$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft File: XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft (raw, json) Hash identifier: o2PRVq8RcCnOWTVVHFeR2B0o4nqsef2IglvVaFO1bWQ= Subject key identifier: 96:63:E6:6B:88:16:2E:D3:4F:F6:63:BA:1A:19:1E:8A:15:33:06:19 Authority key identifier: 5F:30:7E:62:74:AC:39:E5:4E:99:86:6D:AB:B8:5C:2C:9E:FD:16:B1 Certificate issuer: /CN=A91E9F89/serialNumber=5F307E6274AC39E54E99866DABB85C2C9EFD16B1 Certificate serial: 096C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XzB-YnSsOeVOmYZtq7hcLJ79FrE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft Manifest number: 0962 Signing time: Fri 02 Oct 2026 20:22:53 +0000 Manifest this update: Fri 02 Oct 2026 20:22:52 +0000 Manifest next update: Fri 09 Oct 2026 20:22:52 +0000 Files and hashes: 1: XzB-YnSsOeVOmYZtq7hcLJ79FrE.crl (hash: xmxk1cW+TtPsNDpTR+B3tOQyJuu3bQf1GBREyKLBHHw=) 2: 05B67AF8C6A011EAA70D183FC4F9AE02.roa (hash: vpJ6nJYa+oTT4zALbbck30yw6BMCJHydPSk2mtiOxSY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.crl rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XzB-YnSsOeVOmYZtq7hcLJ79FrE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 20:22:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2412 (0x96c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9F89, serialNumber=5F307E6274AC39E54E99866DABB85C2C9EFD16B1 Validity Not Before: Oct 2 20:22:52 2026 GMT Not After : Oct 9 20:22:52 2026 GMT Subject: CN=6ac0129c-36cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:99:df:8e:5f:1c:5e:0f:e8:26:c7:21:5f:dd: 84:2f:30:d7:e3:30:83:7d:13:f9:3a:7a:1a:6e:69: af:f0:62:76:d4:0e:c8:53:57:aa:59:ed:ae:a8:b7: 3e:ad:ec:7b:94:e4:30:8f:ee:dc:c1:7d:c0:09:3a: 38:c8:6a:18:e3:da:00:bf:a5:aa:a3:36:f5:a0:89: 8a:38:6d:d5:80:80:9c:a3:12:e1:05:dd:0b:2a:ad: d6:13:6f:1b:93:60:06:49:da:76:d2:ad:a1:05:cc: 2c:10:b1:63:4c:92:2b:c3:5d:f5:75:e3:3a:ba:c0: e4:d6:4f:7d:e6:73:f4:2b:ad:9b:b0:b0:ca:d3:d0: 34:a7:14:3b:99:cf:23:98:73:b2:3a:e8:e9:d0:8e: 43:ad:52:5c:b0:cd:05:b3:1d:ab:e8:f8:71:65:8d: 5b:68:e3:93:a5:98:ce:ae:19:10:98:e1:e8:9c:63: 0c:d0:25:12:65:de:72:97:e1:72:30:bb:6c:06:8e: 28:c4:dc:e5:9f:6d:13:b2:90:69:a0:ac:00:e4:3a: 99:3c:31:59:8c:f1:d9:9c:8d:8a:98:5b:a9:30:63: ae:da:a6:1b:db:5d:7e:9c:f8:b6:b7:7b:06:dd:c6: 56:cd:50:61:45:39:9b:5f:51:22:73:2b:d9:a9:09: 4d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:63:E6:6B:88:16:2E:D3:4F:F6:63:BA:1A:19:1E:8A:15:33:06:19 X509v3 Authority Key Identifier: keyid:5F:30:7E:62:74:AC:39:E5:4E:99:86:6D:AB:B8:5C:2C:9E:FD:16:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XzB-YnSsOeVOmYZtq7hcLJ79FrE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:09:8b:35:4b:aa:d4:d7:3e:75:bb:ab:3d:90:f2:52:12:a9: 33:77:19:1f:ac:18:8b:a0:56:1e:18:5a:65:0b:67:d2:45:e1: 09:64:6d:a5:76:3c:1b:04:33:9d:cb:3c:fa:4f:bc:8b:e1:28: c6:44:6f:bb:5f:2f:b4:86:55:92:c9:29:d1:4e:a8:ce:59:bd: f7:71:ba:60:f2:5f:9b:f6:fd:05:1b:1a:04:e3:e3:dd:87:b3: fa:ee:d8:3a:1d:68:20:9e:df:5c:cf:a8:89:a1:64:36:a0:59: 8a:7d:f0:14:5b:dc:5b:1c:b8:65:f6:cc:2e:f2:0b:98:f4:33: eb:c9:78:be:ed:70:7a:c5:4e:be:45:9d:f4:35:ee:f1:1f:a2: 3b:8b:37:22:3e:41:c5:a2:b0:e4:65:9e:0b:25:6a:3c:68:b2: 55:76:9c:6b:7e:4a:5b:e1:a5:7f:66:10:30:01:61:2d:ac:a2: 7e:0c:84:c9:16:55:16:a4:25:86:7e:29:30:a2:fc:7f:7c:56: af:5b:52:17:d9:22:ab:13:8e:be:93:4f:1b:b4:a7:b9:de:8e: bb:21:1e:16:da:c9:20:cf:40:70:af:63:05:a7:bd:2d:7c:69: 66:ed:89:b4:e6:05:b1:7c:44:b0:f9:0e:13:17:bd:b5:93:d2: 09:2f:29:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlGODkxMTAvBgNVBAUTKDVGMzA3RTYyNzRBQzM5RTU0RTk5ODY2REFCQjg1QzJD OUVGRDE2QjEwHhcNMjYxMDAyMjAyMjUyWhcNMjYxMDA5MjAyMjUyWjAYMRYwFAYD VQQDEw02YWMwMTI5Yy0zNmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJnfjl8cXg/oJschX92ELzDX4zCDfRP5Onoabmmv8GJ21A7IU1eqWe2uqLc+ rex7lOQwj+7cwX3ACTo4yGoY49oAv6Wqozb1oImKOG3VgICcoxLhBd0LKq3WE28b k2AGSdp20q2hBcwsELFjTJIrw131deM6usDk1k995nP0K62bsLDK09A0pxQ7mc8j mHOyOujp0I5DrVJcsM0Fsx2r6PhxZY1baOOTpZjOrhkQmOHonGMM0CUSZd5yl+Fy MLtsBo4oxNzln20TspBpoKwA5DqZPDFZjPHZnI2KmFupMGOu2qYb211+nPi2t3sG 3cZWzVBhRTmbX1EicyvZqQlNBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJZj5muI Fi7TT/ZjuhoZHooVMwYZMB8GA1UdIwQYMBaAFF8wfmJ0rDnlTpmGbau4XCye/Rax MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUY4OS81QkU3NDg3OEM2 OUUxMUVBOUJGOEEzM0NDNEY5QUUwMi9YekItWW5Tc09lVk9tWVp0cTdoY0xKNzlG ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h6Qi1ZblNzT2VWT21ZWnRxN2hjTEo3OUZyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUY4OS81QkU3NDg3OEM2OUUxMUVBOUJGOEEzM0NDNEY5QUUwMi9YekItWW5Tc09l Vk9tWVp0cTdoY0xKNzlGckUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMQmLNUuq1Nc+dburPZDyUhKpM3cZH6wYi6BWHhhaZQtn0kXhCWRtpXY8GwQz ncs8+k+8i+EoxkRvu18vtIZVkskp0U6ozlm993G6YPJfm/b9BRsaBOPj3Yez+u7Y Oh1oIJ7fXM+oiaFkNqBZin3wFFvcWxy4ZfbMLvILmPQz68l4vu1wesVOvkWd9DXu 8R+iO4s3Ij5BxaKw5GWeCyVqPGiyVXaca35KW+Glf2YQMAFhLayifgyEyRZVFqQl hn4pMKL8f3xWr1tSF9kiqxOOvpNPG7Snud6OuyEeFtrJIM9AcK9jBae9LXxpZu2J tOYFsXxEsPkOExe9tZPSCS8plA== -----END CERTIFICATE-----Generated at Sun Oct 4 20:59:21 2026 by rpki-client