$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft File: XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft (raw, json) Hash identifier: 5ZHgiXkNKrPXPL+bNr2z5vD0Wt0x6aD6Vym0p3MZ8XI= Subject key identifier: EB:3A:13:88:B0:23:EC:D6:CC:CB:51:B0:5C:7A:F2:08:1F:94:66:FE Authority key identifier: 5E:70:99:49:BA:A4:0A:7D:47:D4:4D:21:16:90:B3:77:E0:51:C4:5F Certificate issuer: /CN=A91F0C73/serialNumber=5E709949BAA40A7D47D44D211690B377E051C45F Certificate serial: 03C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnCZSbqkCn1H1E0hFpCzd-BRxF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft Manifest number: 03BD Signing time: Mon 21 Sep 2026 00:24:41 +0000 Manifest this update: Mon 21 Sep 2026 00:24:40 +0000 Manifest next update: Mon 28 Sep 2026 00:24:40 +0000 Files and hashes: 1: XnCZSbqkCn1H1E0hFpCzd-BRxF8.crl (hash: EaCwEa/C93zWNqW5qEDCakTYR4W3Roz7+bN510RDM7g=) 2: FA3FF1D4F13D11EC9B673A2AC4F9AE02.roa (hash: 8YdQLsUZCKBzraMiXXqY3e6CtfbysTpmjgszsI0exrg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.crl rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnCZSbqkCn1H1E0hFpCzd-BRxF8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 966 (0x3c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0C73, serialNumber=5E709949BAA40A7D47D44D211690B377E051C45F Validity Not Before: Sep 21 00:24:40 2026 GMT Not After : Sep 28 00:24:40 2026 GMT Subject: CN=6ab07948-1c3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:93:56:95:d3:a0:21:13:7c:73:a3:6c:89:53: 19:41:87:85:37:35:60:ab:f5:8e:54:36:a9:2c:dd: b3:cf:c9:1b:93:f7:e7:9d:17:90:3e:4c:e5:0b:e0: 95:15:4a:3a:16:14:2e:22:3a:38:bd:32:77:8f:41: 98:46:ce:1c:10:17:df:c7:10:05:76:f9:83:bb:bf: 6a:5e:94:a2:2f:78:8f:ea:b8:3c:01:9e:5c:c4:15: d2:1e:5b:1a:24:46:62:6c:58:2d:cd:bb:ea:d6:1c: 70:1e:c5:92:a3:db:fb:da:dc:0a:5c:4c:6f:15:88: 67:aa:f4:0b:bf:46:67:18:c9:d6:ca:71:0e:bc:0e: 00:70:03:d2:16:4c:6f:e8:24:22:a0:e4:0e:4a:15: 26:59:4d:22:db:f7:c5:38:fd:60:4d:1d:36:22:7f: 67:d0:6d:8d:59:fc:99:4c:2f:99:90:52:4a:67:b6: 8c:8d:c3:06:fc:ba:1e:8b:f6:61:2b:a3:16:45:6f: 48:d7:67:87:86:12:35:e7:8f:3f:f9:b3:c0:ce:de: f7:95:f1:6d:fe:3a:55:ff:1e:61:26:1b:3a:da:55: d2:c7:7c:32:d8:52:b4:72:b9:9d:e6:a3:ce:c6:93: 12:11:86:53:6b:36:0e:48:32:dd:63:67:cc:1b:d8: aa:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:3A:13:88:B0:23:EC:D6:CC:CB:51:B0:5C:7A:F2:08:1F:94:66:FE X509v3 Authority Key Identifier: