$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F81D3/0A8459F4523511EA9A0CB273C4F9AE02/XpnXCH3VTqLn519cgIcHE4Posp4.mft File: XpnXCH3VTqLn519cgIcHE4Posp4.mft (raw, json) Hash identifier: oDMjeqVJ3SFRAokI1nHx2fUYIstsQ02Ore+Yg+ph0FA= Subject key identifier: F2:7C:5B:D5:73:4F:91:AA:7A:CD:C4:B4:99:6B:BE:7E:DE:7E:E2:60 Authority key identifier: 5E:99:D7:08:7D:D5:4E:A2:E7:E7:5F:5C:80:87:07:13:83:E8:B2:9E Certificate issuer: /CN=A91F81D3/serialNumber=5E99D7087DD54EA2E7E75F5C8087071383E8B29E Certificate serial: 0BE9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpnXCH3VTqLn519cgIcHE4Posp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F81D3/0A8459F4523511EA9A0CB273C4F9AE02/XpnXCH3VTqLn519cgIcHE4Posp4.mft Manifest number: 0BC5 Signing time: Sun 20 Sep 2026 19:00:24 +0000 Manifest this update: Sun 20 Sep 2026 19:00:24 +0000 Manifest next update: Sun 27 Sep 2026 19:00:24 +0000 Files and hashes: 1: XpnXCH3VTqLn519cgIcHE4Posp4.crl (hash: XU09EILCnppmY7eHIts8JyScVUNa7AoN/k6Gb4jbQtc=) 2: 1ECAB88C1AD811F193E57F8A3E3D8C67.roa (hash: fuUoAX7qold+hBso2xjm+AtCXw9QMD6MxM+hCTTXcPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F81D3/0A8459F4523511EA9A0CB273C4F9AE02/XpnXCH3VTqLn519cgIcHE4Posp4.crl rsync://rpki.apnic.net/member_repository/A91F81D3/0A8459F4523511EA9A0CB273C4F9AE02/XpnXCH3VTqLn519cgIcHE4Posp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpnXCH3VTqLn519cgIcHE4Posp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 19:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3049 (0xbe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F81D3, serialNumber=5E99D7087DD54EA2E7E75F5C8087071383E8B29E Validity Not Before: Sep 20 19:00:24 2026 GMT Not After : Sep 27 19:00:24 2026 GMT Subject: CN=6ab02d48-5dbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5c:aa:49:11:e2:50:d8:81:e8:3e:1e:a4:6e: 20:10:21:39:cb:d5:09:33:00:11:77:e0:c1:44:79: 21:d3:64:07:f2:fb:95:ef:e8:3a:c5:6e:bd:b1:c4: 70:2b:7c:b2:bc:97:2a:47:10:49:35:d6:a6:b8:ea: f5:6b:95:49:55:ce:1d:37:77:b5:1c:55:82:56:c4: 2f:d8:50:c4:9a:62:4c:67:c3:61:7d:f7:7b:2b:d6: 4c:0f:36:57:32:1d:b8:99:7e:a7:b4:3d:32:0b:23: ac:65:52:8d:e9:36:ff:23:b1:8f:04:a5:20:d1:5f: 20:72:02:49:48:27:a3:45:28:16:0d:8f:93:88:7f: 3a:e8:e3:56:77:e8:5d:ab:f3:8a:02:cf:97:a0:ca: 40:c7:42:48:14:e9:10:f2:38:74:50:37:dd:4b:7a: a3:ba:22:90:54:0e:12:33:fa:8e:57:36:6a:e5:08: 25:8a:7d:9b:86:56:d8:6c:ff:11:28:e0:b1:47:1c: 5f:31:34:d5:ee:ec:31:79:ae:db:b3:54:5f:b6:2c: fb:08:88:41:da:26:c8:88:f4:6e:14:9f:2d:68:fd: 2d:08:c8:ee:09:fb:4c:c8:19:f8:53:26:35:6a:22: 64:30:00:43:88:ee:e5:22:83:2c:49:ed:e6:bf:ad: 04:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:7C:5B:D5:73:4F:91:AA:7A:CD:C4:B4:99:6B:BE:7E:DE:7E:E2:60 X509v3 Authority Key Identifier: keyid:5E:99:D7:08:7D:D5:4E:A2:E7:E7:5F:5C:80:87:07:13:83:E8:B2:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F81D3/0A8459F4523511EA9A0CB273C4F9AE02/XpnXCH3VTqLn519cgIcHE4Posp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpnXCH3VTqLn519cgIcHE4Posp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F81D3/0A8459F4523511EA9A0CB273C4F9AE02/XpnXCH3VTqLn519cgIcHE4Posp4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:1e:fe:e1:c2:d6:3f:c5:b2:eb:56:7e:ef:ed:a7:06:93:88: 8a:ce:80:b6:30:7d:b9:c4:c3:93:5a:f8:38:96:bd:52:de:45: e6:b4:f0:f2:ef:d8:6e:ca:5f:d6:b4:ff:c5:d1:39:64:43:83: 26:a6:27:1e:c9:99:41:87:a5:41:bb:e7:d5:61:92:c9:d6:8b: 2b:d6:23:d6:ed:21:c6:3d:2b:88:f6:7f:9f:88:65:31:26:6d: 42:f5:57:22:f4:b6:86:bf:11:29:2f:6d:0d:87:c6:9c:c7:3c: 18:68:f4:49:bc:ef:7b:91:65:71:91:22:c0:dc:ca:f0:0e:97: 75:b7:32:ce:f6:71:9d:b9:ff:6b:66:19:76:e6:49:80:42:11: c2:49:35:05:76:89:40:2f:0d:33:af:a1:90:06:7b:9e:2e:d3: af:6e:31:73:3e:c6:f1:bb:b2:c4:4b:8a:1e:f1:a8:e0:7e:17: 75:b3:d6:ac:d5:af:d2:65:8a:8a:65:b3:4b:38:46:50:74:c3: 26:6f:ca:11:74:6a:28:b3:8d:ff:cc:de:46:39:ea:43:56:8d: d5:d2:e7:4b:dc:d0:d0:bb:59:9d:0b:7e:63:c1:d6:5c:22:e7: f0:7c:60:98:55:68:31:a7:a2:a5:37:08:cc:01:f0:be:86:f5: f2:62:d7:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC+kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgxRDMxMTAvBgNVBAUTKDVFOTlENzA4N0RENTRFQTJFN0U3NUY1QzgwODcwNzEz ODNFOEIyOUUwHhcNMjYwOTIwMTkwMDI0WhcNMjYwOTI3MTkwMDI0WjAYMRYwFAYD VQQDEw02YWIwMmQ0OC01ZGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsVyqSRHiUNiB6D4epG4gECE5y9UJMwARd+DBRHkh02QH8vuV7+g6xW69scRw K3yyvJcqRxBJNdamuOr1a5VJVc4dN3e1HFWCVsQv2FDEmmJMZ8Nhffd7K9ZMDzZX Mh24mX6ntD0yCyOsZVKN6Tb/I7GPBKUg0V8gcgJJSCejRSgWDY+TiH866ONWd+hd q/OKAs+XoMpAx0JIFOkQ8jh0UDfdS3qjuiKQVA4SM/qOVzZq5Qglin2bhlbYbP8R KOCxRxxfMTTV7uwxea7bs1Rftiz7CIhB2ibIiPRuFJ8taP0tCMjuCftMyBn4UyY1 aiJkMABDiO7lIoMsSe3mv60E+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPJ8W9Vz T5Gqes3EtJlrvn7efuJgMB8GA1UdIwQYMBaAFF6Z1wh91U6i5+dfXICHBxOD6LKe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODFEMy8wQTg0NTlGNDUy MzUxMUVBOUEwQ0IyNzNDNEY5QUUwMi9YcG5YQ0gzVlRxTG41MTljZ0ljSEU0UG9z cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hwblhDSDNWVHFMbjUxOWNnSWNIRTRQb3NwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODFEMy8wQTg0NTlGNDUyMzUxMUVBOUEwQ0IyNzNDNEY5QUUwMi9YcG5YQ0gzVlRx TG41MTljZ0ljSEU0UG9zcDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdB7+4cLWP8Wy61Z+7+2nBpOIis6AtjB9ucTDk1r4OJa9Ut5F5rTw8u/Ybspf 1rT/xdE5ZEODJqYnHsmZQYelQbvn1WGSydaLK9Yj1u0hxj0riPZ/n4hlMSZtQvVX IvS2hr8RKS9tDYfGnMc8GGj0Sbzve5FlcZEiwNzK8A6XdbcyzvZxnbn/a2YZduZJ gEIRwkk1BXaJQC8NM6+hkAZ7ni7Tr24xcz7G8buyxEuKHvGo4H4XdbPWrNWv0mWK imWzSzhGUHTDJm/KEXRqKLON/8zeRjnqQ1aN1dLnS9zQ0LtZnQt+Y8HWXCLn8Hxg mFVoMaeipTcIzAHwvob18mLXpQ== -----END CERTIFICATE-----Generated at Tue Sep 22 21:44:25 2026 by rpki-client