$ rpki-client -vvvf rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft File: XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft (raw, json) Hash identifier: qklsAiD1MxLEA5uxiOOXPRjgw6JWjB4CxjgPOUQ15Qc= Subject key identifier: F8:C7:72:C2:83:47:93:D7:DF:32:D7:D8:B2:63:C5:26:47:3E:46:B7 Authority key identifier: 5D:B7:5B:2D:F9:4D:04:47:4A:6E:5E:2D:4B:78:CC:08:4B:FC:2A:6C Certificate issuer: /CN=A912698E/serialNumber=5DB75B2DF94D04474A6E5E2D4B78CC084BFC2A6C Certificate serial: 0126 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft Manifest number: 011E Signing time: Mon 26 Oct 2026 17:31:47 +0000 Manifest this update: Mon 26 Oct 2026 17:31:46 +0000 Manifest next update: Mon 02 Nov 2026 17:31:46 +0000 Files and hashes: 1: XbdbLflNBEdKbl4tS3jMCEv8Kmw.crl (hash: 0uZNmjJnZ1XPYO/pR2iJ9qYyaGogzCA94DlBvFrydQc=) 2: E7E8471858BB11F1BAE21C4D9A833773.roa (hash: Tc3fcqpoYCzH1k3AQYmkHoaNjc5Waq991d+rce3j0bg=) 3: 79FB87E45BE811F1A1050E64C6833773.roa (hash: NWwclcZCcPG2TS1pQpW1RR20GoSP1Iy5BozZgf751Lw=) 4: 87087F00267E11F09183092AC4F9AE02.roa (hash: ZonpCT+5ZZuP5erM6WjI5zX2DJGXZb7/2jDh35lgn00=) 5: D5271A183ADB11F0BC52A042C4F9AE02.roa (hash: 4a6PLPW/gOHUVu6+aFebgQ5/qx4vCQg4zTQoTmjp9Rk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.crl rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 17:31:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912698E, serialNumber=5DB75B2DF94D04474A6E5E2D4B78CC084BFC2A6C Validity Not Before: Oct 26 17:31:46 2026 GMT Not After : Nov 2 17:31:46 2026 GMT Subject: CN=6adf8e82-1fb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:dd:ea:be:d3:00:94:13:f8:24:49:1e:3b:b0: 26:3d:d4:0f:e3:7a:37:8f:ac:f3:b3:65:8e:de:08: 7f:99:8b:56:ba:ad:29:1a:06:d1:18:99:94:4c:1d: 9c:1a:57:5d:fc:f1:72:65:ed:e2:e9:0c:a0:c3:ef: 46:58:95:bf:2b:31:eb:12:b3:cc:90:93:54:5d:61: f1:ce:ea:c3:6c:2a:c3:2b:19:62:ea:86:dd:22:e8: b1:a8:6b:4d:c9:04:75:f8:ba:d1:58:20:b6:47:31: 4f:77:16:d9:e2:5d:32:b0:c0:05:05:97:e6:58:66: c4:68:3d:49:ee:1a:25:33:fc:1e:71:0f:c8:45:b0: 0e:f7:b0:8e:b0:15:5f:d9:7f:15:28:f9:cd:00:16: 9c:a8:87:64:11:a6:6b:28:2d:bd:94:d7:b0:27:6a: 37:9f:ab:d1:34:2a:24:d5:7b:96:b4:83:c8:bc:2e: 09:46:ea:6d:88:58:6a:36:ba:5a:c4:fb:0e:19:8f: ce:5b:01:ed:47:97:55:a8:4d:e5:4e:dd:ad:fa:18: 08:31:c3:06:57:07:7d:6a:4f:d0:0c:04:b5:68:e6: f8:d4:97:f5:d2:31:05:52:bb:ba:c9:d4:08:68:18: 5d:ef:bc:d3:a5:52:86:77:bb:f7:16:02:f0:1f:be: 67:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:C7:72:C2:83:47:93:D7:DF:32:D7:D8:B2:63:C5:26:47:3E:46:B7 X509v3 