$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft File: XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft (raw, json) Hash identifier: TexZ8c4X0eVqgNLrtSkKUkOFmiQNwScHyIn/zaZXyic= Subject key identifier: 05:49:7D:14:74:2F:8E:F6:5F:61:E5:C1:C5:23:F5:E9:5E:5D:4C:70 Authority key identifier: 5F:1C:53:4A:EE:FF:4E:38:0C:E5:A0:9A:10:84:BF:8F:57:09:ED:08 Certificate issuer: /CN=A91A467D/serialNumber=5F1C534AEEFF4E380CE5A09A1084BF8F5709ED08 Certificate serial: 0BF2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft Manifest number: 0BE3 Signing time: Fri 02 Oct 2026 19:14:35 +0000 Manifest this update: Fri 02 Oct 2026 19:14:35 +0000 Manifest next update: Fri 09 Oct 2026 19:14:35 +0000 Files and hashes: 1: XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.crl (hash: wazig9st8n3BIYLZqThn6KEIrsQtZ5D6ujiFGvmZZR8=) 2: 43272DE249AA11EABABC8610C4F9AE02.roa (hash: apuF+CHb5V3hRVn20QwCD8T6GZ5V5YYEYw6cYSsjqgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.crl rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 19:14:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3058 (0xbf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A467D, serialNumber=5F1C534AEEFF4E380CE5A09A1084BF8F5709ED08 Validity Not Before: Oct 2 19:14:35 2026 GMT Not After : Oct 9 19:14:35 2026 GMT Subject: CN=6ac0029b-d702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:34:74:19:c7:5e:65:3e:c6:72:62:9f:b9:a8: c7:4c:6b:d3:af:44:1b:cb:2f:b1:08:2f:d2:1b:d3: 66:d4:f2:0f:15:c8:92:5b:ee:7a:83:dd:aa:86:96: 12:f0:f4:99:83:62:8e:8c:9d:00:7e:22:20:1b:9b: 16:70:a5:03:8e:a7:13:7d:96:70:6b:d3:b4:3b:19: a5:ae:81:29:e3:36:04:bd:e9:1c:01:41:40:e4:1f: ab:6e:17:e2:49:8b:07:9c:5e:e8:2e:ad:3c:06:5c: 1c:69:7e:a9:5b:bf:a8:4a:ca:b2:f2:2a:a8:f6:45: 68:3f:da:0f:e7:16:35:ac:41:84:77:68:41:95:6a: a1:e4:3f:16:15:a0:77:ca:3a:57:0e:1e:78:c9:64: cc:0d:ed:60:17:3d:21:44:26:2f:64:19:c3:cc:ef: 63:d5:0a:fb:da:d8:08:b1:f3:ee:e2:70:c3:43:51: fe:b0:ba:f6:c8:32:f8:8f:a5:5b:83:9b:81:25:0f: 00:45:db:19:8f:39:69:5b:72:0a:be:30:84:ba:37: 06:08:2c:93:62:2b:bc:1d:0e:2a:f6:32:d1:a2:3d: e3:c7:d6:57:9f:ea:03:36:df:af:c3:75:c6:57:bc: ce:f5:21:60:50:f6:1b:85:76:c2:a4:d7:0e:d9:5c: 70:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:49:7D:14:74:2F:8E:F6:5F:61:E5:C1:C5:23:F5:E9:5E:5D:4C:70 X509v3 Authority Key Identifier: keyid:5F:1C:53:4A:EE:FF:4E:38:0C:E5:A0:9A:10:84:BF:8F:57:09:ED:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:c8:d1:6e:e5:22:f7:19:f5:ca:55:9f:5b:24:9c:67:f1:0f: 