$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.mft File: XfR-KSrUurlNOGn6L8YKoOauKlM.mft (raw, json) Hash identifier: NU53hbgFL69SXJ++eHiAJm7owDrXi+YZoMpZOB63AN0= Subject key identifier: CD:AB:69:79:5A:EC:DF:6B:66:31:25:FA:1E:A9:08:13:5A:69:EF:17 Authority key identifier: 5D:F4:7E:29:2A:D4:BA:B9:4D:38:69:FA:2F:C6:0A:A0:E6:AE:2A:53 Certificate issuer: /CN=A91B3F7E/serialNumber=5DF47E292AD4BAB94D3869FA2FC60AA0E6AE2A53 Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XfR-KSrUurlNOGn6L8YKoOauKlM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.mft Manifest number: 59 Signing time: Fri 25 Sep 2026 08:19:13 +0000 Manifest this update: Fri 25 Sep 2026 08:19:12 +0000 Manifest next update: Fri 02 Oct 2026 08:19:12 +0000 Files and hashes: 1: XfR-KSrUurlNOGn6L8YKoOauKlM.crl (hash: aAUDZrmQno587YLThZRsT1av0r5LdUr7scBh/J5x1pw=) 2: FFF84A263A6911F18AE46050B0833773.roa (hash: ssv7cVlED2mj0Y5ViP5sQGZ6qpip26ujoYvi6duDnsE=) 3: E4AEB564380411F18536626792833773.roa (hash: zitRbSJcod3PTnS9PbBAV9aJ63tkxcQRzV7LIm/6eKY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.crl rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XfR-KSrUurlNOGn6L8YKoOauKlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 08:19:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3F7E, serialNumber=5DF47E292AD4BAB94D3869FA2FC60AA0E6AE2A53 Validity Not Before: Sep 25 08:19:12 2026 GMT Not After : Oct 2 08:19:12 2026 GMT Subject: CN=6ab62e80-2e5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:19:6a:11:f3:46:ac:3d:f4:a0:1c:d0:b2:67: c8:61:50:04:81:f1:62:23:57:5e:45:1f:73:f0:e0: 3a:08:a2:fa:aa:ee:b0:92:51:46:2b:65:0e:4d:cd: 2c:0f:7e:5b:bd:31:eb:23:5e:12:4b:35:8f:a7:75: 63:f1:15:96:ac:56:43:b3:f9:5f:76:c6:43:50:98: 09:59:88:21:88:67:8b:55:de:cf:e9:ae:1e:57:99: 2d:ff:93:6b:8c:63:81:2b:e4:58:05:be:4e:42:18: 2e:e1:f3:85:b8:cd:0e:db:31:7c:66:97:c3:7a:b3: 16:7b:fe:b1:ed:a1:4e:5e:ff:32:82:c9:14:02:07: 9a:bd:c8:89:fb:f4:7c:b5:05:c4:14:c3:97:ad:55: 7f:fe:66:1c:be:0a:50:89:b5:cb:93:d8:bf:0d:5a: 2c:f8:79:ff:bb:70:ef:a7:02:c4:a2:86:fc:14:4d: 7c:11:2b:1e:c6:ba:9d:aa:43:07:94:86:de:42:d3: f5:36:76:27:20:d0:c2:d4:9a:9e:52:bb:68:f2:3a: cb:df:66:66:76:9e:e2:be:2e:54:bd:60:53:e3:46: 7e:f3:6e:c2:26:70:cf:c7:de:25:ed:5b:f7:45:30: 27:a6:76:1c:a8:16:c6:f2:b6:8f:ff:28:92:e6:5c: fa:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:AB:69:79:5A:EC:DF:6B:66:31:25:FA:1E:A9:08:13:5A:69:EF:17 X509v3 Authority Key Identifier: keyid:5D:F4:7E:29:2A:D4:BA:B9:4D:38:69:FA:2F:C6:0A:A0:E6:AE:2A:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XfR-KSrUurlNOGn6L8YKoOauKlM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:81:90:59:92:b7:dd:df:33:58:60:8f:ec:37:ee:6d:ac:4b: d5:5b:22:82:75:e4:89:29:8e:3a:3f:1d:b6:74:ca:f0:cf:26: c0:4c:c9:97:ab:84:04:cc:36:83:a5:14:32:95:6f:89:d7:0a: 1d:bf:ad:9d:d0:b4:ff:26:fe:dc:90:7a:9b:cf:56:d1:d9:d0: 87:9a:3c:00:31:86:03:e4:73:3a:2f:3d:47:b8:38:2d:2c:b6: ac:86:51:23:59:a6:0d:06:a0:13:ff:d9:57:99:4d:02:fd:e8: 21:fc:c3:9d:bd:ae:2c:54:5c:bd:0e:ff:a0:84:c8:20:bc:f8: 9f:77:43:53:03:78:a2:97:55:b7:17:3c:01:af:e6:96:44:39: 28:4e:0d:b3:48:46:f7:49:a8:0e:b9:52:0a:a9:2b:1b:78:03: 0a:f1:f0:3e:1f:46:01:49:f0:d7:d5:69:62:0d:d3:ed:9b:6b: 25:ec:cd:5b:85:bd:98:17:08:40:c4:b4:48:29:22:7f:f1:ba: 8f:4f:c7:61:8c:63:5e:48:ba:1d:89:8e:59:9e:5e:45:30:7b: 31:46:26:7b:a8:3e:4a:50:43:91:f9:fe:43:80:f9:74:49:2e: cd:f2:68:a3:27:2d:7c:9b:4d:94:f9:ab:6d:08:93:b8:2e:d8: e3:3b:70:9c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC M0Y3RTExMC8GA1UEBRMoNURGNDdFMjkyQUQ0QkFCOTREMzg2OUZBMkZDNjBBQTBF NkFFMkE1MzAeFw0yNjA5MjUwODE5MTJaFw0yNjEwMDIwODE5MTJaMBgxFjAUBgNV BAMTDTZhYjYyZTgwLTJlNWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtGWoR80asPfSgHNCyZ8hhUASB8WIjV15FH3Pw4DoIovqq7rCSUUYrZQ5NzSwP flu9MesjXhJLNY+ndWPxFZasVkOz+V92xkNQmAlZiCGIZ4tV3s/prh5XmS3/k2uM Y4Er5FgFvk5CGC7h84W4zQ7bMXxml8N6sxZ7/rHtoU5e/zKCyRQCB5q9yIn79Hy1 BcQUw5etVX/+Zhy+ClCJtcuT2L8NWiz4ef+7cO+nAsSihvwUTXwRKx7Gup2qQweU ht5C0/U2dicg0MLUmp5Su2jyOsvfZmZ2nuK+LlS9YFPjRn7zbsImcM/H3iXtW/dF MCemdhyoFsbyto//KJLmXPppAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUzatpeVrs 32tmMSX6HqkIE1pp7xcwHwYDVR0jBBgwFoAUXfR+KSrUurlNOGn6L8YKoOauKlMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzRjdFLzVBMTI0NTM4MzY2 MDExRjFCMEQzMEExNkNBODMzNzczL1hmUi1LU3JVdXJsTk9HbjZMOFlLb09hdUts TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvWGZSLUtTclV1cmxOT0duNkw4WUtvT2F1S2xNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz RjdFLzVBMTI0NTM4MzY2MDExRjFCMEQzMEExNkNBODMzNzczL1hmUi1LU3JVdXJs Tk9HbjZMOFlLb09hdUtsTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCGgZBZkrfd3zNYYI/sN+5trEvVWyKCdeSJKY46Px22dMrwzybATMmXq4QEzDaD pRQylW+J1wodv62d0LT/Jv7ckHqbz1bR2dCHmjwAMYYD5HM6Lz1HuDgtLLashlEj WaYNBqAT/9lXmU0C/egh/MOdva4sVFy9Dv+ghMggvPifd0NTA3iil1W3FzwBr+aW RDkoTg2zSEb3SagOuVIKqSsbeAMK8fA+H0YBSfDX1WliDdPtm2sl7M1bhb2YFwhA xLRIKSJ/8bqPT8dhjGNeSLodiY5Znl5FMHsxRiZ7qD5KUEOR+f5DgPl0SS7N8mij Jy18m02U+attCJO4LtjjO3Cc -----END CERTIFICATE-----Generated at Sun Sep 27 01:09:17 2026 by rpki-client