$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.mft File: XDZbFzHKfOfbgd1XEwvU1kMBm14.mft (raw, json) Hash identifier: XV8VZhgK1EYsP29nC/CN+gsfiOEe6uYKEQUP8m6gHkc= Subject key identifier: 23:59:AF:2F:DF:08:CD:89:F4:B5:A6:51:CC:83:03:F0:D8:19:4F:14 Authority key identifier: 5C:36:5B:17:31:CA:7C:E7:DB:81:DD:57:13:0B:D4:D6:43:01:9B:5E Certificate issuer: /CN=A91D28EB/serialNumber=5C365B1731CA7CE7DB81DD57130BD4D643019B5E Certificate serial: 065F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDZbFzHKfOfbgd1XEwvU1kMBm14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.mft Manifest number: 0654 Signing time: Sun 20 Sep 2026 22:31:46 +0000 Manifest this update: Sun 20 Sep 2026 22:31:46 +0000 Manifest next update: Sun 27 Sep 2026 22:31:46 +0000 Files and hashes: 1: XDZbFzHKfOfbgd1XEwvU1kMBm14.crl (hash: 7e1yIOOtHWMi5E3SPCwYIR2raJE0GGKs5LUhSeaD+NY=) 2: 8E90AA02EB0B11EBA0B6DD84C4F9AE02.roa (hash: Atm+YjJWu/U6U/w3n/CtX93wrO07yuhb/OEeKyPt76Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.crl rsync://rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDZbFzHKfOfbgd1XEwvU1kMBm14.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 22:31:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1631 (0x65f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D28EB, serialNumber=5C365B1731CA7CE7DB81DD57130BD4D643019B5E Validity Not Before: Sep 20 22:31:46 2026 GMT Not After : Sep 27 22:31:46 2026 GMT Subject: CN=6ab05ed2-d65e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:78:3f:7d:cb:f8:08:79:7f:3a:c7:cb:20:c5: 36:96:63:4e:6a:35:1f:9e:80:b7:1f:a0:c3:1f:92: bc:21:a6:60:3e:8a:60:25:1a:9c:3b:4c:57:c0:e9: d0:3a:ce:b6:4b:5b:c2:22:25:e6:08:48:4d:83:fe: 1b:f9:b4:fe:9e:cd:15:58:b8:0a:86:97:61:ef:9a: 00:af:9e:40:d4:d1:1f:c0:67:ff:40:69:62:9b:97: f2:11:96:25:98:b6:b2:9d:42:1d:f5:1c:36:44:17: c9:ac:8c:d6:f2:48:38:b8:1f:21:93:02:c0:3d:44: 41:1b:d2:80:f1:d4:78:74:09:e4:77:03:f4:6e:07: d0:af:48:6d:36:4f:a4:3e:0c:a1:51:62:d6:05:ed: 26:0b:5b:52:00:5a:d3:f5:d8:c6:00:3f:49:39:5f: 36:1e:23:07:a6:08:9f:75:dc:ad:7e:4f:72:09:4e: cb:31:4d:a5:16:86:84:d4:33:d1:f3:1e:aa:db:16: 08:68:4c:45:97:33:10:d1:83:5f:d0:6c:b1:36:a8: 83:0e:80:eb:e0:24:17:91:91:2b:7e:42:fd:57:77: 05:66:76:ef:79:16:6c:42:91:19:47:ea:76:ec:ed: c5:eb:e3:a6:5c:c3:4f:68:e6:77:dd:f5:3f:fd:05: 63:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:59:AF:2F:DF:08:CD:89:F4:B5:A6:51:CC:83:03:F0:D8:19:4F:14 X509v3 Authority Key Identifier: keyid:5C:36:5B:17:31:CA:7C:E7:DB:81:DD:57:13:0B:D4:D6:43:01:9B:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDZbFzHKfOfbgd1XEwvU1kMBm14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:58:28:dd:7a:c2:d0:4c:2a:93:3f:6f:b4:e0:4a:52:4f:5b: 22:45:73:20:0a:9d:f0:4b:b2:64:32:53:2e:16:d6:f3:d4:f8: d3:55:a4:fa:84:00:28:5c:fe:83:0c:8f:ff:72:81:f0:19:a4: 26:d1:85:de:93:2f:1e:a1:d5:20:95:26:b9:f5:af:fa:6f:60: e8:c4:44:ee:9f:cb:30:6d:23:17:fe:74:4e:b1:ef:c1:c7:92: 8a:65:e5:b2:31:f8:9a:44:c8:f6:c9:3f:97:6d:62:e1:c1:ec: c8:b9:a2:ef:3d:6f:9c:c7:d5:c0:5d:6c:94:32:ad:47:7b:01: 79:20:dd:72:e0:fa:ee:9d:7d:6c:38:61:8e:64:3d:fe:b0:88: 3e:f8:3e:15:fc:41:37:5e:af:db:90:af:03:95:62:9b:dc:49: 93:43:df:ff:1c:8c:20:04:1e:75:76:6c:0d:80:e3:12:2e:70: 37:15:30:bc:f8:95:b1:ca:44:d4:d7:59:5d:f7:76:d6:f0:1e: 50:30:29:9b:2c:0b:60:37:f8:09:56:69:2c:17:41:76:78:18: 4f:e6:60:de:90:98:ff:b1:90:10:03:8d:fd:a6:4b:b5:be:12: 6c:9b:25:92:2c:51:b8:ea:3d:39:54:af:45:b2:c7:e4:1a:cc: 73:bd:83:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI4RUIxMTAvBgNVBAUTKDVDMzY1QjE3MzFDQTdDRTdEQjgxREQ1NzEzMEJENEQ2 NDMwMTlCNUUwHhcNMjYwOTIwMjIzMTQ2WhcNMjYwOTI3MjIzMTQ2WjAYMRYwFAYD VQQDEw02YWIwNWVkMi1kNjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtXg/fcv4CHl/OsfLIMU2lmNOajUfnoC3H6DDH5K8IaZgPopgJRqcO0xXwOnQ Os62S1vCIiXmCEhNg/4b+bT+ns0VWLgKhpdh75oAr55A1NEfwGf/QGlim5fyEZYl mLaynUId9Rw2RBfJrIzW8kg4uB8hkwLAPURBG9KA8dR4dAnkdwP0bgfQr0htNk+k PgyhUWLWBe0mC1tSAFrT9djGAD9JOV82HiMHpgifddytfk9yCU7LMU2lFoaE1DPR 8x6q2xYIaExFlzMQ0YNf0GyxNqiDDoDr4CQXkZErfkL9V3cFZnbveRZsQpEZR+p2 7O3F6+OmXMNPaOZ33fU//QVjjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCNZry/f CM2J9LWmUcyDA/DYGU8UMB8GA1UdIwQYMBaAFFw2Wxcxynzn24HdVxML1NZDAZte MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjhFQi83NzE0OEFDNkVC MDkxMUVCOUM3NTkxODBDNEY5QUUwMi9YRFpiRnpIS2ZPZmJnZDFYRXd2VTFrTUJt MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hEWmJGekhLZk9mYmdkMVhFd3ZVMWtNQm0xNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjhFQi83NzE0OEFDNkVCMDkxMUVCOUM3NTkxODBDNEY5QUUwMi9YRFpiRnpIS2ZP ZmJnZDFYRXd2VTFrTUJtMTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAilgo3XrC0Ewqkz9vtOBKUk9bIkVzIAqd8EuyZDJTLhbW89T401Wk+oQAKFz+ gwyP/3KB8BmkJtGF3pMvHqHVIJUmufWv+m9g6MRE7p/LMG0jF/50TrHvwceSimXl sjH4mkTI9sk/l21i4cHsyLmi7z1vnMfVwF1slDKtR3sBeSDdcuD67p19bDhhjmQ9 /rCIPvg+FfxBN16v25CvA5Vim9xJk0Pf/xyMIAQedXZsDYDjEi5wNxUwvPiVscpE 1NdZXfd21vAeUDApmywLYDf4CVZpLBdBdngYT+Zg3pCY/7GQEAON/aZLtb4SbJsl kixRuOo9OVSvRbLH5BrMc72Ddw== -----END CERTIFICATE-----Generated at Tue Sep 22 10:32:51 2026 by rpki-client