$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.mft File: XfR-KSrUurlNOGn6L8YKoOauKlM.mft (raw, json) Hash identifier: 4WrL9nJ5Oc6pB7zrTkNAqVJyjnwQxN4y6tsfRudgayY= Subject key identifier: 85:9E:3B:22:65:EF:37:21:B4:0E:3B:5C:5A:71:DD:C7:A9:16:4F:1E Authority key identifier: 5D:F4:7E:29:2A:D4:BA:B9:4D:38:69:FA:2F:C6:0A:A0:E6:AE:2A:53 Certificate issuer: /CN=A91B3F7E/serialNumber=5DF47E292AD4BAB94D3869FA2FC60AA0E6AE2A53 Certificate serial: 6A Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XfR-KSrUurlNOGn6L8YKoOauKlM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.mft Manifest number: 67 Signing time: Fri 23 Oct 2026 08:37:22 +0000 Manifest this update: Fri 23 Oct 2026 08:37:21 +0000 Manifest next update: Fri 30 Oct 2026 08:37:21 +0000 Files and hashes: 1: XfR-KSrUurlNOGn6L8YKoOauKlM.crl (hash: e3EZKy6Ri1WAEDr/gcgWrqORTYlGq7jTa3/lRNxymqE=) 2: E4AEB564380411F18536626792833773.roa (hash: zitRbSJcod3PTnS9PbBAV9aJ63tkxcQRzV7LIm/6eKY=) 3: FFF84A263A6911F18AE46050B0833773.roa (hash: ssv7cVlED2mj0Y5ViP5sQGZ6qpip26ujoYvi6duDnsE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.crl rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XfR-KSrUurlNOGn6L8YKoOauKlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 08:37:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3F7E, serialNumber=5DF47E292AD4BAB94D3869FA2FC60AA0E6AE2A53 Validity Not Before: Oct 23 08:37:21 2026 GMT Not After : Oct 30 08:37:21 2026 GMT Subject: CN=6adb1cc2-c60e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6c:89:9c:8d:07:6e:25:18:c2:bd:02:23:a0: c1:d7:cd:34:15:08:6f:3a:14:12:5b:59:b6:ce:2a: 73:17:fc:1d:16:f6:e5:82:0a:9d:d1:fc:37:6d:77: fa:af:aa:49:ee:7d:e6:5a:a3:d0:e9:da:12:d0:1a: 86:97:db:07:a5:91:ff:82:86:ef:7d:f2:46:b2:be: de:0d:92:5c:f0:c5:cf:67:6f:cd:20:04:28:a7:3d: 1c:0b:9a:d8:4c:64:13:ac:c3:db:c0:ed:33:1a:d1: 6a:94:61:b2:39:9f:7c:7f:7d:ad:4d:4e:03:72:15: 15:9b:28:b7:8b:75:f4:48:08:0c:35:2d:c9:7c:9b: 17:13:13:4e:07:a2:8e:52:c3:73:11:fb:fb:43:56: d1:71:6b:4a:13:b0:de:e2:f2:f6:e2:ff:fc:77:07: ae:67:9f:74:31:df:2c:62:cd:93:83:c7:3b:10:77: bf:5e:d7:c3:62:71:ad:0b:8e:90:2e:03:64:fb:6e: e2:94:79:ea:da:ee:70:69:e0:0f:a2:7d:0b:f1:0d: 2c:ca:75:d8:3f:16:e6:ab:64:4a:09:e0:01:d0:df: c3:d7:a0:9c:93:80:36:4a:d1:c6:ee:a3:1d:0e:7b: b9:06:b5:73:8d:e4:30:cc:63:dd:df:55:da:06:59: 6a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:9E:3B:22:65:EF:37:21:B4:0E:3B:5C:5A:71:DD:C7:A9:16:4F:1E X509v3 Authority Key Identifier: keyid:5D:F4:7E:29:2A:D4:BA:B9:4D:38:69:FA:2F:C6:0A:A0:E6:AE:2A:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XfR-KSrUurlNOGn6L8YKoOauKlM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:00:6e:f9:a7:d4:01:5a:d0:c6:dd:4e:04:ed:43:aa:74:d7: d3:a7:e9:db:a9:b1:44:98:20:7b:01:e6:12:d6:15:30:55:d6: 21:c4:b6:2b:72:89:fb:e4:ca:6a:46:dc:99:68:78:ba:83:f9: 74:44:a3:c1:06:18:53:f3:f3:f3:d0:4d:14:c5:ff:9d:67:f8: 08:49:2a:2b:a5:1c:8f:27:a8:11:c4:e5:a8:15:a9:65:5c:3f: db:de:7b:95:6e:a7:d6:dd:ee:b0:5f:12:b3:81:f9:39:c8:93: 22:0a:1a:02:38:dc:eb:2e:0f:38:6e:21:30:a7:50:31:12:fa: 07:f6:a0:ef:94:9f:91:e4:99:71:db:1a:54:cc:7f:f9:c2:94: 9b:fb:4f:fd:e6:d6:59:50:5f:27:02:8c:4e:5d:2a:2c:62:7a: 6d:37:a9:1d:12:cc:f6:72:03:cc:33:5c:d9:1b:e1:fd:52:df: 71:45:02:f0:1f:13:e6:d2:da:e6:76:b7:1f:fe:90:43:55:54: 0e:b2:1c:c6:32:ec:b2:fc:f8:e1:46:6d:2d:bb:1a:c7:26:24: cd:38:25:fc:bb:a3:34:2a:6d:43:38:c3:77:34:f2:8c:83:cd: bd:97:10:2c:72:d6:79:ba:c0:87:ed:8b:07:14:52:e7:63:be: b8:2a:a4:8f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC M0Y3RTExMC8GA1UEBRMoNURGNDdFMjkyQUQ0QkFCOTREMzg2OUZBMkZDNjBBQTBF NkFFMkE1MzAeFw0yNjEwMjMwODM3MjFaFw0yNjEwMzAwODM3MjFaMBgxFjAUBgNV BAMTDTZhZGIxY2MyLWM2MGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpbImcjQduJRjCvQIjoMHXzTQVCG86FBJbWbbOKnMX/B0W9uWCCp3R/Ddtd/qv qknufeZao9Dp2hLQGoaX2welkf+Chu998kayvt4Nklzwxc9nb80gBCinPRwLmthM ZBOsw9vA7TMa0WqUYbI5n3x/fa1NTgNyFRWbKLeLdfRICAw1Lcl8mxcTE04Hoo5S w3MR+/tDVtFxa0oTsN7i8vbi//x3B65nn3Qx3yxizZODxzsQd79e18Nica0LjpAu A2T7buKUeera7nBp4A+ifQvxDSzKddg/FuarZEoJ4AHQ38PXoJyTgDZK0cbuox0O e7kGtXON5DDMY93fVdoGWWoBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUhZ47ImXv NyG0DjtcWnHdx6kWTx4wHwYDVR0jBBgwFoAUXfR+KSrUurlNOGn6L8YKoOauKlMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzRjdFLzVBMTI0NTM4MzY2 MDExRjFCMEQzMEExNkNBODMzNzczL1hmUi1LU3JVdXJsTk9HbjZMOFlLb09hdUts TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvWGZSLUtTclV1cmxOT0duNkw4WUtvT2F1S2xNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz RjdFLzVBMTI0NTM4MzY2MDExRjFCMEQzMEExNkNBODMzNzczL1hmUi1LU3JVdXJs Tk9HbjZMOFlLb09hdUtsTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAUAG75p9QBWtDG3U4E7UOqdNfTp+nbqbFEmCB7AeYS1hUwVdYhxLYrcon75Mpq RtyZaHi6g/l0RKPBBhhT8/Pz0E0Uxf+dZ/gISSorpRyPJ6gRxOWoFallXD/b3nuV bqfW3e6wXxKzgfk5yJMiChoCONzrLg84biEwp1AxEvoH9qDvlJ+R5Jlx2xpUzH/5 wpSb+0/95tZZUF8nAoxOXSosYnptN6kdEsz2cgPMM1zZG+H9Ut9xRQLwHxPm0trm drcf/pBDVVQOshzGMuyy/PjhRm0tuxrHJiTNOCX8u6M0Km1DOMN3NPKMg829lxAs ctZ5usCH7YsHFFLnY764KqSP -----END CERTIFICATE-----Generated at Fri Oct 23 20:23:23 2026 by rpki-client