$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.mft File: XdRoWi6WsUFvfNM1zetK0YIvfes.mft (raw, json) Hash identifier: 5cKQa+cp8EgTZS35jlNl3Gj4ZGD/vXH8TmyRhvM9wag= Subject key identifier: 70:51:75:A1:ED:52:D6:57:CB:98:1C:20:3F:82:61:43:84:23:89:1D Authority key identifier: 5D:D4:68:5A:2E:96:B1:41:6F:7C:D3:35:CD:EB:4A:D1:82:2F:7D:EB Certificate issuer: /CN=A91AF01C/serialNumber=5DD4685A2E96B1416F7CD335CDEB4AD1822F7DEB Certificate serial: 0287 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XdRoWi6WsUFvfNM1zetK0YIvfes.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.mft Manifest number: 027A Signing time: Sat 19 Sep 2026 02:07:41 +0000 Manifest this update: Sat 19 Sep 2026 02:07:41 +0000 Manifest next update: Sat 26 Sep 2026 02:07:41 +0000 Files and hashes: 1: XdRoWi6WsUFvfNM1zetK0YIvfes.crl (hash: YCIpsoiEDoqofXlQ0EpKvufp926x7gillsYQujSxf+U=) 2: 4C1DFC6E600F11F1B719D3058847A888.roa (hash: XI/6ywdBOKZJkA6ntRfKeh+vbgYn6sdPFXnFJIGb2HE=) 3: 297CAAF2600F11F19DD612FE8747A888.roa (hash: 3caSMOx+p5Jr6uBlGiryWygb4IBsCl4CdewfhyZYMAk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.crl rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XdRoWi6WsUFvfNM1zetK0YIvfes.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 647 (0x287) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF01C, serialNumber=5DD4685A2E96B1416F7CD335CDEB4AD1822F7DEB Validity Not Before: Sep 19 02:07:41 2026 GMT Not After : Sep 26 02:07:41 2026 GMT Subject: CN=6aadee6d-b2b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:80:d1:a1:04:a2:83:48:d6:5e:a7:75:9a:34: a0:ba:bd:08:ac:ef:24:e4:80:74:0f:42:42:7b:27: ea:15:b4:6b:d4:e8:40:56:4d:3d:73:4a:f6:b9:3e: 24:23:0f:03:9e:26:38:39:b6:cb:17:11:d0:57:47: e6:5c:8b:bf:61:fb:7d:35:ac:50:a9:f4:2f:ae:08: dc:04:9c:79:8e:1d:be:58:e0:8a:5d:d2:8b:eb:60: 82:53:ee:ac:4d:b7:fd:13:c3:e4:64:1f:31:10:33: e1:46:79:78:5d:88:4d:80:58:26:60:7b:9c:0a:5e: 46:d5:ba:00:bf:ce:fe:48:ee:3c:c1:55:95:ec:49: c6:2e:8b:7f:35:a3:0b:9c:12:6d:8a:a7:2a:89:7f: a3:62:44:8b:7a:de:e9:ae:72:30:a0:8b:c4:b7:72: 1a:c4:59:32:37:01:97:02:cf:51:f3:02:5c:8c:61: c8:88:d9:b6:98:a5:dc:e3:32:1a:c9:b8:0b:be:e6: bf:f6:06:09:2e:71:d5:f0:53:fe:81:30:1e:45:21: 1b:12:07:aa:4e:e4:3d:74:9f:56:77:82:fe:50:6e: 19:85:77:27:e2:b0:81:ee:16:46:00:73:a5:fa:62: c9:d1:51:d0:b6:dc:cc:ac:7c:01:e1:81:83:e6:58: de:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:51:75:A1:ED:52:D6:57:CB:98:1C:20:3F:82:61:43:84:23:89:1D X509v3 Authority Key Identifier: keyid:5D:D4:68:5A:2E:96:B1:41:6F:7C:D3:35:CD:EB:4A:D1:82:2F:7D:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XdRoWi6WsUFvfNM1zetK0YIvfes.