$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft File: XnKqfVsdVjLl0z_scvp0M_Sc4po.mft (raw, json) Hash identifier: 7HbhdUfjt4sITje1RyMW4OkKvCiK+hwnD+0ZhPHJrzI= Subject key identifier: D5:F0:E5:4D:E9:56:37:79:A8:F6:5C:59:C4:66:85:87:02:F9:00:1A Authority key identifier: 5E:72:AA:7D:5B:1D:56:32:E5:D3:3F:EC:72:FA:74:33:F4:9C:E2:9A Certificate issuer: /CN=A91C9E82/serialNumber=5E72AA7D5B1D5632E5D33FEC72FA7433F49CE29A Certificate serial: 0286 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft Manifest number: 024E Signing time: Sat 19 Sep 2026 02:48:25 +0000 Manifest this update: Sat 19 Sep 2026 02:48:24 +0000 Manifest next update: Sat 26 Sep 2026 02:48:24 +0000 Files and hashes: 1: XnKqfVsdVjLl0z_scvp0M_Sc4po.crl (hash: pX6u3yWbjoKoVbweIuWEc/cd4j9I+dMBGmsy9/9CqXU=) 2: 36C31E00637111EEA51CA05EC4F9AE02.roa (hash: k6hiSh/WFo6akSjWYkoigb0PhpCRTQBWZ0EKHh/r2Og=) 3: 9830B6D8663D11EE8CBBAE7CC4F9AE02.roa (hash: pcDD9YbNb3qCe0sHsz+XMj1O2bqfga6lzkQW7K0JeOI=) 4: 00E626A4A57611EF98285E5FC4F9AE02.roa (hash: 7+C/2L+WKOdEH1KPhli+JgCKdoROk+TjdXP5dk7JJEE=) 5: 678C24C0663F11EEBD955D43C4F9AE02.roa (hash: YHtjLyAXEGFuWuiIIOzXr+jeSKAYlLoGk3pKl4f1Sjg=) 6: 99341DD6663D11EE8CBBAE7CC4F9AE02.roa (hash: MCZY8TcdrHRZrLBUjIYxaW3GviqDbhXanSznbYkRJNw=) 7: 98BE8828663D11EE8CBBAE7CC4F9AE02.roa (hash: 60mmp2xkt956dxyjxxyqpf2kD3SD5zTs5NXxpAz3Fmk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.crl rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 646 (0x286) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9E82, serialNumber=5E72AA7D5B1D5632E5D33FEC72FA7433F49CE29A Validity Not Before: Sep 19 02:48:24 2026 GMT Not After : Sep 26 02:48:24 2026 GMT Subject: CN=6aadf7f9-1133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:97:a7:85:d8:90:2f:7c:a3:16:d6:73:1a:21: fe:04:29:81:73:7a:40:44:10:65:0b:c2:ed:ae:c2: 11:bf:ff:b6:ee:ff:6d:d4:56:38:60:68:e2:1d:6e: 72:6a:a7:94:64:99:1a:ce:9d:87:ba:b5:1a:c1:e7: c4:3a:5b:57:8d:bc:66:77:77:06:b1:c6:dd:f5:b5: d2:64:38:2b:5e:82:b4:9a:be:39:92:35:b5:a8:fe: 56:92:45:62:3d:c4:6b:1b:5b:4a:1f:fc:bd:9a:b4: f2:f3:16:41:f6:ed:15:fa:f4:c0:dd:7a:1e:07:a3: 45:2c:c8:88:48:95:63:62:5d:b3:e6:73:ea:a3:af: 72:28:7f:20:6c:88:9e:30:2a:e8:74:86:e8:8d:b2: 66:e3:22:38:25:13:12:9c:ee:9b:57:16:32:20:20: a6:59:f0:f0:83:8e:16:1d:2f:ea:05:f6:cf:e3:90: a4:45:dd:96:f8:82:28:9c:fb:b8:de:bf:90:22:d0: dc:f2:2e:28:1f:df:6e:a1:6c:41:c4:9e:a8:38:75: ae:a4:48:74:ed:69:da:c3:61:c8:b8:d6:d3:12:60: 92:fe:61:d1:ec:ce:7d:73:e8:82:25:c0:d5:90:b6: c1:ae:50:fb:d2:f0:ca:c9:76:b8:45:41:2e:5d:1d: ae:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:F0:E5:4D:E9:56:37:79:A8:F6:5C:59:C4:66:85:87:02:F9:00:1A X509v3 Authority Key Identifier: keyid:5E:72:AA:7D:5B:1D:56:32:E5:D3:3F:EC:72:FA:74:33:F4:9C:E2:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:29:93:96:16:59:ff:b3:80:75:b4:84:63:ab:e6:d5:4f:d1: d9:f8:bf:09:2c:8d:c4:07:d5:8f:9d:3e:6c:0b:ab:92:0c:d2: 2b:50:b3:85:b7:a2:f2:3e:11:d1:72:10:cb:b2:21:f9:16:f4: 94:a1:07:13:04:dd:96:f8:bf:10:eb:9c:17:f1:b9:12:fe:a3: 45:d4:33:5c:31:53:cf:27:4c:b5:40:19:d0:f6:03:8e:ce:c8: 01:88:46:5a:69:88:1f:e5:34:e4:c1:35:f9:d4:a5:eb:16:ba: 2f:55:82:6e:2e:f7:4d:38:5d:be:70:4d:7a:4e:ce:15:b1:17: 7a:1b:72:07:f0:e6:2f:53:36:43:27:d1:26:55:95:10:23:e4: 81:f6:7e:bf:71:76:16:52:89:96:6c:27:2e:5c:06:e5:3c:b3: 9a:38:e3:91:d5:c3:49:29:df:57:be:f9:39:a6:87:41:c0:88: cd:a0:d6:13:eb:10:64:f4:f6:fa:49:42:7c:23:c1:25:56:8c: cf:04:79:61:4c:94:3d:77:21:e3:04:09:f5:39:23:6f:ab:00: a5:5f:08:82:08:c0:e2:56:6e:87:23:cb:d0:85:23:d5:fa:2f: 60:9c:02:aa:fb:5a:ba:6c:86:95:30:f9:9b:8d:a3:ca:27:a1: 93:42:23:c6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlFODIxMTAvBgNVBAUTKDVFNzJBQTdENUIxRDU2MzJFNUQzM0ZFQzcyRkE3NDMz RjQ5Q0UyOUEwHhcNMjYwOTE5MDI0ODI0WhcNMjYwOTI2MDI0ODI0WjAYMRYwFAYD VQQDEw02YWFkZjdmOS0xMTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxJenhdiQL3yjFtZzGiH+BCmBc3pARBBlC8LtrsIRv/+27v9t1FY4YGjiHW5y aqeUZJkazp2HurUawefEOltXjbxmd3cGscbd9bXSZDgrXoK0mr45kjW1qP5WkkVi PcRrG1tKH/y9mrTy8xZB9u0V+vTA3XoeB6NFLMiISJVjYl2z5nPqo69yKH8gbIie MCrodIbojbJm4yI4JRMSnO6bVxYyICCmWfDwg44WHS/qBfbP45CkRd2W+IIonPu4 3r+QItDc8i4oH99uoWxBxJ6oOHWupEh07Wnaw2HIuNbTEmCS/mHR7M59c+iCJcDV kLbBrlD70vDKyXa4RUEuXR2uKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNXw5U3p Vjd5qPZcWcRmhYcC+QAaMB8GA1UdIwQYMBaAFF5yqn1bHVYy5dM/7HL6dDP0nOKa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUU4Mi9FQTdFNUZBNjYz NkYxMUVFOTdDNzRCNUNDNEY5QUUwMi9YbktxZlZzZFZqTGwwel9zY3ZwME1fU2M0 cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1huS3FmVnNkVmpMbDB6X3NjdnAwTV9TYzRwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUU4Mi9FQTdFNUZBNjYzNkYxMUVFOTdDNzRCNUNDNEY5QUUwMi9YbktxZlZzZFZq TGwwel9zY3ZwME1fU2M0cG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUSmTlhZZ/7OAdbSEY6vm1U/R2fi/CSyNxAfVj50+bAurkgzSK1Czhbei8j4R 0XIQy7Ih+Rb0lKEHEwTdlvi/EOucF/G5Ev6jRdQzXDFTzydMtUAZ0PYDjs7IAYhG WmmIH+U05ME1+dSl6xa6L1WCbi73TThdvnBNek7OFbEXehtyB/DmL1M2QyfRJlWV ECPkgfZ+v3F2FlKJlmwnLlwG5TyzmjjjkdXDSSnfV775OaaHQcCIzaDWE+sQZPT2 +klCfCPBJVaMzwR5YUyUPXch4wQJ9Tkjb6sApV8IggjA4lZuhyPL0IUj1fovYJwC qvtaumyGlTD5m42jyiehk0Ijxg== -----END CERTIFICATE-----Generated at Sun Sep 20 13:04:35 2026 by rpki-client