$ rpki-client -vvvf rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft File: XW8me3qjzDZHyTE7nux9aaFnOVg.mft (raw, json) Hash identifier: TWx/4BjfhcvtTm3FR6xv4VrP1+gsfphmm5a1wrIM0j0= Subject key identifier: E9:4D:CF:52:CB:C8:48:D4:DA:1C:A3:53:4F:B8:D2:76:9A:00:9E:DA Authority key identifier: 5D:6F:26:7B:7A:A3:CC:36:47:C9:31:3B:9E:EC:7D:69:A1:67:39:58 Certificate issuer: /CN=A91583E2/serialNumber=5D6F267B7AA3CC3647C9313B9EEC7D69A1673958 Certificate serial: 0105 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft Manifest number: F5 Signing time: Fri 11 Sep 2026 06:23:23 +0000 Manifest this update: Fri 11 Sep 2026 06:23:23 +0000 Manifest next update: Fri 18 Sep 2026 06:23:23 +0000 Files and hashes: 1: XW8me3qjzDZHyTE7nux9aaFnOVg.crl (hash: uPqoGX8ANP3I5UtPUORKSOUrBW7mGrV20k3Q20GLn80=) 2: B05F386E3B9911F09DE90D79C4F9AE02.roa (hash: 6w1HzCUg6p4mztXpRSikJO2Y5n7Og6kFlJojI34dx8M=) 3: 22D3C2B23B9E11F096AB407FC4F9AE02.roa (hash: AQbnIHwCJBjkidfFhnjxCBn8qJ9nAragqxJAtmgwlvI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.crl rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 06:23:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 261 (0x105) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91583E2, serialNumber=5D6F267B7AA3CC3647C9313B9EEC7D69A1673958 Validity Not Before: Sep 11 06:23:23 2026 GMT Not After : Sep 18 06:23:23 2026 GMT Subject: CN=6aa39e5b-13e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:53:fa:33:46:5a:56:fe:27:11:cd:83:b4:59: 8d:59:73:df:af:b6:8a:8c:bb:54:2e:6d:aa:3a:9b: 75:aa:9a:c0:6b:d9:89:14:5c:ae:64:48:ed:8a:a4: d6:9d:82:73:1e:73:cb:9d:12:0a:14:32:38:7e:c5: cc:9e:af:d1:fd:6b:70:c9:22:97:7a:6c:a2:e9:83: 8a:a5:65:f7:f4:2a:57:15:55:bb:4a:77:5d:ca:f0: 4c:9b:a4:e8:8a:a1:17:bd:ee:06:ee:47:90:45:40: 3e:59:84:fe:8b:43:9b:e3:a9:50:1f:96:ad:fb:e5: af:de:51:be:d2:bf:25:b3:9a:30:05:d3:c7:d4:8d: 13:c6:74:3d:2c:8d:21:95:ab:56:29:86:f2:42:3d: f7:e7:d5:11:05:96:2a:82:9c:34:3d:46:ee:0c:d3: 1e:bd:14:c9:6f:85:b1:4b:f3:89:d9:08:32:16:b3: 40:b8:ad:c8:b7:c1:bc:51:d6:1a:53:24:18:d7:68: 26:a6:ee:7a:50:1f:d1:e8:05:09:f8:ea:66:48:c1: 23:cb:e9:b6:62:2d:a6:1f:b1:77:aa:e2:39:7d:03: 43:94:50:68:8c:45:bf:c2:c4:2b:04:a7:d4:5f:39: 55:8a:b2:db:ae:b6:30:74:77:31:84:26:b2:6f:86: 12:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:4D:CF:52:CB:C8:48:D4:DA:1C:A3:53:4F:B8:D2:76:9A:00:9E:DA X509v3 Authority Key Identifier: keyid:5D:6F:26:7B:7A:A3:CC:36:47:C9:31:3B:9E:EC:7D:69:A1:67:39:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:dc:55:2c:16:5a:a2:96:0b:ed:fb:d6:dc:7f:18:fb:4c:1b: 78:d8:d9:a8:d2:f4:e0:75:6d:a9:fd:86:6d:f7:5d:ac:1e:49: 58:66:fb:c6:17:e8:b9:c9:f7:43:cb:f9:52:c7:a6:19:da:68: 15:13:6c:8a:a4:83:d6:a4:09:b4:64:a7:68:47:d0:11:02:66: c4:52:35:a8:b9:23:0a:be:5b:8e:4a:f6:c5:6c:e3:ab:d9:9b: a7:55:c0:1a:21:10:d5:68:e6:bb:cd:8b:f7:99:8a:14:8a:92: 89:f7:8b:f6:09:0d:72:cc:9e:ba:93:9b:7b:08:c3:b0:0e:37: 93:79:3c:f7:f7:e9:ad:2a:3f:a8:57:8d:72:8d:03:93:c4:38: cc:ec:e1:32:22:fc:28:a9:08:a0:25:4d:b7:97:cc:60:e5:60: 04:92:c6:b7:0e:90:0a:36:fe:6d:ce:0a:6b:b4:e9:ac:f6:de: 17:4f:6e:55:71:2f:79:6e:7a:72:f2:3c:71:31:da:37:58:6a: 4c:96:07:bd:e6:8d:83:b8:54:65:24:a6:2e:a5:73:5e:d6:9d: 6c:b7:5c:dd:c6:c5:2a:24:47:ac:7e:ae:65:ac:7c:26:23:44: 4b:c2:a8:d4:cf:bb:c8:02:a7:6b:37:63:99:9e:fc:7f:6c:02: d0:62:c6:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgzRTIxMTAvBgNVBAUTKDVENkYyNjdCN0FBM0NDMzY0N0M5MzEzQjlFRUM3RDY5 QTE2NzM5NTgwHhcNMjYwOTExMDYyMzIzWhcNMjYwOTE4MDYyMzIzWjAYMRYwFAYD VQQDEw02YWEzOWU1Yi0xM2UxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwlP6M0ZaVv4nEc2DtFmNWXPfr7aKjLtULm2qOpt1qprAa9mJFFyuZEjtiqTW nYJzHnPLnRIKFDI4fsXMnq/R/WtwySKXemyi6YOKpWX39CpXFVW7SnddyvBMm6To iqEXve4G7keQRUA+WYT+i0Ob46lQH5at++Wv3lG+0r8ls5owBdPH1I0TxnQ9LI0h latWKYbyQj3359URBZYqgpw0PUbuDNMevRTJb4WxS/OJ2QgyFrNAuK3It8G8UdYa UyQY12gmpu56UB/R6AUJ+OpmSMEjy+m2Yi2mH7F3quI5fQNDlFBojEW/wsQrBKfU XzlVirLbrrYwdHcxhCayb4YSbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOlNz1LL yEjU2hyjU0+40naaAJ7aMB8GA1UdIwQYMBaAFF1vJnt6o8w2R8kxO57sfWmhZzlY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODNFMi80M0ZCNzg3QzNC OTkxMUYwQTBDQzU5NzhDNEY5QUUwMi9YVzhtZTNxanpEWkh5VEU3bnV4OWFhRm5P VmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hXOG1lM3FqekRaSHlURTdudXg5YWFGbk9WZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODNFMi80M0ZCNzg3QzNCOTkxMUYwQTBDQzU5NzhDNEY5QUUwMi9YVzhtZTNxanpE Wkh5VEU3bnV4OWFhRm5PVmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZdxVLBZaopYL7fvW3H8Y+0wbeNjZqNL04HVtqf2GbfddrB5JWGb7xhfoucn3 Q8v5UsemGdpoFRNsiqSD1qQJtGSnaEfQEQJmxFI1qLkjCr5bjkr2xWzjq9mbp1XA GiEQ1Wjmu82L95mKFIqSifeL9gkNcsyeupObewjDsA43k3k89/fprSo/qFeNco0D k8Q4zOzhMiL8KKkIoCVNt5fMYOVgBJLGtw6QCjb+bc4Ka7TprPbeF09uVXEveW56 cvI8cTHaN1hqTJYHveaNg7hUZSSmLqVzXtadbLdc3cbFKiRHrH6uZax8JiNES8Ko 1M+7yAKnazdjmZ78f2wC0GLGdg== -----END CERTIFICATE-----Generated at Fri Sep 11 17:03:24 2026 by rpki-client