$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.mft File: XsGmrXajq_3B4TKesmN8AYZLSAg.mft (raw, json) Hash identifier: O8h/vVt0LyiJoBA397Jpt04kAmLGG21XQxWRDCP0gps= Subject key identifier: A8:B6:89:59:33:70:D9:FE:71:CF:DF:8F:8E:67:FB:DA:91:B6:F7:5B Authority key identifier: 5E:C1:A6:AD:76:A3:AB:FD:C1:E1:32:9E:B2:63:7C:01:86:4B:48:08 Certificate issuer: /CN=A91AB20B/serialNumber=5EC1A6AD76A3ABFDC1E1329EB2637C01864B4808 Certificate serial: 08F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.mft Manifest number: 08A5 Signing time: Thu 10 Sep 2026 20:45:20 +0000 Manifest this update: Thu 10 Sep 2026 20:45:19 +0000 Manifest next update: Thu 17 Sep 2026 20:45:19 +0000 Files and hashes: 1: XsGmrXajq_3B4TKesmN8AYZLSAg.crl (hash: dtU8z4UEbPk1uNRZsK26XkC+V2DWSIn7y+IPymCBHLU=) 2: 046130D225FC11EC9D57EA7CC4F9AE02.roa (hash: rcktpjixp8+kv2v9P4xwVuhqs7pakt81L9C+JW+4rmo=) 3: E3AAE94243B511EB8DA3F473C4F9AE02.roa (hash: jmySrqpn+S69gbBWSjHPk8y6x2hnK6aVJ0YM9ayH/ko=) 4: 82BB885E4B9811EB85F74960C4F9AE02.roa (hash: k/6Ci5PJ0I5HgjHi9Xl2j9V/6QNxgQYLkDLQ1Xnljkc=) 5: CF41132A1DE811EB9DE34963C4F9AE02.roa (hash: 55hIZj5ZQRW1RQ54R3T9P5BrRnq55XVLivdxd6+SglM=) 6: 7CF84F084B9111EBBA09CA72C4F9AE02.roa (hash: kW+oZOkQ4kbBTg7mSMXsEsEa3+LYsouxCCV7XsV4Buk=) 7: 46D6261876A511EB82E04A2FC4F9AE02.roa (hash: 07NAb6FOG0gx0PdJkYwOwcdGyYjuHpfxXfS2cSkaRXw=) 8: B512A570109211ECA693D74EC4F9AE02.roa (hash: 9tEYbLo4J/q4bdTITxYsX4xnTZVHf91U/YEcnlXDHcc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.crl rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 20:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2297 (0x8f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB20B, serialNumber=5EC1A6AD76A3ABFDC1E1329EB2637C01864B4808 Validity Not Before: Sep 10 20:45:19 2026 GMT Not After : Sep 17 20:45:19 2026 GMT Subject: CN=6aa316e0-0dca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bc:13:a3:a2:f5:ad:0d:f9:39:a3:ae:f8:b9: b8:ac:a2:09:35:47:24:2e:b4:ac:2c:62:97:09:bd: ce:4e:a6:8c:02:5f:d5:11:21:63:38:7a:fb:37:0a: 32:d5:38:b9:fc:73:ef:2a:6d:0c:e3:9c:2f:e0:b0: 42:8b:ed:fc:2d:0f:5e:c0:a7:84:33:ef:7f:ff:8c: a4:6d:94:25:9a:f7:93:e7:c2:4b:11:69:7d:64:23: 52:27:50:7b:94:01:7d:a9:9b:cd:c9:ad:c9:fc:cc: 1b:0e:29:f9:3f:32:51:61:25:5a:29:fd:57:bb:c9: 6d:33:9c:34:77:cd:e8:51:55:c9:da:b4:4f:f2:4a: 6c:35:e0:39:e9:20:73:c1:52:5b:53:04:23:b2:26: b4:df:53:f2:39:5e:7b:ff:cc:2a:6c:62:7d:e0:2e: ed:f7:f9:f8:7c:1a:47:6a:86:a3:01:50:44:58:b2: eb:21:d9:b9:bf:6f:bb:10:9f:ca:68:5e:33:71:cd: a6:76:49:71:f3:fb:29:5f:5a:70:f4:ef:ff:78:9f: 6c:07:4d:70:c3:14:95:50:58:34:ff:8e:56:76:34: f3:d2:52:14:28:0d:7f:9f:f4:72:c6:94:70:98:cb: 