$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EBFAE/ED32440A290911E593BFC626C4F9AE02/xlPvd7GdEIz1xZrhgB8CADq1Xu0.mft File: xlPvd7GdEIz1xZrhgB8CADq1Xu0.mft (raw, json) Hash identifier: KZdHD0w7qNHo/HoABAgDvtpousCWBI9Wx5xn3YjMr4k= Subject key identifier: 87:B2:8E:F8:F9:E5:08:CD:B4:38:E6:C4:1A:BE:CF:D6:7B:D9:F5:00 Authority key identifier: C6:53:EF:77:B1:9D:10:8C:F5:C5:9A:E1:80:1F:02:00:3A:B5:5E:ED Certificate issuer: /CN=A91EBFAE/serialNumber=C653EF77B19D108CF5C59AE1801F02003AB55EED Certificate serial: 2603 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xlPvd7GdEIz1xZrhgB8CADq1Xu0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBFAE/ED32440A290911E593BFC626C4F9AE02/xlPvd7GdEIz1xZrhgB8CADq1Xu0.mft Manifest number: 2603 Signing time: Thu 24 Sep 2026 14:32:16 +0000 Manifest this update: Thu 24 Sep 2026 14:32:16 +0000 Manifest next update: Thu 01 Oct 2026 14:32:16 +0000 Files and hashes: 1: xlPvd7GdEIz1xZrhgB8CADq1Xu0.crl (hash: E23udmR694oxG2HU6SAyfgJgfzM1u35p8ECij/yzrAA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBFAE/ED32440A290911E593BFC626C4F9AE02/xlPvd7GdEIz1xZrhgB8CADq1Xu0.crl rsync://rpki.apnic.net/member_repository/A91EBFAE/ED32440A290911E593BFC626C4F9AE02/xlPvd7GdEIz1xZrhgB8CADq1Xu0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xlPvd7GdEIz1xZrhgB8CADq1Xu0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 14:32:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9731 (0x2603) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBFAE, serialNumber=C653EF77B19D108CF5C59AE1801F02003AB55EED Validity Not Before: Sep 24 14:32:16 2026 GMT Not After : Oct 1 14:32:16 2026 GMT Subject: CN=6ab53470-7d34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:76:83:b8:d9:18:a2:e3:8c:82:9e:61:5a:1c: 8c:73:42:a3:f5:c4:07:d2:11:bc:69:d6:32:2e:fa: 15:7c:c7:b2:ce:ed:8d:9e:67:a1:f0:24:bf:66:25: 62:0b:27:eb:ac:c3:47:40:ab:5b:ec:49:50:c4:41: e8:42:19:4f:23:87:ad:49:6f:42:58:a6:24:17:dd: 5b:6e:c6:d0:1b:cd:36:2f:ea:2f:f9:fb:d6:8a:75: df:35:38:9f:4b:8b:7c:b0:88:b5:cb:64:e1:f3:f3: e6:6a:25:e0:c9:9e:60:9f:e5:36:ec:89:19:7f:4b: 1d:f2:83:80:28:18:40:f8:73:a5:2b:0c:20:fe:8e: 92:b7:60:39:5c:cd:05:8d:29:8e:b6:d4:b1:70:19: c0:34:45:68:b5:95:64:8c:f9:22:be:6b:90:35:e3: 3c:91:1a:98:ae:25:a3:34:a8:c0:2f:0a:be:e8:65: dc:ea:85:70:f3:07:0f:7a:18:c8:5c:fa:03:b7:93: ee:95:ac:3f:51:99:bf:4d:aa:6f:78:a7:31:c0:28: 03:ab:e1:96:59:95:61:eb:2e:ce:97:5d:79:ba:fb: 02:1b:36:36:92:8d:41:47:1b:17:d3:3b:82:d6:e7: 74:c0:68:84:fa:ba:ef:49:f1:cd:8b:82:7b:5f:33: 8c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:B2:8E:F8:F9:E5:08:CD:B4:38:E6:C4:1A:BE:CF:D6:7B:D9:F5:00 X509v3 Authority Key Identifier: keyid:C6:53:EF:77:B1:9D:10:8C:F5:C5:9A:E1:80:1F:02:00:3A:B5:5E:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/ED32440A290911E593BFC626C4F9AE02/xlPvd7GdEIz1xZrhgB8CADq1Xu0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xlPvd7GdEIz1xZrhgB8CADq1Xu0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/ED32440A290911E593BFC626C4F9AE02/xlPvd7GdEIz1xZrhgB8CADq1Xu0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:38:a2:4c:2b:ae:5a:65:08:8d:ca:9d:26:ac:bc:31:4d:2e: ed:50:75:1e:82:80:28:51:fb:ab:bd:8f:c6:0d:37:64:e7:3d: 91:4d:f8:d3:0d:2c:62:06:19:1a:66:68:09:33:d2:fc:c7:5b: 63:8e:c0:c9:1e:47:df:99:3f:33:e4:1f:96:f0:62:b0:4d:24: 16:7c:aa:91:b5:11:92:99:6b:b2:4f:46:bc:a2:a1:9a:6e:72: 3a:2b:96:1b:25:e0:2f:59:12:3b:d7:b8:85:ca:15:a1:d7:6e: 98:9a:05:fe:4f:28:85:9b:ca:5f:f9:d1:df:69:ca:4a:ee:ea: 4a:8e:ad:ea:b9:80:e0:eb:b3:69:bb:d6:9f:07:28:ab:a6:0a: 09:05:eb:f8:4a:f5:2f:9f:80:68:c9:ee:a6:36:0a:c5:01:08: ed:dd:b9:ca:cc:f0:e5:78:f2:6a:20:d0:ad:3f:19:1f:0f:23: 77:61:c5:83:36:88:d9:77:a0:07:a1:07:f1:d9:73:8b:56:5a: 43:a9:ed:61:81:39:aa:a5:a3:74:ac:63:2d:20:fd:ec:ec:ff: 1c:ce:57:bf:0f:7a:76:9c:1a:c4:f1:15:ee:8c:ca:0f:f4:1f: 88:10:53:e1:ba:f1:88:1d:5c:70:04:72:6f:12:6a:63:a1:d1: 33:92:3c:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJGQUUxMTAvBgNVBAUTKEM2NTNFRjc3QjE5RDEwOENGNUM1OUFFMTgwMUYwMjAw M0FCNTVFRUQwHhcNMjYwOTI0MTQzMjE2WhcNMjYxMDAxMTQzMjE2WjAYMRYwFAYD VQQDEw02YWI1MzQ3MC03ZDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqXaDuNkYouOMgp5hWhyMc0Kj9cQH0hG8adYyLvoVfMeyzu2Nnmeh8CS/ZiVi CyfrrMNHQKtb7ElQxEHoQhlPI4etSW9CWKYkF91bbsbQG802L+ov+fvWinXfNTif S4t8sIi1y2Th8/PmaiXgyZ5gn+U27IkZf0sd8oOAKBhA+HOlKwwg/o6St2A5XM0F jSmOttSxcBnANEVotZVkjPkivmuQNeM8kRqYriWjNKjALwq+6GXc6oVw8wcPehjI XPoDt5Pulaw/UZm/TapveKcxwCgDq+GWWZVh6y7Ol115uvsCGzY2ko1BRxsX0zuC 1ud0wGiE+rrvSfHNi4J7XzOMPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIeyjvj5 5QjNtDjmxBq+z9Z72fUAMB8GA1UdIwQYMBaAFMZT73exnRCM9cWa4YAfAgA6tV7t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkZBRS9FRDMyNDQwQTI5 MDkxMUU1OTNCRkM2MjZDNEY5QUUwMi94bFB2ZDdHZEVJejF4WnJoZ0I4Q0FEcTFY dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3hsUHZkN0dkRUl6MXhacmhnQjhDQURxMVh1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkZBRS9FRDMyNDQwQTI5MDkxMUU1OTNCRkM2MjZDNEY5QUUwMi94bFB2ZDdHZEVJ ejF4WnJoZ0I4Q0FEcTFYdTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAATiiTCuuWmUIjcqdJqy8MU0u7VB1HoKAKFH7q72Pxg03ZOc9kU340w0sYgYZ GmZoCTPS/MdbY47AyR5H35k/M+QflvBisE0kFnyqkbURkplrsk9GvKKhmm5yOiuW GyXgL1kSO9e4hcoVoddumJoF/k8ohZvKX/nR32nKSu7qSo6t6rmA4OuzabvWnwco q6YKCQXr+Er1L5+AaMnupjYKxQEI7d25yszw5XjyaiDQrT8ZHw8jd2HFgzaI2Xeg B6EH8dlzi1ZaQ6ntYYE5qqWjdKxjLSD97Oz/HM5Xvw96dpwaxPEV7ozKD/QfiBBT 4brxiB1ccARybxJqY6HRM5I8GQ== -----END CERTIFICATE-----Generated at Thu Sep 24 23:03:06 2026 by rpki-client