$ rpki-client -vvvf rpki.apnic.net/member_repository/A912BFC5/3F34203E290511E593BFC626C4F9AE02/XLKYvBpwUBeAXFYfCQoNR5UOar0.mft File: XLKYvBpwUBeAXFYfCQoNR5UOar0.mft (raw, json) Hash identifier: HOZxaJE+kf8yijLE20VYcqGeLcB9WunISd0k4tk3LuM= Subject key identifier: 0A:C5:10:F9:7E:86:24:FA:8B:10:57:7A:4D:0F:B8:53:4F:8B:8F:94 Authority key identifier: 5C:B2:98:BC:1A:70:50:17:80:5C:56:1F:09:0A:0D:47:95:0E:6A:BD Certificate issuer: /CN=A912BFC5/serialNumber=5CB298BC1A705017805C561F090A0D47950E6ABD Certificate serial: 260A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XLKYvBpwUBeAXFYfCQoNR5UOar0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BFC5/3F34203E290511E593BFC626C4F9AE02/XLKYvBpwUBeAXFYfCQoNR5UOar0.mft Manifest number: 260A Signing time: Sun 18 Oct 2026 14:16:47 +0000 Manifest this update: Sun 18 Oct 2026 14:16:47 +0000 Manifest next update: Sun 25 Oct 2026 14:16:47 +0000 Files and hashes: 1: XLKYvBpwUBeAXFYfCQoNR5UOar0.crl (hash: T6atWT/u/BvTF3Ev767iF6HuA4NgIBhxXSHPwn1ra5M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BFC5/3F34203E290511E593BFC626C4F9AE02/XLKYvBpwUBeAXFYfCQoNR5UOar0.crl rsync://rpki.apnic.net/member_repository/A912BFC5/3F34203E290511E593BFC626C4F9AE02/XLKYvBpwUBeAXFYfCQoNR5UOar0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XLKYvBpwUBeAXFYfCQoNR5UOar0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 14:16:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9738 (0x260a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BFC5, serialNumber=5CB298BC1A705017805C561F090A0D47950E6ABD Validity Not Before: Oct 18 14:16:47 2026 GMT Not After : Oct 25 14:16:47 2026 GMT Subject: CN=6ad4d4cf-438b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fa:8d:bc:b0:4d:02:4a:3a:d1:07:a9:6b:e7: 2a:18:c2:c6:9a:26:67:3e:15:9e:ad:11:fd:d5:db: 6b:36:f1:66:af:c3:44:aa:68:da:0c:1f:95:8d:85: 1c:77:75:cc:95:96:ff:f7:9c:26:65:4f:0b:bc:97: 29:84:87:f7:25:06:99:e4:d0:64:f8:56:4c:04:24: 5f:8d:3c:9c:6f:77:ab:03:7a:de:33:2b:e4:71:a8: ee:da:68:d7:b4:e5:0b:2f:f3:42:78:c2:3f:bf:fd: 08:25:91:01:4a:a6:69:38:66:a5:0d:c9:f9:9c:65: bc:48:4c:3b:f6:ff:03:a0:0c:50:90:7c:0c:b0:26: 9d:ce:fb:d3:7e:a5:12:b8:af:ed:6e:29:ea:8c:f2: af:c1:76:55:f9:a2:7f:43:17:7c:4e:e3:85:77:f3: 8d:17:c0:1d:71:0c:da:44:7d:19:db:6f:57:5c:cc: c4:cd:75:63:41:1a:13:20:05:c0:ea:72:12:14:5d: 9b:49:d8:8e:00:d0:c4:c3:07:4b:c5:8d:c3:ed:be: cf:eb:88:33:c5:41:7d:c5:81:fb:5b:a5:c0:2d:e1: b0:89:68:1a:61:cb:16:c3:cc:61:9e:c5:dd:65:2b: d3:24:4e:9a:22:3b:2c:5e:63:c7:da:15:f8:39:8d: ff:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:C5:10:F9:7E:86:24:FA:8B:10:57:7A:4D:0F:B8:53:4F:8B:8F:94 X509v3 Authority Key Identifier: keyid:5C:B2:98:BC:1A:70:50:17:80:5C:56:1F:09:0A:0D:47:95:0E:6A:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BFC5/3F34203E290511E593BFC626C4F9AE02/XLKYvBpwUBeAXFYfCQoNR5UOar0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XLKYvBpwUBeAXFYfCQoNR5UOar0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BFC5/3F34203E290511E593BFC626C4F9AE02/XLKYvBpwUBeAXFYfCQoNR5UOar0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:41:ab:cb:ad:fc:3e:54:8f:25:6f:cb:7e:fd:c4:49:62:d7: 1f:82:39:f3:fe:e3:c6:4a:2c:f6:03:83:c1:f5:a7:d4:e4:e2: 25:f8:d7:bb:e4:4b:3f:57:dd:d3:f1:8c:29:2f:92:12:09:77: c4:c9:d4:13:3f:46:a4:e5:f8:3a:3b:31:f7:bb:d7:73:d2:3c: d0:0a:fe:5c:1a:c8:33:02:75:cd:d3:09:15:da:55:0b:61:b1: 77:7a:c6:c1:de:eb:21:8a:c4:ed:86:09:bd:ff:ac:e8:62:0d: d0:7d:f5:18:66:f2:71:11:35:d9:02:6b:ea:9e:6c:ef:3b:d5: 8a:20:69:91:68:fb:e7:70:b1:80:00:cd:ee:94:c5:31:25:5c: eb:93:10:1a:54:fe:9a:52:90:c6:35:10:b0:3a:fd:96:d2:b4: 51:c4:c8:9d:07:3b:52:ac:86:33:10:dd:51:6c:c9:e7:c1:cc: a9:eb:91:7b:2e:08:b6:1e:d0:32:94:6c:6f:12:f6:85:fe:25: fa:10:bb:0c:31:d6:54:da:b5:b4:96:35:c6:56:c7:5f:ed:10: de:da:32:41:88:c7:2d:16:ed:79:ef:84:0e:1b:3e:28:2c:22: 67:7d:58:86:fc:b2:dc:c6:c4:a7:fa:cc:b6:d9:3c:a9:70:74: 25:4e:8f:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJGQzUxMTAvBgNVBAUTKDVDQjI5OEJDMUE3MDUwMTc4MDVDNTYxRjA5MEEwRDQ3 OTUwRTZBQkQwHhcNMjYxMDE4MTQxNjQ3WhcNMjYxMDI1MTQxNjQ3WjAYMRYwFAYD VQQDEw02YWQ0ZDRjZi00MzhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx/qNvLBNAko60Qepa+cqGMLGmiZnPhWerRH91dtrNvFmr8NEqmjaDB+VjYUc d3XMlZb/95wmZU8LvJcphIf3JQaZ5NBk+FZMBCRfjTycb3erA3reMyvkcaju2mjX tOULL/NCeMI/v/0IJZEBSqZpOGalDcn5nGW8SEw79v8DoAxQkHwMsCadzvvTfqUS uK/tbinqjPKvwXZV+aJ/Qxd8TuOFd/ONF8AdcQzaRH0Z229XXMzEzXVjQRoTIAXA 6nISFF2bSdiOANDEwwdLxY3D7b7P64gzxUF9xYH7W6XALeGwiWgaYcsWw8xhnsXd ZSvTJE6aIjssXmPH2hX4OY3/5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFArFEPl+ hiT6ixBXek0PuFNPi4+UMB8GA1UdIwQYMBaAFFyymLwacFAXgFxWHwkKDUeVDmq9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkZDNS8zRjM0MjAzRTI5 MDUxMUU1OTNCRkM2MjZDNEY5QUUwMi9YTEtZdkJwd1VCZUFYRllmQ1FvTlI1VU9h cjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hMS1l2QnB3VUJlQVhGWWZDUW9OUjVVT2FyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkZDNS8zRjM0MjAzRTI5MDUxMUU1OTNCRkM2MjZDNEY5QUUwMi9YTEtZdkJwd1VC ZUFYRllmQ1FvTlI1VU9hcjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZUGry638PlSPJW/Lfv3ESWLXH4I58/7jxkos9gODwfWn1OTiJfjXu+RLP1fd 0/GMKS+SEgl3xMnUEz9GpOX4Ojsx97vXc9I80Ar+XBrIMwJ1zdMJFdpVC2Gxd3rG wd7rIYrE7YYJvf+s6GIN0H31GGbycRE12QJr6p5s7zvViiBpkWj753CxgADN7pTF MSVc65MQGlT+mlKQxjUQsDr9ltK0UcTInQc7UqyGMxDdUWzJ58HMqeuRey4Ith7Q MpRsbxL2hf4l+hC7DDHWVNq1tJY1xlbHX+0Q3toyQYjHLRbtee+EDhs+KCwiZ31Y hvyy3MbEp/rMttk8qXB0JU6PpQ== -----END CERTIFICATE-----Generated at Mon Oct 19 04:14:49 2026 by rpki-client