$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F3695/A90353B0A29B11F1A69892D93211F970/XsGoW25L9SoUMMZnKRrwZ7wOYv4.mft File: XsGoW25L9SoUMMZnKRrwZ7wOYv4.mft (raw, json) Hash identifier: 6Py2DkwBvEMkVR1QUKBNMxey0e2x1FOvVI2gqmglwEc= Subject key identifier: 3A:1F:94:C4:30:70:C2:26:16:AF:D6:F6:AD:70:A5:96:03:EC:F2:CA Authority key identifier: 5E:C1:A8:5B:6E:4B:F5:2A:14:30:C6:67:29:1A:F0:67:BC:0E:62:FE Certificate issuer: /CN=A91F3695/serialNumber=5EC1A85B6E4BF52A1430C667291AF067BC0E62FE Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGoW25L9SoUMMZnKRrwZ7wOYv4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3695/A90353B0A29B11F1A69892D93211F970/XsGoW25L9SoUMMZnKRrwZ7wOYv4.mft Manifest number: 15 Signing time: Sat 03 Oct 2026 09:48:25 +0000 Manifest this update: Sat 03 Oct 2026 09:48:24 +0000 Manifest next update: Sat 10 Oct 2026 09:48:24 +0000 Files and hashes: 1: XsGoW25L9SoUMMZnKRrwZ7wOYv4.crl (hash: N7hx0ksODSB+by1DDR0tJEbq5rw3d1dOWEwKcsqwGs4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3695/A90353B0A29B11F1A69892D93211F970/XsGoW25L9SoUMMZnKRrwZ7wOYv4.crl rsync://rpki.apnic.net/member_repository/A91F3695/A90353B0A29B11F1A69892D93211F970/XsGoW25L9SoUMMZnKRrwZ7wOYv4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGoW25L9SoUMMZnKRrwZ7wOYv4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 09:48:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3695, serialNumber=5EC1A85B6E4BF52A1430C667291AF067BC0E62FE Validity Not Before: Oct 3 09:48:24 2026 GMT Not After : Oct 10 09:48:24 2026 GMT Subject: CN=6ac0cf68-5d35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3a:02:96:82:58:6f:37:eb:6e:c8:5a:81:7e: 90:1f:c8:d6:2e:d0:2a:df:27:c3:48:e2:f7:9b:13: 3c:45:a8:7a:cd:ad:96:78:0e:b3:0b:a4:95:e0:3f: 20:02:b8:f0:67:81:3a:75:a0:6f:0c:bb:e1:de:fe: 0b:17:53:9c:92:af:18:93:8f:4d:9a:e7:ac:f5:22: b2:f3:64:be:d5:a8:f5:2f:b1:35:7c:fd:c6:25:91: 2a:82:03:38:a6:09:86:9a:7e:b9:b6:f6:de:86:dd: 36:79:06:ac:dd:58:50:75:b7:3a:1d:b4:d1:aa:81: 97:a9:5e:76:1e:98:db:5a:77:71:ee:67:0d:93:13: b2:73:36:30:6e:ec:b4:96:af:54:e4:b5:cd:4c:64: 19:13:10:ee:5b:33:7e:89:42:6f:ea:e5:4d:25:95: 1e:47:59:20:b2:16:52:68:ec:2e:ba:f0:ce:3e:b5: 9e:a3:e2:0b:69:01:09:36:f9:cb:87:2f:b3:34:9b: 4b:f3:11:35:34:fd:96:e6:1a:0e:fe:6a:58:6a:26: eb:e5:03:f3:a0:55:49:61:aa:ba:98:c3:b8:57:0e: b4:5b:0a:d1:77:31:c6:ed:bf:ec:87:d9:ef:cd:21: 27:68:94:83:95:3a:3a:ab:f3:6f:e4:c0:b1:55:1f: 61:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:1F:94:C4:30:70:C2:26:16:AF:D6:F6:AD:70:A5:96:03:EC:F2:CA X509v3 Authority Key Identifier: