$ rpki-client -vvvf rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.mft File: xWFyqoU5BINNkF08MAE0TdKhjp4.mft (raw, json) Hash identifier: 2tKkAQPBp4ImX5wDVt9VMvCE+Ue+CprDMZpRU3XRRMM= Subject key identifier: 94:E2:B1:71:A3:1C:84:FB:A3:7F:E0:60:7F:3F:3F:4D:F0:EF:95:BF Authority key identifier: C5:61:72:AA:85:39:04:83:4D:90:5D:3C:30:01:34:4D:D2:A1:8E:9E Certificate issuer: /CN=A9110321/serialNumber=C56172AA853904834D905D3C3001344DD2A18E9E Certificate serial: 029C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xWFyqoU5BINNkF08MAE0TdKhjp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.mft Manifest number: 028A Signing time: Tue 27 Oct 2026 02:05:39 +0000 Manifest this update: Tue 27 Oct 2026 02:05:38 +0000 Manifest next update: Tue 03 Nov 2026 02:05:38 +0000 Files and hashes: 1: xWFyqoU5BINNkF08MAE0TdKhjp4.crl (hash: qtcn478ne7PpobVt82U1rOqVfSF8thxSWqwtednyzng=) 2: 313371B6ACEC11F1B9AFA1003211F970.roa (hash: GphprMmxelmWgPcJQLaCEeRSo2v3IjfMlLQ3WootMRQ=) 3: 72B2E8A0A16A11EEBD55132AC4F9AE02.roa (hash: eaGxFY8RTe5k7ilxTYMhUBA+m98D8O0XIJkH+kWPdKY=) 4: 8D189072ACF311F1991D92E93411F970.roa (hash: GaCTP7oF3IZL08W6cEkbNtvf94KY1GtVUOx3q3aG4gc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.crl rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xWFyqoU5BINNkF08MAE0TdKhjp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 02:05:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 668 (0x29c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110321, serialNumber=C56172AA853904834D905D3C3001344DD2A18E9E Validity Not Before: Oct 27 02:05:38 2026 GMT Not After : Nov 3 02:05:38 2026 GMT Subject: CN=6ae006f3-4f93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c0:13:6b:5d:14:05:d8:05:db:b6:64:51:d2: 18:5e:35:a4:2f:f3:36:ab:1e:25:2b:45:46:8d:b5: 8f:19:09:98:1b:94:23:46:11:e9:d4:ce:ee:c7:b4: 92:4f:af:6b:68:55:67:cf:d0:4c:86:12:d1:b6:2f: ad:dd:43:39:5e:86:b3:1e:dd:c3:cd:fe:06:96:79: 67:44:13:a7:b2:93:4a:59:69:d2:0a:9e:ec:78:ce: 4d:2d:de:cb:21:88:cd:3d:c8:d5:7c:bb:d1:b7:23: 51:74:f8:94:0c:ab:31:4e:75:b9:fa:58:a0:33:05: 07:ce:93:9a:a3:8c:31:83:0e:b4:d7:3b:8e:e7:79: 13:2f:af:e6:9e:9c:5d:4c:10:3c:b2:6b:39:b1:f6: 8e:97:88:2c:00:82:23:81:35:06:64:33:7c:f1:e7: 38:5f:7a:39:58:d0:ed:e3:6f:28:4a:72:7b:9e:16: a5:4d:39:36:b5:c0:29:9a:7a:64:33:ed:d4:88:3c: e0:24:0b:32:20:d4:fd:44:d1:46:e8:6d:29:bb:b5: 97:da:9f:b7:4a:b3:0c:f4:8a:dc:a5:c5:33:f4:de: 3e:e0:d5:b9:a9:40:d5:1b:6e:be:21:a4:18:c0:66: d4:d8:46:9d:db:b8:01:12:a7:22:bb:ce:38:47:c5: ea:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:E2:B1:71:A3:1C:84:FB:A3:7F:E0:60:7F:3F:3F:4D:F0:EF:95:BF