keyid:5E:70:99:49:BA:A4:0A:7D:47:D4:4D:21:16:90:B3:77:E0:51:C4:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnCZSbqkCn1H1E0hFpCzd-BRxF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:c2:75:07:a1:c5:ff:e2:f2:2a:71:aa:c3:f0:2a:73:45:d5: f9:da:0b:19:e6:8e:0e:ef:67:cf:aa:b9:60:2d:a5:21:7c:3d: f9:4c:27:92:aa:30:5e:87:d6:34:f4:d0:fd:ca:2a:f2:08:e0: 91:d8:bd:2a:57:76:f8:75:26:1f:49:80:cb:4b:a9:0f:c0:fe: ad:f5:7f:fe:02:a5:4a:36:36:b1:86:8c:7b:60:38:89:86:7e: 54:c0:b0:a8:2f:0a:48:2e:62:6f:81:90:ba:66:69:d3:b3:c3: 0d:7c:9b:70:95:ec:4e:02:b4:a1:f9:88:98:3d:05:88:f5:0e: dd:1a:8a:3b:5c:bd:2a:30:3b:09:93:11:99:3d:7b:c8:fe:6e: ec:ad:6d:15:a3:5f:b8:e1:45:89:97:1f:f8:7b:ad:a7:f7:87: 03:16:e6:48:b8:f9:4f:66:3c:2d:11:f6:6a:dc:84:c0:5f:1c: ac:5c:7e:b8:a9:dd:59:d4:09:28:3f:62:d9:1c:b8:75:68:1c: fd:24:6b:7a:01:5c:2d:38:c9:b2:b9:19:3a:0d:b1:b7:84:8a: ef:5f:7f:3e:14:90:2c:3c:dc:fb:2f:2f:08:a3:68:0c:bf:7d: 26:76:06:af:9d:c7:8a:38:75:96:3c:0b:e1:7c:b8:d9:d9:c2: 1d:e0:76:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBDNzMxMTAvBgNVBAUTKDVFNzA5OTQ5QkFBNDBBN0Q0N0Q0NEQyMTE2OTBCMzc3 RTA1MUM0NUYwHhcNMjYwOTIxMDAyNDQwWhcNMjYwOTI4MDAyNDQwWjAYMRYwFAYD VQQDEw02YWIwNzk0OC0xYzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4pNWldOgIRN8c6NsiVMZQYeFNzVgq/WOVDapLN2zz8kbk/fnnReQPkzlC+CV FUo6FhQuIjo4vTJ3j0GYRs4cEBffxxAFdvmDu79qXpSiL3iP6rg8AZ5cxBXSHlsa JEZibFgtzbvq1hxwHsWSo9v72twKXExvFYhnqvQLv0ZnGMnWynEOvA4AcAPSFkxv 6CQioOQOShUmWU0i2/fFOP1gTR02In9n0G2NWfyZTC+ZkFJKZ7aMjcMG/Loei/Zh K6MWRW9I12eHhhI1548/+bPAzt73lfFt/jpV/x5hJhs62lXSx3wy2FK0crmd5qPO xpMSEYZTazYOSDLdY2fMG9iq0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOs6E4iw I+zWzMtRsFx68ggflGb+MB8GA1UdIwQYMBaAFF5wmUm6pAp9R9RNIRaQs3fgUcRf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEM3My84MjE0NTdEMkYx MzcxMUVDOTdGNzRGMENDNEY5QUUwMi9YbkNaU2Jxa0NuMUgxRTBoRnBDemQtQlJ4 RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1huQ1pTYnFrQ24xSDFFMGhGcEN6ZC1CUnhGOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEM3My84MjE0NTdEMkYxMzcxMUVDOTdGNzRGMENDNEY5QUUwMi9YbkNaU2Jxa0Nu MUgxRTBoRnBDemQtQlJ4RjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjMJ1B6HF/+LyKnGqw/Aqc0XV+doLGeaODu9nz6q5YC2lIXw9+UwnkqowXofW NPTQ/coq8gjgkdi9Kld2+HUmH0mAy0upD8D+rfV//gKlSjY2sYaMe2A4iYZ+VMCw qC8KSC5ib4GQumZp07PDDXybcJXsTgK0ofmImD0FiPUO3RqKO1y9KjA7CZMRmT17 yP5u7K1tFaNfuOFFiZcf+Hutp/eHAxbmSLj5T2Y8LRH2atyEwF8crFx+uKndWdQJ KD9i2Ry4dWgc/SRregFcLTjJsrkZOg2xt4SK719/PhSQLDzc+y8vCKNoDL99JnYG r53Hijh1ljwL4Xy42dnCHeB2xQ== -----END CERTIFICATE-----Generated at Tue Sep 22 10:26:27 2026 by rpki-client