$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft File: XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft (raw, json) Hash identifier: gXZTmzRuO5pYULCYVJyCINnFm8qNjdgGto6ZBBBHdgQ= Subject key identifier: E1:7D:97:CD:CA:5E:C3:8C:6E:7B:7D:D9:C4:BC:0C:27:B8:D6:7A:53 Authority key identifier: 5C:32:7B:4A:23:5B:F8:90:FD:26:91:FB:03:E9:4A:6F:16:CB:F2:3C Certificate issuer: /CN=A91FBD89/serialNumber=5C327B4A235BF890FD2691FB03E94A6F16CBF23C Certificate serial: 02AA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft Manifest number: 02AA Signing time: Sun 04 Oct 2026 22:54:48 +0000 Manifest this update: Sun 04 Oct 2026 22:54:48 +0000 Manifest next update: Sun 11 Oct 2026 22:54:48 +0000 Files and hashes: 1: XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl (hash: iqziN4tRzbnr2/Iw+M/Fy9juLgBXFPK4tFn3I1eqpro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 22:54:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 682 (0x2aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBD89, serialNumber=5C327B4A235BF890FD2691FB03E94A6F16CBF23C Validity Not Before: Oct 4 22:54:48 2026 GMT Not After : Oct 11 22:54:48 2026 GMT Subject: CN=6ac2d938-984f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:97:9b:3b:3a:4b:22:f8:26:7a:8f:6f:6b:ce: 4c:d7:55:58:a7:73:89:ec:2c:98:19:c4:c9:e9:d0: fd:01:79:6d:20:b2:ad:73:c5:c8:a9:59:eb:88:9d: 8b:8c:42:f2:0d:8c:bd:78:03:83:34:6a:80:2b:86: 97:2a:32:d9:f6:84:d9:1e:a9:52:42:42:4b:44:1c: 18:7c:9c:e2:e9:b0:f6:c3:e1:6c:1f:24:5f:9a:04: a1:75:75:0b:1c:e7:29:c1:76:b4:98:f1:de:8a:e0: 8f:ce:bc:4a:2f:3f:1c:2e:99:3f:7b:09:fe:f9:43: 57:b7:d2:34:3e:f4:a2:70:3f:60:ef:b8:74:f9:58: 66:22:db:df:7a:07:65:62:fe:f2:3c:f0:b3:e6:8a: 1a:61:05:c0:c5:4c:d5:b0:81:da:63:00:6b:a8:eb: a2:36:72:0e:1a:a9:f9:f1:fe:0b:d4:fb:ad:88:2e: 33:e4:1a:e2:6e:d5:ed:4c:85:20:d1:98:b2:61:b0: 8d:e8:d7:5d:f8:dd:e5:c5:34:33:f0:fa:94:ef:1a: 6b:09:92:e3:ba:41:82:c1:d0:6b:bf:4e:37:a1:69: a4:93:c6:68:d2:2a:a4:9b:bc:f1:17:fc:b4:f5:a5: 97:dd:da:eb:3a:06:7d:93:3d:69:4b:ae:df:1b:59: f3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:7D:97:CD:CA:5E:C3:8C:6E:7B:7D:D9:C4:BC:0C:27:B8:D6:7A:53 X509v3 Authority Key Identifier: keyid:5C:32:7B:4A:23:5B:F8:90:FD:26:91:FB:03:E9:4A:6F:16:CB:F2:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:52:39:ed:d5:01:c4:1c:4a:7b:4a:30:41:4d:17:f5:13:f9: