$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/XDlbosoKv2WIhyaHTHgktpt4mZU.mft File: XDlbosoKv2WIhyaHTHgktpt4mZU.mft (raw, json) Hash identifier: MJDfNvGl1L+Ohd4Bx+fHrVCR6yxWz31WJk8QSjtiTPM= Subject key identifier: 85:AD:58:2B:F7:2A:E2:B8:47:9F:5C:DA:B1:4B:B0:32:64:4D:37:9C Authority key identifier: 5C:39:5B:A2:CA:0A:BF:65:88:87:26:87:4C:78:24:B6:9B:78:99:95 Certificate issuer: /CN=A91E66E5/serialNumber=5C395BA2CA0ABF65888726874C7824B69B789995 Certificate serial: 0F3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDlbosoKv2WIhyaHTHgktpt4mZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/XDlbosoKv2WIhyaHTHgktpt4mZU.mft Manifest number: 0F2B Signing time: Fri 04 Sep 2026 17:32:30 +0000 Manifest this update: Fri 04 Sep 2026 17:32:29 +0000 Manifest next update: Fri 11 Sep 2026 17:32:29 +0000 Files and hashes: 1: XDlbosoKv2WIhyaHTHgktpt4mZU.crl (hash: zM2G1xrDWwpzHt9OS7tm5M2e6p5ZK5HYZdgAGhyyI5c=) 2: AECDA1B0448F11EDACC30815C4F9AE02.roa (hash: Vv+ic3tuHHAEO62okYNeBPpK0SKMbTv6XBExdyT6xHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/XDlbosoKv2WIhyaHTHgktpt4mZU.crl rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/XDlbosoKv2WIhyaHTHgktpt4mZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDlbosoKv2WIhyaHTHgktpt4mZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 17:32:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3898 (0xf3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E66E5, serialNumber=5C395BA2CA0ABF65888726874C7824B69B789995 Validity Not Before: Sep 4 17:32:29 2026 GMT Not After : Sep 11 17:32:29 2026 GMT Subject: CN=6a9b00ae-d800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fe:f6:e2:43:67:9b:92:46:66:3e:c0:9b:62: 0c:bf:ab:f9:0a:92:df:84:11:34:db:3c:10:d7:ef: 46:91:d6:02:72:ba:2b:2c:dd:c1:be:db:39:18:4b: e4:81:db:68:fd:b0:5c:d9:93:6d:1b:60:23:87:f1: a0:bb:27:1b:d3:95:43:59:79:3d:1b:82:1c:fb:94: ef:c0:d7:bd:ff:4c:28:08:86:6e:06:14:d9:fb:5d: 57:72:b7:a3:eb:11:0c:63:10:8f:58:eb:9d:19:8d: 7c:d8:3e:d3:e0:f6:72:25:44:00:0b:a7:fa:7c:fc: 95:ed:54:2a:99:e2:41:dc:c6:08:a8:ff:bc:8a:e7: e6:84:78:b4:c2:a7:da:64:75:14:58:ff:f2:0c:20: de:da:b6:a6:a6:10:74:1b:3f:bf:db:17:bc:36:36: 96:5e:85:f7:00:63:fe:e0:1f:5b:72:bf:48:c1:57: ce:dc:b2:9e:02:22:f9:8e:1c:3f:24:07:a1:93:42: c7:71:be:1d:3c:35:6c:40:22:de:c5:44:dc:69:a6: fa:d8:3f:b8:d6:75:61:db:b6:72:74:50:1a:c0:7b: 73:a7:2a:a2:5b:92:67:b9:08:50:30:54:4d:88:29: 62:ef:5b:a5:55:7d:02:65:d3:4c:ca:1e:70:c1:58: 9c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:AD:58:2B:F7:2A:E2:B8:47:9F:5C:DA:B1:4B:B0:32:64:4D:37:9C X509v3 Authority Key Identifier: keyid:5C:39:5B:A2:CA:0A:BF:65:88:87:26:87:4C:78:24:B6:9B:78:99:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/XDlbosoKv2WIhyaHTHgktpt4mZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDlbosoKv2WIhyaHTHgktpt4mZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/XDlbosoKv2WIhyaHTHgktpt4mZU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:4a:f6:7f:95:4c:e3:5d:32:d1:51:b7:97:7a:e7:4d:53:e1: 78:db:a7:19:13:e6:ee:b1:e0:63:6d:6f:cc:dd:7f:a0:e6:7a: 1f:a9:03:60:f7:19:7b:c7:43:2d:99:ee:74:97:8b:62:67:07: 61:41:ac:0d:32:cf:73:a6:78:84:41:63:2a:39:70:d5:b7:0b: 5e:05:f4:fb:6c:b9:25:15:ea:28:6c:49:90:75:68:03:cd:e0: 31:0a:01:73:e6:26:77:3c:e2:75:2f:f8:86:de:f6:80:34:d7: f1:ba:3d:72:34:b7:4d:f6:58:61:66:93:0c:1a:04:e7:b6:02: 3e:e0:95:01:96:69:e4:ef:5a:36:a4:18:a7:49:31:51:98:cf: 34:83:50:8a:1f:37:87:17:b4:ab:31:17:b0:ea:27:6d:b6:89: eb:56:3f:90:de:87:c4:24:e0:90:14:52:2e:14:1c:c3:57:c4: 6b:02:5e:25:2b:bb:da:e6:ac:3e:13:12:58:7f:e4:36:f4:ee: b8:5b:ca:e5:13:2c:3b:b2:96:b7:76:e7:ff:6b:fa:29:b3:e5: 6f:ec:75:29:a0:e5:81:b7:86:30:01:79:11:47:3e:5a:02:ee: a6:af:ff:fa:ac:e5:76:8a:a0:68:d7:9c:8b:ab:26:e5:3c:2a: 72:c9:c5:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY2RTUxMTAvBgNVBAUTKDVDMzk1QkEyQ0EwQUJGNjU4ODg3MjY4NzRDNzgyNEI2 OUI3ODk5OTUwHhcNMjYwOTA0MTczMjI5WhcNMjYwOTExMTczMjI5WjAYMRYwFAYD VQQDEw02YTliMDBhZS1kODAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr/724kNnm5JGZj7Am2IMv6v5CpLfhBE02zwQ1+9GkdYCcrorLN3Bvts5GEvk gdto/bBc2ZNtG2Ajh/Gguycb05VDWXk9G4Ic+5TvwNe9/0woCIZuBhTZ+11Xcrej 6xEMYxCPWOudGY182D7T4PZyJUQAC6f6fPyV7VQqmeJB3MYIqP+8iufmhHi0wqfa ZHUUWP/yDCDe2ramphB0Gz+/2xe8NjaWXoX3AGP+4B9bcr9IwVfO3LKeAiL5jhw/ JAehk0LHcb4dPDVsQCLexUTcaab62D+41nVh27ZydFAawHtzpyqiW5JnuQhQMFRN iCli71ulVX0CZdNMyh5wwVicVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIWtWCv3 KuK4R59c2rFLsDJkTTecMB8GA1UdIwQYMBaAFFw5W6LKCr9liIcmh0x4JLabeJmV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjZFNS81NjQzMDU4NkEy NzUxMUU5QTc0RDRFODJDNEY5QUUwMi9YRGxib3NvS3YyV0loeWFIVEhna3RwdDRt WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hEbGJvc29LdjJXSWh5YUhUSGdrdHB0NG1aVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjZFNS81NjQzMDU4NkEyNzUxMUU5QTc0RDRFODJDNEY5QUUwMi9YRGxib3NvS3Yy V0loeWFIVEhna3RwdDRtWlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACkr2f5VM410y0VG3l3rnTVPheNunGRPm7rHgY21vzN1/oOZ6H6kDYPcZe8dD LZnudJeLYmcHYUGsDTLPc6Z4hEFjKjlw1bcLXgX0+2y5JRXqKGxJkHVoA83gMQoB c+YmdzzidS/4ht72gDTX8bo9cjS3TfZYYWaTDBoE57YCPuCVAZZp5O9aNqQYp0kx UZjPNINQih83hxe0qzEXsOonbbaJ61Y/kN6HxCTgkBRSLhQcw1fEawJeJSu72uas PhMSWH/kNvTuuFvK5RMsO7KWt3bn/2v6KbPlb+x1KaDlgbeGMAF5EUc+WgLupq// +qzldoqgaNeci6sm5TwqcsnFRA== -----END CERTIFICATE-----Generated at Sat Sep 5 07:21:53 2026 by rpki-client