$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/XDlbosoKv2WIhyaHTHgktpt4mZU.mft File: XDlbosoKv2WIhyaHTHgktpt4mZU.mft (raw, json) Hash identifier: DNlJcBEt6I2gxFOf6m4ooTrZRM8+1lNqZAYiLUJVDhs= Subject key identifier: 60:61:43:E4:98:50:5C:6A:32:9A:C0:DC:1D:5F:38:B8:F7:46:33:8F Authority key identifier: 5C:39:5B:A2:CA:0A:BF:65:88:87:26:87:4C:78:24:B6:9B:78:99:95 Certificate issuer: /CN=A91E66E5/serialNumber=5C395BA2CA0ABF65888726874C7824B69B789995 Certificate serial: 0F43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDlbosoKv2WIhyaHTHgktpt4mZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/XDlbosoKv2WIhyaHTHgktpt4mZU.mft Manifest number: 0F34 Signing time: Tue 22 Sep 2026 17:29:18 +0000 Manifest this update: Tue 22 Sep 2026 17:29:17 +0000 Manifest next update: Tue 29 Sep 2026 17:29:17 +0000 Files and hashes: 1: XDlbosoKv2WIhyaHTHgktpt4mZU.crl (hash: 0kKlrpxSvYP1xMLZmUn021kjoUOR1d/qhcZRQ/O5aH8=) 2: AECDA1B0448F11EDACC30815C4F9AE02.roa (hash: Vv+ic3tuHHAEO62okYNeBPpK0SKMbTv6XBExdyT6xHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/XDlbosoKv2WIhyaHTHgktpt4mZU.crl rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/XDlbosoKv2WIhyaHTHgktpt4mZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDlbosoKv2WIhyaHTHgktpt4mZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 17:29:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3907 (0xf43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E66E5, serialNumber=5C395BA2CA0ABF65888726874C7824B69B789995 Validity Not Before: Sep 22 17:29:17 2026 GMT Not After : Sep 29 17:29:17 2026 GMT Subject: CN=6ab2baee-edaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6c:e0:cd:ae:e2:38:46:23:83:e4:4d:49:72: ee:04:0f:59:52:e8:08:c2:3d:39:f6:a1:61:6b:ed: 89:bb:b1:58:db:dd:71:15:e7:94:5f:de:32:2f:cc: 53:ff:a8:62:8f:81:00:c3:28:2b:3c:f1:31:ba:66: 82:b6:4e:f7:2f:55:d9:55:38:6c:77:19:2d:26:e6: 21:80:bc:4a:89:4d:0e:d8:88:19:fb:26:da:b9:cb: aa:10:a6:18:2c:c5:fe:4b:29:ad:b1:3f:c8:cf:d3: 6a:f5:05:7a:3b:3d:0c:96:03:21:6e:fe:1a:db:3a: 2b:4c:aa:2a:41:cc:95:bb:6b:57:5e:86:5c:ad:33: 88:53:62:cb:03:4c:33:53:6d:81:31:ac:ab:48:4a: a6:07:09:7a:de:fd:30:29:38:c8:79:2a:77:00:96: 46:2d:17:cc:cf:8f:81:91:56:18:0f:cc:57:b0:33: 4b:98:34:71:2c:17:5b:59:6e:ec:58:b6:a5:01:63: 9f:75:83:89:34:a5:05:33:07:51:b3:bf:dd:62:25: 6f:a3:a3:f7:84:06:89:a9:17:d0:af:09:09:c5:4e: 5c:2e:7c:5d:eb:0b:76:49:00:fe:fe:d0:33:c1:78: 71:66:4d:6f:50:b2:9d:75:28:2e:52:3b:9a:6c:86: dd:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:61:43:E4:98:50:5C:6A:32:9A:C0:DC:1D:5F:38:B8:F7:46:33:8F X509v3 Authority Key Identifier: