$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.mft File: XiiKKIBK_-76DkRDEJedfO6Y5DI.mft (raw, json) Hash identifier: ic5ypr3gkAIM4bjVERSaSvOzLC0kEkr15Ipk5uE+dDg= Subject key identifier: 11:0B:07:4C:3E:D9:FA:66:BC:38:BE:C1:7B:C8:4C:46:5D:A6:9D:B2 Authority key identifier: 5E:28:8A:28:80:4A:FF:EE:FA:0E:44:43:10:97:9D:7C:EE:98:E4:32 Certificate issuer: /CN=A91B5F8A/serialNumber=5E288A28804AFFEEFA0E444310979D7CEE98E432 Certificate serial: 9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XiiKKIBK_-76DkRDEJedfO6Y5DI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.mft Manifest number: 9F Signing time: Mon 05 Oct 2026 07:46:29 +0000 Manifest this update: Mon 05 Oct 2026 07:46:28 +0000 Manifest next update: Mon 12 Oct 2026 07:46:28 +0000 Files and hashes: 1: XiiKKIBK_-76DkRDEJedfO6Y5DI.crl (hash: j15dY8Q599Pf5EbUJlwufuBjOKS7BR73GhbD2ZLoDm0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.crl rsync://rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XiiKKIBK_-76DkRDEJedfO6Y5DI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 07:46:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5F8A, serialNumber=5E288A28804AFFEEFA0E444310979D7CEE98E432 Validity Not Before: Oct 5 07:46:28 2026 GMT Not After : Oct 12 07:46:28 2026 GMT Subject: CN=6ac355d5-8ffa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:1b:83:99:4e:b0:3c:4d:79:20:c7:1a:3c:57: a0:67:be:1c:02:c0:c4:ee:81:ea:16:4f:ed:33:df: 6d:97:5f:01:fd:88:bf:b8:31:ed:5d:db:c4:e2:90: 5b:73:57:72:1a:43:85:19:ac:7d:32:21:32:9b:b2: 34:b9:9e:b3:1e:5e:d3:02:cf:2a:17:b6:40:1e:8e: eb:0f:e3:b2:55:c4:25:ca:4e:ef:78:16:5e:a9:3d: ee:fb:45:06:92:da:00:bd:4c:60:28:de:96:c4:2e: c0:ca:7a:70:c4:99:09:20:69:c7:98:d1:31:f1:00: 24:61:72:96:3c:f1:c4:22:57:d9:8b:da:d3:e4:22: 7b:bb:5f:02:32:aa:33:d5:23:07:65:7b:a3:fd:94: 94:36:cc:51:09:3a:51:26:9c:33:f2:9e:c7:26:25: 24:b9:c3:96:cd:49:87:68:37:79:9b:7d:95:11:25: 48:b7:65:e7:40:04:66:23:3b:76:28:cc:af:74:79: 41:4a:63:ec:2a:af:59:78:bc:ee:82:5b:a6:09:e6: 00:d8:c1:2c:c2:a8:a5:14:9a:0f:5d:87:79:56:eb: c9:9b:86:dd:3c:9f:e4:3f:ba:84:2c:f3:f9:86:90: fd:d2:7a:4a:76:36:ac:4b:36:bd:da:ff:4a:58:dd: 25:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:0B:07:4C:3E:D9:FA:66:BC:38:BE:C1:7B:C8:4C:46:5D:A6:9D:B2 X509v3 Authority Key Identifier: keyid:5E:28:8A:28:80:4A:FF:EE:FA:0E:44:43:10:97:9D:7C:EE:98:E4:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XiiKKIBK_-76DkRDEJedfO6Y5DI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:52:fd:c7:f2:ac:35:a2:c4:dd:e7:55:9b:7a:20:be:c3:05: 