$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft File: xGIlbhG2PuqR1z02Q867tRojUK8.mft (raw, json) Hash identifier: c8ULBkLdrgjGtFrBx3bDHyYczRJB3AHRHbkw7okddEg= Subject key identifier: 6C:0A:50:E4:25:A2:C9:7C:39:C2:91:1B:1B:39:85:FE:3F:3B:57:AB Authority key identifier: C4:62:25:6E:11:B6:3E:EA:91:D7:3D:36:43:CE:BB:B5:1A:23:50:AF Certificate issuer: /CN=A91A210A/serialNumber=C462256E11B63EEA91D73D3643CEBBB51A2350AF Certificate serial: 1167 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGIlbhG2PuqR1z02Q867tRojUK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft Manifest number: 1157 Signing time: Mon 26 Oct 2026 17:14:26 +0000 Manifest this update: Mon 26 Oct 2026 17:14:25 +0000 Manifest next update: Mon 02 Nov 2026 17:14:25 +0000 Files and hashes: 1: xGIlbhG2PuqR1z02Q867tRojUK8.crl (hash: uJJNQksBYKC2eBi6qOEmDBfQUbczOKzPwfZx1G9F1Gs=) 2: 797BF786FB2C11EFA405F334C4F9AE02.roa (hash: yaNkgji9jGH4TTyhCOL2/K5RHSqEhk35tfGLeGGK6L0=) 3: 691023063A8311E99AF5572DC4F9AE02.roa (hash: 3XIdOKZPD+XETwFVUGrUUljIP0PedqBSSrgTHEH2oF8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.crl rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGIlbhG2PuqR1z02Q867tRojUK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 17:14:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4455 (0x1167) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A210A, serialNumber=C462256E11B63EEA91D73D3643CEBBB51A2350AF Validity Not Before: Oct 26 17:14:25 2026 GMT Not After : Nov 2 17:14:25 2026 GMT Subject: CN=6adf8a72-a6b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:47:c3:59:27:a9:db:db:a3:70:2b:26:31:15: 22:02:de:ff:d6:5b:c6:0b:63:8c:b4:8a:ea:b8:f5: d2:7e:34:58:cd:b9:b9:73:c7:53:d3:c4:3d:e4:c2: aa:f4:d9:9c:0d:c4:cd:d1:e4:1b:99:9e:6c:c4:3b: 92:46:c2:5e:fa:17:ca:19:ff:b5:39:db:99:ce:d7: e2:a3:4b:89:65:0e:80:94:bf:c7:ce:17:bc:ae:d9: c6:a0:a0:f1:82:10:4d:cc:47:c6:d7:30:a9:f3:26: ab:6a:fb:49:c6:9d:9c:ba:f6:e0:93:1c:ec:ba:ef: 28:44:30:ba:e2:fd:75:9c:5d:dd:fd:d7:50:ec:ec: b1:4a:cb:2b:14:d6:38:ef:03:f0:88:9c:58:7f:ba: 43:35:91:1d:6a:72:2b:39:fc:e5:19:0e:03:d7:18: 45:15:e7:ce:13:59:2b:e8:32:de:37:4c:e0:75:e8: 8d:80:70:98:b2:36:e9:cf:2a:d3:87:74:27:53:89: 45:7e:41:2f:42:44:ed:f1:1f:8f:b8:fb:2d:3c:11: 37:9c:46:5a:d2:d9:41:3f:54:8a:bd:fa:68:4e:eb: 73:18:0a:c7:ae:da:89:20:66:5f:3e:fe:c2:da:15: d6:65:c4:3b:83:57:23:e4:6f:dc:2e:20:bc:f9:61: 9c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:0A:50:E4:25:A2:C9:7C:39:C2:91:1B:1B:39:85:FE:3F:3B:57:AB X509v3 Authority Key Identifier: keyid:C4:62:25:6E:11:B6:3E:EA:91:D7:3D:36:43:CE:BB:B5:1A:23:50:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGIlbhG2PuqR1z02Q867tRojUK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:0c:45:35:38:a2:6a:42:2c:a6:c3:d6:2b:aa:76:9b:5e:11: c6:e0:06:a9:0a:0e:e1:d4:ab:d5:d5:53:40:c2:b7:b6:4a:02: dc:32:ab:c9:2c:26:08:1a:8f:c2:e0:21:8e:94:dd:49:fb:4e: b3:71:12:9c:2c:ef:30:8f:59:f8:37:71:94:b2:e3:f4:87:15: d9:ef:08:5c:a3:9e:6d:02:27:97:36:00:48:66:27:46:32:cd: 07:14:0d:21:95:d2:37:51:88:ca:b0:18:1b:0d:cc:ea:23:e3: 93:df:a1:bf:ac:56:31:be:f1:2e:42:26:26:33:e0:ae:39:43: 08:7e:3c:73:c3:74:24:14:70:df:00:00:8f:78:98:1a:9d:bf: 4a:4d:72:18:c6:4f:c5:9a:57:27:d8:f9:a5:c5:98:4e:ff:77: 11:fe:9c:d0:ca:02:98:da:89:53:7c:5c:55:b2:9b:43:de:7b: e6:02:39:9a:2e:1a:5a:8a:1c:30:21:bb:c5:48:06:a9:d5:44: 4b:80:03:6a:b5:91:38:7c:8c:f4:b0:3c:93:f5:0b:61:b1:a5: 22:ca:38:95:2a:fa:02:51:b3:73:e9:95:15:8f:1b:c8:2a:15: 6c:8b:c7:25:85:70:75:18:7f:0a:13:a7:ae:de:24:ae:8c:9b: d9:70:59:bb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTIxMEExMTAvBgNVBAUTKEM0NjIyNTZFMTFCNjNFRUE5MUQ3M0QzNjQzQ0VCQkI1 MUEyMzUwQUYwHhcNMjYxMDI2MTcxNDI1WhcNMjYxMTAyMTcxNDI1WjAYMRYwFAYD VQQDEw02YWRmOGE3Mi1hNmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArUfDWSep29ujcCsmMRUiAt7/1lvGC2OMtIrquPXSfjRYzbm5c8dT08Q95MKq 9NmcDcTN0eQbmZ5sxDuSRsJe+hfKGf+1OduZztfio0uJZQ6AlL/Hzhe8rtnGoKDx ghBNzEfG1zCp8yaravtJxp2cuvbgkxzsuu8oRDC64v11nF3d/ddQ7OyxSssrFNY4 7wPwiJxYf7pDNZEdanIrOfzlGQ4D1xhFFefOE1kr6DLeN0zgdeiNgHCYsjbpzyrT h3QnU4lFfkEvQkTt8R+PuPstPBE3nEZa0tlBP1SKvfpoTutzGArHrtqJIGZfPv7C 2hXWZcQ7g1cj5G/cLiC8+WGcEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGwKUOQl osl8OcKRGxs5hf4/O1erMB8GA1UdIwQYMBaAFMRiJW4Rtj7qkdc9NkPOu7UaI1Cv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjEwQS9BNTM4QURCODNB ODIxMUU5QTRDMjgxMkNDNEY5QUUwMi94R0lsYmhHMlB1cVIxejAyUTg2N3RSb2pV SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hHSWxiaEcyUHVxUjF6MDJRODY3dFJvalVLOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjEwQS9BNTM4QURCODNBODIxMUU5QTRDMjgxMkNDNEY5QUUwMi94R0lsYmhHMlB1 cVIxejAyUTg2N3RSb2pVSzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApgxFNTiiakIspsPWK6p2m14RxuAGqQoO4dSr1dVTQMK3tkoC3DKrySwmCBqP wuAhjpTdSftOs3ESnCzvMI9Z+DdxlLLj9IcV2e8IXKOebQInlzYASGYnRjLNBxQN IZXSN1GIyrAYGw3M6iPjk9+hv6xWMb7xLkImJjPgrjlDCH48c8N0JBRw3wAAj3iY Gp2/Sk1yGMZPxZpXJ9j5pcWYTv93Ef6c0MoCmNqJU3xcVbKbQ9575gI5mi4aWooc MCG7xUgGqdVES4ADarWROHyM9LA8k/ULYbGlIso4lSr6AlGzc+mVFY8byCoVbIvH JYVwdRh/ChOnrt4kroyb2XBZuw== -----END CERTIFICATE-----Generated at Tue Oct 27 08:45:53 2026 by rpki-client