$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.mft File: XdRoWi6WsUFvfNM1zetK0YIvfes.mft (raw, json) Hash identifier: UEk2RZOUPtTLwOVeKyWs30hi47as437KqSz6Tpd7lmA= Subject key identifier: 29:47:5E:D2:D7:32:82:F8:85:02:1E:7D:2D:BB:17:C5:C6:82:85:9C Authority key identifier: 5D:D4:68:5A:2E:96:B1:41:6F:7C:D3:35:CD:EB:4A:D1:82:2F:7D:EB Certificate issuer: /CN=A91AF01C/serialNumber=5DD4685A2E96B1416F7CD335CDEB4AD1822F7DEB Certificate serial: 0289 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XdRoWi6WsUFvfNM1zetK0YIvfes.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.mft Manifest number: 027C Signing time: Wed 23 Sep 2026 01:52:30 +0000 Manifest this update: Wed 23 Sep 2026 01:52:29 +0000 Manifest next update: Wed 30 Sep 2026 01:52:29 +0000 Files and hashes: 1: XdRoWi6WsUFvfNM1zetK0YIvfes.crl (hash: 79txOhuVtq5daf+tkvgemQ32Gosd8HJu2DttY84Ut7E=) 2: 297CAAF2600F11F19DD612FE8747A888.roa (hash: 3caSMOx+p5Jr6uBlGiryWygb4IBsCl4CdewfhyZYMAk=) 3: 4C1DFC6E600F11F1B719D3058847A888.roa (hash: XI/6ywdBOKZJkA6ntRfKeh+vbgYn6sdPFXnFJIGb2HE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.crl rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XdRoWi6WsUFvfNM1zetK0YIvfes.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 01:52:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 649 (0x289) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF01C, serialNumber=5DD4685A2E96B1416F7CD335CDEB4AD1822F7DEB Validity Not Before: Sep 23 01:52:29 2026 GMT Not After : Sep 30 01:52:29 2026 GMT Subject: CN=6ab330de-ad76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5b:86:51:f4:e9:47:22:a5:81:7f:b1:df:71: 16:07:83:a3:48:a3:bf:90:d5:24:63:5b:a1:f3:6e: 9c:31:60:66:6d:49:95:34:eb:ac:27:cc:d8:e0:1b: 1b:f5:55:11:bb:aa:eb:db:46:3b:bf:f5:fb:58:ad: af:3b:f5:26:4a:7b:47:b3:ac:a5:85:10:ba:54:7b: 51:77:24:fe:24:2a:1c:07:5b:c4:37:54:7a:12:dd: 23:fc:7c:95:2e:87:09:84:0d:a3:24:99:d5:3b:04: 42:fd:13:44:2d:78:8b:a1:fb:1f:16:bc:83:07:42: ea:03:36:9f:9b:af:3d:98:4c:c0:f7:68:84:27:3c: 0c:85:e1:61:15:10:c4:11:a6:94:11:a8:4a:22:f5: a0:fd:4a:75:8a:a0:0c:d0:75:fe:c6:72:a0:00:e9: 4e:bc:11:14:5e:1a:c3:80:80:bd:6a:0b:3e:51:40: ae:f7:89:0c:46:ad:cc:d7:93:bc:a8:fe:96:0d:44: b9:50:90:74:b8:63:85:50:c6:f2:3a:a6:bd:ab:18: 2a:6a:93:ab:b7:b1:69:73:0c:ab:4d:4f:eb:08:02: c6:04:a2:5b:ba:90:18:7b:52:b8:1b:ca:ef:c3:e2: 43:75:c8:5c:ea:70:c4:c9:b2:a1:43:bf:4a:de:18: 99:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:47:5E:D2:D7:32:82:F8:85:02:1E:7D:2D:BB:17:C5:C6:82:85:9C X509v3 Authority Key Identifier: keyid:5D:D4:68:5A:2E:96:B1:41:6F:7C:D3:35:CD:EB:4A:D1:82:2F:7D:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XdRoWi6WsUFvfNM1zetK0YIvfes.