$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7106/7CF15D8079AB11F19431028A95A30FBC/XiBrZUYXUm6oHe9p1A3KkMONpJM.mft File: XiBrZUYXUm6oHe9p1A3KkMONpJM.mft (raw, json) Hash identifier: DXI91UKphMD2EUwtZUSIl/8dKsExLz0JUpbYRXLwv6A= Subject key identifier: 4A:26:5D:32:CA:CE:67:94:8D:7C:55:A5:35:74:41:83:38:8D:72:A0 Authority key identifier: 5E:20:6B:65:46:17:52:6E:A8:1D:EF:69:D4:0D:CA:90:C3:8D:A4:93 Certificate issuer: /CN=A91C7106/serialNumber=5E206B654617526EA81DEF69D40DCA90C38DA493 Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XiBrZUYXUm6oHe9p1A3KkMONpJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7106/7CF15D8079AB11F19431028A95A30FBC/XiBrZUYXUm6oHe9p1A3KkMONpJM.mft Manifest number: 1B Signing time: Tue 25 Aug 2026 08:50:47 +0000 Manifest this update: Tue 25 Aug 2026 08:50:46 +0000 Manifest next update: Tue 01 Sep 2026 08:50:46 +0000 Files and hashes: 1: XiBrZUYXUm6oHe9p1A3KkMONpJM.crl (hash: syS35hl7KbBJF/loVkFCf+66UREpmF0fvMoX1M+arVE=) 2: 403D780079AC11F1A4BD68E295A30FBC.roa (hash: PX6Hn6xK6Ug95lfOomfVfmyROaB7znZe36dnapQD0gE=) 3: 40CA1FF879AC11F1A4BD68E295A30FBC.roa (hash: dxvzMh7pViI4BlQNkWmxdOF/VYXouPMtNS8/qBafvbA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7106/7CF15D8079AB11F19431028A95A30FBC/XiBrZUYXUm6oHe9p1A3KkMONpJM.crl rsync://rpki.apnic.net/member_repository/A91C7106/7CF15D8079AB11F19431028A95A30FBC/XiBrZUYXUm6oHe9p1A3KkMONpJM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XiBrZUYXUm6oHe9p1A3KkMONpJM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 08:50:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7106, serialNumber=5E206B654617526EA81DEF69D40DCA90C38DA493 Validity Not Before: Aug 25 08:50:46 2026 GMT Not After : Sep 1 08:50:46 2026 GMT Subject: CN=6a8d5767-a5bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:60:34:32:e2:03:e4:f7:c4:bc:48:9e:b3:f2: bd:74:c8:ba:c1:26:73:91:fd:fe:77:67:e8:77:f3: 0a:8d:3c:41:c4:f7:0e:4d:5a:0d:60:31:e6:9a:ea: ff:1e:4f:6d:74:10:14:1c:8a:7b:56:cc:6a:1e:e3: 66:78:83:dd:fa:30:9f:bd:b0:ba:08:aa:be:46:7a: 2c:b4:97:a7:1f:74:75:62:49:5d:93:7d:ba:fd:a5: 16:3d:f9:64:a8:a8:ee:d8:a6:f2:57:9e:21:26:c2: ea:e1:14:bf:35:cd:2a:cc:73:54:8e:41:a6:fd:55: 8e:f8:67:38:69:5f:cb:b5:ed:a4:b2:2a:18:53:88: f9:6d:b4:c8:b4:87:96:67:cc:4c:a5:c1:fc:0b:1e: 59:6d:59:e1:e5:c8:cf:22:71:19:05:5b:e6:76:49: 04:52:1f:5e:0b:3e:e5:f5:c8:15:db:20:88:8f:6f: 9b:17:3c:a9:d1:b9:52:97:e3:7f:02:a8:b4:01:40: 89:6c:19:02:6c:5c:70:ca:f6:96:91:f4:a2:c3:9c: eb:94:87:26:58:f5:4b:fb:6f:e0:e5:e3:44:6d:d8: d9:74:31:9f:56:b8:ba:be:5b:16:4a:80:9d:34:e2: 5e:26:b2:e2:de:74:5e:9e:83:04:42:36:33:15:7b: 6e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:26:5D:32:CA:CE:67:94:8D:7C:55:A5:35:74:41:83:38:8D:72:A0 X509v3 Authority Key Identifier: keyid:5E:20:6B:65:46:17:52:6E:A8:1D:EF:69:D4:0D:CA:90:C3:8D:A4:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7106/7CF15D8079AB11F19431028A95A30FBC/XiBrZUYXUm6oHe9p1A3KkMONpJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XiBrZUYXUm6oHe9p1A3KkMONpJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7106/7CF15D8079AB11F19431028A95A30FBC/XiBrZUYXUm6oHe9p1A3KkMONpJM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:8a:e3:a2:b1:31:64:5c:e2:c2:96:02:f7:23:8a:1f:46:b8: 39:7a:26:6c:3d:6d:45:e8:b3:fc:84:35:50:35:0e:49:49:d4: e0:62:17:97:fd:67:cf:08:ca:b7:02:27:e8:9d:62:16:d0:21: 71:36:58:c3:e4:cc:79:b1:4a:19:a7:14:f9:40:b4:69:21:41: b8:ac:62:ce:3a:14:de:60:a4:df:c0:4d:0b:3b:73:10:21:19: b2:6e:88:a2:0b:eb:9a:5f:61:d7:fb:94:83:60:c8:dc:3c:9a: f9:e4:81:85:ba:54:95:73:04:95:26:18:bc:72:f3:fe:93:23: 6f:41:77:7e:53:dc:9e:81:a6:5c:f8:fa:d6:62:d3:88:d3:be: e8:f8:3b:cb:3a:40:94:08:ef:f4:d5:0f:6a:ba:a7:3f:b7:22: 05:d8:b1:62:21:27:20:de:09:bd:c0:a9:67:cb:b4:ec:0c:e8: 1e:0e:ae:09:c9:2f:a8:d0:37:fc:eb:4a:30:a7:59:58:4c:42: 3c:5d:c4:69:79:3e:e3:8e:10:69:ea:8a:26:6d:80:6e:f9:5b: ef:92:e2:9d:2e:68:04:b7:a7:62:67:af:44:2d:3d:8c:b5:c0: 66:bd:6f:45:e7:f1:7e:62:29:0a:aa:f0:68:fe:6e:78:95:85: db:ec:25:43 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NzEwNjExMC8GA1UEBRMoNUUyMDZCNjU0NjE3NTI2RUE4MURFRjY5RDQwRENBOTBD MzhEQTQ5MzAeFw0yNjA4MjUwODUwNDZaFw0yNjA5MDEwODUwNDZaMBgxFjAUBgNV BAMTDTZhOGQ1NzY3LWE1YmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMYDQy4gPk98S8SJ6z8r10yLrBJnOR/f53Z+h38wqNPEHE9w5NWg1gMeaa6v8e T210EBQcintWzGoe42Z4g936MJ+9sLoIqr5Geiy0l6cfdHViSV2Tfbr9pRY9+WSo qO7YpvJXniEmwurhFL81zSrMc1SOQab9VY74ZzhpX8u17aSyKhhTiPlttMi0h5Zn zEylwfwLHlltWeHlyM8icRkFW+Z2SQRSH14LPuX1yBXbIIiPb5sXPKnRuVKX438C qLQBQIlsGQJsXHDK9paR9KLDnOuUhyZY9Uv7b+Dl40Rt2Nl0MZ9WuLq+WxZKgJ00 4l4msuLedF6egwRCNjMVe265AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUSiZdMsrO Z5SNfFWlNXRBgziNcqAwHwYDVR0jBBgwFoAUXiBrZUYXUm6oHe9p1A3KkMONpJMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3MTA2LzdDRjE1RDgwNzlB QjExRjE5NDMxMDI4QTk1QTMwRkJDL1hpQnJaVVlYVW02b0hlOXAxQTNLa01PTnBK TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWGlCclpVWVhVbTZvSGU5cDFBM0trTU9OcEpNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 MTA2LzdDRjE1RDgwNzlBQjExRjE5NDMxMDI4QTk1QTMwRkJDL1hpQnJaVVlYVW02 b0hlOXAxQTNLa01PTnBKTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBWiuOisTFkXOLClgL3I4ofRrg5eiZsPW1F6LP8hDVQNQ5JSdTgYheX/WfPCMq3 AifonWIW0CFxNljD5Mx5sUoZpxT5QLRpIUG4rGLOOhTeYKTfwE0LO3MQIRmyboii C+uaX2HX+5SDYMjcPJr55IGFulSVcwSVJhi8cvP+kyNvQXd+U9yegaZc+PrWYtOI 077o+DvLOkCUCO/01Q9quqc/tyIF2LFiIScg3gm9wKlny7TsDOgeDq4JyS+o0Df8 60owp1lYTEI8XcRpeT7jjhBp6oombYBu+VvvkuKdLmgEt6diZ69ELT2MtcBmvW9F 5/F+YikKqvBo/m54lYXb7CVD -----END CERTIFICATE-----Generated at Thu Aug 27 04:54:06 2026 by rpki-client