$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.mft File: XAo1I_02RadjWvJRmtzQAuEy-84.mft (raw, json) Hash identifier: rRY3EgmWm3PhDFFWlytsmVj5Bcg8M9DR5WcxGpXUoHg= Subject key identifier: C9:F0:AB:4A:2B:55:3A:B6:78:22:C0:AE:A1:E7:EC:3B:91:6D:69:D7 Authority key identifier: 5C:0A:35:23:FD:36:45:A7:63:5A:F2:51:9A:DC:D0:02:E1:32:FB:CE Certificate issuer: /CN=A91B0F90/serialNumber=5C0A3523FD3645A7635AF2519ADCD002E132FBCE Certificate serial: 0146 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAo1I_02RadjWvJRmtzQAuEy-84.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.mft Manifest number: 0138 Signing time: Wed 23 Sep 2026 05:29:32 +0000 Manifest this update: Wed 23 Sep 2026 05:29:31 +0000 Manifest next update: Wed 30 Sep 2026 05:29:31 +0000 Files and hashes: 1: XAo1I_02RadjWvJRmtzQAuEy-84.crl (hash: xZp5aW2BBRlTBczjXa1OnugCpLPEav4UKNU3w3jT6lM=) 2: 304DD002EFAB11EF97C9610FC4F9AE02.roa (hash: 72tND6FYfSKJu0sQNqpeEtwTYhVCnqpq4nZnR1IjkYo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.crl rsync://rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAo1I_02RadjWvJRmtzQAuEy-84.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 05:29:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 326 (0x146) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0F90, serialNumber=5C0A3523FD3645A7635AF2519ADCD002E132FBCE Validity Not Before: Sep 23 05:29:31 2026 GMT Not After : Sep 30 05:29:31 2026 GMT Subject: CN=6ab363bc-6a8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c2:30:98:14:33:c6:4c:84:45:b7:5c:c7:e4: db:bf:73:10:77:66:0b:a2:f1:bd:62:f1:fb:11:32: e7:86:16:16:7f:ff:6a:14:96:e8:f4:bd:38:54:71: d1:be:9d:66:72:df:76:3d:20:d7:47:fc:15:79:2d: 60:1d:69:65:87:d2:6e:0a:b9:fb:2d:03:6d:1b:64: 18:1d:33:23:16:98:63:39:17:52:78:2c:84:bb:b5: 62:34:df:21:f5:ca:ac:54:b6:a6:ed:a3:d5:6f:9b: 35:ea:4d:7e:9c:b9:8f:8a:3a:33:93:d5:fe:38:92: 0e:1e:b5:9f:af:71:7c:8b:b4:d6:31:fb:92:1a:f6: c9:f9:6b:a8:ee:fa:24:a0:79:52:ac:c9:43:d4:d6: 62:b0:25:9a:43:26:2c:b3:69:b9:82:33:c7:53:af: 0f:23:7c:41:61:63:4c:ce:08:83:fd:88:68:b2:1b: 47:3e:3c:da:f7:6f:35:99:99:df:09:63:7b:53:33: 98:cc:e7:73:7c:db:c7:ee:6f:6c:7c:2b:55:24:83: 00:25:0f:b3:79:8d:7e:51:43:0b:8c:ac:1a:cf:0f: 7a:b0:e7:c5:10:f3:d9:ca:b3:0e:53:c3:5b:7a:ac: fc:b0:e4:7e:bf:0f:e6:e7:c6:69:58:61:b6:17:34: 3b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:F0:AB:4A:2B:55:3A:B6:78:22:C0:AE:A1:E7:EC:3B:91:6D:69:D7 X509v3 Authority Key Identifier: keyid:5C:0A:35:23:FD:36:45:A7:63:5A:F2:51:9A:DC:D0:02:E1:32:FB:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAo1I_02RadjWvJRmtzQAuEy-84.