$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.mft File: XdRoWi6WsUFvfNM1zetK0YIvfes.mft (raw, json) Hash identifier: c/WLY3wZ7Gw48lxFjN0LTD0KM+DkqGhOmHdHGMHCbqc= Subject key identifier: C4:17:39:61:CD:80:7F:56:98:D2:F9:23:CE:89:E2:0E:83:C2:24:88 Authority key identifier: 5D:D4:68:5A:2E:96:B1:41:6F:7C:D3:35:CD:EB:4A:D1:82:2F:7D:EB Certificate issuer: /CN=A91AF01C/serialNumber=5DD4685A2E96B1416F7CD335CDEB4AD1822F7DEB Certificate serial: 028E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XdRoWi6WsUFvfNM1zetK0YIvfes.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.mft Manifest number: 0281 Signing time: Sat 03 Oct 2026 02:35:10 +0000 Manifest this update: Sat 03 Oct 2026 02:35:09 +0000 Manifest next update: Sat 10 Oct 2026 02:35:09 +0000 Files and hashes: 1: XdRoWi6WsUFvfNM1zetK0YIvfes.crl (hash: 1sAZyMlCVDpgQdtq7NoNoP9ERE/9Gjm3oMyqhgdf84M=) 2: 297CAAF2600F11F19DD612FE8747A888.roa (hash: 3caSMOx+p5Jr6uBlGiryWygb4IBsCl4CdewfhyZYMAk=) 3: 4C1DFC6E600F11F1B719D3058847A888.roa (hash: XI/6ywdBOKZJkA6ntRfKeh+vbgYn6sdPFXnFJIGb2HE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.crl rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XdRoWi6WsUFvfNM1zetK0YIvfes.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 02:35:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 654 (0x28e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF01C, serialNumber=5DD4685A2E96B1416F7CD335CDEB4AD1822F7DEB Validity Not Before: Oct 3 02:35:09 2026 GMT Not After : Oct 10 02:35:09 2026 GMT Subject: CN=6ac069de-b549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:9a:0e:8a:ce:1b:79:d9:8d:5e:5d:59:42:d3: 28:7f:8b:41:42:b6:3d:24:49:25:65:93:0f:18:d6: d9:e1:0d:99:7c:85:1a:52:e6:e0:e8:71:1e:25:b8: a4:64:54:ef:c1:7c:53:1d:16:4c:78:ec:b8:5c:a4: bb:e8:0d:7c:eb:66:10:70:8d:f9:7b:72:8f:a8:7d: 89:71:07:e7:c7:e2:53:99:49:e4:c7:e7:b6:73:1d: 9d:0e:55:7d:39:a0:a2:a1:a6:d5:9c:79:ce:67:dc: 78:55:1d:6d:ca:ff:d3:02:b0:c2:fe:48:9e:19:4e: ea:47:40:bc:91:29:ec:44:ef:3e:77:87:c8:4e:8b: 55:b7:e3:4f:23:9d:a1:0c:64:92:90:76:ff:5b:55: 34:b7:31:a9:1b:33:12:50:21:a8:84:27:c8:46:95: b7:ef:58:ec:a6:95:d3:b0:f5:b4:d3:0d:69:14:b2: 25:8e:5b:b4:0b:1c:8e:43:a7:da:49:71:9a:08:f5: b8:bd:9a:d5:bb:15:4d:55:0f:7e:e3:6f:b2:2a:d9: e9:3d:d3:2d:e2:86:03:5a:6e:ee:01:f2:21:8d:36: ee:e8:8e:5a:77:47:20:dc:74:e9:1b:53:2b:11:2f: 27:20:94:d7:78:a9:fe:c6:ff:0d:b4:06:d9:25:3e: cf:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:17:39:61:CD:80:7F:56:98:D2:F9:23:CE:89:E2:0E:83:C2:24:88 X509v3 Authority Key Identifier: keyid:5D:D4:68:5A:2E:96:B1:41:6F:7C:D3:35:CD:EB:4A:D1:82:2F:7D:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XdRoWi6WsUFvfNM1zetK0YIvfes.