$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft File: AXCw4NBuMUc8rBZOSwttIb300jc.mft (raw, json) Hash identifier: i9nEAE0voVQ0fSMzb06l7mtw3K6uSkGWlZinvb3yR7Y= Subject key identifier: E5:88:B3:11:D9:81:5A:97:DC:D9:E2:BE:1E:79:AC:C4:9F:8A:F6:4A Authority key identifier: 01:70:B0:E0:D0:6E:31:47:3C:AC:16:4E:4B:0B:6D:21:BD:F4:D2:37 Certificate issuer: /CN=A91AE9F7/serialNumber=0170B0E0D06E31473CAC164E4B0B6D21BDF4D237 Certificate serial: 10DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft Manifest number: 10D0 Signing time: Sun 04 Oct 2026 17:21:41 +0000 Manifest this update: Sun 04 Oct 2026 17:21:40 +0000 Manifest next update: Sun 11 Oct 2026 17:21:40 +0000 Files and hashes: 1: AXCw4NBuMUc8rBZOSwttIb300jc.crl (hash: ZNr73vAI7I6nmUX5dUJJwRsckx3OCQtRbYijXceito4=) 2: 1585570A544C11E9BDFF2B2DC4F9AE02.roa (hash: qFHFmRVCbMNHnJYtHdzfYVVLl0Q/VMUun8JPyz9/IMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.crl rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 17:21:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4319 (0x10df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE9F7, serialNumber=0170B0E0D06E31473CAC164E4B0B6D21BDF4D237 Validity Not Before: Oct 4 17:21:40 2026 GMT Not After : Oct 11 17:21:40 2026 GMT Subject: CN=6ac28b25-b3d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:97:63:f5:f0:8c:c8:e0:b9:47:03:b0:f8:b5: e3:77:35:7b:7b:29:84:7a:65:7f:dd:1d:93:81:72: 49:51:d9:4a:89:24:19:73:9b:69:89:23:78:83:ab: 05:07:30:c7:09:f1:d8:11:33:3e:e8:1b:8c:03:b5: d2:85:27:99:89:91:be:d6:04:ae:d1:71:0d:e6:c3: 41:80:12:53:53:d8:71:62:4d:0c:94:bb:48:99:30: c2:11:95:64:53:65:c0:59:b0:c9:79:89:d6:8c:b8: d4:9d:1d:7a:12:14:90:93:91:27:ff:f4:4e:65:0e: 7e:eb:b1:75:7c:57:af:ef:b5:b0:55:df:51:1e:39: 1b:3d:33:b7:f6:fc:35:31:1c:39:e1:37:31:c5:4c: 65:93:2e:f3:02:6e:34:a1:eb:4c:c5:c4:39:05:90: 48:8e:3c:c1:c2:2f:5b:f4:81:73:e9:4a:22:67:0d: 79:83:a5:9d:3e:44:ad:a1:c9:ae:e6:5c:b5:74:f2: e5:f9:a5:16:94:08:7d:77:b0:28:87:2b:79:5e:27: 25:87:4b:57:8c:96:71:66:20:43:9e:66:79:5a:a1: 0f:11:69:1d:85:8d:2c:6f:ef:f2:25:f6:82:0b:fd: e2:af:d6:f1:83:05:75:c8:da:71:2a:7c:b1:ca:f6: 9d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:88:B3:11:D9:81:5A:97:DC:D9:E2:BE:1E:79:AC:C4:9F:8A:F6:4A X509v3 Authority Key Identifier: keyid:01:70:B0:E0:D0:6E:31:47:3C:AC:16:4E:4B:0B:6D:21:BD:F4:D2:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:6b:fb:bc:d1:e7:f5:35:5d:38:11:12:04:33:a6:f5:91:e3: 