keyid:5E:C1:A8:5B:6E:4B:F5:2A:14:30:C6:67:29:1A:F0:67:BC:0E:62:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3695/A90353B0A29B11F1A69892D93211F970/XsGoW25L9SoUMMZnKRrwZ7wOYv4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGoW25L9SoUMMZnKRrwZ7wOYv4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3695/A90353B0A29B11F1A69892D93211F970/XsGoW25L9SoUMMZnKRrwZ7wOYv4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:96:24:3e:32:03:2c:c5:39:a8:d3:e9:59:45:dd:64:44:7c: a7:de:0d:1d:ea:c7:f1:3a:75:26:70:24:ca:bc:f3:8f:29:a5: 25:ba:d1:51:c7:04:fd:04:2f:03:fc:49:bd:0b:bd:4f:10:d2: 59:ce:da:9c:d1:93:42:60:cb:81:23:98:c2:79:9c:48:7b:a9: a4:d5:f2:d9:2f:07:a4:04:38:b1:3e:97:dd:2f:40:88:e6:2b: 48:af:e9:a4:3c:12:55:40:fa:e4:18:ce:10:15:23:74:0d:8b: 6b:5f:55:cc:96:10:53:ed:ef:26:f9:f0:ea:7d:44:25:af:04: ca:1d:cc:6e:9f:93:dd:ad:36:89:43:a2:a3:84:29:cb:8c:b4: e3:e4:ea:97:a8:80:2e:5d:23:ce:a4:e5:94:e8:14:cc:c3:42: 71:74:5c:21:96:c1:e9:26:3d:1c:da:c5:29:0b:33:40:7a:78: 3c:e6:93:b1:55:d4:a5:61:25:54:1b:78:40:3e:45:c3:90:69: 3a:14:21:bd:12:16:69:d1:3a:e4:eb:15:c5:b1:4b:c1:3d:6f: be:c0:02:44:24:0f:e5:b9:09:07:3d:be:05:2d:a2:bb:c2:a3: be:e1:3d:0c:02:27:d2:eb:2e:3d:a4:bc:af:90:33:2b:b9:5d: 12:31:3e:63 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MzY5NTExMC8GA1UEBRMoNUVDMUE4NUI2RTRCRjUyQTE0MzBDNjY3MjkxQUYwNjdC QzBFNjJGRTAeFw0yNjEwMDMwOTQ4MjRaFw0yNjEwMTAwOTQ4MjRaMBgxFjAUBgNV BAMTDTZhYzBjZjY4LTVkMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCXOgKWglhvN+tuyFqBfpAfyNYu0CrfJ8NI4vebEzxFqHrNrZZ4DrMLpJXgPyAC uPBngTp1oG8Mu+He/gsXU5ySrxiTj02a56z1IrLzZL7VqPUvsTV8/cYlkSqCAzim CYaafrm29t6G3TZ5BqzdWFB1tzodtNGqgZepXnYemNtad3HuZw2TE7JzNjBu7LSW r1Tktc1MZBkTEO5bM36JQm/q5U0llR5HWSCyFlJo7C668M4+tZ6j4gtpAQk2+cuH L7M0m0vzETU0/ZbmGg7+alhqJuvlA/OgVUlhqrqYw7hXDrRbCtF3Mcbtv+yH2e/N ISdolIOVOjqr82/kwLFVH2GpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUOh+UxDBw wiYWr9b2rXCllgPs8sowHwYDVR0jBBgwFoAUXsGoW25L9SoUMMZnKRrwZ7wOYv4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzNjk1L0E5MDM1M0IwQTI5 QjExRjFBNjk4OTJEOTMyMTFGOTcwL1hzR29XMjVMOVNvVU1NWm5LUnJ3Wjd3T1l2 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWHNHb1cyNUw5U29VTU1abktScndaN3dPWXY0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz Njk1L0E5MDM1M0IwQTI5QjExRjFBNjk4OTJEOTMyMTFGOTcwL1hzR29XMjVMOVNv VU1NWm5LUnJ3Wjd3T1l2NC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAFliQ+MgMsxTmo0+lZRd1kRHyn3g0d6sfxOnUmcCTKvPOPKaUlutFRxwT9BC8D /Em9C71PENJZztqc0ZNCYMuBI5jCeZxIe6mk1fLZLwekBDixPpfdL0CI5itIr+mk PBJVQPrkGM4QFSN0DYtrX1XMlhBT7e8m+fDqfUQlrwTKHcxun5PdrTaJQ6KjhCnL jLTj5OqXqIAuXSPOpOWU6BTMw0JxdFwhlsHpJj0c2sUpCzNAeng85pOxVdSlYSVU G3hAPkXDkGk6FCG9EhZp0Trk6xXFsUvBPW++wAJEJA/luQkHPb4FLaK7wqO+4T0M AifS6y49pLyvkDMruV0SMT5j -----END CERTIFICATE-----Generated at Mon Oct 5 06:57:31 2026 by rpki-client