EB2637C01864B4808 Validity Not Before: Sep 22 20:35:32 2026 GMT Not After : Sep 29 20:35:32 2026 GMT Subject: CN=6ab2e694-4bd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:66:68:cd:bf:63:b4:7a:3f:d1:f6:c6:e9:33: 2e:46:fd:f9:04:42:6b:85:d4:e9:c8:09:06:aa:49: 7f:e9:43:ac:1d:b9:4c:f2:b5:d2:3e:85:85:5f:22: 09:f6:08:92:de:6c:51:73:6d:05:bd:7b:32:6c:6e: 63:b6:64:24:33:d1:1d:20:23:50:99:a8:80:6d:d4: cc:5f:1c:e4:e9:10:1f:4b:b9:88:52:eb:4d:8d:30: e5:2f:83:31:5c:f7:3c:f2:86:d0:57:7d:dc:e0:5e: 48:d9:54:63:48:27:64:82:06:ed:95:d3:ed:a8:3e: 7f:81:a3:36:4b:5d:87:da:59:a4:78:d5:ec:91:91: 83:90:0e:40:d2:15:4f:6c:55:71:a6:45:85:10:b8: 58:d6:1a:6f:8e:3d:29:c2:b8:f3:8c:c7:7e:6a:47: c2:60:af:5f:28:94:89:2f:f8:a2:55:1e:0a:88:d1: ed:09:a6:f5:0e:59:9d:66:cc:5a:68:f6:ed:1b:95: 41:08:e6:e8:5e:99:ce:17:a1:af:23:95:4f:7e:9f: a0:7e:09:76:d4:dc:4f:4c:9f:50:02:e5:e2:a9:7a: 9f:25:ad:ba:5d:36:37:3d:77:3a:08:c6:d5:bc:7a: 5a:45:21:a0:50:aa:3c:79:6b:93:cc:f8:f2:a2:4e: 4b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:04:EC:95:FC:B3:D0:78:BB:30:32:71:19:A6:C3:61:9F:6A:96:CA X509v3 Authority Key Identifier: keyid:5E:C1:A6:AD:76:A3:AB:FD:C1:E1:32:9E:B2:63:7C:01:86:4B:48:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:76:d1:82:c2:f9:51:a4:51:23:4b:c7:c6:af:45:5a:65:bf: d3:a9:f7:c4:4b:77:6c:c9:4c:8d:5f:3a:74:36:77:a5:e3:29: 43:81:fd:4a:da:1a:e6:20:5f:a2:09:35:1e:b4:2e:d0:c5:e9: c5:9b:1c:06:e8:13:98:67:d2:92:09:4e:48:d9:ef:c6:c7:c9: 5d:3a:c3:16:5d:9f:e0:1d:07:3e:f5:a7:37:0b:13:dd:4c:77: 69:a0:ae:65:3d:2a:2f:9d:2a:f5:c7:51:cf:55:00:08:fc:71: bb:3f:2e:05:56:84:8f:a3:c0:ee:4c:a3:2b:11:b7:9b:f9:99: 75:9a:e1:10:5c:1f:df:ed:95:d7:bd:cb:2e:7c:03:31:5a:27: b7:ff:f3:e8:5e:6d:95:30:86:7e:fc:b4:d1:d8:5d:45:44:b1: 2d:7b:eb:d1:c0:db:c6:62:f0:81:f0:7e:bc:1b:c8:a1:dc:45: ca:9f:34:44:f3:83:16:73:8c:4d:9a:fa:33:2d:00:3e:76:e5: d0:f1:ed:3a:12:cb:0e:ce:cf:98:a3:b6:8d:7c:82:60:8e:b3: 3d:20:60:22:4a:fc:de:a1:63:0a:47:bb:d6:99:5c:bd:a2:f0: 2f:dd:84:b2:ac:83:bc:2c:1f:c5:97:bf:2b:b5:2a:dc:8d:9f: 9e:61:38:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIyMEIxMTAvBgNVBAUTKDVFQzFBNkFENzZBM0FCRkRDMUUxMzI5RUIyNjM3QzAx ODY0QjQ4MDgwHhcNMjYwOTIyMjAzNTMyWhcNMjYwOTI5MjAzNTMyWjAYMRYwFAYD VQQDEw02YWIyZTY5NC00YmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqGZozb9jtHo/0fbG6TMuRv35BEJrhdTpyAkGqkl/6UOsHblM8rXSPoWFXyIJ 9giS3mxRc20FvXsybG5jtmQkM9EdICNQmaiAbdTMXxzk6RAfS7mIUutNjTDlL4Mx XPc88obQV33c4F5I2VRjSCdkggbtldPtqD5/gaM2S12H2lmkeNXskZGDkA5A0hVP bFVxpkWFELhY1hpvjj0pwrjzjMd+akfCYK9fKJSJL/iiVR4KiNHtCab1DlmdZsxa aPbtG5VBCOboXpnOF6GvI5VPfp+gfgl21NxPTJ9QAuXiqXqfJa26XTY3PXc6CMbV vHpaRSGgUKo8eWuTzPjyok5LVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ8E7JX8 s9B4uzAycRmmw2GfapbKMB8GA1UdIwQYMBaAFF7Bpq12o6v9weEynrJjfAGGS0gI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjIwQi9CQTcxQjY0ODEy MDMxMUVCQkFBMTk0MTRDNEY5QUUwMi9Yc0dtclhhanFfM0I0VEtlc21OOEFZWkxT QWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hzR21yWGFqcV8zQjRUS2VzbU44QVlaTFNBZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjIwQi9CQTcxQjY0ODEyMDMxMUVCQkFBMTk0MTRDNEY5QUUwMi9Yc0dtclhhanFf M0I0VEtlc21OOEFZWkxTQWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMHbRgsL5UaRRI0vHxq9FWmW/06n3xEt3bMlMjV86dDZ3peMpQ4H9Stoa5iBf ogk1HrQu0MXpxZscBugTmGfSkglOSNnvxsfJXTrDFl2f4B0HPvWnNwsT3Ux3aaCu ZT0qL50q9cdRz1UACPxxuz8uBVaEj6PA7kyjKxG3m/mZdZrhEFwf3+2V173LLnwD MVont//z6F5tlTCGfvy00dhdRUSxLXvr0cDbxmLwgfB+vBvIodxFyp80RPODFnOM TZr6My0APnbl0PHtOhLLDs7PmKO2jXyCYI6zPSBgIkr83qFjCke71plcvaLwL92E sqyDvCwfxZe/K7Uq3I2fnmE4GQ== -----END CERTIFICATE-----Generated at Thu Sep 24 09:31:10 2026 by rpki-client