$ rpki-client -vvvf rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/XDFdr8U6gv3WLHIAXHZEMzvAKXo.mft File: XDFdr8U6gv3WLHIAXHZEMzvAKXo.mft (raw, json) Hash identifier: EVIs6+I5kO2T/lGEJTPYwRMkGTLbqW3jJdXsCJX94Bk= Subject key identifier: BF:D2:9E:FD:7C:00:40:01:77:82:C8:E2:BC:49:3D:80:7A:AD:28:2E Authority key identifier: 5C:31:5D:AF:C5:3A:82:FD:D6:2C:72:00:5C:76:44:33:3B:C0:29:7A Certificate issuer: /CN=A91524AF/serialNumber=5C315DAFC53A82FDD62C72005C7644333BC0297A Certificate serial: 05C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDFdr8U6gv3WLHIAXHZEMzvAKXo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/XDFdr8U6gv3WLHIAXHZEMzvAKXo.mft Manifest number: 0574 Signing time: Fri 02 Oct 2026 23:42:25 +0000 Manifest this update: Fri 02 Oct 2026 23:42:25 +0000 Manifest next update: Fri 09 Oct 2026 23:42:25 +0000 Files and hashes: 1: XDFdr8U6gv3WLHIAXHZEMzvAKXo.crl (hash: XVNwuu75oNd7nCtXHl5CgjtX9+Mqx/vhCRVhZvDe54E=) 2: 87840F3AFBD111EFB4804F27C4F9AE02.roa (hash: vIEtRSxvBa0Xc/IiKtnrGRDGvVh6iD/nJgJJDv2I0S0=) 3: BEB34436FE3211EFAA1D9A4EC4F9AE02.roa (hash: rcOga+YGZldqreiF0WCdj8lf5Z59J1hOmyY6+goJTWY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/XDFdr8U6gv3WLHIAXHZEMzvAKXo.crl rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/XDFdr8U6gv3WLHIAXHZEMzvAKXo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDFdr8U6gv3WLHIAXHZEMzvAKXo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 23:42:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1481 (0x5c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91524AF, serialNumber=5C315DAFC53A82FDD62C72005C7644333BC0297A Validity Not Before: Oct 2 23:42:25 2026 GMT Not After : Oct 9 23:42:25 2026 GMT Subject: CN=6ac04161-0146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1d:31:64:77:8d:9b:3c:fe:5b:e1:60:8a:5b: 53:f4:55:89:35:62:9d:b0:d0:4a:b9:ee:a0:33:9c: 05:6e:0d:2c:08:3b:aa:6a:1c:14:f6:09:a6:1c:84: 7f:c3:74:82:10:96:fb:88:79:aa:72:72:ac:fa:88: a3:c1:8c:59:cd:13:95:5f:99:23:4e:26:a2:a5:6d: cf:51:2f:f5:71:8c:d8:a9:10:e3:5b:72:2c:fe:c0: fe:b2:b0:32:f3:6f:4f:41:d0:ec:49:48:fd:55:e5: ef:61:45:ab:af:8b:fe:01:2a:b0:20:dd:9c:0c:13: 7b:2f:f3:58:27:b3:8e:b0:d9:2e:75:17:03:4d:3b: a3:ea:d2:5e:17:b3:78:ec:62:d9:35:1c:b1:db:ad: 5b:24:b9:68:35:af:70:85:28:87:2a:19:2a:c5:52: 71:26:80:b9:01:00:47:71:b1:4c:82:49:aa:62:a5: 37:bd:a4:33:d2:31:f0:21:62:51:88:0f:77:cb:1a: 6f:0f:e4:1c:7a:b1:d7:5d:ed:2c:4d:e0:2f:7f:1b: 10:94:93:fe:51:5a:ac:c7:dc:a4:f4:41:3b:7e:96: 8f:9b:3b:27:7d:dd:33:a1:57:4a:0e:93:72:25:88: a7:71:c0:87:07:50:53:31:58:cc:9e:4c:39:53:0c: 75:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:D2:9E:FD:7C:00:40:01:77:82:C8:E2:BC:49:3D:80:7A:AD:28:2E X509v3 Authority Key Identifier: keyid:5C:31:5D:AF:C5:3A:82:FD:D6:2C:72:00:5C:76:44:33:3B:C0:29:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/XDFdr8U6gv3WLHIAXHZEMzvAKXo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDFdr8U6gv3WLHIAXHZEMzvAKXo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/XDFdr8U6gv3WLHIAXHZEMzvAKXo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:88:ca:90:24:00:5c:0e:bd:2f:9d:ff:03:8d:e7:41:f9:3a: c6:6e:6a:27:fa:0f:f4:fa:1a:3c:0d:c8:dc:01:98:5f:09:ff: 2a:cb:99:3b:99:e3:00:12:f7:00:74:2a:7a:b1:9e:5e:1b:83: ae:54:5e:07:88:25:bf:14:bd:76:bd:5a:1f:a5:e2:eb:5a:bf: 12:67:bc:2c:49:25:29:f1:50:2c:b5:ef:ba:fe:35:39:b0:24: 98:d5:ef:2a:f0:82:fc:09:11:02:46:14:a5:51:36:7c:98:28: a3:53:be:c2:7f:f7:b7:bc:b7:62:4f:a2:c9:c3:99:3b:ab:61: 71:28:e0:58:73:34:7b:cd:e2:ac:8b:a7:20:50:49:01:f3:2a: ce:b9:1a:d9:af:7b:7b:87:81:2d:25:2d:f3:21:b4:8e:a2:0b: 17:88:bc:cd:0d:03:89:6d:26:67:97:b8:78:50:d4:31:5c:bc: 53:cd:09:df:ae:c3:6f:ab:11:66:43:81:f4:af:92:65:49:37: 0e:30:ac:84:8d:bf:6e:98:80:60:61:71:e7:a3:6c:55:82:1e: cd:ff:9c:44:cb:09:0a:7a:e4:61:51:89:c5:e0:fc:42:99:15: 67:ef:c0:70:06:5c:00:8d:d8:01:98:af:46:16:d9:6d:b6:35: eb:7f:82:53 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI0QUYxMTAvBgNVBAUTKDVDMzE1REFGQzUzQTgyRkRENjJDNzIwMDVDNzY0NDMz M0JDMDI5N0EwHhcNMjYxMDAyMjM0MjI1WhcNMjYxMDA5MjM0MjI1WjAYMRYwFAYD VQQDEw02YWMwNDE2MS0wMTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxx0xZHeNmzz+W+FgiltT9FWJNWKdsNBKue6gM5wFbg0sCDuqahwU9gmmHIR/ w3SCEJb7iHmqcnKs+oijwYxZzROVX5kjTiaipW3PUS/1cYzYqRDjW3Is/sD+srAy 829PQdDsSUj9VeXvYUWrr4v+ASqwIN2cDBN7L/NYJ7OOsNkudRcDTTuj6tJeF7N4 7GLZNRyx261bJLloNa9whSiHKhkqxVJxJoC5AQBHcbFMgkmqYqU3vaQz0jHwIWJR iA93yxpvD+QcerHXXe0sTeAvfxsQlJP+UVqsx9yk9EE7fpaPmzsnfd0zoVdKDpNy JYinccCHB1BTMVjMnkw5Uwx1twIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL/Snv18 AEABd4LI4rxJPYB6rSguMB8GA1UdIwQYMBaAFFwxXa/FOoL91ixyAFx2RDM7wCl6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjRBRi83NkM3RjBGNDUx RjYxMUVDOUUzQzZDM0FDNEY5QUUwMi9YREZkcjhVNmd2M1dMSElBWEhaRU16dkFL WG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hERmRyOFU2Z3YzV0xISUFYSFpFTXp2QUtYby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjRBRi83NkM3RjBGNDUxRjYxMUVDOUUzQzZDM0FDNEY5QUUwMi9YREZkcjhVNmd2 M1dMSElBWEhaRU16dkFLWG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVIjKkCQAXA69L53/A43nQfk6xm5qJ/oP9PoaPA3I3AGYXwn/KsuZO5njABL3 AHQqerGeXhuDrlReB4glvxS9dr1aH6Xi61q/Eme8LEklKfFQLLXvuv41ObAkmNXv KvCC/AkRAkYUpVE2fJgoo1O+wn/3t7y3Yk+iycOZO6thcSjgWHM0e83irIunIFBJ AfMqzrka2a97e4eBLSUt8yG0jqILF4i8zQ0DiW0mZ5e4eFDUMVy8U80J367Db6sR ZkOB9K+SZUk3DjCshI2/bpiAYGFx56NsVYIezf+cRMsJCnrkYVGJxeD8QpkVZ+/A cAZcAI3YAZivRhbZbbY163+CUw== -----END CERTIFICATE-----Generated at Sun Oct 4 16:55:45 2026 by rpki-client