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:31:06:b6:dd:42:33:c3:6e:d5:24:d6:60:44:c1:91:55:a9: 64:3d:c3:9f:ea:ec:3e:25:c4:98:29:a7:8b:e4:bc:19:d4:38: 5d:d2:2f:06:c2:46:b8:92:17:61:aa:b3:fb:9a:13:9c:bb:c4: 57:e3:eb:2a:99:10:09:5b:df:0d:d7:d3:d6:e4:d6:d2:54:dd: 4d:23:07:65:97:7c:ad:d6:a3:1a:c1:46:d1:fe:02:a1:f7:75: f3:2f:52:c6:d0:65:85:52:94:6c:54:1f:29:4a:f0:03:9a:ff: 41:47:a5:26:94:77:3c:93:64:9a:b5:e2:82:b8:0c:07:0b:d4: 40:80:0e:77:34:31:3a:ab:31:2c:05:7b:af:eb:e3:10:c4:41: bf:3d:fb:db:f4:d4:41:1f:47:d3:46:83:50:d3:08:48:98:51: 1e:73:74:ad:7c:36:94:0c:f9:0d:03:20:4b:be:bd:bc:fe:3e: f7:ca:ae:e6:3c:5a:95:65:5f:0a:91:1f:83:43:d4:42:fd:f3: 82:24:90:9d:34:54:ed:45:83:3c:3f:6e:ae:38:dd:26:9f:95: 03:bb:05:c6:bb:dc:2f:58:ab:41:0f:60:a2:78:82:3c:2e:11: 67:ab:b2:dc:cb:fa:e0:ed:a7:47:66:c2:fb:1b:fe:7e:17:88: e1:af:65:72 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYwMUMxMTAvBgNVBAUTKDVERDQ2ODVBMkU5NkIxNDE2RjdDRDMzNUNERUI0QUQx ODIyRjdERUIwHhcNMjYwOTE5MDIwNzQxWhcNMjYwOTI2MDIwNzQxWjAYMRYwFAYD VQQDEw02YWFkZWU2ZC1iMmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnIDRoQSig0jWXqd1mjSgur0IrO8k5IB0D0JCeyfqFbRr1OhAVk09c0r2uT4k Iw8DniY4ObbLFxHQV0fmXIu/Yft9NaxQqfQvrgjcBJx5jh2+WOCKXdKL62CCU+6s Tbf9E8PkZB8xEDPhRnl4XYhNgFgmYHucCl5G1boAv87+SO48wVWV7EnGLot/NaML nBJtiqcqiX+jYkSLet7prnIwoIvEt3IaxFkyNwGXAs9R8wJcjGHIiNm2mKXc4zIa ybgLvua/9gYJLnHV8FP+gTAeRSEbEgeqTuQ9dJ9Wd4L+UG4ZhXcn4rCB7hZGAHOl +mLJ0VHQttzMrHwB4YGD5ljeQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHBRdaHt UtZXy5gcID+CYUOEI4kdMB8GA1UdIwQYMBaAFF3UaFoulrFBb3zTNc3rStGCL33r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjAxQy9FNUQ5RTczNEZB Q0IxMUVEQjhGOTdEODVDNEY5QUUwMi9YZFJvV2k2V3NVRnZmTk0xemV0SzBZSXZm ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hkUm9XaTZXc1VGdmZOTTF6ZXRLMFlJdmZlcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjAxQy9FNUQ5RTczNEZBQ0IxMUVEQjhGOTdEODVDNEY5QUUwMi9YZFJvV2k2V3NV RnZmTk0xemV0SzBZSXZmZXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdjEGtt1CM8Nu1STWYETBkVWpZD3Dn+rsPiXEmCmni+S8GdQ4XdIvBsJGuJIX Yaqz+5oTnLvEV+PrKpkQCVvfDdfT1uTW0lTdTSMHZZd8rdajGsFG0f4Cofd18y9S xtBlhVKUbFQfKUrwA5r/QUelJpR3PJNkmrXigrgMBwvUQIAOdzQxOqsxLAV7r+vj EMRBvz372/TUQR9H00aDUNMISJhRHnN0rXw2lAz5DQMgS769vP4+98qu5jxalWVf CpEfg0PUQv3zgiSQnTRU7UWDPD9urjjdJp+VA7sFxrvcL1irQQ9goniCPC4RZ6uy 3Mv64O2nR2bC+xv+fheI4a9lcg== -----END CERTIFICATE-----Generated at Sun Sep 20 21:31:15 2026 by rpki-client