$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.mft File: XfR-KSrUurlNOGn6L8YKoOauKlM.mft (raw, json) Hash identifier: aBdDTik48JeXlmkSG4jc35dOz5NJ+mgKNnMdXH8bCDw= Subject key identifier: 80:73:B3:58:97:5E:15:CD:59:82:81:C5:08:5A:97:8D:53:26:68:9C Authority key identifier: 5D:F4:7E:29:2A:D4:BA:B9:4D:38:69:FA:2F:C6:0A:A0:E6:AE:2A:53 Certificate issuer: /CN=A91B3F7E/serialNumber=5DF47E292AD4BAB94D3869FA2FC60AA0E6AE2A53 Certificate serial: 5D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XfR-KSrUurlNOGn6L8YKoOauKlM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.mft Manifest number: 5A Signing time: Sun 27 Sep 2026 08:45:53 +0000 Manifest this update: Sun 27 Sep 2026 08:45:53 +0000 Manifest next update: Sun 04 Oct 2026 08:45:53 +0000 Files and hashes: 1: XfR-KSrUurlNOGn6L8YKoOauKlM.crl (hash: brSI5w1T2Z0dLTtH2aCGYo9UmHghV/bVrJMSYlIGo5A=) 2: E4AEB564380411F18536626792833773.roa (hash: zitRbSJcod3PTnS9PbBAV9aJ63tkxcQRzV7LIm/6eKY=) 3: FFF84A263A6911F18AE46050B0833773.roa (hash: ssv7cVlED2mj0Y5ViP5sQGZ6qpip26ujoYvi6duDnsE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.crl rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XfR-KSrUurlNOGn6L8YKoOauKlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 08:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3F7E, serialNumber=5DF47E292AD4BAB94D3869FA2FC60AA0E6AE2A53 Validity Not Before: Sep 27 08:45:53 2026 GMT Not After : Oct 4 08:45:53 2026 GMT Subject: CN=6ab8d7c1-f3cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c1:d7:77:22:de:ff:d9:fe:c3:14:58:82:49: f4:2b:4d:0d:0e:ee:62:2c:12:86:0d:0a:eb:13:8f: 0f:ef:83:70:0a:24:63:53:87:3b:78:62:6b:f9:64: f5:e4:23:42:3c:ec:f3:f3:49:4f:23:a1:02:74:b7: 37:f9:6b:ad:f3:53:40:9e:59:3e:66:26:ca:d8:83: 96:96:3a:c3:a9:7b:d6:8b:65:ef:54:1b:23:9c:aa: f6:f2:91:8d:b6:e4:db:b0:0b:82:b0:6a:27:4f:59: 97:69:2b:ec:4d:2c:1c:1d:77:a8:89:86:48:5d:11: a9:b1:cd:da:5e:0b:a1:a6:a3:5a:4e:15:bf:65:87: 35:e8:6f:3a:f9:c9:3c:d5:96:68:29:67:b9:c9:ce: ce:1a:cf:66:31:38:74:7f:de:30:ae:95:69:ab:d7: d0:2f:8e:90:f9:75:15:ab:67:6f:dd:9a:5f:bf:e9: 09:f5:57:59:c2:eb:40:f7:58:07:74:35:99:ad:c0: 78:ed:2f:d6:87:73:86:99:16:37:05:2b:5d:d8:8d: ff:73:f0:74:10:fb:cb:2d:80:91:1d:ba:7b:25:32: 60:c3:52:1f:8a:98:6a:5e:08:1e:55:7d:eb:cf:e9: 24:e9:3d:f5:9d:13:0b:3e:9e:60:8b:c2:5d:64:d9: 37:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:73:B3:58:97:5E:15:CD:59:82:81:C5:08:5A:97:8D:53:26:68:9C X509v3 Authority Key Identifier: