$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F81D3/0A8459F4523511EA9A0CB273C4F9AE02/XpnXCH3VTqLn519cgIcHE4Posp4.mft File: XpnXCH3VTqLn519cgIcHE4Posp4.mft (raw, json) Hash identifier: LmX1WMtV82XW1dg5UkbjAb8ycwV3Tv5ZHKGUERtLMlE= Subject key identifier: 36:65:34:79:F7:B4:55:63:38:39:18:AD:82:33:3A:67:C1:2E:3F:97 Authority key identifier: 5E:99:D7:08:7D:D5:4E:A2:E7:E7:5F:5C:80:87:07:13:83:E8:B2:9E Certificate issuer: /CN=A91F81D3/serialNumber=5E99D7087DD54EA2E7E75F5C8087071383E8B29E Certificate serial: 0BEA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpnXCH3VTqLn519cgIcHE4Posp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F81D3/0A8459F4523511EA9A0CB273C4F9AE02/XpnXCH3VTqLn519cgIcHE4Posp4.mft Manifest number: 0BC6 Signing time: Tue 22 Sep 2026 18:54:33 +0000 Manifest this update: Tue 22 Sep 2026 18:54:32 +0000 Manifest next update: Tue 29 Sep 2026 18:54:32 +0000 Files and hashes: 1: XpnXCH3VTqLn519cgIcHE4Posp4.crl (hash: EJczCrgsZsdUlgWtr8Ojrw11ws7MCfiIf54gQuOcaAc=) 2: 1ECAB88C1AD811F193E57F8A3E3D8C67.roa (hash: fuUoAX7qold+hBso2xjm+AtCXw9QMD6MxM+hCTTXcPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F81D3/0A8459F4523511EA9A0CB273C4F9AE02/XpnXCH3VTqLn519cgIcHE4Posp4.crl rsync://rpki.apnic.net/member_repository/A91F81D3/0A8459F4523511EA9A0CB273C4F9AE02/XpnXCH3VTqLn519cgIcHE4Posp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpnXCH3VTqLn519cgIcHE4Posp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 18:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3050 (0xbea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F81D3, serialNumber=5E99D7087DD54EA2E7E75F5C8087071383E8B29E Validity Not Before: Sep 22 18:54:32 2026 GMT Not After : Sep 29 18:54:32 2026 GMT Subject: CN=6ab2cee9-25c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:aa:4f:5d:45:da:6a:a0:08:6b:e0:a7:17:ca: ba:35:4b:cd:e0:c0:42:54:e8:97:08:1e:b0:57:94: da:58:1f:20:7f:02:c0:35:d8:ba:1b:b8:d1:b3:e7: 84:ed:e5:f0:7f:0b:d3:05:da:1e:1c:0b:4a:8f:5a: 5a:e2:6c:a5:6b:4b:78:1e:ef:a8:59:b3:ed:53:9e: 06:f6:60:32:ec:45:f6:5d:d3:d7:b5:09:23:01:5b: 97:36:33:bd:59:dd:ed:a8:28:1c:b4:36:72:da:b5: e9:7e:46:6c:92:30:61:87:a9:47:6e:d2:6d:ff:3a: e8:54:e0:33:6a:12:3d:04:14:98:11:3d:d9:0b:82: 06:f5:ed:b4:a4:7e:df:5a:11:df:3f:9b:52:c6:f5: 06:ca:f1:ba:41:1e:69:56:49:fd:77:a6:7a:ba:28: 4c:c2:ac:2f:0c:d3:57:b1:20:a2:38:7b:36:42:c3: 90:97:80:77:05:78:91:b4:65:ad:1e:9c:a5:a1:cf: 70:87:69:3e:17:37:21:bf:4a:dd:ce:10:9b:5e:89: ea:b0:94:ba:c3:9d:c6:33:10:97:93:ac:dd:30:d0: ce:35:40:60:6f:1b:85:6f:cf:07:cc:b1:af:42:4b: 1e:a5:7f:00:92:83:c4:e0:91:cc:e5:1d:2b:f5:e1: 8c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:65:34:79:F7:B4:55:63:38:39:18:AD:82:33:3A:67:C1:2E:3F:97 X509v3 Authority Key Identifier: keyid:5E:99:D7:08:7D:D5:4E:A2:E7:E7:5F:5C:80:87:07:13:83:E8:B2:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F81D3/0A8459F4523511EA9A0CB273C4F9AE02/XpnXCH3VTqLn519cgIcHE4Posp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpnXCH3VTqLn519cgIcHE4Posp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F81D3/0A8459F4523511EA9A0CB273C4F9AE02/XpnXCH3VTqLn519cgIcHE4Posp4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:01:f4:01:20:97:be:3b:b5:e7:97:9c:72:dd:0c:12:5c:cf: 08:68:45:bf:6b:49:a4:93:07:8c:2b:bb:b3:24:31:99:d9:0c: d3:d7:b6:0c:18:3f:4f:d0:3d:29:19:e2:fd:7f:37:9f:f6:50: c4:30:e3:cd:20:e6:4d:e5:14:27:17:f7:3d:ef:ad:7c:a5:20: 7b:82:36:f6:ee:b3:23:2c:8e:4e:b8:9d:76:21:bf:66:0a:48: ca:76:32:49:b6:d1:7c:fe:c3:cb:04:f9:e9:eb:0c:73:f7:06: 27:54:be:5c:0a:65:69:32:0e:46:f7:af:35:12:ec:3c:e0:25: 0e:83:e3:4b:2f:93:2b:64:3a:07:d3:44:db:b7:64:f4:34:d0: 0d:08:2f:c6:46:98:74:44:d0:23:07:3a:8a:1c:f3:de:00:9f: 95:ee:3d:48:76:c8:a7:23:9b:31:c2:13:86:e2:a0:d9:e9:97: 3d:65:9e:14:ae:18:a6:93:3b:13:41:c5:76:a9:be:84:50:b3: 6b:b2:47:54:5b:3d:75:c4:89:36:bf:e9:78:94:bc:0b:f6:87: 86:40:eb:2b:63:0c:24:2a:d8:e9:87:40:16:df:75:f2:17:23: ad:9a:60:2c:36:db:05:e6:30:06:a1:d3:95:69:c8:03:2c:9c: 93:e4:74:68 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC+owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgxRDMxMTAvBgNVBAUTKDVFOTlENzA4N0RENTRFQTJFN0U3NUY1QzgwODcwNzEz ODNFOEIyOUUwHhcNMjYwOTIyMTg1NDMyWhcNMjYwOTI5MTg1NDMyWjAYMRYwFAYD VQQDEw02YWIyY2VlOS0yNWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1qpPXUXaaqAIa+CnF8q6NUvN4MBCVOiXCB6wV5TaWB8gfwLANdi6G7jRs+eE 7eXwfwvTBdoeHAtKj1pa4myla0t4Hu+oWbPtU54G9mAy7EX2XdPXtQkjAVuXNjO9 Wd3tqCgctDZy2rXpfkZskjBhh6lHbtJt/zroVOAzahI9BBSYET3ZC4IG9e20pH7f WhHfP5tSxvUGyvG6QR5pVkn9d6Z6uihMwqwvDNNXsSCiOHs2QsOQl4B3BXiRtGWt Hpyloc9wh2k+Fzchv0rdzhCbXonqsJS6w53GMxCXk6zdMNDONUBgbxuFb88HzLGv QksepX8AkoPE4JHM5R0r9eGM/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDZlNHn3 tFVjODkYrYIzOmfBLj+XMB8GA1UdIwQYMBaAFF6Z1wh91U6i5+dfXICHBxOD6LKe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODFEMy8wQTg0NTlGNDUy MzUxMUVBOUEwQ0IyNzNDNEY5QUUwMi9YcG5YQ0gzVlRxTG41MTljZ0ljSEU0UG9z cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hwblhDSDNWVHFMbjUxOWNnSWNIRTRQb3NwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODFEMy8wQTg0NTlGNDUyMzUxMUVBOUEwQ0IyNzNDNEY5QUUwMi9YcG5YQ0gzVlRx TG41MTljZ0ljSEU0UG9zcDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASgH0ASCXvju155ecct0MElzPCGhFv2tJpJMHjCu7syQxmdkM09e2DBg/T9A9 KRni/X83n/ZQxDDjzSDmTeUUJxf3Pe+tfKUge4I29u6zIyyOTriddiG/ZgpIynYy SbbRfP7DywT56esMc/cGJ1S+XAplaTIORvevNRLsPOAlDoPjSy+TK2Q6B9NE27dk 9DTQDQgvxkaYdETQIwc6ihzz3gCfle49SHbIpyObMcIThuKg2emXPWWeFK4YppM7 E0HFdqm+hFCza7JHVFs9dcSJNr/peJS8C/aHhkDrK2MMJCrY6YdAFt918hcjrZpg LDbbBeYwBqHTlWnIAyyck+R0aA== -----END CERTIFICATE-----Generated at Thu Sep 24 18:38:21 2026 by rpki-client