$ rpki-client -vvvf rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft File: xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft (raw, json) Hash identifier: hi45BeObDt/8UMceIlcDyUqoHxKb1te7FRgle8SIjR4= Subject key identifier: 3A:62:23:8E:8D:0A:3D:C8:3B:2E:18:D7:1B:43:C1:50:1C:3B:94:C0 Authority key identifier: C4:23:B0:80:32:62:33:DA:C0:8C:C3:0D:74:A6:5F:F4:A5:29:D0:9A Certificate issuer: /CN=A91411C0/serialNumber=C423B080326233DAC08CC30D74A65FF4A529D09A Certificate serial: 07DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft Manifest number: 07D1 Signing time: Fri 02 Oct 2026 21:40:12 +0000 Manifest this update: Fri 02 Oct 2026 21:40:11 +0000 Manifest next update: Fri 09 Oct 2026 21:40:11 +0000 Files and hashes: 1: xCOwgDJiM9rAjMMNdKZf9KUp0Jo.crl (hash: bng+Spkcz1pN+BGUgstMciX8TrTVM1yMMImLBvhcyiw=) 2: 0361CF86560211EB97A98D46C4F9AE02.roa (hash: GMJZeEpsDtNeV9crV1/EbJHhDeurBSSuwnnelfqM6TA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.crl rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 21:40:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2010 (0x7da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91411C0, serialNumber=C423B080326233DAC08CC30D74A65FF4A529D09A Validity Not Before: Oct 2 21:40:11 2026 GMT Not After : Oct 9 21:40:11 2026 GMT Subject: CN=6ac024bc-ed2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:bb:5e:a4:dd:a9:19:85:11:64:6e:3f:fb:44: c9:55:58:a7:5d:7f:90:b6:82:33:e9:4f:0e:54:a2: da:3e:01:24:e2:6d:ee:ad:51:64:62:bc:1a:91:a7: ae:70:9f:8d:f5:4a:17:fc:22:14:75:5d:63:d7:9c: 11:82:89:5d:13:a9:ca:04:45:85:c4:be:8f:81:97: 3d:98:63:bd:8e:92:f0:61:b3:c9:fd:72:17:70:70: 43:c6:fc:9c:50:f2:2a:03:72:0e:ea:7f:27:7e:7f: 42:a5:a4:18:04:9b:7b:d9:b2:d5:a7:fe:9d:2b:48: 6b:d6:f4:0a:93:ba:49:cf:ab:fe:f6:90:12:e9:ef: 67:c6:d1:59:2f:a7:c1:1d:87:5e:7c:99:d4:94:d5: 69:90:29:98:5b:1e:f4:03:0b:a3:36:fa:06:35:78: 7a:d5:8b:d1:0e:58:3e:63:3d:0d:03:cb:13:5c:41: ab:21:43:a4:bf:52:d8:9b:ff:5e:f5:33:bd:cd:56: 61:06:51:a2:04:b4:89:87:f1:ec:bd:e1:40:34:ff: fd:97:a9:cc:0c:ed:d1:2a:af:8b:f6:52:8f:19:6c: 38:1e:d7:af:d6:56:82:6a:6b:12:23:96:a8:40:28: 19:1b:3d:11:e8:80:25:65:aa:55:8c:d0:17:4b:e4: d4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:62:23:8E:8D:0A:3D:C8:3B:2E:18:D7:1B:43:C1:50:1C:3B:94:C0 X509v3 Authority Key Identifier: keyid:C4:23:B0:80:32:62:33:DA:C0:8C:C3:0D:74:A6:5F:F4:A5:29:D0:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:b9:87:6b:a6:c4:02:e1:23:81:7e:9f:4c:bc:fc:87:c0:8b: 