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:84:a7:80:f7:9e:be:55:f8:5f:9e:d8:b9:b2:be:dd:8b:1a: 61:fa:dc:88:38:25:65:bc:70:ac:35:9b:79:0e:d9:f3:8f:08: 4d:19:87:a5:62:e5:48:81:8c:6f:e0:49:55:6f:1b:54:9e:06: 0b:e7:db:79:03:e6:07:45:0c:2a:83:64:b0:c2:a6:18:81:f5: 41:64:79:73:d6:83:1e:84:5c:9f:08:52:ac:01:69:85:3d:55: 81:6b:95:e8:5e:eb:e6:fc:98:d1:ec:28:2f:d3:40:76:f0:03: 76:f3:93:e5:1d:b9:22:e5:5e:ca:95:0f:db:d9:c2:4b:c8:c3: d8:41:d9:2c:0a:cf:5b:88:64:eb:c0:d7:f0:db:fb:59:93:a4: 56:b0:37:c6:0b:1d:79:b1:a6:aa:b5:b5:13:96:05:00:e1:a4: 30:15:8e:4d:df:27:eb:fb:08:0c:7a:73:08:b4:f4:46:13:45: 7e:cd:0b:ae:02:fe:a0:c5:f5:f3:b1:0c:f5:2c:71:c9:e6:79: 7e:a3:d7:10:7b:90:a1:5c:19:dd:52:c4:04:61:3a:1d:af:ba: dc:17:ff:0f:cc:50:56:d3:cf:90:8b:ac:d1:e5:03:8c:ed:9d: 52:92:27:b7:3a:5b:46:67:9f:1d:88:d6:e9:b8:43:11:dc:01: 90:26:b5:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYwMUMxMTAvBgNVBAUTKDVERDQ2ODVBMkU5NkIxNDE2RjdDRDMzNUNERUI0QUQx ODIyRjdERUIwHhcNMjYxMDAzMDIzNTA5WhcNMjYxMDEwMDIzNTA5WjAYMRYwFAYD VQQDEw02YWMwNjlkZS1iNTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5JoOis4bedmNXl1ZQtMof4tBQrY9JEklZZMPGNbZ4Q2ZfIUaUubg6HEeJbik ZFTvwXxTHRZMeOy4XKS76A1862YQcI35e3KPqH2JcQfnx+JTmUnkx+e2cx2dDlV9 OaCioabVnHnOZ9x4VR1tyv/TArDC/kieGU7qR0C8kSnsRO8+d4fITotVt+NPI52h DGSSkHb/W1U0tzGpGzMSUCGohCfIRpW371jsppXTsPW00w1pFLIljlu0CxyOQ6fa SXGaCPW4vZrVuxVNVQ9+42+yKtnpPdMt4oYDWm7uAfIhjTbu6I5ad0cg3HTpG1Mr ES8nIJTXeKn+xv8NtAbZJT7PPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMQXOWHN gH9WmNL5I86J4g6DwiSIMB8GA1UdIwQYMBaAFF3UaFoulrFBb3zTNc3rStGCL33r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjAxQy9FNUQ5RTczNEZB Q0IxMUVEQjhGOTdEODVDNEY5QUUwMi9YZFJvV2k2V3NVRnZmTk0xemV0SzBZSXZm ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hkUm9XaTZXc1VGdmZOTTF6ZXRLMFlJdmZlcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjAxQy9FNUQ5RTczNEZBQ0IxMUVEQjhGOTdEODVDNEY5QUUwMi9YZFJvV2k2V3NV RnZmTk0xemV0SzBZSXZmZXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsYSngPeevlX4X57YubK+3YsaYfrciDglZbxwrDWbeQ7Z848ITRmHpWLlSIGM b+BJVW8bVJ4GC+fbeQPmB0UMKoNksMKmGIH1QWR5c9aDHoRcnwhSrAFphT1VgWuV 6F7r5vyY0ewoL9NAdvADdvOT5R25IuVeypUP29nCS8jD2EHZLArPW4hk68DX8Nv7 WZOkVrA3xgsdebGmqrW1E5YFAOGkMBWOTd8n6/sIDHpzCLT0RhNFfs0LrgL+oMX1 87EM9SxxyeZ5fqPXEHuQoVwZ3VLEBGE6Ha+63Bf/D8xQVtPPkIus0eUDjO2dUpIn tzpbRmefHYjW6bhDEdwBkCa1/g== -----END CERTIFICATE-----Generated at Sun Oct 4 19:56:36 2026 by rpki-client