$ rpki-client -vvvf rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft File: XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft (raw, json) Hash identifier: ZY5mCuQWjxXadY01jvdGpzi97APQQBgqWQK7hG6yAsw= Subject key identifier: 4D:CC:B5:73:43:FC:57:FC:E0:54:81:79:E8:6A:9C:03:C2:7E:B6:25 Authority key identifier: 5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30 Certificate issuer: /CN=A919A998/serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930 Certificate serial: 0E35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft Manifest number: 0DEF Signing time: Mon 26 Oct 2026 17:54:26 +0000 Manifest this update: Mon 26 Oct 2026 17:54:26 +0000 Manifest next update: Mon 02 Nov 2026 17:54:26 +0000 Files and hashes: 1: XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl (hash: sFbO31iUesGzEGFv2ckPsLwY5QkNdWyJLEvIekSZDyo=) 2: 8D0B320CBC2411F1A976042C4111F970.roa (hash: VZprYdSAM4/5n7sORCAWMVcp98eRU2Wqa/aRZi7LvHE=) 3: 653CF2F6F25A11E9937D9D73C4F9AE02.roa (hash: z3Qd25DfenB+NjP0z1LSh5qAD8RfB85Kuus6ORYlZO8=) 4: 49ADA7183C6111F0BB3B1A85C4F9AE02.roa (hash: GgjodUrdagF39z1suWIIyX09Ei89+7LB1a4sqmP65Sw=) 5: 6EA46446646511EFA9435879C4F9AE02.roa (hash: olRshqcoDTO0I/XKSa9JrnodaacSlXM7JldUHKO52Vc=) 6: 65DCB430F25A11E9937D9D73C4F9AE02.roa (hash: /+pskZIgdZg2wFT4CZ4Lq9N3zL/KUni8cMBngAXzhv4=) 7: 3BC4C576426D11EFAD9E7D10C4F9AE02.roa (hash: J+CMbNZrME0nCprHry/q7z2CnJlQDl5Z2CihIzoUMZU=) 8: 762C16422E9811F1A14B442FB4833773.roa (hash: 6MuU1UeyH7Q2b+4nJYxr8bCyEnR3m69RTJ+5rVdJIBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 17:54:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3637 (0xe35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A998, serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930 Validity Not Before: Oct 26 17:54:26 2026 GMT Not After : Nov 2 17:54:26 2026 GMT Subject: CN=6adf93d2-c3b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:05:54:51:fc:d0:ad:b0:54:e2:a2:be:b3:ef: df:5f:d9:01:ec:5c:85:5c:f5:8f:f1:b4:d8:d0:0b: b3:2d:87:df:cf:97:cb:51:48:28:84:03:e6:61:5d: a4:4d:73:29:71:55:2b:0b:ae:74:c7:74:d1:73:d8: 1e:09:97:bd:de:3b:9d:7a:04:e3:05:71:70:ae:87: 6d:6f:fe:27:87:87:1e:d1:0c:b1:9c:c5:8f:6d:d2: bc:91:f0:77:55:b2:fb:5a:75:82:5b:a1:b8:90:71: a0:1e:5d:46:09:6c:43:f1:b1:7f:31:eb:7d:57:8e: d2:ab:24:a0:9f:02:68:30:dd:a0:40:09:19:6c:e5: 4b:9c:4f:a3:e2:ce:fe:9d:37:60:1f:6c:97:0a:28: 3b:b3:06:3c:56:3b:9b:8c:fd:75:12:89:54:6d:25: 37:62:65:c3:4d:4d:19:d0:8b:24:9a:a6:88:b6:ba: 55:44:e9:d4:8e:1c:42:5b:68:74:11:ec:d3:3a:78: 5e:a9:65:77:22:e3:e1:5e:54:96:7e:9c:3b:88:a2: 28:46:30:c0:84:d8:bc:fe:8f:2c:4d:f7:be:b3:0b: 37:4c:49:9c:20:9a:0e:d9:68:66:1c:b8:4e:41:7e: 