38:ba:49:8e:53:42:da:0a:b8:14:d5:0f:9e:88:0a:8f:a5:b0: 66:e0:24:96:00:66:8f:e1:bb:ec:a2:59:ce:db:ca:49:7b:c8: 00:69:c8:43:6e:2a:81:7d:c8:fd:91:3d:ee:bf:89:84:de:97: 3e:93:0c:72:87:f6:8e:2a:71:78:94:80:4a:4b:6d:c0:c0:27: b3:56:f8:3b:1e:f9:35:8e:88:8d:a1:a9:42:9a:cc:e9:fc:a9: d6:7b:94:6b:10:a7:88:1f:53:52:91:a5:77:72:0b:d4:52:96: fa:00:10:80:5d:d3:92:0e:bb:40:09:1d:83:54:0a:2f:23:71: 87:a2:a0:85:f7:32:bf:f0:9d:7e:e1:c0:be:ba:7a:e4:b6:a0: 87:03:6d:d4:3c:93:37:2e:08:7b:11:12:28:a0:91:59:22:30: a0:65:22:61:ac:c7:ac:57:fa:bf:43:ac:cc:71:cb:ba:4b:04: f0:c6:9d:39:27:de:c0:b7:5c:fd:dd:d8:78:71:e4:0f:85:c8: 6b:61:0a:5c:d8:67:57:cc:52:70:4c:c5:ac:da:8e:02:91:a3: 08:6a:7f:b1:be:76:22:eb:2c:59:01:ff:00:d5:b9:f5:d6:63: ce:2f:ea:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVGOEExMTAvBgNVBAUTKDVFMjg4QTI4ODA0QUZGRUVGQTBFNDQ0MzEwOTc5RDdD RUU5OEU0MzIwHhcNMjYxMDA1MDc0NjI4WhcNMjYxMDEyMDc0NjI4WjAYMRYwFAYD VQQDEw02YWMzNTVkNS04ZmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhRuDmU6wPE15IMcaPFegZ74cAsDE7oHqFk/tM99tl18B/Yi/uDHtXdvE4pBb c1dyGkOFGax9MiEym7I0uZ6zHl7TAs8qF7ZAHo7rD+OyVcQlyk7veBZeqT3u+0UG ktoAvUxgKN6WxC7AynpwxJkJIGnHmNEx8QAkYXKWPPHEIlfZi9rT5CJ7u18CMqoz 1SMHZXuj/ZSUNsxRCTpRJpwz8p7HJiUkucOWzUmHaDd5m32VESVIt2XnQARmIzt2 KMyvdHlBSmPsKq9ZeLzuglumCeYA2MEswqilFJoPXYd5VuvJm4bdPJ/kP7qELPP5 hpD90npKdjasSza92v9KWN0lfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBELB0w+ 2fpmvDi+wXvITEZdpp2yMB8GA1UdIwQYMBaAFF4oiiiASv/u+g5EQxCXnXzumOQy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUY4QS9ENjE1NjEwMEQz RDgxMUYwQjY0QkU2NTJDNEY5QUUwMi9YaWlLS0lCS18tNzZEa1JERUplZGZPNlk1 REkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hpaUtLSUJLXy03NkRrUkRFSmVkZk82WTVESS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUY4QS9ENjE1NjEwMEQzRDgxMUYwQjY0QkU2NTJDNEY5QUUwMi9YaWlLS0lCS18t NzZEa1JERUplZGZPNlk1REkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAR1L9x/KsNaLE3edVm3ogvsMFOLpJjlNC2gq4FNUPnogKj6WwZuAklgBmj+G7 7KJZztvKSXvIAGnIQ24qgX3I/ZE97r+JhN6XPpMMcof2jipxeJSASkttwMAns1b4 Ox75NY6IjaGpQprM6fyp1nuUaxCniB9TUpGld3IL1FKW+gAQgF3Tkg67QAkdg1QK LyNxh6Kghfcyv/CdfuHAvrp65LaghwNt1DyTNy4IexESKKCRWSIwoGUiYazHrFf6 v0OszHHLuksE8MadOSfewLdc/d3YeHHkD4XIa2EKXNhnV8xScEzFrNqOApGjCGp/ sb52IussWQH/ANW59dZjzi/qAA== -----END CERTIFICATE-----Generated at Tue Oct 6 22:59:00 2026 by rpki-client