keyid:5C:39:5B:A2:CA:0A:BF:65:88:87:26:87:4C:78:24:B6:9B:78:99:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/XDlbosoKv2WIhyaHTHgktpt4mZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDlbosoKv2WIhyaHTHgktpt4mZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/XDlbosoKv2WIhyaHTHgktpt4mZU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:d9:7b:c8:55:40:5a:84:05:c5:a6:56:c4:c3:ea:9b:35:bc: ab:05:3a:6e:36:12:d5:f6:37:4f:8b:ee:2c:56:45:8f:33:17: 70:60:0d:e7:85:3c:56:a0:5a:94:c0:9d:f3:26:b3:4d:1b:61: 33:d4:47:14:98:66:d9:9a:8e:db:64:50:84:76:80:bf:d6:0b: 72:47:93:6e:01:13:86:69:2d:4b:ff:5a:b1:b5:80:49:1a:00: 35:45:b5:6f:47:ad:a1:07:99:d4:7d:84:7a:cc:63:c8:03:62: ed:74:ff:b6:7f:50:0d:21:f9:04:df:df:9e:ec:88:d7:21:c6: 71:22:06:93:ea:34:b6:a0:42:43:f8:43:e9:be:75:06:e3:c2: 8f:ec:eb:2b:a4:2e:55:ee:aa:76:a3:1e:c2:13:ad:16:33:ae: 7a:14:86:8e:65:00:1e:c4:2f:d7:47:d7:60:d6:f8:a3:55:47: 4a:95:97:6b:c3:30:dd:61:57:91:98:8e:73:a2:da:dd:14:51: 1b:9c:66:2f:68:bc:07:a5:1d:e3:13:19:ec:8b:1c:ed:fa:1e: ed:dd:47:c4:3f:f2:fa:ae:78:9e:58:45:87:d3:b1:0e:11:d8: 55:56:b2:71:32:0d:11:a5:68:d6:0b:01:26:24:fd:e2:cb:7d: 6a:a9:95:df -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY2RTUxMTAvBgNVBAUTKDVDMzk1QkEyQ0EwQUJGNjU4ODg3MjY4NzRDNzgyNEI2 OUI3ODk5OTUwHhcNMjYwOTIyMTcyOTE3WhcNMjYwOTI5MTcyOTE3WjAYMRYwFAYD VQQDEw02YWIyYmFlZS1lZGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmWzgza7iOEYjg+RNSXLuBA9ZUugIwj059qFha+2Ju7FY291xFeeUX94yL8xT /6hij4EAwygrPPExumaCtk73L1XZVThsdxktJuYhgLxKiU0O2IgZ+ybaucuqEKYY LMX+SymtsT/Iz9Nq9QV6Oz0MlgMhbv4a2zorTKoqQcyVu2tXXoZcrTOIU2LLA0wz U22BMayrSEqmBwl63v0wKTjIeSp3AJZGLRfMz4+BkVYYD8xXsDNLmDRxLBdbWW7s WLalAWOfdYOJNKUFMwdRs7/dYiVvo6P3hAaJqRfQrwkJxU5cLnxd6wt2SQD+/tAz wXhxZk1vULKddSguUjuabIbdrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGBhQ+SY UFxqMprA3B1fOLj3RjOPMB8GA1UdIwQYMBaAFFw5W6LKCr9liIcmh0x4JLabeJmV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjZFNS81NjQzMDU4NkEy NzUxMUU5QTc0RDRFODJDNEY5QUUwMi9YRGxib3NvS3YyV0loeWFIVEhna3RwdDRt WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hEbGJvc29LdjJXSWh5YUhUSGdrdHB0NG1aVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjZFNS81NjQzMDU4NkEyNzUxMUU5QTc0RDRFODJDNEY5QUUwMi9YRGxib3NvS3Yy V0loeWFIVEhna3RwdDRtWlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAidl7yFVAWoQFxaZWxMPqmzW8qwU6bjYS1fY3T4vuLFZFjzMXcGAN54U8VqBa lMCd8yazTRthM9RHFJhm2ZqO22RQhHaAv9YLckeTbgEThmktS/9asbWASRoANUW1 b0etoQeZ1H2EesxjyANi7XT/tn9QDSH5BN/fnuyI1yHGcSIGk+o0tqBCQ/hD6b51 BuPCj+zrK6QuVe6qdqMewhOtFjOuehSGjmUAHsQv10fXYNb4o1VHSpWXa8Mw3WFX kZiOc6La3RRRG5xmL2i8B6Ud4xMZ7Isc7foe7d1HxD/y+q54nlhFh9OxDhHYVVay cTINEaVo1gsBJiT94st9aqmV3w== -----END CERTIFICATE-----Generated at Thu Sep 24 15:16:42 2026 by rpki-client