$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3E8B/04DE2B92BE2211F0B38DB519C4F9AE02/Xb7wLCg84I1tzonzkSoMMKcBkMg.mft File: Xb7wLCg84I1tzonzkSoMMKcBkMg.mft (raw, json) Hash identifier: Is5gxDVc4hQoPgHeW56cCv51vUmlmSVKCWhPb9iG5Wc= Subject key identifier: BE:04:1E:ED:64:7E:5B:B6:F6:36:5F:FA:E5:74:38:54:D0:01:A0:DF Authority key identifier: 5D:BE:F0:2C:28:3C:E0:8D:6D:CE:89:F3:91:2A:0C:30:A7:01:90:C8 Certificate issuer: /CN=A91E3E8B/serialNumber=5DBEF02C283CE08D6DCE89F3912A0C30A70190C8 Certificate serial: A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xb7wLCg84I1tzonzkSoMMKcBkMg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E8B/04DE2B92BE2211F0B38DB519C4F9AE02/Xb7wLCg84I1tzonzkSoMMKcBkMg.mft Manifest number: A9 Signing time: Sat 03 Oct 2026 07:49:47 +0000 Manifest this update: Sat 03 Oct 2026 07:49:47 +0000 Manifest next update: Sat 10 Oct 2026 07:49:47 +0000 Files and hashes: 1: Xb7wLCg84I1tzonzkSoMMKcBkMg.crl (hash: a7MwX6GA6JotiHfEpyhxHtLhIAUFWf7TywyeMToCNlo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3E8B/04DE2B92BE2211F0B38DB519C4F9AE02/Xb7wLCg84I1tzonzkSoMMKcBkMg.crl rsync://rpki.apnic.net/member_repository/A91E3E8B/04DE2B92BE2211F0B38DB519C4F9AE02/Xb7wLCg84I1tzonzkSoMMKcBkMg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xb7wLCg84I1tzonzkSoMMKcBkMg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 07:49:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3E8B, serialNumber=5DBEF02C283CE08D6DCE89F3912A0C30A70190C8 Validity Not Before: Oct 3 07:49:47 2026 GMT Not After : Oct 10 07:49:47 2026 GMT Subject: CN=6ac0b39b-69d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b3:0c:c9:e0:2a:6d:b7:33:41:0a:38:04:0d: 25:22:21:b9:f4:2f:5c:51:d7:09:91:c8:7f:3a:39: 8f:b2:b1:3f:a9:38:02:c6:22:ef:4b:bc:c8:2f:c7: 88:c2:87:52:6e:22:f8:4f:09:7f:7e:63:f9:8e:a1: 35:31:32:d0:4c:ea:d5:23:89:df:67:24:f8:a6:98: 25:be:9d:0b:8f:cc:11:53:ef:20:07:1b:b3:f6:60: f6:d6:49:f3:fb:7b:36:d9:07:d2:ab:c6:7f:1a:05: 97:c8:22:ee:fc:02:8c:87:6c:22:71:50:06:f4:25: 71:45:dc:6e:03:f4:83:61:5c:e9:f6:84:7f:73:2f: 14:b5:f9:9f:89:be:46:cf:10:c3:7b:fc:75:62:b7: bf:b6:b1:a3:80:21:f8:4d:38:66:e8:e9:c0:3b:d9: e7:2e:33:3e:81:3a:6e:eb:11:cf:da:c6:75:6e:8b: 66:73:70:b2:ac:00:e4:f0:8d:cc:72:cc:26:99:3b: 12:62:22:4c:44:eb:ea:52:ad:ae:86:98:c0:a4:8d: c1:c6:20:97:e7:57:ef:1b:81:9d:bd:19:c2:ca:42: 20:d7:a3:4f:ae:60:f5:96:cc:10:17:49:49:a6:20: d0:9c:1f:41:35:67:06:bf:34:bf:91:49:29:40:1b: 50:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:04:1E:ED:64:7E:5B:B6:F6:36:5F:FA:E5:74:38:54:D0:01:A0:DF X509v3 Authority Key Identifier: keyid:5D:BE:F0:2C:28:3C:E0:8D:6D:CE:89:F3:91:2A:0C:30:A7:01:90:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3E8B/04DE2B92BE2211F0B38DB519C4F9AE02/Xb7wLCg84I1tzonzkSoMMKcBkMg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xb7wLCg84I1tzonzkSoMMKcBkMg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E8B/04DE2B92BE2211F0B38DB519C4F9AE02/Xb7wLCg84I1tzonzkSoMMKcBkMg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:ee:1a:02:09:13:84:72:e7:15:d1:58:b8:6c:f6:db:f0:92: 57:db:1e:14:60:28:7e:25:fd:c7:a0:4e:b3:2f:3d:7b:0e:e1: 36:0a:d5:fa:4d:d3:06:4d:75:4a:f1:3e:18:9b:1a:c6:fb:8a: 72:c2:51:4d:6e:bf:34:1b:01:0a:b8:26:c4:cc:f0:84:85:9b: d8:05:80:4b:55:af:f4:ac:2e:88:b6:a6:e6:7d:90:70:30:5b: 72:69:29:b9:a0:7a:65:2d:2e:cf:22:84:e9:57:b4:92:22:06: ec:8c:dc:f5:7a:c9:9f:a1:1e:28:11:66:b6:c0:89:e2:15:36: c8:d2:79:e1:4c:38:58:74:35:e4:92:5b:ea:b2:e2:23:10:98: 25:e8:b1:bc:d2:1c:5f:4f:6d:72:62:53:5b:2c:34:80:1f:75: 3c:6a:46:be:de:80:2c:21:f4:81:f6:b9:1c:c6:e0:1e:03:78: 94:7a:41:6d:d1:0c:12:91:73:e7:69:86:3b:4d:55:a7:53:e0: c3:75:53:0f:af:b8:a7:7b:05:84:20:0a:66:54:eb:ff:8f:13: 81:8c:90:2b:ae:90:96:c6:40:95:75:ed:1c:fa:f9:f1:0c:6b: f5:a9:19:3c:93:cc:2e:db:91:e0:7b:67:a5:77:27:fd:01:f2: 5a:fe:ac:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNFOEIxMTAvBgNVBAUTKDVEQkVGMDJDMjgzQ0UwOEQ2RENFODlGMzkxMkEwQzMw QTcwMTkwQzgwHhcNMjYxMDAzMDc0OTQ3WhcNMjYxMDEwMDc0OTQ3WjAYMRYwFAYD VQQDEw02YWMwYjM5Yi02OWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyrMMyeAqbbczQQo4BA0lIiG59C9cUdcJkch/OjmPsrE/qTgCxiLvS7zIL8eI wodSbiL4Twl/fmP5jqE1MTLQTOrVI4nfZyT4ppglvp0Lj8wRU+8gBxuz9mD21knz +3s22QfSq8Z/GgWXyCLu/AKMh2wicVAG9CVxRdxuA/SDYVzp9oR/cy8Utfmfib5G zxDDe/x1Yre/trGjgCH4TThm6OnAO9nnLjM+gTpu6xHP2sZ1botmc3CyrADk8I3M cswmmTsSYiJMROvqUq2uhpjApI3BxiCX51fvG4GdvRnCykIg16NPrmD1lswQF0lJ piDQnB9BNWcGvzS/kUkpQBtQ7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL4EHu1k flu29jZf+uV0OFTQAaDfMB8GA1UdIwQYMBaAFF2+8CwoPOCNbc6J85EqDDCnAZDI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0U4Qi8wNERFMkI5MkJF MjIxMUYwQjM4REI1MTlDNEY5QUUwMi9YYjd3TENnODRJMXR6b256a1NvTU1LY0Jr TWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hiN3dMQ2c4NEkxdHpvbnprU29NTUtjQmtNZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0U4Qi8wNERFMkI5MkJFMjIxMUYwQjM4REI1MTlDNEY5QUUwMi9YYjd3TENnODRJ MXR6b256a1NvTU1LY0JrTWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnO4aAgkThHLnFdFYuGz22/CSV9seFGAofiX9x6BOsy89ew7hNgrV+k3TBk11 SvE+GJsaxvuKcsJRTW6/NBsBCrgmxMzwhIWb2AWAS1Wv9KwuiLam5n2QcDBbcmkp uaB6ZS0uzyKE6Ve0kiIG7Izc9XrJn6EeKBFmtsCJ4hU2yNJ54Uw4WHQ15JJb6rLi IxCYJeixvNIcX09tcmJTWyw0gB91PGpGvt6ALCH0gfa5HMbgHgN4lHpBbdEMEpFz 52mGO01Vp1Pgw3VTD6+4p3sFhCAKZlTr/48TgYyQK66QlsZAlXXtHPr58Qxr9akZ PJPMLtuR4HtnpXcn/QHyWv6s2w== -----END CERTIFICATE-----Generated at Sun Oct 4 20:03:38 2026 by rpki-client