$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7106/7CF15D8079AB11F19431028A95A30FBC/XiBrZUYXUm6oHe9p1A3KkMONpJM.mft File: XiBrZUYXUm6oHe9p1A3KkMONpJM.mft (raw, json) Hash identifier: y91BSwfIpYK4mOYB2GxgdYLm0AAC8hIWN1WyppsiVxk= Subject key identifier: DE:CF:2F:9D:64:93:C5:D1:47:55:29:E0:D7:91:4E:D5:3B:43:DB:41 Authority key identifier: 5E:20:6B:65:46:17:52:6E:A8:1D:EF:69:D4:0D:CA:90:C3:8D:A4:93 Certificate issuer: /CN=A91C7106/serialNumber=5E206B654617526EA81DEF69D40DCA90C38DA493 Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XiBrZUYXUm6oHe9p1A3KkMONpJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7106/7CF15D8079AB11F19431028A95A30FBC/XiBrZUYXUm6oHe9p1A3KkMONpJM.mft Manifest number: 29 Signing time: Mon 21 Sep 2026 08:44:37 +0000 Manifest this update: Mon 21 Sep 2026 08:44:37 +0000 Manifest next update: Mon 28 Sep 2026 08:44:37 +0000 Files and hashes: 1: XiBrZUYXUm6oHe9p1A3KkMONpJM.crl (hash: KmLWvlH9lAfLQLKnX6UX0zmWflTBWg/i3oPcSqYTwRE=) 2: 40CA1FF879AC11F1A4BD68E295A30FBC.roa (hash: dxvzMh7pViI4BlQNkWmxdOF/VYXouPMtNS8/qBafvbA=) 3: 403D780079AC11F1A4BD68E295A30FBC.roa (hash: PX6Hn6xK6Ug95lfOomfVfmyROaB7znZe36dnapQD0gE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7106/7CF15D8079AB11F19431028A95A30FBC/XiBrZUYXUm6oHe9p1A3KkMONpJM.crl rsync://rpki.apnic.net/member_repository/A91C7106/7CF15D8079AB11F19431028A95A30FBC/XiBrZUYXUm6oHe9p1A3KkMONpJM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XiBrZUYXUm6oHe9p1A3KkMONpJM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:44:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7106, serialNumber=5E206B654617526EA81DEF69D40DCA90C38DA493 Validity Not Before: Sep 21 08:44:37 2026 GMT Not After : Sep 28 08:44:37 2026 GMT Subject: CN=6ab0ee75-4138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:28:4e:fe:ea:16:26:94:78:81:b1:e9:08:5f: ba:87:fa:00:72:45:c3:3d:f1:d4:20:57:e2:a3:10: 3e:6e:01:05:51:e7:a7:fd:5a:08:c6:64:0b:c1:3f: e5:1a:2c:28:9f:fa:76:b5:7c:ae:bd:53:d5:a4:be: 6e:19:a2:34:fb:94:60:f4:49:de:9e:6e:a8:f3:0c: d9:18:f7:5f:d2:bb:0d:cc:93:5a:c9:2e:cb:b2:1d: eb:0c:a5:55:1a:40:aa:f6:77:4d:a1:50:6f:75:09: 85:75:e6:8f:bd:65:4f:f7:5a:a8:aa:5a:95:a2:22: 39:ed:87:9c:d4:fe:1b:03:a5:18:78:39:fe:db:c3: 7b:75:2f:e0:95:b5:6d:97:ac:99:27:11:a9:9c:81: d7:03:f0:1f:c9:43:91:fa:46:17:10:b4:84:79:d6: 8b:8b:bb:56:ff:8c:01:6a:a9:80:60:ea:1e:3b:af: 33:14:fd:15:8c:f4:d6:f6:25:bb:db:52:80:b1:4c: 9a:cb:4d:06:ba:30:dc:bc:b7:e8:e9:37:54:86:b3: 81:e0:44:1e:58:3d:87:fe:df:e9:58:f9:7a:17:ba: fe:cc:26:1c:7f:2a:b2:03:c5:13:05:2f:c6:ed:81: 7c:8d:39:5e:25:bf:8b:3d:1d:49:97:c0:68:57:dd: d5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:CF:2F:9D:64:93:C5:D1:47:55:29:E0:D7:91:4E:D5:3B:43:DB:41 X509v3 Authority Key Identifier: keyid:5E:20:6B:65:46:17:52:6E:A8:1D:EF:69:D4:0D:CA:90:C3:8D:A4:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7106/7CF15D8079AB11F19431028A95A30FBC/XiBrZUYXUm6oHe9p1A3KkMONpJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XiBrZUYXUm6oHe9p1A3KkMONpJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7106/7CF15D8079AB11F19431028A95A30FBC/XiBrZUYXUm6oHe9p1A3KkMONpJM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:9b:fd:ea:9f:d1:8a:3a:db:f8:ca:4d:03:5b:c8:1b:f5:6a: b4:9b:66:02:d6:74:37:29:46:e5:b4:11:71:ea:67:fb:5a:42: d5:69:b6:83:53:02:ba:3b:0d:f2:2f:95:cb:1f:ad:3f:f8:f7: 1f:55:3b:63:10:b9:2d:95:e5:a5:78:17:5a:3f:80:59:38:69: 5e:55:52:f0:a2:4f:9a:77:0d:45:58:56:34:dd:44:bb:19:dd: 5b:b0:02:25:11:b9:53:2e:f4:05:16:66:8a:16:db:82:72:a8: 97:d6:12:37:d2:95:7f:e3:8b:c7:4c:26:cb:54:01:3c:ce:7f: ed:2a:4d:9e:5c:dc:50:76:9b:23:f9:97:99:73:5a:df:6d:8b: 22:94:3f:fb:ff:ab:15:fe:6c:ab:b3:3b:73:7e:24:8d:c1:13: b9:42:79:8e:2d:c4:9c:17:ce:b9:3b:bc:09:ee:bc:3c:24:be: 67:7c:ec:d5:02:fc:fd:1d:c5:4a:40:2b:9e:66:be:cd:37:dc: 8d:21:81:9c:5c:83:16:fd:60:53:b8:3d:41:8f:60:8d:d0:ef: c2:dd:91:37:a8:43:95:b2:25:ae:2d:30:32:7c:f8:80:b8:35: d4:d3:84:7d:3e:c6:4a:f3:2e:4f:81:5a:a1:f9:62:24:4d:a1: 5f:80:7a:b9 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NzEwNjExMC8GA1UEBRMoNUUyMDZCNjU0NjE3NTI2RUE4MURFRjY5RDQwRENBOTBD MzhEQTQ5MzAeFw0yNjA5MjEwODQ0MzdaFw0yNjA5MjgwODQ0MzdaMBgxFjAUBgNV BAMTDTZhYjBlZTc1LTQxMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCKE7+6hYmlHiBsekIX7qH+gByRcM98dQgV+KjED5uAQVR56f9WgjGZAvBP+Ua LCif+na1fK69U9Wkvm4ZojT7lGD0Sd6ebqjzDNkY91/Suw3Mk1rJLsuyHesMpVUa QKr2d02hUG91CYV15o+9ZU/3WqiqWpWiIjnth5zU/hsDpRh4Of7bw3t1L+CVtW2X rJknEamcgdcD8B/JQ5H6RhcQtIR51ouLu1b/jAFqqYBg6h47rzMU/RWM9Nb2Jbvb UoCxTJrLTQa6MNy8t+jpN1SGs4HgRB5YPYf+3+lY+XoXuv7MJhx/KrIDxRMFL8bt gXyNOV4lv4s9HUmXwGhX3dX7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU3s8vnWST xdFHVSng15FO1TtD20EwHwYDVR0jBBgwFoAUXiBrZUYXUm6oHe9p1A3KkMONpJMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3MTA2LzdDRjE1RDgwNzlB QjExRjE5NDMxMDI4QTk1QTMwRkJDL1hpQnJaVVlYVW02b0hlOXAxQTNLa01PTnBK TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWGlCclpVWVhVbTZvSGU5cDFBM0trTU9OcEpNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 MTA2LzdDRjE1RDgwNzlBQjExRjE5NDMxMDI4QTk1QTMwRkJDL1hpQnJaVVlYVW02 b0hlOXAxQTNLa01PTnBKTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCMm/3qn9GKOtv4yk0DW8gb9Wq0m2YC1nQ3KUbltBFx6mf7WkLVabaDUwK6Ow3y L5XLH60/+PcfVTtjELktleWleBdaP4BZOGleVVLwok+adw1FWFY03US7Gd1bsAIl EblTLvQFFmaKFtuCcqiX1hI30pV/44vHTCbLVAE8zn/tKk2eXNxQdpsj+ZeZc1rf bYsilD/7/6sV/myrsztzfiSNwRO5QnmOLcScF865O7wJ7rw8JL5nfOzVAvz9HcVK QCueZr7NN9yNIYGcXIMW/WBTuD1Bj2CN0O/C3ZE3qEOVsiWuLTAyfPiAuDXU04R9 PsZK8y5PgVqh+WIkTaFfgHq5 -----END CERTIFICATE-----Generated at Mon Sep 21 17:19:26 2026 by rpki-client