$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CC8BE/127257F48FA711F18CCC416F6011F970/Xa8F0ZASWq672xrRAQ6jhBdPc7A.mft File: Xa8F0ZASWq672xrRAQ6jhBdPc7A.mft (raw, json) Hash identifier: 80LJHQapzTjThsYlqmOtaIoZQwjCbuXmsudMOtfvLoI= Subject key identifier: 17:79:1F:6B:00:37:B3:41:4A:ED:A6:5F:63:FC:76:6D:8F:8D:18:EF Authority key identifier: 5D:AF:05:D1:90:12:5A:AE:BB:DB:1A:D1:01:0E:A3:84:17:4F:73:B0 Certificate issuer: /CN=A91CC8BE/serialNumber=5DAF05D190125AAEBBDB1AD1010EA384174F73B0 Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xa8F0ZASWq672xrRAQ6jhBdPc7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC8BE/127257F48FA711F18CCC416F6011F970/Xa8F0ZASWq672xrRAQ6jhBdPc7A.mft Manifest number: 20 Signing time: Mon 21 Sep 2026 08:55:04 +0000 Manifest this update: Mon 21 Sep 2026 08:55:03 +0000 Manifest next update: Mon 28 Sep 2026 08:55:03 +0000 Files and hashes: 1: Xa8F0ZASWq672xrRAQ6jhBdPc7A.crl (hash: k6W1l0ej3G7ZdJVSERuZ4T+SMds3qNx5C7TXhyKR3kU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC8BE/127257F48FA711F18CCC416F6011F970/Xa8F0ZASWq672xrRAQ6jhBdPc7A.crl rsync://rpki.apnic.net/member_repository/A91CC8BE/127257F48FA711F18CCC416F6011F970/Xa8F0ZASWq672xrRAQ6jhBdPc7A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xa8F0ZASWq672xrRAQ6jhBdPc7A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:55:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC8BE, serialNumber=5DAF05D190125AAEBBDB1AD1010EA384174F73B0 Validity Not Before: Sep 21 08:55:03 2026 GMT Not After : Sep 28 08:55:03 2026 GMT Subject: CN=6ab0f0e7-d91e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:4b:fb:32:0d:13:18:f4:07:6b:58:01:41:a1: f6:db:03:93:0e:3c:94:37:06:1e:10:92:5a:74:d1: ac:20:cb:73:49:bb:91:2f:42:9e:dc:39:11:d5:a3: 45:5a:01:b7:32:71:ca:19:4b:de:3f:77:bb:b2:6f: e8:d7:69:a9:9e:22:e0:73:91:35:a1:23:24:43:01: 4c:a2:8b:ba:4c:29:7f:89:10:b1:99:91:2a:4e:0d: 6b:b1:88:6b:41:93:b5:98:d0:c7:18:6a:b9:d6:a7: 39:f9:1f:9e:d8:41:28:71:33:d9:32:c7:fd:c9:64: 7a:22:b8:58:a6:2d:c5:18:98:c1:d3:ec:f6:a9:6c: d8:5b:7d:e7:3d:a4:14:ed:d3:01:e3:c7:08:9d:25: 88:e5:cb:5d:07:ca:64:80:00:18:1c:21:77:ef:3d: 45:f8:ab:f8:45:c0:37:4d:7f:44:01:ba:38:05:72: 3a:48:55:ee:39:4a:9b:7b:7d:29:a3:23:36:c7:2f: 83:33:e5:57:12:55:db:40:6d:d4:b8:4f:aa:33:a5: 92:8e:81:39:aa:3d:11:f8:b5:2f:e5:9b:6d:6e:ca: f8:fe:bc:d1:5a:40:d6:65:14:16:9e:6a:e2:6e:a0: 54:6e:4a:b8:72:b6:fb:3b:a8:c6:f5:ee:28:36:cf: 4c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:79:1F:6B:00:37:B3:41:4A:ED:A6:5F:63:FC:76:6D:8F:8D:18:EF X509v3 Authority Key Identifier: keyid:5D:AF:05:D1:90:12:5A:AE:BB:DB:1A:D1:01:0E:A3:84:17:4F:73:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC8BE/127257F48FA711F18CCC416F6011F970/Xa8F0ZASWq672xrRAQ6jhBdPc7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xa8F0ZASWq672xrRAQ6jhBdPc7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC8BE/127257F48FA711F18CCC416F6011F970/Xa8F0ZASWq672xrRAQ6jhBdPc7A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:28:54:ec:f5:fb:46:55:69:42:0a:13:96:51:be:69:01:6f: 96:c5:e9:2b:05:80:54:4e:8c:94:0f:02:f1:a5:1b:d1:a5:e3: e9:97:1c:a5:b7:61:9f:44:e5:13:ac:99:38:48:3d:42:f5:de: 95:79:bb:b2:35:a6:c0:d1:14:56:4f:93:09:e9:4c:ef:4e:00: 4f:80:e5:ac:34:74:83:3e:4e:ab:61:1f:53:35:34:ee:0f:40: 6a:51:38:fa:71:c4:ea:16:60:d7:de:26:66:1a:84:db:43:ad: 92:9c:2e:48:34:3a:3b:7e:38:a1:e9:5c:71:43:48:c9:1f:bb: ca:15:5c:54:52:24:49:ba:8f:cf:c8:e7:96:94:74:8c:a8:c5: 4c:ba:cb:21:13:99:b8:fa:b3:5a:d7:0b:1e:f9:67:56:7c:70: 81:37:5b:7b:b4:99:be:10:a8:2d:53:74:f9:10:86:de:84:56: 67:0b:7a:50:aa:de:51:89:aa:44:61:d6:1d:eb:78:c9:6d:ed: 74:72:53:ce:66:91:08:98:b3:d2:bc:a5:d1:00:31:a6:0c:95: ac:5a:44:4a:fc:07:e1:a5:e1:31:1d:e3:d3:db:42:15:d8:0d: 66:b9:09:1a:ad:4e:c9:ec:9e:05:35:ec:5f:69:50:05:72:70: 49:77:19:3c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QzhCRTExMC8GA1UEBRMoNURBRjA1RDE5MDEyNUFBRUJCREIxQUQxMDEwRUEzODQx NzRGNzNCMDAeFw0yNjA5MjEwODU1MDNaFw0yNjA5MjgwODU1MDNaMBgxFjAUBgNV BAMTDTZhYjBmMGU3LWQ5MWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCSS/syDRMY9AdrWAFBofbbA5MOPJQ3Bh4Qklp00awgy3NJu5EvQp7cORHVo0Va AbcyccoZS94/d7uyb+jXaameIuBzkTWhIyRDAUyii7pMKX+JELGZkSpODWuxiGtB k7WY0McYarnWpzn5H57YQShxM9kyx/3JZHoiuFimLcUYmMHT7PapbNhbfec9pBTt 0wHjxwidJYjly10HymSAABgcIXfvPUX4q/hFwDdNf0QBujgFcjpIVe45Spt7fSmj IzbHL4Mz5VcSVdtAbdS4T6ozpZKOgTmqPRH4tS/lm21uyvj+vNFaQNZlFBaeauJu oFRuSrhytvs7qMb17ig2z0yXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUF3kfawA3 s0FK7aZfY/x2bY+NGO8wHwYDVR0jBBgwFoAUXa8F0ZASWq672xrRAQ6jhBdPc7Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDOEJFLzEyNzI1N0Y0OEZB NzExRjE4Q0NDNDE2RjYwMTFGOTcwL1hhOEYwWkFTV3E2NzJ4clJBUTZqaEJkUGM3 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWGE4RjBaQVNXcTY3MnhyUkFRNmpoQmRQYzdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND OEJFLzEyNzI1N0Y0OEZBNzExRjE4Q0NDNDE2RjYwMTFGOTcwL1hhOEYwWkFTV3E2 NzJ4clJBUTZqaEJkUGM3QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBeKFTs9ftGVWlCChOWUb5pAW+WxekrBYBUToyUDwLxpRvRpePplxylt2GfROUT rJk4SD1C9d6VebuyNabA0RRWT5MJ6UzvTgBPgOWsNHSDPk6rYR9TNTTuD0BqUTj6 ccTqFmDX3iZmGoTbQ62SnC5INDo7fjih6VxxQ0jJH7vKFVxUUiRJuo/PyOeWlHSM qMVMusshE5m4+rNa1wse+WdWfHCBN1t7tJm+EKgtU3T5EIbehFZnC3pQqt5RiapE YdYd63jJbe10clPOZpEImLPSvKXRADGmDJWsWkRK/AfhpeExHePT20IV2A1muQka rU7J7J4FNexfaVAFcnBJdxk8 -----END CERTIFICATE-----Generated at Tue Sep 22 22:45:22 2026 by rpki-client