$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft File: XhBeDvkNGLn6S4j640EMah3vcZA.mft (raw, json) Hash identifier: UG09X8a5wy44r6oPz1oxCIU59spB7jNJSIHN6HTn6Xw= Subject key identifier: 96:C8:76:12:72:03:F1:AE:AA:61:3F:74:81:09:77:F6:CA:67:61:7A Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90 Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190 Certificate serial: 0D12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft Manifest number: 0BB1 Signing time: Thu 10 Sep 2026 19:34:40 +0000 Manifest this update: Thu 10 Sep 2026 19:34:40 +0000 Manifest next update: Thu 17 Sep 2026 19:34:40 +0000 Files and hashes: 1: XhBeDvkNGLn6S4j640EMah3vcZA.crl (hash: GRIHjwr0jdcf/c2CawZqqXED17xPMK7C7L5jvfStSHU=) 2: DE2C490EFDDA11F08A9BDF026F6F56BC.roa (hash: Z3tocqDvxgNFiVLEFGrW231lwMOw2lUJRT3l/w/+dQM=) 3: 7E4EFF5473E611F1BA32CE558DA30FBC.roa (hash: /qdXqDETNSkJ6n82kqpRqP50JWmOn7LFngEl+ouOmqc=) 4: F0DB98A21BA811F1919C26950A3D8C67.roa (hash: W1SvR8VBpoaYboSXm9ZQu3OoFgTqug+theCclHE52hI=) 5: FA6E449673E611F1867DB2D08DA30FBC.roa (hash: qFCEXJTn4iJvoESQwG6WxnOgI5lZXUUBZeocE2HyJhU=) 6: 6DB93158AB7911F1BECE43F54111F970.roa (hash: Pmlth6zyV6lEJPUH1Sf8ljrZ430hgW1A3tmXOdMiLcU=) 7: 89135068FD2911F09BBA873E426F56BC.roa (hash: np1cCQT3Z8T0a/K62I87d+sS1BjH51JLf0R+orXtPQ0=) 8: 37778C1E130A11F18BFDFDDD163D8C67.roa (hash: l1zoV8YMkz182prac5V7xhNJKApd98lXHWiX3aITc0k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 19:34:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3346 (0xd12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F69E7, serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190 Validity Not Before: Sep 10 19:34:40 2026 GMT Not After : Sep 17 19:34:40 2026 GMT Subject: CN=6aa30650-c9c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:06:c3:fd:8b:77:1f:ac:74:0d:92:1f:a0:84: 42:a8:54:ab:51:ac:8d:8c:8a:d8:c7:d4:51:46:1a: 62:9f:01:4d:03:93:01:25:f2:43:61:03:fd:a5:88: 8e:57:77:b7:06:26:f4:e3:71:d1:c7:8b:34:67:04: a9:c3:14:06:c9:a0:97:7b:9b:e4:ce:5c:64:03:c3: cd:44:7a:e2:ee:5e:ae:c2:05:00:a6:8f:59:eb:00: 78:51:72:e5:65:02:e1:e0:b1:db:b2:98:54:18:6a: 1e:4f:9f:e4:38:90:ef:b9:cd:ad:26:34:8c:33:a6: ed:0f:84:39:c5:a4:d6:94:9d:cd:6b:38:f3:42:48: 71:47:0b:de:72:b2:1e:35:87:44:64:90:62:bc:aa: 98:9a:fd:21:01:4b:f9:ad:93:44:16:c2:12:bf:0f: a0:74:ee:ba:ae:66:3d:75:c7:61:bb:e2:27:89:e3: 2a:9e:f0:8c:7b:f2:11:d1:8d:97:79:26:dc:fe:26: 8c:ad:2f:69:6f:ab:f0:58:a5:79:fa:3d:6a:b5:9f: 9f:19:c8:c9:63:3b:f7:8d:ab:87:8e:16:75:4b:49: 80:54:4d:d1:53:b3:b6:5c:a0:8a:3d:2b:9b:43:2c: 4f:33:da:8a:6b:55:ce:72:bd:de:91:41:cc:72:b2: 29:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:C8:76:12:72:03:F1:AE:AA:61:3F:74:81:09:77:F6:CA:67:61:7A X509v3 Authority Key Identifier: keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:88:9c:94:1a:86:7e:b5:85:14:2f:db:0a:30:0f:b5:1b:ce: af:24:0b:09:c1:d1:ff:38:49:9d:6a:45:7b:04:c4:f5:73:ae: 13:02:61:e4:b0:f8:75:8a:b4:f0:28:11:2c:69:e7:0f:db:c4: ba:78:e6:0b:68:61:e1:fb:5d:c6:f3:dc:fa:96:75:3c:c1:7e: 0b:f0:8c:ff:9b:97:d7:e6:74:76:76:10:48:dc:85:38:ea:31: 98:18:0f:0d:a3:49:f3:53:7a:07:aa:55:75:2f:f4:9b:ab:b9: e7:ad:2a:90:74:c8:04:69:c5:3b:89:33:f7:1f:4e:2a:b7:9c: fe:a7:64:36:33:a5:8b:a0:a3:ad:ff:4c:6e:8e:1e:33:8e:32: ee:af:c6:cc:46:e6:fe:92:82:07:a8:50:83:05:00:b9:b3:05: 4c:6e:7e:c6:10:a4:a9:75:ad:13:fa:15:2a:46:0c:5d:d5:33: 31:fe:16:62:84:f8:6b:c3:72:9e:bc:c1:e4:5f:b9:70:43:c7: 1d:09:84:f4:94:b4:a2:ca:72:34:64:4d:a1:57:e3:ba:1f:c5: d0:02:66:f2:18:85:a6:b5:f1:e5:60:d6:bb:14:6b:82:59:0c: 43:23:f0:b4:35:69:8b:d9:7f:5f:1e:4b:b7:29:0b:13:15:3f: 20:d7:b9:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDRIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY5RTcxMTAvBgNVBAUTKDVFMTA1RTBFRjkwRDE4QjlGQTRCODhGQUUzNDEwQzZB MURFRjcxOTAwHhcNMjYwOTEwMTkzNDQwWhcNMjYwOTE3MTkzNDQwWjAYMRYwFAYD VQQDEw02YWEzMDY1MC1jOWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsgbD/Yt3H6x0DZIfoIRCqFSrUayNjIrYx9RRRhpinwFNA5MBJfJDYQP9pYiO V3e3Bib043HRx4s0ZwSpwxQGyaCXe5vkzlxkA8PNRHri7l6uwgUApo9Z6wB4UXLl ZQLh4LHbsphUGGoeT5/kOJDvuc2tJjSMM6btD4Q5xaTWlJ3NazjzQkhxRwvecrIe NYdEZJBivKqYmv0hAUv5rZNEFsISvw+gdO66rmY9dcdhu+InieMqnvCMe/IR0Y2X eSbc/iaMrS9pb6vwWKV5+j1qtZ+fGcjJYzv3jauHjhZ1S0mAVE3RU7O2XKCKPSub QyxPM9qKa1XOcr3ekUHMcrIpGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJbIdhJy A/GuqmE/dIEJd/bKZ2F6MB8GA1UdIwQYMBaAFF4QXg75DRi5+kuI+uNBDGod73GQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjlFNy80NkFBRDZCMjkw NDAxMUVBQTY4OEJFNDVDNEY5QUUwMi9YaEJlRHZrTkdMbjZTNGo2NDBFTWFoM3Zj WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hoQmVEdmtOR0xuNlM0ajY0MEVNYWgzdmNaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjlFNy80NkFBRDZCMjkwNDAxMUVBQTY4OEJFNDVDNEY5QUUwMi9YaEJlRHZrTkdM bjZTNGo2NDBFTWFoM3ZjWkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFIiclBqGfrWFFC/bCjAPtRvOryQLCcHR/zhJnWpFewTE9XOuEwJh5LD4dYq0 8CgRLGnnD9vEunjmC2hh4ftdxvPc+pZ1PMF+C/CM/5uX1+Z0dnYQSNyFOOoxmBgP DaNJ81N6B6pVdS/0m6u5560qkHTIBGnFO4kz9x9OKrec/qdkNjOli6Cjrf9Mbo4e M44y7q/GzEbm/pKCB6hQgwUAubMFTG5+xhCkqXWtE/oVKkYMXdUzMf4WYoT4a8Ny nrzB5F+5cEPHHQmE9JS0ospyNGRNoVfjuh/F0AJm8hiFprXx5WDWuxRrglkMQyPw tDVpi9l/Xx5LtykLExU/INe5Bw== -----END CERTIFICATE-----Generated at Fri Sep 11 08:27:16 2026 by rpki-client