$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7106/7CF15D8079AB11F19431028A95A30FBC/XiBrZUYXUm6oHe9p1A3KkMONpJM.mft File: XiBrZUYXUm6oHe9p1A3KkMONpJM.mft (raw, json) Hash identifier: NT29osVN2ZW6y/D6VJqfAenr+g7nFwL0T/wjwkKzl+0= Subject key identifier: 5E:D3:C2:7A:C4:FF:D5:80:64:2F:3C:EF:67:8F:9A:72:06:06:FB:B6 Authority key identifier: 5E:20:6B:65:46:17:52:6E:A8:1D:EF:69:D4:0D:CA:90:C3:8D:A4:93 Certificate issuer: /CN=A91C7106/serialNumber=5E206B654617526EA81DEF69D40DCA90C38DA493 Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XiBrZUYXUm6oHe9p1A3KkMONpJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7106/7CF15D8079AB11F19431028A95A30FBC/XiBrZUYXUm6oHe9p1A3KkMONpJM.mft Manifest number: 2A Signing time: Wed 23 Sep 2026 08:30:00 +0000 Manifest this update: Wed 23 Sep 2026 08:30:00 +0000 Manifest next update: Wed 30 Sep 2026 08:30:00 +0000 Files and hashes: 1: XiBrZUYXUm6oHe9p1A3KkMONpJM.crl (hash: WaJQcLjwLobeGSU1n7cRoEFkkutAQETvnBptlF7duVs=) 2: 40CA1FF879AC11F1A4BD68E295A30FBC.roa (hash: dxvzMh7pViI4BlQNkWmxdOF/VYXouPMtNS8/qBafvbA=) 3: 403D780079AC11F1A4BD68E295A30FBC.roa (hash: PX6Hn6xK6Ug95lfOomfVfmyROaB7znZe36dnapQD0gE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7106/7CF15D8079AB11F19431028A95A30FBC/XiBrZUYXUm6oHe9p1A3KkMONpJM.crl rsync://rpki.apnic.net/member_repository/A91C7106/7CF15D8079AB11F19431028A95A30FBC/XiBrZUYXUm6oHe9p1A3KkMONpJM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XiBrZUYXUm6oHe9p1A3KkMONpJM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:29:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7106, serialNumber=5E206B654617526EA81DEF69D40DCA90C38DA493 Validity Not Before: Sep 23 08:30:00 2026 GMT Not After : Sep 30 08:30:00 2026 GMT Subject: CN=6ab38e08-117b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:76:1c:ea:71:93:16:dd:7d:4a:6d:e5:71:d8: 9b:f6:d3:9b:7a:31:3f:39:2a:f8:56:bc:81:78:29: 8c:ec:bf:f2:c2:e3:9a:d6:40:a1:77:d3:ad:53:f6: 46:3f:3a:c1:7e:6f:f1:18:c7:67:f8:e7:5b:70:56: 77:94:2a:f9:8b:5a:7e:44:b2:47:4c:f1:94:96:aa: 75:ed:8c:26:a0:47:d0:eb:c1:b8:2f:af:bc:ac:ca: ed:75:13:95:5f:96:1a:ee:cf:31:0a:e2:4c:87:53: e6:af:3e:e7:5d:fa:4b:01:44:81:e3:77:f0:7a:ee: b5:dd:45:81:e3:58:7c:bb:f3:db:db:e5:de:b3:75: a8:4c:c5:48:5d:37:a5:81:0e:67:b6:12:55:bf:ea: 0c:0a:0e:f2:06:4d:01:74:1d:fe:f7:32:67:e1:e2: 86:6d:cc:69:52:e3:57:df:6c:d8:98:3d:fc:ee:48: d1:1c:9e:11:e4:df:40:3b:ac:fc:8a:56:7b:b3:41: 3e:14:a2:22:e0:49:78:e3:f2:4c:de:f1:cb:39:65: 9e:a5:dd:97:74:bf:f1:a9:e2:83:a4:24:d1:34:03: 41:00:da:a9:6b:7a:36:1f:a2:2a:a3:a3:4b:c2:cf: ac:04:d9:82:ab:08:66:79:27:83:ba:9e:df:f3:53: fa:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:D3:C2:7A:C4:FF:D5:80:64:2F:3C:EF:67:8F:9A:72:06:06:FB:B6 X509v3 Authority Key Identifier: keyid:5E:20:6B:65:46:17:52:6E:A8:1D:EF:69:D4:0D:CA:90:C3:8D:A4:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7106/7CF15D8079AB11F19431028A95A30FBC/XiBrZUYXUm6oHe9p1A3KkMONpJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XiBrZUYXUm6oHe9p1A3KkMONpJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7106/7CF15D8079AB11F19431028A95A30FBC/XiBrZUYXUm6oHe9p1A3KkMONpJM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:08:82:67:58:1b:8e:e0:15:1b:7b:d1:73:16:2b:48:86:61: 15:4b:75:3b:6b:98:6d:66:28:54:10:58:0d:12:d8:4c:4c:6c: 50:db:06:65:20:b0:24:c0:07:0f:c6:1e:5e:72:32:30:e7:6f: db:ef:02:7a:9c:33:fa:1c:87:eb:5b:6d:5c:36:ab:49:58:16: 30:37:cb:06:ec:eb:29:9f:2d:cf:51:e0:02:76:cb:db:49:df: 97:e0:db:47:3f:2b:54:be:20:97:90:fa:7a:22:57:51:2e:f3: 98:00:d6:9c:60:a2:19:56:80:68:74:6d:e6:27:e2:03:62:ba: ed:68:e0:f2:59:9d:e3:68:60:9b:3c:79:26:c1:e4:0d:28:d7: 7d:be:8d:aa:21:73:7b:73:5b:cb:ed:85:41:58:71:86:37:f1: 63:3b:49:66:63:23:1e:d6:ae:1e:1d:4f:59:7f:85:48:80:29: 12:9b:a1:d8:ff:a1:e6:74:35:4b:ba:28:50:26:ac:d1:73:bc: e2:04:d0:c6:f9:e8:d4:cc:0e:1f:32:96:c9:88:c2:47:b9:07: 79:18:bf:81:e6:71:62:ee:bb:6c:2c:9d:f7:ab:53:26:5b:89: 52:9a:3c:c5:e3:7f:78:08:3f:f5:b5:0b:13:d0:f5:7d:97:94: 14:42:c6:28 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NzEwNjExMC8GA1UEBRMoNUUyMDZCNjU0NjE3NTI2RUE4MURFRjY5RDQwRENBOTBD MzhEQTQ5MzAeFw0yNjA5MjMwODMwMDBaFw0yNjA5MzAwODMwMDBaMBgxFjAUBgNV BAMTDTZhYjM4ZTA4LTExN2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHdhzqcZMW3X1KbeVx2Jv205t6MT85KvhWvIF4KYzsv/LC45rWQKF3061T9kY/ OsF+b/EYx2f451twVneUKvmLWn5EskdM8ZSWqnXtjCagR9Drwbgvr7ysyu11E5Vf lhruzzEK4kyHU+avPudd+ksBRIHjd/B67rXdRYHjWHy789vb5d6zdahMxUhdN6WB Dme2ElW/6gwKDvIGTQF0Hf73Mmfh4oZtzGlS41ffbNiYPfzuSNEcnhHk30A7rPyK VnuzQT4UoiLgSXjj8kze8cs5ZZ6l3Zd0v/Gp4oOkJNE0A0EA2qlrejYfoiqjo0vC z6wE2YKrCGZ5J4O6nt/zU/ofAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUXtPCesT/ 1YBkLzzvZ4+acgYG+7YwHwYDVR0jBBgwFoAUXiBrZUYXUm6oHe9p1A3KkMONpJMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3MTA2LzdDRjE1RDgwNzlB QjExRjE5NDMxMDI4QTk1QTMwRkJDL1hpQnJaVVlYVW02b0hlOXAxQTNLa01PTnBK TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWGlCclpVWVhVbTZvSGU5cDFBM0trTU9OcEpNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 MTA2LzdDRjE1RDgwNzlBQjExRjE5NDMxMDI4QTk1QTMwRkJDL1hpQnJaVVlYVW02 b0hlOXAxQTNLa01PTnBKTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBvCIJnWBuO4BUbe9FzFitIhmEVS3U7a5htZihUEFgNEthMTGxQ2wZlILAkwAcP xh5ecjIw52/b7wJ6nDP6HIfrW21cNqtJWBYwN8sG7Ospny3PUeACdsvbSd+X4NtH PytUviCXkPp6IldRLvOYANacYKIZVoBodG3mJ+IDYrrtaODyWZ3jaGCbPHkmweQN KNd9vo2qIXN7c1vL7YVBWHGGN/FjO0lmYyMe1q4eHU9Zf4VIgCkSm6HY/6HmdDVL uihQJqzRc7ziBNDG+ejUzA4fMpbJiMJHuQd5GL+B5nFi7rtsLJ33q1MmW4lSmjzF 4394CD/1tQsT0PV9l5QUQsYo -----END CERTIFICATE-----Generated at Thu Sep 24 15:49:19 2026 by rpki-client