$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft File: xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft (raw, json) Hash identifier: s5tLnhXAbyWTGYjvAgCpoFJFBJjUN7Iex6WGMEunB7k= Subject key identifier: FA:77:E9:97:3D:20:40:88:25:A2:33:BF:9A:EC:A2:58:D5:A6:B4:E8 Authority key identifier: C5:BD:8A:50:CA:D5:A0:5E:FE:57:7C:49:C4:71:4E:5D:9A:BB:7F:EF Certificate issuer: /CN=A91E37D1/serialNumber=C5BD8A50CAD5A05EFE577C49C4714E5D9ABB7FEF Certificate serial: 0285 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xb2KUMrVoF7-V3xJxHFOXZq7f-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft Manifest number: 0280 Signing time: Mon 21 Sep 2026 01:54:48 +0000 Manifest this update: Mon 21 Sep 2026 01:54:47 +0000 Manifest next update: Mon 28 Sep 2026 01:54:47 +0000 Files and hashes: 1: xb2KUMrVoF7-V3xJxHFOXZq7f-8.crl (hash: 7b1ex2OqCCcPthLNjyYd+fa+DJr02utvLHVGUzpAlPg=) 2: 59A00A402C7111EFA821586AC4F9AE02.roa (hash: l3+rbubcPMHtKSMQDJv+EJ3SUoMsXD+EmSrxxE3voR8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.crl rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xb2KUMrVoF7-V3xJxHFOXZq7f-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 01:54:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 645 (0x285) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E37D1, serialNumber=C5BD8A50CAD5A05EFE577C49C4714E5D9ABB7FEF Validity Not Before: Sep 21 01:54:47 2026 GMT Not After : Sep 28 01:54:47 2026 GMT Subject: CN=6ab08e68-e119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bf:9f:85:54:d5:20:73:72:af:6b:35:ca:38: 3a:02:4c:d9:f9:8a:3f:78:9f:64:e2:66:d6:1d:09: ba:6d:04:ad:81:79:e3:ce:87:da:b7:d3:4c:62:49: f9:48:5a:17:01:c6:b8:c1:c7:a2:9a:d1:9b:35:9d: b0:37:a2:70:f2:0f:a7:a1:30:60:f7:2a:be:40:70: 57:dd:0a:8a:ef:d4:c1:e0:fc:84:e5:9f:c1:60:ad: 8a:20:44:01:af:22:82:5f:45:f9:dd:ad:60:e7:5a: a6:d9:e7:6c:de:7a:d8:34:66:31:db:44:d7:2e:67: ad:85:0f:f5:cc:cd:7b:54:45:71:fe:cb:4b:90:00: 5f:6b:eb:ac:f5:89:17:d5:2e:c7:f8:31:36:9b:71: 93:b8:ae:19:eb:8a:c9:6e:9a:65:6a:be:82:91:c0: 6e:4d:71:1d:35:66:d6:54:6c:56:2f:9d:41:cd:95: ea:72:c8:f9:7d:80:db:ff:a8:d5:5c:51:de:72:c8: 0e:2a:cc:e7:97:3b:e6:a0:f9:d6:c8:39:57:33:2c: 14:e6:68:85:de:10:4c:22:af:36:05:83:41:71:99: ae:7a:6a:ca:ae:ea:b7:9d:20:7f:df:d2:07:f4:ca: c3:bd:38:55:4c:e8:aa:63:9b:d2:d2:9c:fe:eb:2b: d6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:77:E9:97:3D:20:40:88:25:A2:33:BF:9A:EC:A2:58:D5:A6:B4:E8 X509v3 Authority Key Identifier: keyid:C5:BD:8A:50:CA:D5:A0:5E:FE:57:7C:49:C4:71:4E:5D:9A:BB:7F:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xb2KUMrVoF7-V3xJxHFOXZq7f-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:e4:21:03:91:8c:1c:de:e1:d6:33:ea:1f:fe:1c:e2:42:9c: bc:a4:d5:85:c1:1b:cb:2e:d8:a8:65:d1:1d:f7:5f:ef:af:b9: 99:5e:d8:cc:eb:3e:c7:b8:7d:0c:3b:d2:12:97:80:39:61:9c: 2f:22:12:87:92:fd:6a:08:20:f1:68:6b:d0:c8:da:c2:87:ef: ec:27:50:12:da:1d:b5:67:80:5c:ec:67:22:1e:3b:aa:e3:78: d0:1e:bd:64:9e:ac:5b:e1:ab:d2:36:a7:a1:3e:fd:42:f0:b1: 0a:ec:df:67:01:59:87:2b:00:f2:be:d3:a0:7c:64:e3:7b:0d: 90:ba:b5:6a:a3:85:2d:d1:bb:9b:ee:68:bf:98:71:ed:e1:1e: 26:d8:ec:14:b7:1e:1e:35:6a:82:70:73:51:92:6a:68:67:f4: cf:f1:3c:d4:3d:8a:f4:27:f0:d2:0c:4c:16:a9:7e:2f:87:78: 11:98:a2:27:93:84:54:48:78:ea:0c:59:4f:a2:1c:27:5b:53: d6:7d:24:e5:55:a9:7e:15:87:7f:d3:60:fd:54:89:42:fd:70: 86:c9:2f:60:06:bb:f2:29:37:9c:b4:c8:42:4b:31:38:c1:60: e6:db:e9:68:cc:ab:13:b0:6b:e2:5e:23:50:06:81:e4:4d:f9: e8:3f:25:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM3RDExMTAvBgNVBAUTKEM1QkQ4QTUwQ0FENUEwNUVGRTU3N0M0OUM0NzE0RTVE OUFCQjdGRUYwHhcNMjYwOTIxMDE1NDQ3WhcNMjYwOTI4MDE1NDQ3WjAYMRYwFAYD VQQDEw02YWIwOGU2OC1lMTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsb+fhVTVIHNyr2s1yjg6AkzZ+Yo/eJ9k4mbWHQm6bQStgXnjzofat9NMYkn5 SFoXAca4wceimtGbNZ2wN6Jw8g+noTBg9yq+QHBX3QqK79TB4PyE5Z/BYK2KIEQB ryKCX0X53a1g51qm2eds3nrYNGYx20TXLmethQ/1zM17VEVx/stLkABfa+us9YkX 1S7H+DE2m3GTuK4Z64rJbpplar6CkcBuTXEdNWbWVGxWL51BzZXqcsj5fYDb/6jV XFHecsgOKsznlzvmoPnWyDlXMywU5miF3hBMIq82BYNBcZmuemrKruq3nSB/39IH 9MrDvThVTOiqY5vS0pz+6yvWEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPp36Zc9 IECIJaIzv5rsoljVprToMB8GA1UdIwQYMBaAFMW9ilDK1aBe/ld8ScRxTl2au3/v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzdEMS8wNUE5OEYwRUUz QjMxMUVEQjJGNERBMjhDNEY5QUUwMi94YjJLVU1yVm9GNy1WM3hKeEhGT1hacTdm LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hiMktVTXJWb0Y3LVYzeEp4SEZPWFpxN2YtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzdEMS8wNUE5OEYwRUUzQjMxMUVEQjJGNERBMjhDNEY5QUUwMi94YjJLVU1yVm9G Ny1WM3hKeEhGT1hacTdmLTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATeQhA5GMHN7h1jPqH/4c4kKcvKTVhcEbyy7YqGXRHfdf76+5mV7YzOs+x7h9 DDvSEpeAOWGcLyISh5L9aggg8Whr0Mjawofv7CdQEtodtWeAXOxnIh47quN40B69 ZJ6sW+Gr0janoT79QvCxCuzfZwFZhysA8r7ToHxk43sNkLq1aqOFLdG7m+5ov5hx 7eEeJtjsFLceHjVqgnBzUZJqaGf0z/E81D2K9Cfw0gxMFql+L4d4EZiiJ5OEVEh4 6gxZT6IcJ1tT1n0k5VWpfhWHf9Ng/VSJQv1whskvYAa78ik3nLTIQksxOMFg5tvp aMyrE7Br4l4jUAaB5E356D8lEA== -----END CERTIFICATE-----Generated at Tue Sep 22 22:23:04 2026 by rpki-client