04:9a:49:1b:f8:0f:df:05:c7:4f:5c:6a:24:47:91:91:67:55: a7:05:f8:41:88:7b:bd:4a:d0:e4:31:15:b5:7a:13:47:bf:3a: 9f:fa:67:20:f5:f8:2e:7d:08:9b:a8:c6:29:e9:3a:dc:73:2d: 8e:44:f9:17:c3:c7:e4:f9:90:4b:f3:a9:b3:a0:d8:2d:2a:24: 64:0c:07:fa:59:e0:ab:fd:68:6d:b7:ed:74:fd:f9:fe:80:f1: 10:b3:67:a4:a2:b6:48:7c:2f:e0:c1:23:7a:e1:78:a9:b5:70: 49:8f:45:4e:57:31:14:27:48:19:aa:37:98:27:6e:71:e7:d7: 5c:29:b0:0e:9e:d7:56:59:9f:09:5c:3e:68:a1:d6:d8:4a:e5: 2e:4e:27:fa:21:f1:9a:ce:ee:20:5f:79:49:83:1c:f6:08:54: e8:b9:9c:41:65:71:ec:7f:e7:6f:13:4e:bc:37:a2:99:e3:12: 75:12:ae:27:c3:2c:62:99:9c:61:d4:3f:8f:19:b8:f2:19:fd: 14:cc:d1:19:5b:98:ca:69:27:34:a3:f3:9d:8c:8e:f3:a3:fb: 17:81:9b:cb:8e:d8:d5:ad:8a:5c:4d:f6:28:61:2f:b4:65:6b: b7:ae:53:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB9owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDExQzAxMTAvBgNVBAUTKEM0MjNCMDgwMzI2MjMzREFDMDhDQzMwRDc0QTY1RkY0 QTUyOUQwOUEwHhcNMjYxMDAyMjE0MDExWhcNMjYxMDA5MjE0MDExWjAYMRYwFAYD VQQDEw02YWMwMjRiYy1lZDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjrtepN2pGYURZG4/+0TJVVinXX+QtoIz6U8OVKLaPgEk4m3urVFkYrwakaeu cJ+N9UoX/CIUdV1j15wRgoldE6nKBEWFxL6PgZc9mGO9jpLwYbPJ/XIXcHBDxvyc UPIqA3IO6n8nfn9CpaQYBJt72bLVp/6dK0hr1vQKk7pJz6v+9pAS6e9nxtFZL6fB HYdefJnUlNVpkCmYWx70AwujNvoGNXh61YvRDlg+Yz0NA8sTXEGrIUOkv1LYm/9e 9TO9zVZhBlGiBLSJh/HsveFANP/9l6nMDO3RKq+L9lKPGWw4Htev1laCamsSI5ao QCgZGz0R6IAlZapVjNAXS+TUvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDpiI46N Cj3IOy4Y1xtDwVAcO5TAMB8GA1UdIwQYMBaAFMQjsIAyYjPawIzDDXSmX/SlKdCa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTFDMC9COTYwMzc1ODU1 RkYxMUVCQkMzNkM4NDNDNEY5QUUwMi94Q093Z0RKaU05ckFqTU1OZEtaZjlLVXAw Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hDT3dnREppTTlyQWpNTU5kS1pmOUtVcDBKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTFDMC9COTYwMzc1ODU1RkYxMUVCQkMzNkM4NDNDNEY5QUUwMi94Q093Z0RKaU05 ckFqTU1OZEtaZjlLVXAwSm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAbmHa6bEAuEjgX6fTLz8h8CLBJpJG/gP3wXHT1xqJEeRkWdVpwX4QYh7vUrQ 5DEVtXoTR786n/pnIPX4Ln0Im6jGKek63HMtjkT5F8PH5PmQS/Ops6DYLSokZAwH +lngq/1obbftdP35/oDxELNnpKK2SHwv4MEjeuF4qbVwSY9FTlcxFCdIGao3mCdu cefXXCmwDp7XVlmfCVw+aKHW2ErlLk4n+iHxms7uIF95SYMc9ghU6LmcQWVx7H/n bxNOvDeimeMSdRKuJ8MsYpmcYdQ/jxm48hn9FMzRGVuYymknNKPznYyO86P7F4Gb y47Y1a2KXE32KGEvtGVrt65Trg== -----END CERTIFICATE-----Generated at Sun Oct 4 07:20:08 2026 by rpki-client