31:ca:a2:8d:a8:eb:8f:ca:8f:fc:6d:8b:19:46:97:ce:ec:6c: d9:56:2e:3e:2c:c3:3e:af:54:67:f9:8a:bc:6b:88:ba:8c:00: d9:1b:50:00:f4:64:ab:20:39:4e:68:ce:2c:58:72:80:9b:a0: 89:c4:21:54:88:cf:dc:ac:8b:ad:89:18:e8:7d:ed:2f:83:d7: 48:51:5a:e4:39:02:f7:a2:f7:9a:f5:ac:84:11:84:f9:33:34: 86:33:f0:b2:69:e9:c6:ee:d5:50:bc:a5:22:54:c4:62:03:24: 9d:14:da:15:01:49:4e:8b:9a:c6:44:67:31:7c:d8:43:12:2a: 80:6c:5e:e2:12:93:3f:0e:d4:18:5b:1e:db:4c:3c:47:c2:c0: 60:09:e7:ef:bd:0b:cb:71:96:8e:f0:0d:c4:af:b5:e8:64:3f: 5f:82:20:fd:3f:28:98:b5:7d:29:da:6d:7c:21:94:4a:68:fb: c7:73:22:35:33:63:f0:d2:47:6e:a9:0e:c1:c6:e7:66:db:aa: 54:1b:6f:a1:dc:38:ee:9a:85:04:da:8a:40:b0:7a:e0:b6:6e: 32:e4:46:fd:73:ad:b3:c9:46:43:76:a0:4a:e8:46:ef:b8:87: f7:e7:7f:27 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC/IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ2N0QxMTAvBgNVBAUTKDVGMUM1MzRBRUVGRjRFMzgwQ0U1QTA5QTEwODRCRjhG NTcwOUVEMDgwHhcNMjYxMDAyMTkxNDM1WhcNMjYxMDA5MTkxNDM1WjAYMRYwFAYD VQQDEw02YWMwMDI5Yi1kNzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArDR0GcdeZT7GcmKfuajHTGvTr0Qbyy+xCC/SG9Nm1PIPFciSW+56g92qhpYS 8PSZg2KOjJ0AfiIgG5sWcKUDjqcTfZZwa9O0OxmlroEp4zYEvekcAUFA5B+rbhfi SYsHnF7oLq08BlwcaX6pW7+oSsqy8iqo9kVoP9oP5xY1rEGEd2hBlWqh5D8WFaB3 yjpXDh54yWTMDe1gFz0hRCYvZBnDzO9j1Qr72tgIsfPu4nDDQ1H+sLr2yDL4j6Vb g5uBJQ8ARdsZjzlpW3IKvjCEujcGCCyTYiu8HQ4q9jLRoj3jx9ZXn+oDNt+vw3XG V7zO9SFgUPYbhXbCpNcO2VxwoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAVJfRR0 L472X2HlwcUj9eleXUxwMB8GA1UdIwQYMBaAFF8cU0ru/044DOWgmhCEv49XCe0I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDY3RC84NDhFN0QxODQ5 QTkxMUVBQTZGREQzMEZDNEY5QUUwMi9YeHhUU3U3X1RqZ001YUNhRUlTX2oxY0o3 UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h4eFRTdTdfVGpnTTVhQ2FFSVNfajFjSjdRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDY3RC84NDhFN0QxODQ5QTkxMUVBQTZGREQzMEZDNEY5QUUwMi9YeHhUU3U3X1Rq Z001YUNhRUlTX2oxY0o3UWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfsjRbuUi9xn1ylWfWyScZ/EPMcqijajrj8qP/G2LGUaXzuxs2VYuPizDPq9U Z/mKvGuIuowA2RtQAPRkqyA5TmjOLFhygJugicQhVIjP3KyLrYkY6H3tL4PXSFFa 5DkC96L3mvWshBGE+TM0hjPwsmnpxu7VULylIlTEYgMknRTaFQFJTouaxkRnMXzY QxIqgGxe4hKTPw7UGFse20w8R8LAYAnn770Ly3GWjvANxK+16GQ/X4Ig/T8omLV9 KdptfCGUSmj7x3MiNTNj8NJHbqkOwcbnZtuqVBtvodw47pqFBNqKQLB64LZuMuRG /XOts8lGQ3agSuhG77iH9+d/Jw== -----END CERTIFICATE-----Generated at Sun Oct 4 19:59:56 2026 by rpki-client