keyid:5D:F4:7E:29:2A:D4:BA:B9:4D:38:69:FA:2F:C6:0A:A0:E6:AE:2A:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XfR-KSrUurlNOGn6L8YKoOauKlM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:37:cf:e9:8c:76:f1:5d:ee:29:4e:90:be:3b:aa:76:37:5e: b2:34:82:41:9f:a2:86:9e:79:d5:cb:47:88:80:de:cc:71:02: ef:4b:a1:d0:38:65:c4:be:b7:ef:80:b7:0c:b0:df:83:96:38: be:3b:ce:08:d8:61:df:33:6e:35:ac:2c:1b:68:0d:a2:fd:20: d3:eb:0d:d3:8c:3b:b0:ab:71:8a:c0:63:ae:95:53:4b:c1:f8: 74:05:c5:3e:57:a9:be:e2:8d:e7:d7:a0:12:60:db:d2:55:56: 10:c4:5c:28:ef:ec:a6:f3:a7:b3:a8:61:d6:c7:ea:4d:27:88: 60:5b:48:5c:bc:c2:21:cb:bd:3f:93:3c:5c:d6:d9:78:af:44: 1c:84:c5:32:c7:12:e5:53:74:93:b5:f0:9d:d4:dd:96:46:e9: 00:4f:d4:49:65:f5:f2:36:46:ef:e9:5e:af:8f:9b:e9:57:b6: f5:bb:f9:fc:ca:fc:a9:e7:3e:b1:73:b4:18:55:70:61:65:fb: f6:7f:b0:57:2f:7b:37:be:ad:75:de:bf:00:6b:c1:f6:b1:c2: d0:93:2f:26:69:05:87:6e:78:48:53:69:50:65:62:0e:28:2d: 05:3a:3f:92:07:21:a6:35:91:a7:ae:0d:db:60:ba:3b:8a:c1: 83:4a:af:d3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC M0Y3RTExMC8GA1UEBRMoNURGNDdFMjkyQUQ0QkFCOTREMzg2OUZBMkZDNjBBQTBF NkFFMkE1MzAeFw0yNjA5MjcwODQ1NTNaFw0yNjEwMDQwODQ1NTNaMBgxFjAUBgNV BAMTDTZhYjhkN2MxLWYzY2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrwdd3It7/2f7DFFiCSfQrTQ0O7mIsEoYNCusTjw/vg3AKJGNThzt4Ymv5ZPXk I0I87PPzSU8joQJ0tzf5a63zU0CeWT5mJsrYg5aWOsOpe9aLZe9UGyOcqvbykY22 5NuwC4KwaidPWZdpK+xNLBwdd6iJhkhdEamxzdpeC6Gmo1pOFb9lhzXobzr5yTzV lmgpZ7nJzs4az2YxOHR/3jCulWmr19AvjpD5dRWrZ2/dml+/6Qn1V1nC60D3WAd0 NZmtwHjtL9aHc4aZFjcFK13Yjf9z8HQQ+8stgJEdunslMmDDUh+KmGpeCB5VfevP 6STpPfWdEws+nmCLwl1k2TeXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUgHOzWJde Fc1ZgoHFCFqXjVMmaJwwHwYDVR0jBBgwFoAUXfR+KSrUurlNOGn6L8YKoOauKlMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzRjdFLzVBMTI0NTM4MzY2 MDExRjFCMEQzMEExNkNBODMzNzczL1hmUi1LU3JVdXJsTk9HbjZMOFlLb09hdUts TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvWGZSLUtTclV1cmxOT0duNkw4WUtvT2F1S2xNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz RjdFLzVBMTI0NTM4MzY2MDExRjFCMEQzMEExNkNBODMzNzczL1hmUi1LU3JVdXJs Tk9HbjZMOFlLb09hdUtsTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCON8/pjHbxXe4pTpC+O6p2N16yNIJBn6KGnnnVy0eIgN7McQLvS6HQOGXEvrfv gLcMsN+Dlji+O84I2GHfM241rCwbaA2i/SDT6w3TjDuwq3GKwGOulVNLwfh0BcU+ V6m+4o3n16ASYNvSVVYQxFwo7+ym86ezqGHWx+pNJ4hgW0hcvMIhy70/kzxc1tl4 r0QchMUyxxLlU3STtfCd1N2WRukAT9RJZfXyNkbv6V6vj5vpV7b1u/n8yvyp5z6x c7QYVXBhZfv2f7BXL3s3vq113r8Aa8H2scLQky8maQWHbnhIU2lQZWIOKC0FOj+S ByGmNZGnrg3bYLo7isGDSq/T -----END CERTIFICATE-----Generated at Mon Sep 28 04:38:39 2026 by rpki-client