$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EBFAE/ED32440A290911E593BFC626C4F9AE02/xlPvd7GdEIz1xZrhgB8CADq1Xu0.mft File: xlPvd7GdEIz1xZrhgB8CADq1Xu0.mft (raw, json) Hash identifier: Z1pPfHuhkA660Poy+G1UkVPF9o6TVjHXmlxd4X4UCvA= Subject key identifier: 9E:62:CC:CE:1B:7C:6A:32:84:17:B4:5A:45:64:84:68:93:9F:A0:2F Authority key identifier: C6:53:EF:77:B1:9D:10:8C:F5:C5:9A:E1:80:1F:02:00:3A:B5:5E:ED Certificate issuer: /CN=A91EBFAE/serialNumber=C653EF77B19D108CF5C59AE1801F02003AB55EED Certificate serial: 2601 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xlPvd7GdEIz1xZrhgB8CADq1Xu0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBFAE/ED32440A290911E593BFC626C4F9AE02/xlPvd7GdEIz1xZrhgB8CADq1Xu0.mft Manifest number: 2601 Signing time: Sun 20 Sep 2026 14:31:49 +0000 Manifest this update: Sun 20 Sep 2026 14:31:48 +0000 Manifest next update: Sun 27 Sep 2026 14:31:48 +0000 Files and hashes: 1: xlPvd7GdEIz1xZrhgB8CADq1Xu0.crl (hash: XsjkT70riqHFlBxRXa7waQ6OxjYp7WcZixQ87wgngA0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBFAE/ED32440A290911E593BFC626C4F9AE02/xlPvd7GdEIz1xZrhgB8CADq1Xu0.crl rsync://rpki.apnic.net/member_repository/A91EBFAE/ED32440A290911E593BFC626C4F9AE02/xlPvd7GdEIz1xZrhgB8CADq1Xu0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xlPvd7GdEIz1xZrhgB8CADq1Xu0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 14:31:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9729 (0x2601) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBFAE, serialNumber=C653EF77B19D108CF5C59AE1801F02003AB55EED Validity Not Before: Sep 20 14:31:48 2026 GMT Not After : Sep 27 14:31:48 2026 GMT Subject: CN=6aafee55-1694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:9d:e9:a2:a0:a3:21:df:b0:d4:31:df:0f:79: cc:66:22:55:2e:26:3d:0c:53:9f:60:90:bb:de:cb: 70:91:08:7a:68:b9:01:7a:d0:9f:5e:eb:4d:45:27: 6b:d7:76:62:b5:29:dc:45:96:88:23:f5:ad:12:a0: 32:ab:bc:4d:43:3d:b6:47:4d:75:a9:0e:0f:98:e7: 7b:af:a6:17:4e:44:f5:79:02:77:0d:40:4c:37:82: 00:6f:dc:9f:43:11:87:40:90:be:7a:4e:ec:c0:4e: 48:c1:6b:a4:f9:ac:5b:02:82:b0:9f:b7:4d:39:3c: e3:b5:2a:7e:75:c0:fa:8c:22:79:46:b5:79:23:c0: 0a:65:5c:1d:30:8a:1e:51:73:71:c2:11:d3:eb:af: e6:c4:a2:84:95:97:0d:93:5a:7a:84:8d:6d:90:ab: 16:a5:00:5c:35:9c:b7:52:c3:eb:58:82:d1:8e:03: 9f:3d:98:af:c6:f5:47:7f:dc:35:25:80:0c:2c:20: 42:e8:54:1a:bd:f3:9b:a7:15:ba:23:ca:34:a6:5a: 98:05:7c:d1:59:2c:d8:73:75:b0:54:78:fc:46:17: 9e:2d:56:4f:b5:79:b0:b8:cb:31:5c:82:e8:3f:3e: 4e:2d:80:8a:f3:d2:f9:23:48:2c:e7:f2:5b:50:70: 8a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:62:CC:CE:1B:7C:6A:32:84:17:B4:5A:45:64:84:68:93:9F:A0:2F X509v3 Authority Key Identifier: keyid:C6:53:EF:77:B1:9D:10:8C:F5:C5:9A:E1:80:1F:02:00:3A:B5:5E:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/ED32440A290911E593BFC626C4F9AE02/xlPvd7GdEIz1xZrhgB8CADq1Xu0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xlPvd7GdEIz1xZrhgB8CADq1Xu0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/ED32440A290911E593BFC626C4F9AE02/xlPvd7GdEIz1xZrhgB8CADq1Xu0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:24:bd:39:e0:74:cb:d9:68:8a:9d:39:8e:4c:04:3f:36:ca: 99:45:c6:35:a2:33:ba:fa:16:63:ab:fa:2a:fb:26:e1:98:26: 84:f9:18:68:00:26:3f:cd:cd:ce:c0:c1:5b:5a:67:dd:ba:86: 79:0a:02:59:6d:18:03:27:01:0d:bc:0e:95:0c:d3:0d:46:4c: ba:6b:7d:4e:7f:a1:64:f7:9d:19:f3:77:4c:61:4a:fd:7c:b2: c6:e8:ff:df:22:bb:a1:8d:98:05:d9:bf:81:4b:fe:cc:c4:38: b8:5e:7c:65:98:86:3e:9e:45:93:ec:17:fc:63:a4:96:7c:a5: b1:9a:31:0d:b7:c4:85:5d:a3:90:0c:01:c3:18:e4:f3:6d:d4: c9:4b:0a:9d:ee:16:f3:07:eb:19:cb:eb:63:d9:f9:c7:9d:7d: 6a:43:c2:e3:f4:6f:0e:2b:42:46:c2:14:3a:43:86:4c:27:8a: 6d:a0:b5:ef:fb:b1:1c:4d:47:ee:91:99:2a:0e:ce:5e:75:0b: 96:a1:d6:54:96:40:ab:d1:59:cb:3a:0e:94:f2:d4:0c:58:ab: 43:5a:34:34:cc:44:dd:cb:18:b6:24:33:32:e0:69:c7:86:6a: 31:e8:5e:43:34:43:84:67:9f:4f:35:46:82:ba:80:b8:59:92: 07:42:d2:e2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJGQUUxMTAvBgNVBAUTKEM2NTNFRjc3QjE5RDEwOENGNUM1OUFFMTgwMUYwMjAw M0FCNTVFRUQwHhcNMjYwOTIwMTQzMTQ4WhcNMjYwOTI3MTQzMTQ4WjAYMRYwFAYD VQQDEw02YWFmZWU1NS0xNjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Z3poqCjId+w1DHfD3nMZiJVLiY9DFOfYJC73stwkQh6aLkBetCfXutNRSdr 13ZitSncRZaII/WtEqAyq7xNQz22R011qQ4PmOd7r6YXTkT1eQJ3DUBMN4IAb9yf QxGHQJC+ek7swE5IwWuk+axbAoKwn7dNOTzjtSp+dcD6jCJ5RrV5I8AKZVwdMIoe UXNxwhHT66/mxKKElZcNk1p6hI1tkKsWpQBcNZy3UsPrWILRjgOfPZivxvVHf9w1 JYAMLCBC6FQavfObpxW6I8o0plqYBXzRWSzYc3WwVHj8RheeLVZPtXmwuMsxXILo Pz5OLYCK89L5I0gs5/JbUHCKzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ5izM4b fGoyhBe0WkVkhGiTn6AvMB8GA1UdIwQYMBaAFMZT73exnRCM9cWa4YAfAgA6tV7t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkZBRS9FRDMyNDQwQTI5 MDkxMUU1OTNCRkM2MjZDNEY5QUUwMi94bFB2ZDdHZEVJejF4WnJoZ0I4Q0FEcTFY dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3hsUHZkN0dkRUl6MXhacmhnQjhDQURxMVh1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkZBRS9FRDMyNDQwQTI5MDkxMUU1OTNCRkM2MjZDNEY5QUUwMi94bFB2ZDdHZEVJ ejF4WnJoZ0I4Q0FEcTFYdTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQSS9OeB0y9loip05jkwEPzbKmUXGNaIzuvoWY6v6Kvsm4ZgmhPkYaAAmP83N zsDBW1pn3bqGeQoCWW0YAycBDbwOlQzTDUZMumt9Tn+hZPedGfN3TGFK/Xyyxuj/ 3yK7oY2YBdm/gUv+zMQ4uF58ZZiGPp5Fk+wX/GOklnylsZoxDbfEhV2jkAwBwxjk 823UyUsKne4W8wfrGcvrY9n5x519akPC4/RvDitCRsIUOkOGTCeKbaC17/uxHE1H 7pGZKg7OXnULlqHWVJZAq9FZyzoOlPLUDFirQ1o0NMxE3csYtiQzMuBpx4ZqMehe QzRDhGefTzVGgrqAuFmSB0LS4g== -----END CERTIFICATE-----Generated at Tue Sep 22 15:09:54 2026 by rpki-client