81:db:19:de:52:97:c8:1c:a7:5d:e2:e8:08:e2:9c: cf:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:CC:B5:73:43:FC:57:FC:E0:54:81:79:E8:6A:9C:03:C2:7E:B6:25 X509v3 Authority Key Identifier: keyid:5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:7a:58:e1:b3:a9:36:32:53:b1:ed:1e:9a:a0:2e:78:b4:cc: 19:8d:bb:0b:5c:ca:cf:ba:ff:b9:5f:be:97:e9:46:49:be:89: bd:c2:89:0a:d0:0c:a1:1e:87:4c:28:1e:f3:04:37:e2:ed:90: 94:4b:10:7c:f9:a2:03:9b:36:45:87:99:73:57:cd:1d:52:fe: 9a:e2:9b:62:31:f6:07:76:24:7f:a5:86:4a:96:d5:3c:b8:f6: 4b:c6:d0:5c:37:3e:82:29:25:f6:a2:9f:1e:c7:63:9b:fa:c0: 54:2e:ce:48:eb:4b:73:05:e7:c7:67:6e:5e:4d:6e:c5:28:33: 20:62:a2:57:00:60:cd:c2:d7:ca:1f:3c:8a:b7:2a:5e:c3:17: 9d:07:44:ac:64:19:4e:c1:c4:f8:49:5f:2f:5d:18:82:77:6d: b7:b1:4f:0e:6e:03:0a:14:26:a0:8a:4e:b0:a9:47:63:9b:f1: 11:77:94:35:18:1e:1b:15:cb:1c:2a:25:a7:86:cd:39:ab:64: fd:a1:e6:9d:4f:aa:88:47:2c:4e:12:d0:19:bb:5c:69:ec:12: e9:27:88:76:aa:29:a1:df:82:e6:9f:1a:4d:42:04:07:14:77: 09:0a:d3:9e:26:8d:d7:9a:29:e5:9d:7e:db:ae:03:61:2e:3a: f0:7a:d9:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE5OTgxMTAvBgNVBAUTKDVFQTFBN0I4MDJFN0U3RUZDNzdDQTFBMzhFNTJGNzJB Q0Q0NjM5MzAwHhcNMjYxMDI2MTc1NDI2WhcNMjYxMTAyMTc1NDI2WjAYMRYwFAYD VQQDEw02YWRmOTNkMi1jM2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxwVUUfzQrbBU4qK+s+/fX9kB7FyFXPWP8bTY0AuzLYffz5fLUUgohAPmYV2k TXMpcVUrC650x3TRc9geCZe93judegTjBXFwrodtb/4nh4ce0QyxnMWPbdK8kfB3 VbL7WnWCW6G4kHGgHl1GCWxD8bF/Met9V47SqySgnwJoMN2gQAkZbOVLnE+j4s7+ nTdgH2yXCig7swY8VjubjP11EolUbSU3YmXDTU0Z0IskmqaItrpVROnUjhxCW2h0 EezTOnheqWV3IuPhXlSWfpw7iKIoRjDAhNi8/o8sTfe+sws3TEmcIJoO2WhmHLhO QX6B2xneUpfIHKdd4ugI4pzPbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE3MtXND /Ff84FSBeehqnAPCfrYlMB8GA1UdIwQYMBaAFF6hp7gC5+fvx3yho45S9yrNRjkw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTk5OC9BQjM0RkJENEYy NTgxMUU5Qjc1RTNDNzBDNEY5QUUwMi9YcUdudUFMbjUtX0hmS0dqamxMM0tzMUdP VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hxR251QUxuNS1fSGZLR2pqbEwzS3MxR09UQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTk5OC9BQjM0RkJENEYyNTgxMUU5Qjc1RTNDNzBDNEY5QUUwMi9YcUdudUFMbjUt X0hmS0dqamxMM0tzMUdPVEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXHpY4bOpNjJTse0emqAueLTMGY27C1zKz7r/uV++l+lGSb6JvcKJCtAMoR6H TCge8wQ34u2QlEsQfPmiA5s2RYeZc1fNHVL+muKbYjH2B3Ykf6WGSpbVPLj2S8bQ XDc+gikl9qKfHsdjm/rAVC7OSOtLcwXnx2duXk1uxSgzIGKiVwBgzcLXyh88ircq XsMXnQdErGQZTsHE+ElfL10Ygndtt7FPDm4DChQmoIpOsKlHY5vxEXeUNRgeGxXL HColp4bNOatk/aHmnU+qiEcsThLQGbtcaewS6SeIdqopod+C5p8aTUIEBxR3CQrT niaN15op5Z1+264DYS468HrZeQ== -----END CERTIFICATE-----Generated at Wed Oct 28 14:13:28 2026 by rpki-client