$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D0B34/6037D5DC82A111EA93413B4AC4F9AE02/XfEC4qXnNnchwRjb7NpgKoAp7pQ.mft File: XfEC4qXnNnchwRjb7NpgKoAp7pQ.mft (raw, json) Hash identifier: G4E/Q7ulVkHVWOreBV8aitzVkOamNWG2yUqUM5TdQRg= Subject key identifier: 43:0A:60:D2:32:DA:58:0C:10:32:BD:7F:D0:08:D5:AC:B3:AD:F3:4B Authority key identifier: 5D:F1:02:E2:A5:E7:36:77:21:C1:18:DB:EC:DA:60:2A:80:29:EE:94 Certificate issuer: /CN=A91D0B34/serialNumber=5DF102E2A5E7367721C118DBECDA602A8029EE94 Certificate serial: 0AD9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfEC4qXnNnchwRjb7NpgKoAp7pQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B34/6037D5DC82A111EA93413B4AC4F9AE02/XfEC4qXnNnchwRjb7NpgKoAp7pQ.mft Manifest number: 0AC9 Signing time: Tue 22 Sep 2026 19:17:33 +0000 Manifest this update: Tue 22 Sep 2026 19:17:33 +0000 Manifest next update: Tue 29 Sep 2026 19:17:33 +0000 Files and hashes: 1: XfEC4qXnNnchwRjb7NpgKoAp7pQ.crl (hash: UHicuwvb8TvqwNltjSpZUfg8y80wQCXG0CbekLZV9rA=) 2: 97E61FE46F2111EB85D19531C4F9AE02.roa (hash: F/VFxbWKijK0FBQMOwCi6caTAlncQZjF9P40j+MjDLs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0B34/6037D5DC82A111EA93413B4AC4F9AE02/XfEC4qXnNnchwRjb7NpgKoAp7pQ.crl rsync://rpki.apnic.net/member_repository/A91D0B34/6037D5DC82A111EA93413B4AC4F9AE02/XfEC4qXnNnchwRjb7NpgKoAp7pQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfEC4qXnNnchwRjb7NpgKoAp7pQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 19:17:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2777 (0xad9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0B34, serialNumber=5DF102E2A5E7367721C118DBECDA602A8029EE94 Validity Not Before: Sep 22 19:17:33 2026 GMT Not After : Sep 29 19:17:33 2026 GMT Subject: CN=6ab2d44d-f909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:95:5b:70:7b:f5:b7:26:f3:11:eb:5e:00:d3: 31:bd:0d:e2:2c:7d:f2:03:06:4a:eb:34:ec:aa:9f: 53:3c:b7:c3:bb:cb:08:c1:bf:fd:5e:5f:58:67:29: af:e4:6f:33:cb:59:ac:01:5f:0a:b4:f8:63:ed:6e: 0d:cb:73:03:be:1f:34:dd:18:68:f7:99:e8:f4:1b: db:eb:0c:b1:dd:73:39:ae:cb:68:bd:f5:c4:e4:22: 95:9e:c0:40:13:53:91:f3:22:58:ff:67:7b:d0:79: 3b:7c:72:da:50:0e:71:50:1b:06:9d:b1:6d:e9:50: cb:75:c4:fd:eb:99:3b:02:9c:27:14:c0:18:78:7d: 77:ae:90:71:fc:e5:68:36:fe:f5:bb:56:de:2b:ee: 07:82:2d:8a:27:3a:f9:9b:de:6b:da:20:24:2e:3e: b9:50:52:69:8f:67:e8:41:fa:aa:ee:fd:6d:b0:e5: bc:76:c3:56:13:bd:36:d5:c8:b0:d8:e9:60:4f:9a: 98:05:d3:28:f1:48:52:8e:0b:52:e2:a5:c4:0d:9b: ff:fe:20:e4:46:05:84:49:bd:27:2e:e7:af:8a:09: d3:d1:6d:6b:f3:d3:9f:b5:1e:e1:4a:f2:e3:10:d8: 5e:56:92:55:7c:00:d4:fe:cf:03:48:fd:b2:dd:eb: a6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:0A:60:D2:32:DA:58:0C:10:32:BD:7F:D0:08:D5:AC:B3:AD:F3:4B X509v3 Authority Key Identifier: keyid:5D:F1:02:E2:A5:E7:36:77:21:C1:18:DB:EC:DA:60:2A:80:29:EE:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0B34/6037D5DC82A111EA93413B4AC4F9AE02/XfEC4qXnNnchwRjb7NpgKoAp7pQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfEC4qXnNnchwRjb7NpgKoAp7pQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B34/6037D5DC82A111EA93413B4AC4F9AE02/XfEC4qXnNnchwRjb7NpgKoAp7pQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:2a:0e:74:3d:31:6b:f1:cd:8c:29:25:41:04:63:42:74:36: d2:e1:8d:7e:d0:21:3d:61:0f:dd:0f:b6:98:cf:4e:99:b2:70: de:47:37:5b:d0:ef:40:cd:a0:36:94:a2:5a:11:92:7b:a1:85: 55:f0:41:44:a8:57:cc:6c:f1:54:e8:ec:68:98:7e:42:cc:0c: 6b:37:f2:af:e4:fa:34:eb:80:d1:aa:e5:29:27:90:05:37:31: 8b:26:b0:4b:70:92:76:2e:f2:80:4f:bb:71:eb:b4:c3:4d:9a: 0c:8d:f7:2e:75:a4:49:2f:f1:e1:0c:58:23:62:51:bb:99:3d: 8e:3f:92:3a:ed:bd:a3:26:94:78:79:4a:5c:a5:4c:e2:3d:61: d0:db:e2:55:3b:53:90:76:fa:f6:60:3f:91:09:ce:b7:70:12: 02:e8:da:69:ea:85:6a:3d:6e:66:fa:4b:4d:d2:a6:7c:e0:83: 26:18:52:9c:52:3c:21:58:38:72:31:3f:08:b3:54:29:65:f3: 0f:c5:b1:b3:ff:d9:e6:fd:3a:d8:34:93:a3:31:f6:72:b8:61: 79:9d:be:4c:2a:e3:1c:56:b8:da:23:76:ff:3c:73:ef:4d:6c: 9c:37:e7:ab:ad:88:0b:27:14:73:ba:9f:97:0d:88:74:f9:20: 3c:62:47:b1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBCMzQxMTAvBgNVBAUTKDVERjEwMkUyQTVFNzM2NzcyMUMxMThEQkVDREE2MDJB ODAyOUVFOTQwHhcNMjYwOTIyMTkxNzMzWhcNMjYwOTI5MTkxNzMzWjAYMRYwFAYD VQQDEw02YWIyZDQ0ZC1mOTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp5VbcHv1tybzEeteANMxvQ3iLH3yAwZK6zTsqp9TPLfDu8sIwb/9Xl9YZymv 5G8zy1msAV8KtPhj7W4Ny3MDvh803Rho95no9Bvb6wyx3XM5rstovfXE5CKVnsBA E1OR8yJY/2d70Hk7fHLaUA5xUBsGnbFt6VDLdcT965k7ApwnFMAYeH13rpBx/OVo Nv71u1beK+4Hgi2KJzr5m95r2iAkLj65UFJpj2foQfqq7v1tsOW8dsNWE7021ciw 2OlgT5qYBdMo8UhSjgtS4qXEDZv//iDkRgWESb0nLuevignT0W1r89OftR7hSvLj ENheVpJVfADU/s8DSP2y3eumXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEMKYNIy 2lgMEDK9f9AI1ayzrfNLMB8GA1UdIwQYMBaAFF3xAuKl5zZ3IcEY2+zaYCqAKe6U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEIzNC82MDM3RDVEQzgy QTExMUVBOTM0MTNCNEFDNEY5QUUwMi9YZkVDNHFYbk5uY2h3UmpiN05wZ0tvQXA3 cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hmRUM0cVhuTm5jaHdSamI3TnBnS29BcDdwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEIzNC82MDM3RDVEQzgyQTExMUVBOTM0MTNCNEFDNEY5QUUwMi9YZkVDNHFYbk5u Y2h3UmpiN05wZ0tvQXA3cFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAioOdD0xa/HNjCklQQRjQnQ20uGNftAhPWEP3Q+2mM9OmbJw3kc3W9DvQM2g NpSiWhGSe6GFVfBBRKhXzGzxVOjsaJh+QswMazfyr+T6NOuA0arlKSeQBTcxiyaw S3CSdi7ygE+7ceu0w02aDI33LnWkSS/x4QxYI2JRu5k9jj+SOu29oyaUeHlKXKVM 4j1h0NviVTtTkHb69mA/kQnOt3ASAujaaeqFaj1uZvpLTdKmfOCDJhhSnFI8IVg4 cjE/CLNUKWXzD8Wxs//Z5v062DSTozH2crhheZ2+TCrjHFa42iN2/zxz701snDfn q62ICycUc7qflw2IdPkgPGJHsQ== -----END CERTIFICATE-----Generated at Wed Sep 23 05:42:39 2026 by rpki-client