4c:77:35:a3:d9:4a:2a:77:e5:38:3e:d7:94:06:40: 86:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:B6:89:59:33:70:D9:FE:71:CF:DF:8F:8E:67:FB:DA:91:B6:F7:5B X509v3 Authority Key Identifier: keyid:5E:C1:A6:AD:76:A3:AB:FD:C1:E1:32:9E:B2:63:7C:01:86:4B:48:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:be:c5:50:b6:ea:d3:7f:76:6e:00:fc:be:84:1e:0a:ee:3a: 2e:60:65:45:4a:35:3c:86:56:cd:dd:81:b4:31:89:0f:9d:f1: 21:3f:de:dd:a3:2d:44:ce:82:04:f8:03:2c:3a:23:69:f3:a1: 49:d4:a5:bb:13:3a:26:96:b3:ea:41:76:87:ae:f7:7a:4d:a4: a1:03:f7:34:61:58:82:5c:d2:5f:10:d1:0e:18:c6:ee:ba:df: d3:67:24:42:aa:65:3f:9a:df:c6:89:6d:e5:3d:8d:42:0c:f6: da:9f:d1:07:40:36:5f:03:12:27:6d:da:ae:23:ce:56:ae:f2: 37:96:46:e0:0c:8b:4e:fb:a9:a7:17:7c:a5:e5:27:1c:b3:3e: b7:ba:4a:ae:cd:68:7c:db:fe:4a:24:5e:6f:0d:3f:70:fa:2c: f5:1c:0c:69:c1:a3:02:83:78:06:fd:5f:63:8b:63:cd:74:da: d2:fc:04:a9:a5:78:ba:a9:ce:03:ca:34:61:54:dc:b3:3d:86: 9d:4b:e0:c2:cb:91:58:30:cb:e4:7b:89:39:6f:f5:9e:7d:8d: c3:c2:0d:dd:bc:f4:ef:4d:9f:5e:f5:16:f7:5f:fc:cc:5b:26: 92:cf:2b:ea:73:91:01:15:38:f6:ad:3d:e1:25:a8:e0:32:e4: 1f:67:50:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIyMEIxMTAvBgNVBAUTKDVFQzFBNkFENzZBM0FCRkRDMUUxMzI5RUIyNjM3QzAx ODY0QjQ4MDgwHhcNMjYwOTEwMjA0NTE5WhcNMjYwOTE3MjA0NTE5WjAYMRYwFAYD VQQDEw02YWEzMTZlMC0wZGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq7wTo6L1rQ35OaOu+Lm4rKIJNUckLrSsLGKXCb3OTqaMAl/VESFjOHr7Nwoy 1Ti5/HPvKm0M45wv4LBCi+38LQ9ewKeEM+9//4ykbZQlmveT58JLEWl9ZCNSJ1B7 lAF9qZvNya3J/MwbDin5PzJRYSVaKf1Xu8ltM5w0d83oUVXJ2rRP8kpsNeA56SBz wVJbUwQjsia031PyOV57/8wqbGJ94C7t9/n4fBpHaoajAVBEWLLrIdm5v2+7EJ/K aF4zcc2mdklx8/spX1pw9O//eJ9sB01wwxSVUFg0/45WdjTz0lIUKA1/n/RyxpRw mMtMdzWj2Uoqd+U4PteUBkCGmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKi2iVkz cNn+cc/fj45n+9qRtvdbMB8GA1UdIwQYMBaAFF7Bpq12o6v9weEynrJjfAGGS0gI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjIwQi9CQTcxQjY0ODEy MDMxMUVCQkFBMTk0MTRDNEY5QUUwMi9Yc0dtclhhanFfM0I0VEtlc21OOEFZWkxT QWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hzR21yWGFqcV8zQjRUS2VzbU44QVlaTFNBZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjIwQi9CQTcxQjY0ODEyMDMxMUVCQkFBMTk0MTRDNEY5QUUwMi9Yc0dtclhhanFf M0I0VEtlc21OOEFZWkxTQWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ77FULbq0392bgD8voQeCu46LmBlRUo1PIZWzd2BtDGJD53xIT/e3aMtRM6C BPgDLDojafOhSdSluxM6Jpaz6kF2h673ek2koQP3NGFYglzSXxDRDhjG7rrf02ck QqplP5rfxolt5T2NQgz22p/RB0A2XwMSJ23ariPOVq7yN5ZG4AyLTvuppxd8peUn HLM+t7pKrs1ofNv+SiRebw0/cPos9RwMacGjAoN4Bv1fY4tjzXTa0vwEqaV4uqnO A8o0YVTcsz2GnUvgwsuRWDDL5HuJOW/1nn2Nw8IN3bz0702fXvUW91/8zFsmks8r 6nORARU49q094SWo4DLkH2dQgg== -----END CERTIFICATE-----Generated at Fri Sep 11 13:55:42 2026 by rpki-client