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:88:05:cf:33:be:0a:d9:ff:ad:d4:37:58:b8:98:b6:ce:85: fa:86:ea:21:36:55:0b:c6:f9:6a:c3:ff:21:87:98:90:0e:ab: 8a:ab:97:10:93:8c:fe:f6:d8:32:c0:ea:88:02:b5:6c:c8:1e: de:94:6b:b9:ea:95:be:ef:20:65:e2:79:fa:35:30:1d:79:32: af:f6:5a:12:fe:2b:fa:d8:ab:ed:14:93:b3:f6:1a:1b:bd:24: a2:da:65:c2:72:12:5a:9c:82:9d:e8:37:f4:de:89:9a:b0:92: bd:df:a6:08:b4:7c:84:cc:8c:b9:b0:61:94:a3:c5:7e:8d:c3: d5:86:9e:b0:6b:18:bc:d3:4a:66:89:20:2a:38:82:05:fa:81: 93:07:48:6d:f5:04:55:7d:48:16:b3:b9:a0:7b:8d:37:d6:2d: 8e:6f:9c:90:cd:83:88:a7:eb:e3:6d:05:82:af:b0:f5:b8:f1: 15:19:28:bd:38:99:89:6f:56:7e:77:6f:13:3b:ac:a0:73:de: 13:7c:c8:cd:13:64:ca:69:66:46:b1:77:f4:6b:48:b4:91:18: 24:ac:2d:f0:22:d0:bd:7f:5d:0e:9c:8a:2b:d2:48:5b:41:8c: 4a:8d:3d:1f:68:d0:cb:1f:63:87:0a:eb:f4:9b:0b:f7:3d:2b: f0:a3:fc:af -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBGOTAxMTAvBgNVBAUTKDVDMEEzNTIzRkQzNjQ1QTc2MzVBRjI1MTlBRENEMDAy RTEzMkZCQ0UwHhcNMjYwOTIzMDUyOTMxWhcNMjYwOTMwMDUyOTMxWjAYMRYwFAYD VQQDEw02YWIzNjNiYy02YThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmMIwmBQzxkyERbdcx+Tbv3MQd2YLovG9YvH7ETLnhhYWf/9qFJbo9L04VHHR vp1mct92PSDXR/wVeS1gHWllh9JuCrn7LQNtG2QYHTMjFphjORdSeCyEu7ViNN8h 9cqsVLam7aPVb5s16k1+nLmPijozk9X+OJIOHrWfr3F8i7TWMfuSGvbJ+Wuo7vok oHlSrMlD1NZisCWaQyYss2m5gjPHU68PI3xBYWNMzgiD/YhoshtHPjza9281mZnf CWN7UzOYzOdzfNvH7m9sfCtVJIMAJQ+zeY1+UUMLjKwazw96sOfFEPPZyrMOU8Nb eqz8sOR+vw/m58ZpWGG2FzQ7JQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMnwq0or VTq2eCLArqHn7DuRbWnXMB8GA1UdIwQYMBaAFFwKNSP9NkWnY1ryUZrc0ALhMvvO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEY5MC8wNDc3OUI5Q0VE ODExMUVGQTAwMzY2MTZDNEY5QUUwMi9YQW8xSV8wMlJhZGpXdkpSbXR6UUF1RXkt ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hBbzFJXzAyUmFkald2SlJtdHpRQXVFeS04NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEY5MC8wNDc3OUI5Q0VEODExMUVGQTAwMzY2MTZDNEY5QUUwMi9YQW8xSV8wMlJh ZGpXdkpSbXR6UUF1RXktODQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaogFzzO+Ctn/rdQ3WLiYts6F+obqITZVC8b5asP/IYeYkA6riquXEJOM/vbY MsDqiAK1bMge3pRrueqVvu8gZeJ5+jUwHXkyr/ZaEv4r+tir7RSTs/YaG70kotpl wnISWpyCneg39N6JmrCSvd+mCLR8hMyMubBhlKPFfo3D1YaesGsYvNNKZokgKjiC BfqBkwdIbfUEVX1IFrO5oHuNN9Ytjm+ckM2DiKfr420Fgq+w9bjxFRkovTiZiW9W fndvEzusoHPeE3zIzRNkymlmRrF39GtItJEYJKwt8CLQvX9dDpyKK9JIW0GMSo09 H2jQyx9jhwrr9JsL9z0r8KP8rw== -----END CERTIFICATE-----Generated at Thu Sep 24 23:52:08 2026 by rpki-client