$ rpki-client -vvvf rpki.apnic.net/member_repository/A911E621/5D6AF50A70ED11F1A6F57C9E5DA30FBC/xUCE0wQkhNyXlJ3tyVbCgtnrglk.mft File: xUCE0wQkhNyXlJ3tyVbCgtnrglk.mft (raw, json) Hash identifier: Fvh9GRazZrZ0rTHlf+G8mc7du5WEkivZvAyAdSj89AA= Subject key identifier: 67:60:4F:AA:A5:06:CB:BA:44:11:7D:97:53:C3:DF:79:41:45:D8:0E Authority key identifier: C5:40:84:D3:04:24:84:DC:97:94:9D:ED:C9:56:C2:82:D9:EB:82:59 Certificate issuer: /CN=A911E621/serialNumber=C54084D3042484DC97949DEDC956C282D9EB8259 Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xUCE0wQkhNyXlJ3tyVbCgtnrglk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E621/5D6AF50A70ED11F1A6F57C9E5DA30FBC/xUCE0wQkhNyXlJ3tyVbCgtnrglk.mft Manifest number: 3D Signing time: Mon 19 Oct 2026 09:16:00 +0000 Manifest this update: Mon 19 Oct 2026 09:16:00 +0000 Manifest next update: Mon 26 Oct 2026 09:16:00 +0000 Files and hashes: 1: xUCE0wQkhNyXlJ3tyVbCgtnrglk.crl (hash: 10lzcCSj5BU7AsE0ycHOWjBJ+w5wUiUIfpLl3rAHqsE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E621/5D6AF50A70ED11F1A6F57C9E5DA30FBC/xUCE0wQkhNyXlJ3tyVbCgtnrglk.crl rsync://rpki.apnic.net/member_repository/A911E621/5D6AF50A70ED11F1A6F57C9E5DA30FBC/xUCE0wQkhNyXlJ3tyVbCgtnrglk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xUCE0wQkhNyXlJ3tyVbCgtnrglk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 09:15:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E621, serialNumber=C54084D3042484DC97949DEDC956C282D9EB8259 Validity Not Before: Oct 19 09:16:00 2026 GMT Not After : Oct 26 09:16:00 2026 GMT Subject: CN=6ad5dfd0-680f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:80:18:e4:03:9f:fe:ac:34:09:32:99:7d:00: 58:33:d7:23:5f:30:b4:30:4f:a4:da:36:e1:46:d9: 9c:7c:37:77:82:bd:c6:8d:54:c5:fb:bd:a8:b7:10: d4:84:8d:9c:cb:70:72:08:5a:9c:bc:45:1e:5e:dd: a6:d7:ea:f7:02:af:05:57:55:44:73:13:a2:41:1a: 22:5c:c3:d8:f7:d0:2b:a9:e4:60:1b:77:e1:b5:8c: a2:c6:2c:06:62:ea:47:67:95:52:59:36:93:e4:74: 00:ca:aa:64:02:56:72:46:67:ca:64:49:5f:ee:f6: 4b:85:6e:cc:87:48:6b:be:3a:c7:e4:d7:a4:f3:05: 6a:00:d1:17:fd:01:cf:92:c2:32:db:58:ef:40:e3: 96:27:f6:27:ff:bf:dd:3f:5f:2b:fd:d6:28:d7:a8: c0:02:fd:9a:36:34:a3:b2:9b:a9:48:db:23:30:f5: 0d:f5:82:21:98:c1:1a:35:df:d1:0d:fb:04:0e:8d: 5c:0d:de:e3:8e:9d:3e:f5:13:c2:c9:35:0c:44:ec: 41:65:34:25:8a:c0:2c:1a:0b:d3:93:fc:a5:68:03: 84:74:88:5f:ed:89:f3:ed:05:33:34:ae:c3:00:3c: c9:8c:e4:18:16:f1:ff:b8:3a:68:57:5a:61:d5:15: 92:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:60:4F:AA:A5:06:CB:BA:44:11:7D:97:53:C3:DF:79:41:45:D8:0E X509v3 Authority Key Identifier: keyid:C5:40:84:D3:04:24:84:DC:97:94:9D:ED:C9:56:C2:82:D9:EB:82:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E621/5D6AF50A70ED11F1A6F57C9E5DA30FBC/xUCE0wQkhNyXlJ3tyVbCgtnrglk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xUCE0wQkhNyXlJ3tyVbCgtnrglk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E621/5D6AF50A70ED11F1A6F57C9E5DA30FBC/xUCE0wQkhNyXlJ3tyVbCgtnrglk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:c9:7e:b6:bf:b1:7d:90:4f:1a:b1:4f:d1:e1:8d:7a:55:9b: 11:00:d3:b3:b8:57:9c:36:55:f0:de:d7:01:28:f8:54:41:26: 47:9e:00:1a:16:b2:6c:0f:bf:b1:4d:07:80:90:d2:3f:bb:96: 79:af:60:de:42:58:29:cc:96:d9:2b:68:bd:08:a1:28:fa:07: 4d:5c:3b:a5:1c:97:d3:89:ed:1d:aa:14:cf:0e:75:50:b0:26: de:f4:8b:87:73:20:8b:31:5d:ac:a4:74:b8:9f:bd:ae:d0:27: e8:cf:7f:01:fd:91:cf:bd:6e:68:88:cc:71:37:7d:fa:53:e1: 77:23:d8:06:d8:1b:29:82:79:11:c2:9e:10:9f:a0:9a:33:27: 1d:57:e9:ab:69:bd:d9:65:5c:85:b9:29:90:73:24:02:9c:e8: 92:72:7a:7e:3b:96:94:00:77:7d:52:a6:31:0f:13:46:f3:2e: fa:84:ce:ea:a6:38:c6:bf:e5:03:2f:c1:70:be:ed:5b:39:ca: 6f:f6:65:3b:39:36:8f:9b:3b:f4:b8:b4:6a:31:6a:41:1c:b9: 45:c7:c2:59:5c:34:8e:cc:eb:7e:4c:88:18:d8:44:27:56:73: 68:f1:9a:60:24:e5:5e:13:34:20:fd:76:7f:c2:33:82:ab:b6: 53:f6:69:24 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RTYyMTExMC8GA1UEBRMoQzU0MDg0RDMwNDI0ODREQzk3OTQ5REVEQzk1NkMyODJE OUVCODI1OTAeFw0yNjEwMTkwOTE2MDBaFw0yNjEwMjYwOTE2MDBaMBgxFjAUBgNV BAMTDTZhZDVkZmQwLTY4MGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEgBjkA5/+rDQJMpl9AFgz1yNfMLQwT6TaNuFG2Zx8N3eCvcaNVMX7vai3ENSE jZzLcHIIWpy8RR5e3abX6vcCrwVXVURzE6JBGiJcw9j30Cup5GAbd+G1jKLGLAZi 6kdnlVJZNpPkdADKqmQCVnJGZ8pkSV/u9kuFbsyHSGu+Osfk16TzBWoA0Rf9Ac+S wjLbWO9A45Yn9if/v90/Xyv91ijXqMAC/Zo2NKOym6lI2yMw9Q31giGYwRo139EN +wQOjVwN3uOOnT71E8LJNQxE7EFlNCWKwCwaC9OT/KVoA4R0iF/tifPtBTM0rsMA PMmM5BgW8f+4OmhXWmHVFZK/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUZ2BPqqUG y7pEEX2XU8PfeUFF2A4wHwYDVR0jBBgwFoAUxUCE0wQkhNyXlJ3tyVbCgtnrglkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFFNjIxLzVENkFGNTBBNzBF RDExRjFBNkY1N0M5RTVEQTMwRkJDL3hVQ0Uwd1FraE55WGxKM3R5VmJDZ3Rucmds ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveFVDRTB3UWtoTnlYbEozdHlWYkNndG5yZ2xrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFF NjIxLzVENkFGNTBBNzBFRDExRjFBNkY1N0M5RTVEQTMwRkJDL3hVQ0Uwd1FraE55 WGxKM3R5VmJDZ3Rucmdsay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBLyX62v7F9kE8asU/R4Y16VZsRANOzuFecNlXw3tcBKPhUQSZHngAaFrJsD7+x TQeAkNI/u5Z5r2DeQlgpzJbZK2i9CKEo+gdNXDulHJfTie0dqhTPDnVQsCbe9IuH cyCLMV2spHS4n72u0Cfoz38B/ZHPvW5oiMxxN336U+F3I9gG2BspgnkRwp4Qn6Ca MycdV+mrab3ZZVyFuSmQcyQCnOiScnp+O5aUAHd9UqYxDxNG8y76hM7qpjjGv+UD L8Fwvu1bOcpv9mU7OTaPmzv0uLRqMWpBHLlFx8JZXDSOzOt+TIgY2EQnVnNo8Zpg JOVeEzQg/XZ/wjOCq7ZT9mkk -----END CERTIFICATE-----Generated at Mon Oct 19 22:44:50 2026 by rpki-client