$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.mft File: XTDuvxHkF41iO-G95Nu0y1nMhDc.mft (raw, json) Hash identifier: NPPy+Zb70xKJXPs7T0Kb7t8lOcaTXXHl36ylUvfH3Cw= Subject key identifier: C2:14:D9:6F:9C:30:72:9D:C1:6A:F7:2D:F0:53:05:CA:E1:F9:6A:8C Authority key identifier: 5D:30:EE:BF:11:E4:17:8D:62:3B:E1:BD:E4:DB:B4:CB:59:CC:84:37 Certificate issuer: /CN=A91AB1C2/serialNumber=5D30EEBF11E4178D623BE1BDE4DBB4CB59CC8437 Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTDuvxHkF41iO-G95Nu0y1nMhDc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.mft Manifest number: 87 Signing time: Thu 27 Aug 2026 07:07:40 +0000 Manifest this update: Thu 27 Aug 2026 07:07:40 +0000 Manifest next update: Thu 03 Sep 2026 07:07:40 +0000 Files and hashes: 1: XTDuvxHkF41iO-G95Nu0y1nMhDc.crl (hash: 1fPa0iSpHrjI7tWy9MHBsDwokAwWkmshH7ZbBqxzqVM=) 2: 253978EAE0FC11F0B50D6A7D5F6F56BC.roa (hash: 6RxldyO2/Y3wToEhzB/mHNRPtNgIGcUmqFl9NgQBrdA=) 3: 24992E62E0FC11F0B50D6A7D5F6F56BC.roa (hash: eAx7dd7W8IzFugozPftJzHrtY4Ej4f42CnK31HLLaRE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.crl rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTDuvxHkF41iO-G95Nu0y1nMhDc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 06:35:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB1C2, serialNumber=5D30EEBF11E4178D623BE1BDE4DBB4CB59CC8437 Validity Not Before: Aug 27 07:07:40 2026 GMT Not After : Sep 3 07:07:40 2026 GMT Subject: CN=6a8fe23c-90bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4f:25:62:ce:a7:46:2e:b3:c8:9d:0a:27:94: ef:9e:4a:38:b4:47:8c:7f:3d:de:2c:ae:9c:b7:e1: f6:1e:f6:9f:9e:9b:2f:73:a4:fe:15:52:7c:ae:9c: e3:a0:5a:6d:c7:b1:4e:55:a7:56:9f:fe:82:70:c2: 9d:64:b3:e0:6b:6c:68:92:0d:58:80:da:4a:99:82: 6e:c1:c7:3b:31:f8:29:ee:12:c7:29:b0:c4:f3:d5: 39:f7:5c:bc:cc:75:5a:ed:28:e0:65:06:b4:7c:4d: a2:af:26:7b:76:2a:24:15:1e:79:4c:10:36:a6:d1: dd:16:5d:3a:e7:a6:6e:c8:8d:01:5d:e9:81:14:88: 0d:e8:2e:b3:97:a3:0b:c3:0c:d3:63:50:cd:23:be: 9a:ed:ad:12:d7:33:d1:a9:5e:eb:d8:b1:7f:f0:8a: 34:db:09:e5:67:6f:9d:a5:39:ff:35:f2:d2:5d:7e: 2c:34:07:09:71:50:af:82:b8:e1:4b:e0:d3:ba:28: 79:da:27:41:c5:86:ed:aa:00:1e:66:37:97:6f:a8: a6:c2:c9:05:7b:28:5c:ff:17:78:dc:ce:95:b7:31: 24:35:18:0b:56:2e:90:4b:43:20:35:4a:a9:7d:c5: e2:a8:1f:07:9a:21:3c:46:b6:b3:62:10:8e:39:c7: e5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:14:D9:6F:9C:30:72:9D:C1:6A:F7:2D:F0:53:05:CA:E1:F9:6A:8C X509v3 Authority Key Identifier: keyid:5D:30:EE:BF:11:E4:17:8D:62:3B:E1:BD:E4:DB:B4:CB:59:CC:84:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTDuvxHkF41iO-G95Nu0y1nMhDc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:b6:0d:2e:93:cb:51:72:cc:06:ff:da:2a:bd:86:31:dd:d3: 21:49:e8:20:9c:90:f5:c0:6b:2e:5d:8f:73:96:ab:cc:79:27: 57:3d:9e:17:c6:05:64:d9:de:0d:c5:11:34:17:7d:47:a1:7d: dc:15:c7:2b:40:69:7a:fe:75:9a:65:ba:cf:66:f1:30:a9:d4: 2c:cf:8d:d0:e1:4d:dd:f8:57:96:b1:20:6c:de:a9:ec:ee:38: 3e:86:f5:60:13:77:c2:66:90:62:da:53:65:c4:ee:e7:29:9e: 5c:60:ee:b9:e7:30:58:f6:f0:03:d7:b5:53:1e:94:d9:7a:9c: f9:69:36:5d:6a:ab:d8:65:cc:13:4b:7a:8c:7b:8e:19:ec:fe: d0:2f:72:20:87:d7:32:06:57:0b:5a:de:d8:79:d7:e4:6b:65: e1:bb:34:42:59:4f:60:be:a1:27:d2:74:29:aa:3b:eb:e9:4a: a8:de:d3:63:1b:25:46:3f:bf:b4:32:03:2f:a5:8a:51:a7:4b: ad:21:8d:f5:41:44:7a:43:1c:8f:07:10:22:9e:79:0a:89:17: 3a:ad:45:c1:01:7c:1d:e7:d8:fc:ca:3d:5b:3b:8f:2b:ff:2c: f2:40:0a:c6:ba:4e:fb:f6:9b:21:87:14:ae:64:f1:55:2b:24: bd:77:66:5c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIxQzIxMTAvBgNVBAUTKDVEMzBFRUJGMTFFNDE3OEQ2MjNCRTFCREU0REJCNENC NTlDQzg0MzcwHhcNMjYwODI3MDcwNzQwWhcNMjYwOTAzMDcwNzQwWjAYMRYwFAYD VQQDEw02YThmZTIzYy05MGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp08lYs6nRi6zyJ0KJ5Tvnko4tEeMfz3eLK6ct+H2Hvafnpsvc6T+FVJ8rpzj oFptx7FOVadWn/6CcMKdZLPga2xokg1YgNpKmYJuwcc7Mfgp7hLHKbDE89U591y8 zHVa7SjgZQa0fE2iryZ7diokFR55TBA2ptHdFl0656ZuyI0BXemBFIgN6C6zl6ML wwzTY1DNI76a7a0S1zPRqV7r2LF/8Io02wnlZ2+dpTn/NfLSXX4sNAcJcVCvgrjh S+DTuih52idBxYbtqgAeZjeXb6imwskFeyhc/xd43M6VtzEkNRgLVi6QS0MgNUqp fcXiqB8HmiE8RrazYhCOOcfl4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMIU2W+c MHKdwWr3LfBTBcrh+WqMMB8GA1UdIwQYMBaAFF0w7r8R5BeNYjvhveTbtMtZzIQ3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjFDMi8wRjkxMDc1NERD QTMxMUYwODVENkYxNUI0MzZGNTZCQy9YVER1dnhIa0Y0MWlPLUc5NU51MHkxbk1o RGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hURHV2eEhrRjQxaU8tRzk1TnUweTFuTWhEYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjFDMi8wRjkxMDc1NERDQTMxMUYwODVENkYxNUI0MzZGNTZCQy9YVER1dnhIa0Y0 MWlPLUc5NU51MHkxbk1oRGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAk7YNLpPLUXLMBv/aKr2GMd3TIUnoIJyQ9cBrLl2Pc5arzHknVz2eF8YFZNne DcURNBd9R6F93BXHK0Bpev51mmW6z2bxMKnULM+N0OFN3fhXlrEgbN6p7O44Pob1 YBN3wmaQYtpTZcTu5ymeXGDuuecwWPbwA9e1Ux6U2Xqc+Wk2XWqr2GXME0t6jHuO Gez+0C9yIIfXMgZXC1re2HnX5Gtl4bs0QllPYL6hJ9J0Kao76+lKqN7TYxslRj+/ tDIDL6WKUadLrSGN9UFEekMcjwcQIp55CokXOq1FwQF8HefY/Mo9WzuPK/8s8kAK xrpO+/abIYcUrmTxVSskvXdmXA== -----END CERTIFICATE-----Generated at Thu Aug 27 09:46:02 2026 by rpki-client