X509v3 Authority Key Identifier: keyid:C5:61:72:AA:85:39:04:83:4D:90:5D:3C:30:01:34:4D:D2:A1:8E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xWFyqoU5BINNkF08MAE0TdKhjp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:47:ea:10:f7:b8:bd:15:5b:9d:95:d0:e3:70:f1:15:34:6e: 04:dd:4e:0a:ef:36:90:0c:6f:3d:bc:fc:bf:2b:dc:c1:3c:93: 78:1d:9d:4a:0d:40:2e:48:73:4f:bf:7c:e2:bf:f2:81:f6:21: c7:f2:db:65:1b:b4:65:81:3b:64:8c:f0:48:a4:08:69:10:54: cd:28:a6:2c:ae:51:d0:e6:81:37:53:95:e3:be:57:01:ab:93: b7:de:5f:64:d7:89:db:45:c7:95:fc:f1:c7:6e:ee:76:67:aa: c5:05:61:f0:fa:30:01:b0:0e:d0:17:85:00:e0:f9:82:07:d4: 43:6a:c8:0b:87:58:da:fc:d1:db:9c:39:b6:97:32:39:97:83: 85:49:81:4b:06:05:8f:d0:b1:18:33:3e:c5:af:b4:a2:2f:c1: 96:d5:42:21:a4:f4:a5:d0:71:5c:45:59:c4:c3:4c:ef:aa:11: e3:4d:0e:e9:e4:83:9d:a7:9f:38:ac:ee:17:54:6d:e8:20:38: cf:32:b2:81:03:bb:94:f0:c2:0d:e0:13:15:5c:f1:83:9c:75: bc:16:c1:3b:4d:a2:95:b3:a8:30:22:fa:f5:48:bd:02:d7:94: c2:98:09:e4:4b:82:a5:b3:a3:b5:f0:3a:f3:43:88:14:f3:3d: 87:44:42:01 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAzMjExMTAvBgNVBAUTKEM1NjE3MkFBODUzOTA0ODM0RDkwNUQzQzMwMDEzNDRE RDJBMThFOUUwHhcNMjYxMDI3MDIwNTM4WhcNMjYxMTAzMDIwNTM4WjAYMRYwFAYD VQQDEw02YWUwMDZmMy00ZjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2sATa10UBdgF27ZkUdIYXjWkL/M2qx4lK0VGjbWPGQmYG5QjRhHp1M7ux7SS T69raFVnz9BMhhLRti+t3UM5XoazHt3Dzf4GlnlnRBOnspNKWWnSCp7seM5NLd7L IYjNPcjVfLvRtyNRdPiUDKsxTnW5+ligMwUHzpOao4wxgw601zuO53kTL6/mnpxd TBA8sms5sfaOl4gsAIIjgTUGZDN88ec4X3o5WNDt428oSnJ7nhalTTk2tcApmnpk M+3UiDzgJAsyINT9RNFG6G0pu7WX2p+3SrMM9IrcpcUz9N4+4NW5qUDVG26+IaQY wGbU2Ead27gBEqciu844R8XqaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJTisXGj HIT7o3/gYH8/P03w75W/MB8GA1UdIwQYMBaAFMVhcqqFOQSDTZBdPDABNE3SoY6e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDMyMS81MkIyRTAxNjAw QzMxMUVFQTRBQ0NENkVDNEY5QUUwMi94V0Z5cW9VNUJJTk5rRjA4TUFFMFRkS2hq cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hXRnlxb1U1QklOTmtGMDhNQUUwVGRLaGpwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDMyMS81MkIyRTAxNjAwQzMxMUVFQTRBQ0NENkVDNEY5QUUwMi94V0Z5cW9VNUJJ Tk5rRjA4TUFFMFRkS2hqcDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJUfqEPe4vRVbnZXQ43DxFTRuBN1OCu82kAxvPbz8vyvcwTyTeB2dSg1ALkhz T7984r/ygfYhx/LbZRu0ZYE7ZIzwSKQIaRBUzSimLK5R0OaBN1OV475XAauTt95f ZNeJ20XHlfzxx27udmeqxQVh8PowAbAO0BeFAOD5ggfUQ2rIC4dY2vzR25w5tpcy OZeDhUmBSwYFj9CxGDM+xa+0oi/BltVCIaT0pdBxXEVZxMNM76oR400O6eSDnaef OKzuF1Rt6CA4zzKygQO7lPDCDeATFVzxg5x1vBbBO02ilbOoMCL69Ui9AteUwpgJ 5EuCpbOjtfA680OIFPM9h0RCAQ== -----END CERTIFICATE-----Generated at Wed Oct 28 20:27:23 2026 by rpki-client