e9:96:9c:38:b7:b5:de:1f:f4:9c:60:38:e5:60:92:f1:e3:6f: a5:77:23:bf:0a:a5:38:56:25:33:31:50:7d:54:16:4f:6b:76: d3:3a:8c:2b:63:10:8c:e1:c4:ef:1a:1e:30:03:60:c8:18:5e: 9b:7d:08:c9:14:09:f7:6c:90:18:d2:b5:d3:72:ad:e9:d4:26: 1c:49:3b:bd:0a:62:c1:24:d3:65:a9:99:a6:49:08:27:c7:0d: c1:b9:ee:ed:56:c5:e9:13:51:0d:9f:10:bd:bc:fa:ba:71:b0: a3:03:27:16:62:8f:9b:cc:4c:b4:54:82:22:21:c5:91:d7:f9: ba:5b:28:9d:e5:e5:86:e2:9d:ea:5b:00:d0:79:97:7f:2f:ad: 0b:c0:db:9b:e4:a8:43:02:39:b4:60:48:cd:c4:ea:92:d3:d2: be:df:0b:64:a6:f7:40:5a:c7:23:3a:75:43:ed:87:98:02:39: a2:0c:77:5d:8b:6a:a1:71:5d:3d:99:f3:a8:38:e2:79:36:19: 10:2b:ef:71:07:88:8d:d1:23:55:e5:63:7f:a2:5c:8c:45:7b: a4:52:22:2b:21:c7:a8:84:27:a5:ef:1f:1a:50:e4:c0:66:e5: f6:75:c6:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJEODkxMTAvBgNVBAUTKDVDMzI3QjRBMjM1QkY4OTBGRDI2OTFGQjAzRTk0QTZG MTZDQkYyM0MwHhcNMjYxMDA0MjI1NDQ4WhcNMjYxMDExMjI1NDQ4WjAYMRYwFAYD VQQDEw02YWMyZDkzOC05ODRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJebOzpLIvgmeo9va85M11VYp3OJ7CyYGcTJ6dD9AXltILKtc8XIqVnriJ2L jELyDYy9eAODNGqAK4aXKjLZ9oTZHqlSQkJLRBwYfJzi6bD2w+FsHyRfmgShdXUL HOcpwXa0mPHeiuCPzrxKLz8cLpk/ewn++UNXt9I0PvSicD9g77h0+VhmItvfegdl Yv7yPPCz5ooaYQXAxUzVsIHaYwBrqOuiNnIOGqn58f4L1PutiC4z5BribtXtTIUg 0ZiyYbCN6Ndd+N3lxTQz8PqU7xprCZLjukGCwdBrv043oWmkk8Zo0iqkm7zxF/y0 9aWX3drrOgZ9kz1pS67fG1nz3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOF9l83K XsOMbnt92cS8DCe41npTMB8GA1UdIwQYMBaAFFwye0ojW/iQ/SaR+wPpSm8Wy/I8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkQ4OS83NUIyODZDMkFF OTYxMUVEOEE5NjU2NjRDNEY5QUUwMi9YREo3U2lOYi1KRDlKcEg3QS1sS2J4Ykw4 ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hESjdTaU5iLUpEOUpwSDdBLWxLYnhiTDhqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkQ4OS83NUIyODZDMkFFOTYxMUVEOEE5NjU2NjRDNEY5QUUwMi9YREo3U2lOYi1K RDlKcEg3QS1sS2J4Ykw4ancubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK1I57dUBxBxKe0owQU0X9RP56ZacOLe13h/0nGA45WCS8eNvpXcjvwqlOFYl MzFQfVQWT2t20zqMK2MQjOHE7xoeMANgyBhem30IyRQJ92yQGNK103Kt6dQmHEk7 vQpiwSTTZamZpkkIJ8cNwbnu7VbF6RNRDZ8Qvbz6unGwowMnFmKPm8xMtFSCIiHF kdf5ulsoneXlhuKd6lsA0HmXfy+tC8Dbm+SoQwI5tGBIzcTqktPSvt8LZKb3QFrH Izp1Q+2HmAI5ogx3XYtqoXFdPZnzqDjieTYZECvvcQeIjdEjVeVjf6JcjEV7pFIi KyHHqIQnpe8fGlDkwGbl9nXGLg== -----END CERTIFICATE-----Generated at Tue Oct 6 14:20:12 2026 by rpki-client