$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7106/7CF15D8079AB11F19431028A95A30FBC/XiBrZUYXUm6oHe9p1A3KkMONpJM.mft File: XiBrZUYXUm6oHe9p1A3KkMONpJM.mft (raw, json) Hash identifier: iYcoFbl0rY3RA5yUjfQFwerXOZz/cyB6c/KlTrZh3Wg= Subject key identifier: 88:64:E5:7E:F1:7E:C4:92:52:CB:B5:0D:A5:B0:17:86:5F:B7:08:1C Authority key identifier: 5E:20:6B:65:46:17:52:6E:A8:1D:EF:69:D4:0D:CA:90:C3:8D:A4:93 Certificate issuer: /CN=A91C7106/serialNumber=5E206B654617526EA81DEF69D40DCA90C38DA493 Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XiBrZUYXUm6oHe9p1A3KkMONpJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7106/7CF15D8079AB11F19431028A95A30FBC/XiBrZUYXUm6oHe9p1A3KkMONpJM.mft Manifest number: 34 Signing time: Tue 13 Oct 2026 09:24:45 +0000 Manifest this update: Tue 13 Oct 2026 09:24:45 +0000 Manifest next update: Tue 20 Oct 2026 09:24:45 +0000 Files and hashes: 1: XiBrZUYXUm6oHe9p1A3KkMONpJM.crl (hash: f1xFticyuODIlRzDzPvTyV0RLCaSIdDLowRpUZ4E+D0=) 2: 403D780079AC11F1A4BD68E295A30FBC.roa (hash: PX6Hn6xK6Ug95lfOomfVfmyROaB7znZe36dnapQD0gE=) 3: 40CA1FF879AC11F1A4BD68E295A30FBC.roa (hash: dxvzMh7pViI4BlQNkWmxdOF/VYXouPMtNS8/qBafvbA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7106/7CF15D8079AB11F19431028A95A30FBC/XiBrZUYXUm6oHe9p1A3KkMONpJM.crl rsync://rpki.apnic.net/member_repository/A91C7106/7CF15D8079AB11F19431028A95A30FBC/XiBrZUYXUm6oHe9p1A3KkMONpJM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XiBrZUYXUm6oHe9p1A3KkMONpJM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 09:24:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7106, serialNumber=5E206B654617526EA81DEF69D40DCA90C38DA493 Validity Not Before: Oct 13 09:24:45 2026 GMT Not After : Oct 20 09:24:45 2026 GMT Subject: CN=6acdf8dd-cda2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4e:5c:d0:6f:72:ed:79:7b:9c:2c:67:54:c2: 2e:b1:6d:c7:1d:df:31:5f:b7:cd:b5:ee:20:24:5b: a2:65:87:0c:27:8e:e6:a0:08:74:42:b4:79:d9:f7: 22:ce:5e:5f:1d:db:9b:73:49:6e:4a:3e:49:54:68: 0c:09:36:c2:77:c3:38:30:11:61:46:14:42:a1:4f: f4:25:b6:29:fa:74:9b:bd:2b:c5:5e:fc:8a:78:a8: f3:18:92:b1:65:37:62:b1:43:b6:15:f5:9c:83:60: 89:c6:20:15:2a:ec:7c:c9:6c:f7:54:6e:0e:de:f6: 66:e2:6d:b4:47:32:59:06:46:2d:4b:0f:fa:87:bf: 69:88:ff:f1:23:53:09:31:91:a2:ed:b3:b5:64:44: 1e:f9:c0:31:8b:f8:36:c6:34:50:8f:ce:94:f2:2b: 91:0c:43:91:7c:8e:4d:79:55:0e:b5:ce:58:3b:90: d2:bf:f5:22:bb:98:9c:d4:1e:4a:59:3a:15:80:2c: 2b:df:5a:93:a8:ff:e2:c8:b8:57:5e:9e:0b:6d:bb: bd:67:e6:bf:f0:9f:63:14:3b:ad:11:51:c6:41:a8: 29:b4:d3:31:c0:a7:d4:97:39:85:e5:0d:6c:f7:f1: fa:c1:47:ca:ab:dc:70:1a:7c:44:01:bc:5e:8c:a4: 83:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:64:E5:7E:F1:7E:C4:92:52:CB:B5:0D:A5:B0:17:86:5F:B7:08:1C X509v3 Authority Key Identifier: keyid:5E:20:6B:65:46:17:52:6E:A8:1D:EF:69:D4:0D:CA:90:C3:8D:A4:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7106/7CF15D8079AB11F19431028A95A30FBC/XiBrZUYXUm6oHe9p1A3KkMONpJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XiBrZUYXUm6oHe9p1A3KkMONpJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7106/7CF15D8079AB11F19431028A95A30FBC/XiBrZUYXUm6oHe9p1A3KkMONpJM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:bb:a2:3f:e4:2f:81:70:28:7a:05:fc:bb:89:c0:f7:e1:13: 59:2b:5b:0d:90:f3:5f:25:55:ff:11:67:6d:51:c6:65:9e:e0: c2:ff:d4:07:ec:b9:b4:f5:f5:ac:76:55:2d:dc:f7:81:13:b0: 5c:1f:af:88:1c:61:b3:36:6a:55:25:c8:f4:8b:53:87:fb:cf: f8:50:d8:1c:16:6f:bd:ee:3d:2b:3c:6f:fa:32:01:ea:97:f8: a5:6f:c7:7d:05:48:ee:6c:a7:f8:82:76:8c:0f:a3:03:d3:bb: b5:f3:bb:74:21:9c:b3:dc:6b:65:37:9e:8e:98:3b:4d:a3:96: 8b:f6:3b:e8:04:c3:13:6f:7a:d7:92:3f:e9:01:94:ba:a0:82: 6b:97:6a:99:2c:3f:e8:53:08:a0:3d:5c:54:99:c4:47:c5:22: 44:82:52:6d:63:85:a3:16:6b:04:64:aa:97:58:2d:e2:57:99: 47:09:67:7c:38:d5:de:2d:bd:c8:9a:cc:d7:2f:4a:44:90:9e: 70:82:5e:9a:5e:75:e6:59:fb:bf:1c:59:4d:b2:a7:c3:58:97: f6:fd:e9:9f:0a:a6:4f:6d:7e:2d:6b:2d:f5:f4:fa:7b:00:91: cb:e0:9c:6f:cc:bd:f9:c4:76:e1:b9:5f:98:2b:e8:eb:e1:5d: cf:4b:ff:a3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NzEwNjExMC8GA1UEBRMoNUUyMDZCNjU0NjE3NTI2RUE4MURFRjY5RDQwRENBOTBD MzhEQTQ5MzAeFw0yNjEwMTMwOTI0NDVaFw0yNjEwMjAwOTI0NDVaMBgxFjAUBgNV BAMTDTZhY2RmOGRkLWNkYTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmTlzQb3LteXucLGdUwi6xbccd3zFft8217iAkW6JlhwwnjuagCHRCtHnZ9yLO Xl8d25tzSW5KPklUaAwJNsJ3wzgwEWFGFEKhT/Qltin6dJu9K8Ve/Ip4qPMYkrFl N2KxQ7YV9ZyDYInGIBUq7HzJbPdUbg7e9mbibbRHMlkGRi1LD/qHv2mI//EjUwkx kaLts7VkRB75wDGL+DbGNFCPzpTyK5EMQ5F8jk15VQ61zlg7kNK/9SK7mJzUHkpZ OhWALCvfWpOo/+LIuFdengttu71n5r/wn2MUO60RUcZBqCm00zHAp9SXOYXlDWz3 8frBR8qr3HAafEQBvF6MpIPBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUiGTlfvF+ xJJSy7UNpbAXhl+3CBwwHwYDVR0jBBgwFoAUXiBrZUYXUm6oHe9p1A3KkMONpJMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3MTA2LzdDRjE1RDgwNzlB QjExRjE5NDMxMDI4QTk1QTMwRkJDL1hpQnJaVVlYVW02b0hlOXAxQTNLa01PTnBK TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWGlCclpVWVhVbTZvSGU5cDFBM0trTU9OcEpNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 MTA2LzdDRjE1RDgwNzlBQjExRjE5NDMxMDI4QTk1QTMwRkJDL1hpQnJaVVlYVW02 b0hlOXAxQTNLa01PTnBKTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBZu6I/5C+BcCh6Bfy7icD34RNZK1sNkPNfJVX/EWdtUcZlnuDC/9QH7Lm09fWs dlUt3PeBE7BcH6+IHGGzNmpVJcj0i1OH+8/4UNgcFm+97j0rPG/6MgHql/ilb8d9 BUjubKf4gnaMD6MD07u187t0IZyz3GtlN56OmDtNo5aL9jvoBMMTb3rXkj/pAZS6 oIJrl2qZLD/oUwigPVxUmcRHxSJEglJtY4WjFmsEZKqXWC3iV5lHCWd8ONXeLb3I mszXL0pEkJ5wgl6aXnXmWfu/HFlNsqfDWJf2/emfCqZPbX4tay319Pp7AJHL4Jxv zL35xHbhuV+YK+jr4V3PS/+j -----END CERTIFICATE-----Generated at Tue Oct 13 17:04:23 2026 by rpki-client