$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.mft File: XAo1I_02RadjWvJRmtzQAuEy-84.mft (raw, json) Hash identifier: BfHKJyaDNqPteeDS9iFU9DDWmhDJUW8+PE3BrGFRM4U= Subject key identifier: 27:1C:35:BC:C4:D4:8D:48:81:6C:A6:00:44:2A:DC:DD:43:04:48:C9 Authority key identifier: 5C:0A:35:23:FD:36:45:A7:63:5A:F2:51:9A:DC:D0:02:E1:32:FB:CE Certificate issuer: /CN=A91B0F90/serialNumber=5C0A3523FD3645A7635AF2519ADCD002E132FBCE Certificate serial: 013D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAo1I_02RadjWvJRmtzQAuEy-84.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.mft Manifest number: 012F Signing time: Sat 05 Sep 2026 05:33:38 +0000 Manifest this update: Sat 05 Sep 2026 05:33:38 +0000 Manifest next update: Sat 12 Sep 2026 05:33:38 +0000 Files and hashes: 1: XAo1I_02RadjWvJRmtzQAuEy-84.crl (hash: LTnrP+RREnXoVoYw3nPm1FeuhnmTpeunaH0Qo99Rgxo=) 2: 304DD002EFAB11EF97C9610FC4F9AE02.roa (hash: 72tND6FYfSKJu0sQNqpeEtwTYhVCnqpq4nZnR1IjkYo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.crl rsync://rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAo1I_02RadjWvJRmtzQAuEy-84.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 05:33:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 317 (0x13d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0F90, serialNumber=5C0A3523FD3645A7635AF2519ADCD002E132FBCE Validity Not Before: Sep 5 05:33:38 2026 GMT Not After : Sep 12 05:33:38 2026 GMT Subject: CN=6a9ba9b2-c62d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:56:1a:8b:55:81:7d:9c:12:fa:61:c2:b4:83: db:5f:7d:43:15:b0:6d:45:1e:d9:4f:d1:b0:12:8f: 93:ad:db:ed:c3:f9:37:a0:7d:3c:50:a7:4e:ca:94: 5a:4d:7a:d3:90:9c:27:b1:01:5e:98:2e:35:84:cb: 29:c8:ab:8b:95:4d:0c:07:9a:05:51:e8:32:e5:b0: 0b:b2:39:37:1f:e6:a3:4b:97:c4:6c:33:0c:78:97: be:91:68:ad:7e:98:b7:47:81:af:82:8a:2c:4b:2a: 65:77:3f:7a:25:a9:c8:3c:c0:10:57:89:fe:0e:4c: 5d:c4:27:12:65:59:db:8c:70:7a:6d:94:8b:41:d3: 3d:84:2a:a4:e1:57:f5:0f:4c:fd:a3:48:01:9a:a6: 0c:69:fc:a6:e7:43:bc:27:80:e4:91:8e:fd:36:db: 77:44:9b:91:c1:36:94:55:a8:2b:15:66:0e:90:26: db:e5:86:a1:ff:e7:a8:52:d3:2b:0a:bc:8d:f0:57: 78:8b:ed:ac:21:a0:04:69:db:5b:f4:20:aa:25:9a: 3a:0e:74:21:b3:c6:9a:ba:db:5b:6e:2b:8c:4e:d3: 9d:90:ba:60:f4:38:f0:47:00:1b:66:5a:5d:32:d9: f6:1d:79:6b:fe:f8:10:ff:69:05:a0:f8:0a:97:06: 9d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:1C:35:BC:C4:D4:8D:48:81:6C:A6:00:44:2A:DC:DD:43:04:48:C9 X509v3 Authority Key Identifier: keyid:5C:0A:35:23:FD:36:45:A7:63:5A:F2:51:9A:DC:D0:02:E1:32:FB:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAo1I_02RadjWvJRmtzQAuEy-84.