$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F3695/A90353B0A29B11F1A69892D93211F970/XsGoW25L9SoUMMZnKRrwZ7wOYv4.mft File: XsGoW25L9SoUMMZnKRrwZ7wOYv4.mft (raw, json) Hash identifier: 8iPpQyuTD+YJ6bT+q6SzVyo1Hz1vwTlxHB/6xh2LQY4= Subject key identifier: F0:BC:B1:DC:4B:6B:EB:9B:12:4B:CF:CC:35:0F:FE:2C:DB:7E:66:D7 Authority key identifier: 5E:C1:A8:5B:6E:4B:F5:2A:14:30:C6:67:29:1A:F0:67:BC:0E:62:FE Certificate issuer: /CN=A91F3695/serialNumber=5EC1A85B6E4BF52A1430C667291AF067BC0E62FE Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGoW25L9SoUMMZnKRrwZ7wOYv4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3695/A90353B0A29B11F1A69892D93211F970/XsGoW25L9SoUMMZnKRrwZ7wOYv4.mft Manifest number: 0F Signing time: Mon 21 Sep 2026 09:07:03 +0000 Manifest this update: Mon 21 Sep 2026 09:07:02 +0000 Manifest next update: Mon 28 Sep 2026 09:07:02 +0000 Files and hashes: 1: XsGoW25L9SoUMMZnKRrwZ7wOYv4.crl (hash: CbohxIqPvqAm1oapaEYczsycuS+nz3svtT7kY0QDr6o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3695/A90353B0A29B11F1A69892D93211F970/XsGoW25L9SoUMMZnKRrwZ7wOYv4.crl rsync://rpki.apnic.net/member_repository/A91F3695/A90353B0A29B11F1A69892D93211F970/XsGoW25L9SoUMMZnKRrwZ7wOYv4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGoW25L9SoUMMZnKRrwZ7wOYv4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 09:07:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3695, serialNumber=5EC1A85B6E4BF52A1430C667291AF067BC0E62FE Validity Not Before: Sep 21 09:07:02 2026 GMT Not After : Sep 28 09:07:02 2026 GMT Subject: CN=6ab0f3b6-1e48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9e:94:42:c2:8f:b3:86:19:56:87:aa:9a:5d: f2:3e:bf:41:1b:db:d7:62:db:2a:00:0d:45:d4:b2: 33:8c:7a:ef:b2:8c:3a:d3:2a:33:fc:69:19:9a:ee: e5:33:4e:47:cb:d0:1a:eb:30:1a:36:67:d3:66:28: 28:27:8c:2e:ba:11:80:fd:8f:f1:35:84:e5:25:dd: da:ec:b5:ee:22:2c:58:2f:1d:f7:9e:4a:a3:f6:73: 9d:0e:cb:89:59:53:39:7d:1f:08:e8:96:98:49:fd: 7b:17:8d:2e:ee:8c:a8:2b:3f:ad:5d:5c:b4:52:7a: 56:41:63:bd:3b:a0:ff:74:22:3a:63:99:a4:59:3b: 78:86:07:b6:3f:16:07:dd:5c:4e:26:77:1e:a6:cd: 64:40:1a:53:2a:35:d2:7a:cf:84:7b:78:d0:f9:03: e3:f1:22:3b:f2:cb:cb:cd:3c:95:ab:0c:de:88:b5: 88:59:5b:f2:45:79:70:8e:c2:56:7a:bf:89:55:df: 35:9f:53:6a:aa:b1:10:6f:93:3f:6d:42:03:47:24: 18:88:d3:15:53:6c:8d:fa:a0:9e:de:ff:d7:46:22: c0:d1:52:7f:73:2d:89:39:b4:25:fb:57:5c:34:f5: 78:29:cc:5b:a8:bb:16:d8:30:67:b0:43:4e:bc:a4: c4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:BC:B1:DC:4B:6B:EB:9B:12:4B:CF:CC:35:0F:FE:2C:DB:7E:66:D7 X509v3 Authority Key Identifier: keyid:5E:C1:A8:5B:6E:4B:F5:2A:14:30:C6:67:29:1A:F0:67:BC:0E:62:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3695/A90353B0A29B11F1A69892D93211F970/XsGoW25L9SoUMMZnKRrwZ7wOYv4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGoW25L9SoUMMZnKRrwZ7wOYv4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3695/A90353B0A29B11F1A69892D93211F970/XsGoW25L9SoUMMZnKRrwZ7wOYv4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:ac:37:de:35:89:44:d5:72:fd:93:2b:27:8c:76:a5:18:29: 4e:89:f7:e6:9a:1d:46:01:f2:19:4a:77:98:b2:89:5f:9a:03: 6d:5d:51:a0:9a:5c:49:b7:ab:c9:22:c1:10:45:9b:e3:d2:03: 8b:be:0e:97:ce:45:85:a7:11:be:a2:9e:0f:d7:4d:d0:a2:8d: f6:b0:18:64:44:ee:df:de:48:ab:cd:d3:ca:de:eb:5b:48:99: b7:bb:fd:58:1f:cc:74:9b:47:1a:80:78:c5:ae:b7:96:2d:20: 69:d2:fe:a3:9e:16:a6:1a:30:48:6e:6e:69:9d:f8:a9:96:dc: 5f:1d:3c:4d:cb:40:b8:34:4a:84:f2:c3:ef:25:c5:0a:3c:7a: 98:91:bc:11:43:64:8c:3f:ca:d3:f9:76:c3:82:f3:49:f0:de: 9e:b5:eb:e9:68:dc:59:ae:a5:66:d5:c7:e2:67:7d:c9:a9:be: ba:22:85:c2:a6:f9:dc:4e:e6:4c:af:11:80:c0:23:71:c5:3d: 3b:59:39:b2:f7:a9:1e:95:69:67:0d:c1:35:89:83:9f:b6:37: 52:98:c0:7b:b5:5a:f3:74:7a:46:68:a2:68:e6:b9:e3:09:12: b3:fb:d0:b0:b3:91:3e:95:09:58:64:3f:b7:79:a8:2f:7b:2d: ae:cb:43:6f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MzY5NTExMC8GA1UEBRMoNUVDMUE4NUI2RTRCRjUyQTE0MzBDNjY3MjkxQUYwNjdC QzBFNjJGRTAeFw0yNjA5MjEwOTA3MDJaFw0yNjA5MjgwOTA3MDJaMBgxFjAUBgNV BAMTDTZhYjBmM2I2LTFlNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpnpRCwo+zhhlWh6qaXfI+v0Eb29di2yoADUXUsjOMeu+yjDrTKjP8aRma7uUz TkfL0BrrMBo2Z9NmKCgnjC66EYD9j/E1hOUl3drste4iLFgvHfeeSqP2c50Oy4lZ Uzl9HwjolphJ/XsXjS7ujKgrP61dXLRSelZBY707oP90IjpjmaRZO3iGB7Y/Fgfd XE4mdx6mzWRAGlMqNdJ6z4R7eND5A+PxIjvyy8vNPJWrDN6ItYhZW/JFeXCOwlZ6 v4lV3zWfU2qqsRBvkz9tQgNHJBiI0xVTbI36oJ7e/9dGIsDRUn9zLYk5tCX7V1w0 9XgpzFuouxbYMGewQ068pMS7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU8Lyx3Etr 65sSS8/MNQ/+LNt+ZtcwHwYDVR0jBBgwFoAUXsGoW25L9SoUMMZnKRrwZ7wOYv4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzNjk1L0E5MDM1M0IwQTI5 QjExRjFBNjk4OTJEOTMyMTFGOTcwL1hzR29XMjVMOVNvVU1NWm5LUnJ3Wjd3T1l2 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWHNHb1cyNUw5U29VTU1abktScndaN3dPWXY0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz Njk1L0E5MDM1M0IwQTI5QjExRjFBNjk4OTJEOTMyMTFGOTcwL1hzR29XMjVMOVNv VU1NWm5LUnJ3Wjd3T1l2NC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCSrDfeNYlE1XL9kysnjHalGClOiffmmh1GAfIZSneYsolfmgNtXVGgmlxJt6vJ IsEQRZvj0gOLvg6XzkWFpxG+op4P103Qoo32sBhkRO7f3kirzdPK3utbSJm3u/1Y H8x0m0cagHjFrreWLSBp0v6jnhamGjBIbm5pnfipltxfHTxNy0C4NEqE8sPvJcUK PHqYkbwRQ2SMP8rT+XbDgvNJ8N6etevpaNxZrqVm1cfiZ33Jqb66IoXCpvncTuZM rxGAwCNxxT07WTmy96kelWlnDcE1iYOftjdSmMB7tVrzdHpGaKJo5rnjCRKz+9Cw s5E+lQlYZD+3eagvey2uy0Nv -----END CERTIFICATE-----Generated at Tue Sep 22 19:23:04 2026 by rpki-client