0f:1a:a9:63:8a:3b:ae:8f:3a:aa:21:f5:f5:4c:1e:15:8a:e7: ad:ed:c6:82:79:85:18:54:73:39:da:d5:5f:fe:bc:2f:d5:c1: 78:74:01:d3:98:a3:6f:e6:a7:1c:06:a6:f1:8d:1b:e2:a1:c7: 84:4c:35:14:f1:76:1f:f4:97:b4:b1:95:29:36:47:78:d6:18: 14:19:be:ed:e3:ce:ef:0c:bc:ec:e9:34:9d:75:b5:c7:6b:85: 1d:47:7b:c7:8f:7c:6d:44:e3:c2:db:8d:43:c8:6a:9c:27:49: 3a:46:69:4e:d2:4a:3d:3c:62:61:48:5d:47:25:00:12:bf:cc: 77:75:da:8c:28:43:dc:2b:ab:ac:52:91:e9:cc:12:b2:db:00: a7:6d:d1:e6:74:e0:ab:a1:9f:fe:3c:94:c5:f4:b5:ee:1a:4b: 92:b0:fd:67:e1:2e:d9:08:77:c1:8b:3b:ef:8e:04:34:d5:72: ee:8a:4f:e9:47:67:2e:8b:d3:7c:6d:d6:7a:3e:1e:b8:60:1e: f4:ff:8b:85:9e:35:0d:27:ec:b0:d0:89:ec:bb:f4:c9:9f:e8: 5a:f2:2e:36:05:b0:4a:80:65:84:44:2f:80:30:e1:9c:4d:a5: f8:f4:de:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU5RjcxMTAvBgNVBAUTKDAxNzBCMEUwRDA2RTMxNDczQ0FDMTY0RTRCMEI2RDIx QkRGNEQyMzcwHhcNMjYxMDA0MTcyMTQwWhcNMjYxMDExMTcyMTQwWjAYMRYwFAYD VQQDEw02YWMyOGIyNS1iM2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt5dj9fCMyOC5RwOw+LXjdzV7eymEemV/3R2TgXJJUdlKiSQZc5tpiSN4g6sF BzDHCfHYETM+6BuMA7XShSeZiZG+1gSu0XEN5sNBgBJTU9hxYk0MlLtImTDCEZVk U2XAWbDJeYnWjLjUnR16EhSQk5En//ROZQ5+67F1fFev77WwVd9RHjkbPTO39vw1 MRw54TcxxUxlky7zAm40oetMxcQ5BZBIjjzBwi9b9IFz6UoiZw15g6WdPkStocmu 5ly1dPLl+aUWlAh9d7Aohyt5Xiclh0tXjJZxZiBDnmZ5WqEPEWkdhY0sb+/yJfaC C/3ir9bxgwV1yNpxKnyxyvadmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOWIsxHZ gVqX3Nnivh55rMSfivZKMB8GA1UdIwQYMBaAFAFwsODQbjFHPKwWTksLbSG99NI3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTlGNy8zNzlFQzc0MjU0 NEExMUU5QTM1MEMxMjdDNEY5QUUwMi9BWEN3NE5CdU1VYzhyQlpPU3d0dEliMzAw amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FYQ3c0TkJ1TVVjOHJCWk9Td3R0SWIzMDBqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTlGNy8zNzlFQzc0MjU0NEExMUU5QTM1MEMxMjdDNEY5QUUwMi9BWEN3NE5CdU1V YzhyQlpPU3d0dEliMzAwamMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmGv7vNHn9TVdOBESBDOm9ZHjDxqpY4o7ro86qiH19UweFYrnre3GgnmFGFRz OdrVX/68L9XBeHQB05ijb+anHAam8Y0b4qHHhEw1FPF2H/SXtLGVKTZHeNYYFBm+ 7ePO7wy87Ok0nXW1x2uFHUd7x498bUTjwtuNQ8hqnCdJOkZpTtJKPTxiYUhdRyUA Er/Md3XajChD3CurrFKR6cwSstsAp23R5nTgq6Gf/jyUxfS17hpLkrD9Z+Eu2Qh3 wYs7744ENNVy7opP6UdnLovTfG3Wej4euGAe9P+LhZ41DSfssNCJ7Lv0yZ/oWvIu NgWwSoBlhEQvgDDhnE2l+PTe9g== -----END CERTIFICATE-----Generated at Mon Oct 5 10:55:50 2026 by rpki-client