$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft File: XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft (raw, json) Hash identifier: QdfZcvRWObXbExx5OxYjDITX5bnurbW+Rv/1MFrOCps= Subject key identifier: E8:FA:72:49:31:5C:5C:D5:65:54:B5:8A:FE:E8:5D:8D:3D:8A:94:F0 Authority key identifier: 5E:70:99:49:BA:A4:0A:7D:47:D4:4D:21:16:90:B3:77:E0:51:C4:5F Certificate issuer: /CN=A91F0C73/serialNumber=5E709949BAA40A7D47D44D211690B377E051C45F Certificate serial: 03C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnCZSbqkCn1H1E0hFpCzd-BRxF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft Manifest number: 03BE Signing time: Wed 23 Sep 2026 00:12:12 +0000 Manifest this update: Wed 23 Sep 2026 00:12:11 +0000 Manifest next update: Wed 30 Sep 2026 00:12:11 +0000 Files and hashes: 1: XnCZSbqkCn1H1E0hFpCzd-BRxF8.crl (hash: 74irJdxHRCUncNpr8JePTE6VEDsfOd+SdefyUY33ICg=) 2: FA3FF1D4F13D11EC9B673A2AC4F9AE02.roa (hash: 8YdQLsUZCKBzraMiXXqY3e6CtfbysTpmjgszsI0exrg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.crl rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnCZSbqkCn1H1E0hFpCzd-BRxF8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 00:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 967 (0x3c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0C73, serialNumber=5E709949BAA40A7D47D44D211690B377E051C45F Validity Not Before: Sep 23 00:12:11 2026 GMT Not After : Sep 30 00:12:11 2026 GMT Subject: CN=6ab3195c-0c5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:76:26:13:f5:3f:91:aa:b5:a1:f3:de:bc:31: fa:62:4f:28:c0:40:6f:2a:f1:21:1e:da:44:84:79: 26:bf:a8:3d:00:f5:4d:12:9c:38:47:e5:62:d1:c2: dc:95:df:48:2e:a6:d4:bb:6c:76:f7:74:f9:e2:bb: 30:bb:4c:cb:42:6b:69:82:03:67:80:c3:41:26:ea: 11:0b:be:21:9b:22:78:ea:1a:5b:75:63:d2:3d:f9: 0d:ea:9c:da:9e:ae:0a:ac:cd:eb:53:2a:87:76:43: ac:1f:f6:7d:2a:bc:98:9e:3f:01:ab:05:60:18:8f: d4:4c:e6:c3:95:ae:3c:b6:19:27:eb:60:db:d4:e2: 40:ac:c1:bd:33:dd:33:e2:f2:04:56:bf:f1:58:bf: 5c:0b:07:60:7a:3b:0f:4f:72:89:5f:45:94:4c:b4: f8:d8:cd:82:00:d2:30:c5:b9:98:48:86:b6:cf:97: cb:41:5f:c0:ad:c7:6e:78:21:95:6e:93:f7:c1:5f: 8b:e1:ce:4c:80:b8:92:3d:e8:08:94:22:da:c3:66: 74:79:65:27:f6:98:8d:8b:40:22:ec:e1:97:4f:c3: 03:3a:d3:27:8a:d7:d0:8b:eb:86:18:2d:7e:3c:f2: 3a:a8:b7:c0:33:34:f7:4c:8d:82:23:f1:6e:dc:6d: 3b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:FA:72:49:31:5C:5C:D5:65:54:B5:8A:FE:E8:5D:8D:3D:8A:94:F0 X509v3 Authority Key Identifier: keyid:5E:70:99:49:BA:A4:0A:7D:47:D4:4D:21:16:90:B3:77:E0:51:C4:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnCZSbqkCn1H1E0hFpCzd-BRxF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:b8:13:98:61:db:8d:bd:70:20:7e:37:f7:d0:fc:aa:a1:0e: 88:8e:78:4a:ab:9d:28:95:ea:d9:a8:a3:bc:cf:f4:5f:db:b2: 13:81:58:7a:4c:6c:53:c3:5d:3b:a1:f1:02:d2:63:fd:3c:21: 7e:d9:6e:b9:d7:a1:f4:cb:81:b7:8a:21:b1:d7:e3:26:1d:ea: 8a:66:21:e6:cd:08:16:a6:02:f5:47:f8:a4:24:7c:09:15:4d: dc:b1:83:48:3a:ed:d4:77:69:ac:c8:e6:ab:01:d9:d1:e7:0a: 8b:1d:ae:34:78:23:b3:4f:3c:a7:ad:d2:d6:f0:a7:75:39:9b: 55:66:07:fa:0c:68:cc:43:33:c6:75:b9:3d:4d:4c:d6:f2:4c: 0a:71:ae:2a:fd:26:1d:63:e3:db:48:7f:9e:92:fe:13:c0:fd: bf:88:f2:2a:f7:ef:43:7d:74:a0:2d:79:76:d5:02:d0:5e:83: d6:92:27:c5:73:25:46:2a:37:f0:0e:20:99:bd:8b:59:d0:b6: 85:da:1a:24:87:d9:2c:d8:11:fd:2f:67:2f:e4:be:d8:ad:09: 15:7a:c7:71:ec:43:64:11:ac:a5:a4:8b:3f:22:d5:a5:7f:43: bd:9a:b7:a5:26:fc:a0:83:14:e9:4f:00:b1:b0:f8:a3:f0:b0: e4:0d:56:9a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBDNzMxMTAvBgNVBAUTKDVFNzA5OTQ5QkFBNDBBN0Q0N0Q0NEQyMTE2OTBCMzc3 RTA1MUM0NUYwHhcNMjYwOTIzMDAxMjExWhcNMjYwOTMwMDAxMjExWjAYMRYwFAYD VQQDEw02YWIzMTk1Yy0wYzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArXYmE/U/kaq1ofPevDH6Yk8owEBvKvEhHtpEhHkmv6g9APVNEpw4R+Vi0cLc ld9ILqbUu2x293T54rswu0zLQmtpggNngMNBJuoRC74hmyJ46hpbdWPSPfkN6pza nq4KrM3rUyqHdkOsH/Z9KryYnj8BqwVgGI/UTObDla48thkn62Db1OJArMG9M90z 4vIEVr/xWL9cCwdgejsPT3KJX0WUTLT42M2CANIwxbmYSIa2z5fLQV/ArcdueCGV bpP3wV+L4c5MgLiSPegIlCLaw2Z0eWUn9piNi0Ai7OGXT8MDOtMnitfQi+uGGC1+ PPI6qLfAMzT3TI2CI/Fu3G07HwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOj6ckkx XFzVZVS1iv7oXY09ipTwMB8GA1UdIwQYMBaAFF5wmUm6pAp9R9RNIRaQs3fgUcRf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEM3My84MjE0NTdEMkYx MzcxMUVDOTdGNzRGMENDNEY5QUUwMi9YbkNaU2Jxa0NuMUgxRTBoRnBDemQtQlJ4 RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1huQ1pTYnFrQ24xSDFFMGhGcEN6ZC1CUnhGOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEM3My84MjE0NTdEMkYxMzcxMUVDOTdGNzRGMENDNEY5QUUwMi9YbkNaU2Jxa0Nu MUgxRTBoRnBDemQtQlJ4RjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZrgTmGHbjb1wIH4399D8qqEOiI54SqudKJXq2aijvM/0X9uyE4FYekxsU8Nd O6HxAtJj/Twhftluudeh9MuBt4ohsdfjJh3qimYh5s0IFqYC9Uf4pCR8CRVN3LGD SDrt1HdprMjmqwHZ0ecKix2uNHgjs088p63S1vCndTmbVWYH+gxozEMzxnW5PU1M 1vJMCnGuKv0mHWPj20h/npL+E8D9v4jyKvfvQ310oC15dtUC0F6D1pInxXMlRio3 8A4gmb2LWdC2hdoaJIfZLNgR/S9nL+S+2K0JFXrHcexDZBGspaSLPyLVpX9DvZq3 pSb8oIMU6U8AsbD4o/Cw5A1Wmg== -----END CERTIFICATE-----Generated at Thu Sep 24 04:23:27 2026 by rpki-client