Authority Key Identifier: keyid:5D:B7:5B:2D:F9:4D:04:47:4A:6E:5E:2D:4B:78:CC:08:4B:FC:2A:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:00:60:e3:e1:a3:5f:d2:67:6f:6a:93:ee:5d:ad:58:d1:e0: 62:e1:8f:ad:ea:aa:2f:d5:62:8c:1d:ae:56:05:2a:a7:1e:d3: 63:fb:bd:d3:07:3b:f2:00:a9:40:d1:9b:34:41:79:1f:6c:4d: 0a:3b:b7:7b:db:5b:57:ee:a6:b6:71:3f:3a:0d:42:23:ba:64: 8d:70:be:04:96:1f:90:f3:96:c4:53:5c:5d:a2:d0:70:4c:7e: 91:5f:b3:08:ca:1c:fe:aa:bf:05:87:78:41:5b:d0:3f:5d:e2: af:7d:0a:36:72:6f:a4:f3:8b:07:fe:12:e3:2a:e4:2a:c6:44: fd:1d:d7:8b:8e:81:4d:d4:0b:bf:65:8d:7c:75:1c:cc:16:48: 12:df:ff:26:4b:d6:c2:1d:66:63:41:c0:d9:f3:1b:6c:56:56: 5e:ac:79:ef:38:15:7f:10:e9:a9:73:e9:29:cc:31:4e:99:fd: 2b:81:7e:52:54:9e:b2:9d:39:ea:a9:e2:d9:7d:44:9f:c7:74: b3:eb:28:0f:ea:13:1f:f7:a5:c7:6a:de:1c:76:c3:88:f1:59: 7c:dc:0f:0f:4d:9a:e2:d4:8c:42:62:37:56:49:32:1a:44:72: ea:8d:cf:9a:32:76:29:2c:60:67:f1:8d:8c:c8:bf:51:b0:38: 60:d4:ca:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY5OEUxMTAvBgNVBAUTKDVEQjc1QjJERjk0RDA0NDc0QTZFNUUyRDRCNzhDQzA4 NEJGQzJBNkMwHhcNMjYxMDI2MTczMTQ2WhcNMjYxMTAyMTczMTQ2WjAYMRYwFAYD VQQDEw02YWRmOGU4Mi0xZmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAud3qvtMAlBP4JEkeO7AmPdQP43o3j6zzs2WO3gh/mYtWuq0pGgbRGJmUTB2c Gldd/PFyZe3i6Qygw+9GWJW/KzHrErPMkJNUXWHxzurDbCrDKxli6obdIuixqGtN yQR1+LrRWCC2RzFPdxbZ4l0ysMAFBZfmWGbEaD1J7holM/wecQ/IRbAO97COsBVf 2X8VKPnNABacqIdkEaZrKC29lNewJ2o3n6vRNCok1XuWtIPIvC4JRuptiFhqNrpa xPsOGY/OWwHtR5dVqE3lTt2t+hgIMcMGVwd9ak/QDAS1aOb41Jf10jEFUru6ydQI aBhd77zTpVKGd7v3FgLwH75nVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPjHcsKD R5PX3zLX2LJjxSZHPka3MB8GA1UdIwQYMBaAFF23Wy35TQRHSm5eLUt4zAhL/Cps MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjk4RS8wOTVGNkM4QzI2 N0MxMUYwOTY3N0Y4MEJDNEY5QUUwMi9YYmRiTGZsTkJFZEtibDR0UzNqTUNFdjhL bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hiZGJMZmxOQkVkS2JsNHRTM2pNQ0V2OEttdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Njk4RS8wOTVGNkM4QzI2N0MxMUYwOTY3N0Y4MEJDNEY5QUUwMi9YYmRiTGZsTkJF ZEtibDR0UzNqTUNFdjhLbXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjABg4+GjX9Jnb2qT7l2tWNHgYuGPreqqL9VijB2uVgUqpx7TY/u90wc78gCp QNGbNEF5H2xNCju3e9tbV+6mtnE/Og1CI7pkjXC+BJYfkPOWxFNcXaLQcEx+kV+z CMoc/qq/BYd4QVvQP13ir30KNnJvpPOLB/4S4yrkKsZE/R3Xi46BTdQLv2WNfHUc zBZIEt//JkvWwh1mY0HA2fMbbFZWXqx57zgVfxDpqXPpKcwxTpn9K4F+UlSesp05 6qni2X1En8d0s+soD+oTH/elx2reHHbDiPFZfNwPD02a4tSMQmI3VkkyGkRy6o3P mjJ2KSxgZ/GNjMi/UbA4YNTKAw== -----END CERTIFICATE-----Generated at Wed Oct 28 04:31:24 2026 by rpki-client