$ rpki-client -vvvf rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft File: XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft (raw, json) Hash identifier: uzvCo7CFxyv+tPs6jKZfVDHdMz4Kgd5jbsSYcGBv8wI= Subject key identifier: E9:3E:E5:9D:EB:3A:CE:80:EB:9A:79:BF:96:55:10:7D:CE:8C:B1:40 Authority key identifier: 5C:AF:E8:A8:3F:09:0A:E1:46:A4:03:AF:A5:57:C5:CF:AA:88:CD:84 Certificate issuer: /CN=A912FCBB/serialNumber=5CAFE8A83F090AE146A403AFA557C5CFAA88CD84 Certificate serial: 01A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft Manifest number: 01A3 Signing time: Sun 25 Oct 2026 04:36:10 +0000 Manifest this update: Sun 25 Oct 2026 04:36:09 +0000 Manifest next update: Sun 01 Nov 2026 04:36:09 +0000 Files and hashes: 1: XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl (hash: u+6lfobxWFk+ILbbDRDHobiXy4Mn0ahweuRvhJB+Dc4=) 2: E1A8E22A9E9611F0BCFAF76AC4F9AE02.roa (hash: HpXF9RK830aj73W2wDJDIKJP/rmMEYbJuFSH5BCvJto=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 04:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 424 (0x1a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FCBB, serialNumber=5CAFE8A83F090AE146A403AFA557C5CFAA88CD84 Validity Not Before: Oct 25 04:36:09 2026 GMT Not After : Nov 1 04:36:09 2026 GMT Subject: CN=6add873a-9256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c3:9b:6f:f1:08:2c:4a:fe:17:0f:d3:b2:b6: 3f:e4:42:45:6a:d6:f0:f1:26:8c:74:e7:aa:c6:06: 7f:1f:70:26:19:ee:f6:22:dd:b6:ec:62:90:11:a6: 7d:43:38:18:c7:e5:43:bc:5a:3a:4f:63:97:bd:81: 6b:c5:c4:5c:08:42:bc:c5:a2:93:90:20:2d:30:cc: a3:48:49:71:d7:13:86:c7:b0:4c:c4:a2:cf:ae:c9: 42:5c:e4:e1:62:6d:44:7c:8c:e0:2c:31:34:35:7e: b6:5f:b2:50:08:98:9a:59:6d:85:fc:2d:79:86:05: d9:41:42:e1:31:a6:ac:90:cb:19:df:57:1e:ce:73: df:3a:6d:dc:53:94:41:f2:f6:50:78:5d:90:9e:13: 1d:42:03:c7:0a:c9:67:05:dc:62:e4:8f:8b:d5:15: 57:d3:54:e5:d8:7c:58:39:38:dc:40:4d:ad:f1:e3: 1b:86:78:89:a8:36:75:0e:53:81:53:76:54:02:74: 54:3c:a7:a0:c8:bb:62:f3:30:73:69:bd:96:6d:b1: 8d:03:b8:6e:db:96:e7:d1:ac:55:72:b7:35:f2:24: c8:99:18:a3:14:0d:d2:f8:3d:aa:08:62:8d:d3:96: 41:f4:df:44:c0:3f:e3:28:68:85:a4:05:0f:8f:da: 65:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:3E:E5:9D:EB:3A:CE:80:EB:9A:79:BF:96:55:10:7D:CE:8C:B1:40 X509v3 Authority Key Identifier: keyid:5C:AF:E8:A8:3F:09:0A:E1:46:A4:03:AF:A5:57:C5:CF:AA:88:CD:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:0e:50:38:3c:59:16:ce:4c:c6:69:87:d7:38:b5:e6:0d:b1: 