$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/X2mRhqLrzUWx_2oKSvYGBvOz0I0.mft File: X2mRhqLrzUWx_2oKSvYGBvOz0I0.mft (raw, json) Hash identifier: J6ZVE0IfTHgC1vkYe7mDDJVNyF9HHd9pcjNumOyLWPU= Subject key identifier: E1:43:94:E7:58:52:78:51:81:C6:84:07:8C:75:DF:02:5E:9D:18:CA Authority key identifier: 5F:69:91:86:A2:EB:CD:45:B1:FF:6A:0A:4A:F6:06:06:F3:B3:D0:8D Certificate issuer: /CN=A91DF856/serialNumber=5F699186A2EBCD45B1FF6A0A4AF60606F3B3D08D Certificate serial: 0132 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mRhqLrzUWx_2oKSvYGBvOz0I0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/X2mRhqLrzUWx_2oKSvYGBvOz0I0.mft Manifest number: 0127 Signing time: Sun 01 Nov 2026 06:55:05 +0000 Manifest this update: Sun 01 Nov 2026 06:55:05 +0000 Manifest next update: Sun 08 Nov 2026 06:55:05 +0000 Files and hashes: 1: X2mRhqLrzUWx_2oKSvYGBvOz0I0.crl (hash: zNFgIwutr0EhctLavHmWufl5NwPoZNrB9r9Ox3/1wTU=) 2: D522C16CBAEB11F09547BA51C4F9AE02.roa (hash: gWwM8BCGpWWubDG2MVtbVJvT2zPmgCLxqAql3fBRxFQ=) 3: B245BA601C4311F08254DE40C4F9AE02.roa (hash: dWmVj4jtVJHc4wNWMusSMHmYNjBn61d8/+MaIxcv/eU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/X2mRhqLrzUWx_2oKSvYGBvOz0I0.crl rsync://rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/X2mRhqLrzUWx_2oKSvYGBvOz0I0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mRhqLrzUWx_2oKSvYGBvOz0I0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Nov 2026 06:55:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 306 (0x132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF856, serialNumber=5F699186A2EBCD45B1FF6A0A4AF60606F3B3D08D Validity Not Before: Nov 1 06:55:05 2026 GMT Not After : Nov 8 06:55:05 2026 GMT Subject: CN=6ae6e249-0dc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ff:98:23:e3:64:7d:34:d5:96:9a:f2:2b:2d: 93:37:3c:68:f1:53:2b:fe:26:d0:fa:92:cd:e6:26: 19:ae:d3:0c:03:ba:b9:d7:82:1e:3f:61:8f:16:9a: 51:aa:67:72:39:28:f1:2e:5b:44:9f:de:1e:db:32: 4a:fe:66:6a:67:2c:b7:fe:10:9c:f6:67:3d:b8:f2: a5:2a:1c:a9:5e:d7:6c:40:da:91:e2:40:35:19:3a: b8:18:08:c6:df:b6:94:ac:21:82:39:9f:e5:af:92: fa:2b:eb:2e:20:a7:5e:c3:2e:ef:7a:f2:91:5b:73: 96:25:e3:36:9a:bb:08:13:98:94:29:b8:44:84:f4: 33:3b:2f:16:1b:88:67:35:96:fe:55:e4:db:d7:87: ab:bf:af:1f:7e:27:ff:d1:d5:93:4d:f4:45:e8:1b: 84:ad:c0:b4:60:41:a3:82:99:8c:b3:e7:9c:14:94: a6:59:19:6b:ad:24:31:3b:d5:c7:28:d9:28:63:92: d0:93:1a:d2:9f:df:d3:fb:df:f3:63:23:d7:df:a5: 5a:f2:62:7f:42:2f:0c:21:ea:f8:71:67:c9:2c:a5: 9c:67:5e:4b:67:55:cd:87:42:50:96:3f:d8:41:bb: 18:f3:06:66:1d:61:48:d8:7b:a9:d2:56:3c:88:a5: 84:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:43:94:E7:58:52:78:51:81:C6:84:07:8C:75:DF:02:5E:9D:18:CA X509v3 Authority Key Identifier: keyid:5F:69:91:86:A2:EB:CD:45:B1:FF:6A:0A:4A:F6:06:06:F3:B3:D0:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/X2mRhqLrzUWx_2oKSvYGBvOz0I0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mRhqLrzUWx_2oKSvYGBvOz0I0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/X2mRhqLrzUWx_2oKSvYGBvOz0I0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:68:a0:ab:c4:4d:aa:f2:61:df:ec:4e:f1:1d:91:bd:bf:53: 7b:8b:e7:e8:de:11:10:9d:55:aa:0a:89:5d:84:34:12:5e:90: 39:23:dd:34:7d:7b:24:34:cf:71:1f:03:d4:85:25:6a:b9:a6: f4:1b:e9:8e:ff:c3:4e:2c:43:3e:bf:0c:c0:99:1f:41:19:24: 42:d1:ae:f2:9a:1f:3d:ef:22:3a:4a:4e:e7:c8:78:b0:44:78: 00:a7:d9:d2:29:ff:b2:7e:92:e0:ed:38:5f:d7:79:f5:ae:2e: 70:2b:93:4e:c1:67:57:64:4e:9a:9d:bc:3a:f4:61:d6:47:1d: 30:46:c6:05:f6:98:34:9c:de:66:1d:82:78:7c:cb:b0:d9:48: e9:00:f2:82:6d:f3:63:3d:94:cf:d7:1b:91:d1:4c:7c:ba:c0: 34:cc:77:d9:56:4d:41:02:ce:40:81:1d:20:1d:b0:21:04:f9: 78:a7:9a:3f:1d:c8:92:72:6f:60:7d:1a:ac:1b:51:88:54:fc: 50:cf:f2:21:95:2e:7f:75:13:77:8d:47:9d:71:9f:58:55:41: 76:2f:e5:9c:be:a9:6a:7e:c5:79:b4:80:53:7a:38:9b:70:bc: f3:86:60:e9:d3:20:1d:22:d1:cd:5a:df:a3:57:96:6b:c9:02: f2:66:92:bd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY4NTYxMTAvBgNVBAUTKDVGNjk5MTg2QTJFQkNENDVCMUZGNkEwQTRBRjYwNjA2 RjNCM0QwOEQwHhcNMjYxMTAxMDY1NTA1WhcNMjYxMTA4MDY1NTA1WjAYMRYwFAYD VQQDEw02YWU2ZTI0OS0wZGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4P+YI+NkfTTVlpryKy2TNzxo8VMr/ibQ+pLN5iYZrtMMA7q514IeP2GPFppR qmdyOSjxLltEn94e2zJK/mZqZyy3/hCc9mc9uPKlKhypXtdsQNqR4kA1GTq4GAjG 37aUrCGCOZ/lr5L6K+suIKdewy7vevKRW3OWJeM2mrsIE5iUKbhEhPQzOy8WG4hn NZb+VeTb14erv68ffif/0dWTTfRF6BuErcC0YEGjgpmMs+ecFJSmWRlrrSQxO9XH KNkoY5LQkxrSn9/T+9/zYyPX36Va8mJ/Qi8MIer4cWfJLKWcZ15LZ1XNh0JQlj/Y QbsY8wZmHWFI2Hup0lY8iKWEdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOFDlOdY UnhRgcaEB4x13wJenRjKMB8GA1UdIwQYMBaAFF9pkYai681Fsf9qCkr2Bgbzs9CN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjg1Ni9FRkYyQTBBMDFD NDExMUYwQTk4MjFGM0VDNEY5QUUwMi9YMm1SaHFMcnpVV3hfMm9LU3ZZR0J2T3ow STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gybVJocUxyelVXeF8yb0tTdllHQnZPejBJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Rjg1Ni9FRkYyQTBBMDFDNDExMUYwQTk4MjFGM0VDNEY5QUUwMi9YMm1SaHFMcnpV V3hfMm9LU3ZZR0J2T3owSTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWmigq8RNqvJh3+xO8R2Rvb9Te4vn6N4REJ1VqgqJXYQ0El6QOSPdNH17JDTP cR8D1IUlarmm9Bvpjv/DTixDPr8MwJkfQRkkQtGu8pofPe8iOkpO58h4sER4AKfZ 0in/sn6S4O04X9d59a4ucCuTTsFnV2ROmp28OvRh1kcdMEbGBfaYNJzeZh2CeHzL sNlI6QDygm3zYz2Uz9cbkdFMfLrANMx32VZNQQLOQIEdIB2wIQT5eKeaPx3IknJv YH0arBtRiFT8UM/yIZUuf3UTd41HnXGfWFVBdi/lnL6pan7FebSAU3o4m3C884Zg 6dMgHSLRzVrfo1eWa8kC8maSvQ== -----END CERTIFICATE-----Generated at Mon Nov 2 07:31:45 2026 by rpki-client