$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft File: XOe82cbkE4HMCvkJkN2gNpOF5lU.mft (raw, json) Hash identifier: uQfFPbChkNWE6dOxBUOdsHo606ctGLhEUB11eAS6ga8= Subject key identifier: 62:D5:3D:C3:21:93:23:01:9A:F8:02:ED:8A:4E:45:81:C1:4D:B1:3F Authority key identifier: 5C:E7:BC:D9:C6:E4:13:81:CC:0A:F9:09:90:DD:A0:36:93:85:E6:55 Certificate issuer: /CN=A91EC3A8/serialNumber=5CE7BCD9C6E41381CC0AF90990DDA0369385E655 Certificate serial: 0573 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft Manifest number: 055E Signing time: Sun 20 Sep 2026 23:12:36 +0000 Manifest this update: Sun 20 Sep 2026 23:12:36 +0000 Manifest next update: Sun 27 Sep 2026 23:12:36 +0000 Files and hashes: 1: XOe82cbkE4HMCvkJkN2gNpOF5lU.crl (hash: NIK+am4bViw1gbIJuNpVifp/JNTyzj1z8wfKNcl6swo=) 2: 10A8D0E263F611ECB344F979C4F9AE02.roa (hash: SmcwGq0dD9iTZhV8jdPLgAp8Fs3hII4+H1WFKJpXd7c=) 3: 11330A4663F611ECB344F979C4F9AE02.roa (hash: 3M+74bn/sA2p4TiZmfBp8pwqRm0NY6QA2mPOgZx57gA=) 4: C71919900BEE11EDBB84E711C4F9AE02.roa (hash: kY65kJ7Z3Mu7QEVILrGdTmAvqTkSFv9BjhpNLh4YUPY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.crl rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 23:12:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1395 (0x573) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC3A8, serialNumber=5CE7BCD9C6E41381CC0AF90990DDA0369385E655 Validity Not Before: Sep 20 23:12:36 2026 GMT Not After : Sep 27 23:12:36 2026 GMT Subject: CN=6ab06864-7806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f4:03:42:ee:2b:7e:f2:8e:78:76:d4:f4:20: de:e4:ba:2f:14:51:09:e4:34:89:a1:4c:f6:a1:28: 80:a6:c8:52:30:7b:56:90:11:7c:ae:59:6e:5f:eb: 2e:69:fa:42:18:6b:8d:e2:0a:cf:5f:d4:3d:ba:9d: 58:24:f2:41:94:f0:d6:6f:14:b8:1d:83:4d:b0:ba: dd:77:39:f0:f5:47:87:11:da:d5:63:c1:f0:a1:04: 31:c8:45:97:12:f0:72:84:97:20:d5:5f:a1:e9:e6: e4:26:d8:2c:1d:f0:e2:b7:4b:c8:6d:05:c4:08:92: be:72:20:2f:98:4f:f8:ee:28:30:70:90:67:87:bb: 36:7e:c9:c3:f9:18:51:99:8a:bc:d9:18:fc:d0:74: 40:f5:b4:57:e5:2b:f7:8b:ab:62:db:d0:6d:fb:5b: d7:20:23:82:98:bd:13:29:dc:0c:ef:d9:21:21:c4: 48:78:e7:92:a8:bc:3a:35:8b:74:99:2c:f7:01:9f: 50:36:99:f5:e3:f1:e2:9b:dd:37:08:59:b6:25:ee: c7:f7:8a:82:96:4a:a0:d1:42:8c:0a:70:e3:11:4a: 93:cb:ea:3c:26:20:4e:5d:99:c2:c1:ec:3b:1e:1f: 6d:86:5c:f6:e8:f6:af:19:aa:7b:53:8e:6d:01:c4: 65:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:D5:3D:C3:21:93:23:01:9A:F8:02:ED:8A:4E:45:81:C1:4D:B1:3F X509v3 Authority Key Identifier: keyid:5C:E7:BC:D9:C6:E4:13:81:CC:0A:F9:09:90:DD:A0:36:93:85:E6:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:0b:21:9c:92:64:d9:92:ad:fa:37:65:12:7b:ae:28:e8:60: c1:28:c9:08:37:81:ed:02:4c:bf:1b:32:8b:1e:92:3b:45:33: ee:6c:04:51:10:89:7d:f9:38:1b:58:2d:24:bd:51:6d:ce:11: b3:54:e7:1c:73:30:1a:a1:01:b8:b9:34:2d:2b:db:c4:ab:ba: 38:9d:93:72:86:6b:fc:5a:34:de:19:c3:54:87:c4:6a:26:ed: 14:9b:3d:b4:70:87:64:c0:15:bc:2d:da:de:42:17:44:d2:23: fa:99:d3:9b:fc:d6:91:3e:09:55:03:c1:8a:77:46:c8:fc:da: 5e:20:34:5d:26:da:5e:2b:fc:83:c4:86:71:fc:5a:c2:bc:7d: 10:34:35:4f:fe:f6:b3:30:59:c1:52:21:a6:9d:e0:80:32:22: be:80:d0:7b:62:55:bc:8e:76:78:34:01:28:78:f2:34:55:21: ff:82:c7:20:c6:81:97:64:85:52:1c:24:8a:4b:54:01:7e:f5: a6:c9:66:75:e3:c1:d3:62:58:90:46:7d:2a:4b:53:2e:7b:82: 61:cd:e6:1b:68:e7:82:7d:c7:88:11:1b:de:c4:bf:9d:57:da: d6:ec:8d:4d:fe:35:c7:70:60:6e:7e:f7:25:f8:86:e3:f7:9e: a6:bb:86:0b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUMzQTgxMTAvBgNVBAUTKDVDRTdCQ0Q5QzZFNDEzODFDQzBBRjkwOTkwRERBMDM2 OTM4NUU2NTUwHhcNMjYwOTIwMjMxMjM2WhcNMjYwOTI3MjMxMjM2WjAYMRYwFAYD VQQDEw02YWIwNjg2NC03ODA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAofQDQu4rfvKOeHbU9CDe5LovFFEJ5DSJoUz2oSiApshSMHtWkBF8rlluX+su afpCGGuN4grPX9Q9up1YJPJBlPDWbxS4HYNNsLrddznw9UeHEdrVY8HwoQQxyEWX EvByhJcg1V+h6ebkJtgsHfDit0vIbQXECJK+ciAvmE/47igwcJBnh7s2fsnD+RhR mYq82Rj80HRA9bRX5Sv3i6ti29Bt+1vXICOCmL0TKdwM79khIcRIeOeSqLw6NYt0 mSz3AZ9QNpn14/Him903CFm2Je7H94qClkqg0UKMCnDjEUqTy+o8JiBOXZnCwew7 Hh9thlz26PavGap7U45tAcRl4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGLVPcMh kyMBmvgC7YpORYHBTbE/MB8GA1UdIwQYMBaAFFznvNnG5BOBzAr5CZDdoDaTheZV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzNBOC8yMUZBMDI3MjRD NkMxMUVDQkJDRkFEMjZDNEY5QUUwMi9YT2U4MmNia0U0SE1DdmtKa04yZ05wT0Y1 bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hPZTgyY2JrRTRITUN2a0prTjJnTnBPRjVsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzNBOC8yMUZBMDI3MjRDNkMxMUVDQkJDRkFEMjZDNEY5QUUwMi9YT2U4MmNia0U0 SE1DdmtKa04yZ05wT0Y1bFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABgshnJJk2ZKt+jdlEnuuKOhgwSjJCDeB7QJMvxsyix6SO0Uz7mwEURCJffk4 G1gtJL1Rbc4Rs1TnHHMwGqEBuLk0LSvbxKu6OJ2TcoZr/Fo03hnDVIfEaibtFJs9 tHCHZMAVvC3a3kIXRNIj+pnTm/zWkT4JVQPBindGyPzaXiA0XSbaXiv8g8SGcfxa wrx9EDQ1T/72szBZwVIhpp3ggDIivoDQe2JVvI52eDQBKHjyNFUh/4LHIMaBl2SF UhwkiktUAX71pslmdePB02JYkEZ9KktTLnuCYc3mG2jngn3HiBEb3sS/nVfa1uyN Tf41x3Bgbn73JfiG4/eepruGCw== -----END CERTIFICATE-----Generated at Tue Sep 22 22:24:58 2026 by rpki-client