$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft File: XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft (raw, json) Hash identifier: ihroVZhvTC85/SxDVS3Y4IrCFB2kUy4Y9llYG1s7UcE= Subject key identifier: 2C:2C:BD:F9:1A:6D:79:20:00:07:59:EF:50:5D:44:6F:65:AD:99:A3 Authority key identifier: 5C:32:7B:4A:23:5B:F8:90:FD:26:91:FB:03:E9:4A:6F:16:CB:F2:3C Certificate issuer: /CN=A91FBD89/serialNumber=5C327B4A235BF890FD2691FB03E94A6F16CBF23C Certificate serial: 02A3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft Manifest number: 02A3 Signing time: Sun 20 Sep 2026 22:46:06 +0000 Manifest this update: Sun 20 Sep 2026 22:46:06 +0000 Manifest next update: Sun 27 Sep 2026 22:46:06 +0000 Files and hashes: 1: XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl (hash: GXlGIgfMNHNJKg6YtUuY4ImuxQbYB56t1GLGu6/tK0k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 22:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 675 (0x2a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBD89, serialNumber=5C327B4A235BF890FD2691FB03E94A6F16CBF23C Validity Not Before: Sep 20 22:46:06 2026 GMT Not After : Sep 27 22:46:06 2026 GMT Subject: CN=6ab0622e-e148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e0:38:41:ec:26:5a:a6:66:2a:62:2d:e3:5f: f9:fd:23:f7:44:94:96:1f:b5:e4:d0:1e:a4:1b:9c: 1d:5b:f3:bd:04:9a:22:18:d5:c9:d1:29:9e:1a:2b: 51:c4:1e:e6:49:a9:83:ff:e9:95:a7:57:3e:d8:64: c5:a9:57:fb:21:73:de:8d:ff:2e:46:93:88:6e:b3: 9f:4b:9f:65:c7:ff:ad:1c:d9:00:5e:fb:1b:0b:fd: 9b:7e:e1:38:4f:fe:77:b8:fe:b8:a6:da:6f:f0:3c: de:f2:3c:16:7f:1e:b5:76:f1:95:43:08:fe:25:43: 7f:90:bd:2b:63:aa:4b:06:d3:4c:e5:b9:3c:86:45: ae:a7:53:fe:15:29:6e:09:b6:b1:b1:39:87:f3:16: 35:b7:f8:f6:40:10:4c:b2:24:52:d3:11:03:6d:fb: 35:bc:11:9d:e8:80:10:db:2a:6e:37:b3:c9:c4:60: 8f:2f:35:2d:45:ff:91:ca:b1:8d:b1:02:18:fd:5c: 89:82:44:99:6b:e8:fd:59:d3:4c:31:1c:47:01:e8: 72:97:3f:3f:d6:59:b6:10:40:1e:d5:31:ca:f5:2f: b9:96:f9:40:bd:d1:48:82:c1:31:99:e8:01:de:d5: 91:8b:ec:b8:8c:61:6b:00:68:98:7f:8a:5b:cd:c2: 21:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:2C:BD:F9:1A:6D:79:20:00:07:59:EF:50:5D:44:6F:65:AD:99:A3 X509v3 Authority Key Identifier: keyid:5C:32:7B:4A:23:5B:F8:90:FD:26:91:FB:03:E9:4A:6F:16:CB:F2:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:ae:16:99:9d:40:84:19:df:45:10:f9:85:80:fa:5e:b6:f5: 