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:95:e0:af:47:13:82:85:7d:3d:3f:ec:71:69:dd:45:83:aa: 1b:66:a6:a0:02:a3:e1:8e:77:9d:7c:06:68:47:9f:25:e9:b2: 11:84:fa:58:ad:e4:a2:aa:3d:90:9e:3e:a1:76:22:ba:bb:2b: 49:4a:ce:0c:69:91:3c:30:c8:71:47:db:26:df:6f:69:8a:3e: dc:24:48:0e:8d:d3:32:f2:6e:50:0b:b8:c7:f4:8f:67:05:5d: 1f:c9:a5:0b:21:ff:8a:73:48:eb:c2:06:45:84:5e:3c:74:ba: eb:5e:9b:a7:1f:ee:86:08:91:11:03:f0:8e:d2:69:7f:10:36: 0d:66:c6:9d:f7:bd:fa:45:24:01:7d:42:72:6c:d9:83:29:9d: f6:f4:f6:d1:95:e1:29:8b:be:a2:4d:e7:54:00:a9:d4:5b:d0: d3:4f:25:a6:13:b4:d3:b6:b0:b2:e5:1f:ee:24:d2:3a:5f:95: a1:f4:ef:0d:79:76:db:6c:fc:68:d9:53:a3:c6:5b:a1:d1:7d: 56:ae:d1:de:ba:e3:c1:3b:02:bd:23:5b:ec:14:96:c7:27:50: ad:17:7d:66:03:9d:c5:b1:07:03:6e:e5:1a:8d:c5:43:a8:30: c6:34:a6:22:6f:5a:5d:da:d1:e6:3f:aa:60:d2:32:aa:c7:8c: 28:e2:3e:7d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBGOTAxMTAvBgNVBAUTKDVDMEEzNTIzRkQzNjQ1QTc2MzVBRjI1MTlBRENEMDAy RTEzMkZCQ0UwHhcNMjYwOTA1MDUzMzM4WhcNMjYwOTEyMDUzMzM4WjAYMRYwFAYD VQQDEw02YTliYTliMi1jNjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs1Yai1WBfZwS+mHCtIPbX31DFbBtRR7ZT9GwEo+Trdvtw/k3oH08UKdOypRa TXrTkJwnsQFemC41hMspyKuLlU0MB5oFUegy5bALsjk3H+ajS5fEbDMMeJe+kWit fpi3R4GvgoosSypldz96JanIPMAQV4n+DkxdxCcSZVnbjHB6bZSLQdM9hCqk4Vf1 D0z9o0gBmqYMafym50O8J4DkkY79Ntt3RJuRwTaUVagrFWYOkCbb5Yah/+eoUtMr CryN8Fd4i+2sIaAEadtb9CCqJZo6DnQhs8aauttbbiuMTtOdkLpg9DjwRwAbZlpd Mtn2HXlr/vgQ/2kFoPgKlwadSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCccNbzE 1I1IgWymAEQq3N1DBEjJMB8GA1UdIwQYMBaAFFwKNSP9NkWnY1ryUZrc0ALhMvvO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEY5MC8wNDc3OUI5Q0VE ODExMUVGQTAwMzY2MTZDNEY5QUUwMi9YQW8xSV8wMlJhZGpXdkpSbXR6UUF1RXkt ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hBbzFJXzAyUmFkald2SlJtdHpRQXVFeS04NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEY5MC8wNDc3OUI5Q0VEODExMUVGQTAwMzY2MTZDNEY5QUUwMi9YQW8xSV8wMlJh ZGpXdkpSbXR6UUF1RXktODQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB5Xgr0cTgoV9PT/scWndRYOqG2amoAKj4Y53nXwGaEefJemyEYT6WK3koqo9 kJ4+oXYiursrSUrODGmRPDDIcUfbJt9vaYo+3CRIDo3TMvJuUAu4x/SPZwVdH8ml CyH/inNI68IGRYRePHS6616bpx/uhgiREQPwjtJpfxA2DWbGnfe9+kUkAX1CcmzZ gymd9vT20ZXhKYu+ok3nVACp1FvQ008lphO007awsuUf7iTSOl+VofTvDXl222z8 aNlTo8ZbodF9Vq7R3rrjwTsCvSNb7BSWxydQrRd9ZgOdxbEHA27lGo3FQ6gwxjSm Im9aXdrR5j+qYNIyqseMKOI+fQ== -----END CERTIFICATE-----Generated at Sat Sep 5 17:46:13 2026 by rpki-client