$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft File: XwBNV-s29CZy5m8wBfZGm2KJFxs.mft (raw, json) Hash identifier: kW72CEf7CKWyZj6yB9efrJ/zUakGZspDEYWY2yUPnpU= Subject key identifier: A2:0B:76:9D:DE:02:6A:78:14:C7:A9:7E:B1:74:AB:07:DF:99:DE:50 Authority key identifier: 5F:00:4D:57:EB:36:F4:26:72:E6:6F:30:05:F6:46:9B:62:89:17:1B Certificate issuer: /CN=A91C1025/serialNumber=5F004D57EB36F42672E66F3005F6469B6289171B Certificate serial: 0179 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft Manifest number: 016F Signing time: Wed 07 Oct 2026 05:26:08 +0000 Manifest this update: Wed 07 Oct 2026 05:26:08 +0000 Manifest next update: Wed 14 Oct 2026 05:26:08 +0000 Files and hashes: 1: XwBNV-s29CZy5m8wBfZGm2KJFxs.crl (hash: fv1bXkH4t9KgfItHwYpDQuYpFXE/VipVnY485h6BOKc=) 2: 3D04EA589D9211EF8083B245C4F9AE02.roa (hash: N8subGTXgSFo4mT5pf8HJvgdyU5Rcsjvn4+t6H3QhDo=) 3: 6D79D956EF8E11F0A4EF9B52626F56BC.roa (hash: 4G7rkAOPzZxy6QxlsO0//em4aGUKuTqPaZNaxC3+I/U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.crl rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 05:26:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 377 (0x179) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1025, serialNumber=5F004D57EB36F42672E66F3005F6469B6289171B Validity Not Before: Oct 7 05:26:08 2026 GMT Not After : Oct 14 05:26:08 2026 GMT Subject: CN=6ac5d7f0-2950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9d:d9:f2:33:65:fa:23:99:41:99:4a:08:ee: e0:ca:f6:dd:06:30:24:76:91:04:3a:e9:74:40:60: df:99:90:97:e4:28:63:e5:88:f0:3d:6b:79:8c:0d: 25:83:73:a9:e0:19:24:46:55:80:0e:ab:31:17:8c: 93:2f:13:83:79:a1:5e:4c:ce:46:ef:7e:10:a0:4e: e7:10:a8:70:d8:d7:d1:32:7f:16:ab:a1:6b:2b:d7: bb:5a:88:c1:6a:c1:4e:b5:f9:c1:40:ca:5b:6f:ae: 36:90:b0:4f:f4:71:82:2b:7c:1b:e9:cc:83:23:62: a1:00:a7:6d:48:4f:58:a2:c2:b9:4d:8d:c9:15:c9: dd:f5:bb:40:0d:7f:76:ed:e9:d2:c6:f9:65:0a:25: e3:79:5f:02:c6:56:a8:fe:a4:6f:0d:8c:2b:8f:b2: 9d:52:00:7a:5a:0b:d1:48:0d:e5:a3:f6:2a:3e:38: 45:7e:04:aa:aa:0a:ca:85:cd:ea:f3:b2:ec:3e:be: c8:36:ba:a8:0c:20:d2:a9:59:38:19:98:0e:e4:28: 61:2e:ee:5f:62:23:e6:ef:bb:9e:cc:02:02:5f:69: 14:63:c5:ad:84:0f:88:41:7d:b9:6b:fb:30:72:d9: 37:ca:a2:93:2a:e3:5a:f6:c1:75:97:a1:7c:17:48: 54:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:0B:76:9D:DE:02:6A:78:14:C7:A9:7E:B1:74:AB:07:DF:99:DE:50 X509v3 Authority Key Identifier: keyid:5F:00:4D:57:EB:36:F4:26:72:E6:6F:30:05:F6:46:9B:62:89:17:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:f3:a0:2b:f0:be:8e:1a:29:38:22:97:01:8f:25:63:3c:10: b3:4f:ba:17:70:b5:bb:57:27:04:58:f5:aa:0b:80:07:fb:4c: 6d:ce:70:9d:6d:83:3d:b3:1d:d9:f0:bd:70:ee:68:f7:eb:05: 85:81:7f:5f:36:6a:39:6d:3d:ce:9d:b0:6b:d5:10:94:aa:38: 72:6f:1c:56:39:ab:1a:67:63:b3:15:15:c3:a0:28:fa:cb:70: 33:10:fb:e6:2f:c0:2d:a3:f7:04:43:6c:d1:46:59:8f:c1:f0: 2f:d1:7b:b8:a2:45:71:d3:74:f7:02:0f:13:62:cd:23:6c:2a: 56:7c:b2:b6:a5:29:91:b0:6f:ae:1e:b8:2c:c6:5a:3d:84:69: 7c:b1:73:ce:74:ca:3a:4e:de:6b:5f:0f:2d:18:25:40:e6:2c: 89:e0:8b:34:1d:1c:4c:37:23:9c:75:2e:e1:a4:f1:37:57:7b: b1:61:f8:43:ed:da:55:00:72:7c:b9:47:75:34:fb:27:37:c4: 02:0f:ea:05:c5:0a:80:e0:f3:eb:46:b9:c0:df:76:8d:27:17: 79:23:15:d7:a4:f1:2f:52:86:79:92:c6:57:13:97:b8:0c:fc: c6:6e:7b:e4:1c:fc:29:df:cf:0d:b1:47:10:12:b7:b1:c7:84: 40:a2:48:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEwMjUxMTAvBgNVBAUTKDVGMDA0RDU3RUIzNkY0MjY3MkU2NkYzMDA1RjY0NjlC NjI4OTE3MUIwHhcNMjYxMDA3MDUyNjA4WhcNMjYxMDE0MDUyNjA4WjAYMRYwFAYD VQQDEw02YWM1ZDdmMC0yOTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJ3Z8jNl+iOZQZlKCO7gyvbdBjAkdpEEOul0QGDfmZCX5Chj5YjwPWt5jA0l g3Op4BkkRlWADqsxF4yTLxODeaFeTM5G734QoE7nEKhw2NfRMn8Wq6FrK9e7WojB asFOtfnBQMpbb642kLBP9HGCK3wb6cyDI2KhAKdtSE9YosK5TY3JFcnd9btADX92 7enSxvllCiXjeV8Cxlao/qRvDYwrj7KdUgB6WgvRSA3lo/YqPjhFfgSqqgrKhc3q 87LsPr7INrqoDCDSqVk4GZgO5ChhLu5fYiPm77uezAICX2kUY8WthA+IQX25a/sw ctk3yqKTKuNa9sF1l6F8F0hUYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKILdp3e Amp4FMepfrF0qwffmd5QMB8GA1UdIwQYMBaAFF8ATVfrNvQmcuZvMAX2RptiiRcb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTAyNS85NTZGNjYyQzlE ODQxMUVGODE3RTE0MjBDNEY5QUUwMi9Yd0JOVi1zMjlDWnk1bTh3QmZaR20yS0pG eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h3Qk5WLXMyOUNaeTVtOHdCZlpHbTJLSkZ4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTAyNS85NTZGNjYyQzlEODQxMUVGODE3RTE0MjBDNEY5QUUwMi9Yd0JOVi1zMjlD Wnk1bTh3QmZaR20yS0pGeHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAz/OgK/C+jhopOCKXAY8lYzwQs0+6F3C1u1cnBFj1qguAB/tMbc5wnW2DPbMd 2fC9cO5o9+sFhYF/XzZqOW09zp2wa9UQlKo4cm8cVjmrGmdjsxUVw6Ao+stwMxD7 5i/ALaP3BENs0UZZj8HwL9F7uKJFcdN09wIPE2LNI2wqVnyytqUpkbBvrh64LMZa PYRpfLFzznTKOk7ea18PLRglQOYsieCLNB0cTDcjnHUu4aTxN1d7sWH4Q+3aVQBy fLlHdTT7JzfEAg/qBcUKgODz60a5wN92jScXeSMV16TxL1KGeZLGVxOXuAz8xm57 5Bz8Kd/PDbFHEBK3sceEQKJI1Q== -----END CERTIFICATE-----Generated at Thu Oct 8 16:45:44 2026 by rpki-client