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:48:a0:09:5e:da:18:9c:30:5c:49:81:19:bc:84:55:d4:4b: 0e:05:db:c0:ff:00:cd:7d:8f:fe:9c:d2:24:3a:46:17:32:46: c6:93:e6:de:93:bf:49:a7:c1:e4:d7:a9:32:c3:cf:64:ad:b3: a7:6a:8f:5e:d4:a0:f9:93:9a:62:23:8b:2f:2b:d0:7c:c7:3a: 26:25:16:94:ec:eb:cc:1c:96:e3:8a:63:42:42:df:3c:ad:5f: 8d:88:56:0b:83:9d:22:b7:b3:31:c4:4e:55:50:8f:b0:fb:57: 97:d9:27:54:4c:3a:1f:88:e7:2d:e7:73:e1:90:2d:23:81:18: 34:86:18:89:19:35:6f:53:bc:3d:79:ee:8e:5f:00:ec:9d:52: 75:10:cf:39:15:cd:92:8f:1d:86:a8:46:76:58:a5:2c:f1:f6: 7a:c2:4e:91:c4:39:70:9c:e1:b5:96:5d:46:51:7f:d6:25:a1: 09:97:ef:0c:61:98:2f:f9:d8:3a:74:83:1c:11:23:2f:11:83: fb:3e:5e:37:e2:16:da:e9:5c:39:6f:a8:cf:d3:68:aa:22:b4: 76:c5:bf:b2:7d:e5:21:ea:0c:af:19:13:b2:ae:7e:c6:c5:fb: b0:85:32:b7:53:7e:98:cb:88:cd:77:9d:cc:3f:ad:df:08:cd: cb:7d:a0:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYwMUMxMTAvBgNVBAUTKDVERDQ2ODVBMkU5NkIxNDE2RjdDRDMzNUNERUI0QUQx ODIyRjdERUIwHhcNMjYwOTIzMDE1MjI5WhcNMjYwOTMwMDE1MjI5WjAYMRYwFAYD VQQDEw02YWIzMzBkZS1hZDc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApVuGUfTpRyKlgX+x33EWB4OjSKO/kNUkY1uh826cMWBmbUmVNOusJ8zY4Bsb 9VURu6rr20Y7v/X7WK2vO/UmSntHs6ylhRC6VHtRdyT+JCocB1vEN1R6Et0j/HyV LocJhA2jJJnVOwRC/RNELXiLofsfFryDB0LqAzafm689mEzA92iEJzwMheFhFRDE EaaUEahKIvWg/Up1iqAM0HX+xnKgAOlOvBEUXhrDgIC9ags+UUCu94kMRq3M15O8 qP6WDUS5UJB0uGOFUMbyOqa9qxgqapOrt7FpcwyrTU/rCALGBKJbupAYe1K4G8rv w+JDdchc6nDEybKhQ79K3hiZgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFClHXtLX MoL4hQIefS27F8XGgoWcMB8GA1UdIwQYMBaAFF3UaFoulrFBb3zTNc3rStGCL33r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjAxQy9FNUQ5RTczNEZB Q0IxMUVEQjhGOTdEODVDNEY5QUUwMi9YZFJvV2k2V3NVRnZmTk0xemV0SzBZSXZm ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hkUm9XaTZXc1VGdmZOTTF6ZXRLMFlJdmZlcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjAxQy9FNUQ5RTczNEZBQ0IxMUVEQjhGOTdEODVDNEY5QUUwMi9YZFJvV2k2V3NV RnZmTk0xemV0SzBZSXZmZXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHUigCV7aGJwwXEmBGbyEVdRLDgXbwP8AzX2P/pzSJDpGFzJGxpPm3pO/SafB 5NepMsPPZK2zp2qPXtSg+ZOaYiOLLyvQfMc6JiUWlOzrzByW44pjQkLfPK1fjYhW C4OdIrezMcROVVCPsPtXl9knVEw6H4jnLedz4ZAtI4EYNIYYiRk1b1O8PXnujl8A 7J1SdRDPORXNko8dhqhGdlilLPH2esJOkcQ5cJzhtZZdRlF/1iWhCZfvDGGYL/nY OnSDHBEjLxGD+z5eN+IW2ulcOW+oz9NoqiK0dsW/sn3lIeoMrxkTsq5+xsX7sIUy t1N+mMuIzXedzD+t3wjNy32gMQ== -----END CERTIFICATE-----Generated at Fri Sep 25 02:54:30 2026 by rpki-client