41:24:97:e1:13:4b:68:d0:35:40:d3:2c:0c:34:76:20:5a:cb: e3:c1:ad:fa:75:81:03:e0:cc:a5:71:d1:37:99:e5:22:9e:11: e0:dd:37:ed:51:39:5b:fd:51:9c:c9:77:b9:0c:c6:5f:70:75: fa:d6:56:10:c2:59:f9:92:91:9a:61:c8:5a:4e:c5:f2:62:af: d0:aa:eb:41:c6:92:24:1b:02:47:04:af:64:11:88:8f:9f:8c: c1:f8:9a:f5:2d:79:d7:c7:94:63:3e:bd:a6:fa:8d:3b:bd:60: dd:94:78:c8:6b:4e:49:65:1f:fa:9b:b4:06:55:cb:3e:0e:7e: fb:cd:da:ef:80:1e:53:4f:12:98:1f:b5:8f:cf:5c:c4:5f:b4: 68:4f:82:17:42:6b:bc:f2:f7:ef:7a:99:a9:e5:e4:c8:2d:58: 3c:09:df:97:8d:5f:ad:da:f4:90:02:3d:05:65:61:ed:88:84: f4:09:5e:c3:0b:f6:61:ba:66:83:58:13:65:c1:b5:4f:5e:08: 01:53:7e:b3:c2:1a:8e:a5:2a:3e:3b:fb:db:fc:e4:53:dd:69: a3:77:fb:93:05:2f:09:7a:0f:16:0e:8d:00:0a:5b:c1:0c:39: e9:e9:c9:13 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDQkIxMTAvBgNVBAUTKDVDQUZFOEE4M0YwOTBBRTE0NkE0MDNBRkE1NTdDNUNG QUE4OENEODQwHhcNMjYxMDI1MDQzNjA5WhcNMjYxMTAxMDQzNjA5WjAYMRYwFAYD VQQDEw02YWRkODczYS05MjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAksObb/EILEr+Fw/TsrY/5EJFatbw8SaMdOeqxgZ/H3AmGe72It227GKQEaZ9 QzgYx+VDvFo6T2OXvYFrxcRcCEK8xaKTkCAtMMyjSElx1xOGx7BMxKLPrslCXOTh Ym1EfIzgLDE0NX62X7JQCJiaWW2F/C15hgXZQULhMaaskMsZ31ceznPfOm3cU5RB 8vZQeF2QnhMdQgPHCslnBdxi5I+L1RVX01Tl2HxYOTjcQE2t8eMbhniJqDZ1DlOB U3ZUAnRUPKegyLti8zBzab2WbbGNA7hu25bn0axVcrc18iTImRijFA3S+D2qCGKN 05ZB9N9EwD/jKGiFpAUPj9plUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOk+5Z3r Os6A65p5v5ZVEH3OjLFAMB8GA1UdIwQYMBaAFFyv6Kg/CQrhRqQDr6VXxc+qiM2E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkNCQi81Q0FDNjA0ODUz MEYxMUVGOTlDODhEMEZDNEY5QUUwMi9YS19vcUQ4SkN1RkdwQU92cFZmRno2cUl6 WVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hLX29xRDhKQ3VGR3BBT3ZwVmZGejZxSXpZUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkNCQi81Q0FDNjA0ODUzMEYxMUVGOTlDODhEMEZDNEY5QUUwMi9YS19vcUQ4SkN1 RkdwQU92cFZmRno2cUl6WVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYQ5QODxZFs5MxmmH1zi15g2xQSSX4RNLaNA1QNMsDDR2IFrL48Gt+nWBA+DM pXHRN5nlIp4R4N037VE5W/1RnMl3uQzGX3B1+tZWEMJZ+ZKRmmHIWk7F8mKv0Krr QcaSJBsCRwSvZBGIj5+Mwfia9S1518eUYz69pvqNO71g3ZR4yGtOSWUf+pu0BlXL Pg5++83a74AeU08SmB+1j89cxF+0aE+CF0JrvPL373qZqeXkyC1YPAnfl41frdr0 kAI9BWVh7YiE9Alewwv2Ybpmg1gTZcG1T14IAVN+s8IajqUqPjv72/zkU91po3f7 kwUvCXoPFg6NAApbwQw56enJEw== -----END CERTIFICATE-----Generated at Mon Oct 26 11:21:50 2026 by rpki-client