5a:fb:a3:4e:eb:52:5f:0f:d6:15:d1:11:f4:08:64:ba:80:25: e0:50:e9:3a:1e:69:34:42:f8:c4:ea:7e:3e:5c:43:48:d5:3d: 3c:f7:d5:ba:d9:06:91:32:f8:61:70:47:12:ad:84:26:96:06: b4:ba:4c:a1:12:a2:38:33:00:1c:2a:62:26:85:ec:70:d2:9f: be:0c:29:cc:6d:cc:3b:54:26:e9:00:d2:d4:a8:1e:3a:bb:dd: eb:47:17:b5:dc:f7:c2:09:6c:45:6b:70:50:1b:97:98:cc:20: 7f:ed:82:27:5f:57:e9:6e:57:31:f7:b4:1f:3a:54:a1:c9:16: fa:c4:2a:28:e0:ac:3d:06:a0:27:5e:7c:04:66:68:a5:30:25: 63:50:8a:7c:fd:74:57:49:6a:98:7a:48:71:e0:03:ea:12:d7: b0:7e:e7:9c:2d:b2:e5:7d:59:ee:8d:ae:c0:e9:9b:3c:7f:c1: 44:18:47:e1:01:1d:29:9b:6d:de:92:e8:0d:f0:9e:71:77:1a: 08:7f:65:f1:68:47:2a:71:53:20:b9:b2:39:cd:65:c3:d0:e8: 6e:78:4b:f5:6a:6e:35:a6:9b:d2:0d:30:8a:d6:02:3a:d0:f5: 1f:19:b8:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJEODkxMTAvBgNVBAUTKDVDMzI3QjRBMjM1QkY4OTBGRDI2OTFGQjAzRTk0QTZG MTZDQkYyM0MwHhcNMjYwOTIwMjI0NjA2WhcNMjYwOTI3MjI0NjA2WjAYMRYwFAYD VQQDEw02YWIwNjIyZS1lMTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvuA4QewmWqZmKmIt41/5/SP3RJSWH7Xk0B6kG5wdW/O9BJoiGNXJ0SmeGitR xB7mSamD/+mVp1c+2GTFqVf7IXPejf8uRpOIbrOfS59lx/+tHNkAXvsbC/2bfuE4 T/53uP64ptpv8Dze8jwWfx61dvGVQwj+JUN/kL0rY6pLBtNM5bk8hkWup1P+FSlu CbaxsTmH8xY1t/j2QBBMsiRS0xEDbfs1vBGd6IAQ2ypuN7PJxGCPLzUtRf+RyrGN sQIY/VyJgkSZa+j9WdNMMRxHAehylz8/1lm2EEAe1THK9S+5lvlAvdFIgsExmegB 3tWRi+y4jGFrAGiYf4pbzcIhnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCwsvfka bXkgAAdZ71BdRG9lrZmjMB8GA1UdIwQYMBaAFFwye0ojW/iQ/SaR+wPpSm8Wy/I8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkQ4OS83NUIyODZDMkFF OTYxMUVEOEE5NjU2NjRDNEY5QUUwMi9YREo3U2lOYi1KRDlKcEg3QS1sS2J4Ykw4 ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hESjdTaU5iLUpEOUpwSDdBLWxLYnhiTDhqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkQ4OS83NUIyODZDMkFFOTYxMUVEOEE5NjU2NjRDNEY5QUUwMi9YREo3U2lOYi1K RDlKcEg3QS1sS2J4Ykw4ancubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXq4WmZ1AhBnfRRD5hYD6Xrb1WvujTutSXw/WFdER9AhkuoAl4FDpOh5pNEL4 xOp+PlxDSNU9PPfVutkGkTL4YXBHEq2EJpYGtLpMoRKiODMAHCpiJoXscNKfvgwp zG3MO1Qm6QDS1KgeOrvd60cXtdz3wglsRWtwUBuXmMwgf+2CJ19X6W5XMfe0HzpU ockW+sQqKOCsPQagJ158BGZopTAlY1CKfP10V0lqmHpIceAD6hLXsH7nnC2y5X1Z 7o2uwOmbPH/BRBhH4QEdKZtt3pLoDfCecXcaCH9l8WhHKnFTILmyOc1lw9DobnhL 9WpuNaab0g0witYCOtD1Hxm4sA== -----END CERTIFICATE-----Generated at Tue Sep 22 23:26:52 2026 by rpki-client