$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft File: xzON8bdowFB0za7Q_bGkwUrfuLU.mft (raw, json) Hash identifier: 3dGwrxTpHnQHlvA7qBp1BW+kttwc+vmdYLgCCJpGrCM= Subject key identifier: 84:91:7C:B4:ED:D7:46:60:FD:6D:14:3C:29:36:22:95:08:C9:E7:C8 Authority key identifier: C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5 Certificate issuer: /CN=A91C167F/serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5 Certificate serial: 0244 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft Manifest number: 0225 Signing time: Thu 29 Oct 2026 03:48:28 +0000 Manifest this update: Thu 29 Oct 2026 03:48:28 +0000 Manifest next update: Thu 05 Nov 2026 03:48:28 +0000 Files and hashes: 1: xzON8bdowFB0za7Q_bGkwUrfuLU.crl (hash: 7niAzSddVK8M6SdPiQK32uffilGykrEkRrFYl3ZzSBY=) 2: 7DA50F9C3E0B11F09779DF13C4F9AE02.roa (hash: A2+Rc3xoTrncaTR95Sq9MBAmQnYMit+OOLZAoM52Nuk=) 3: A2516E42DE4511EF8C37E320C4F9AE02.roa (hash: xo/EJ3CaHdIPdWdGQ1WzSAADuENiwShLJFxclFWUKsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.crl rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 03:48:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 580 (0x244) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C167F, serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5 Validity Not Before: Oct 29 03:48:28 2026 GMT Not After : Nov 5 03:48:28 2026 GMT Subject: CN=6ae2c20c-1c0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:49:c3:2a:df:1b:3c:55:dc:6d:8a:0c:09:77: a3:60:bf:b5:32:59:40:81:ef:43:e2:fa:b3:4f:9f: b5:fa:00:ce:a4:17:62:c0:4a:81:0a:10:6f:04:2a: 07:4f:e6:94:ef:3e:c5:60:53:5b:88:41:55:8c:b8: ab:19:e1:6b:ae:df:aa:01:03:9c:a3:cd:db:3e:9b: b0:d6:2e:60:c3:67:06:c7:dd:de:be:8c:89:c7:91: 7c:4e:26:89:d6:19:5a:00:c0:87:92:bb:13:7a:7a: b4:2a:e3:be:5c:3f:17:06:69:d0:db:73:f5:96:a1: 13:c6:ca:80:3d:51:78:2e:28:59:98:11:78:41:14: be:c7:f2:d5:80:5c:6d:44:97:2d:44:6f:35:d2:a9: 02:7b:57:34:5d:d0:a5:16:80:5e:93:56:0f:c1:2c: ea:7f:ed:e0:51:41:56:b2:3f:0b:18:7e:7a:b3:c9: 05:54:85:56:40:87:ef:56:43:3b:f5:f0:70:37:7e: 1e:a0:bd:5f:6f:e0:4a:aa:92:02:29:e0:0f:3e:b4: 71:fd:8e:df:5c:9c:dd:6d:75:89:8b:8a:52:6d:fc: cc:9b:4f:72:6e:37:82:4c:e3:a5:ca:3a:ae:03:9f: 31:ab:a7:43:cf:98:7f:5e:64:21:8e:d2:18:20:88: 02:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:91:7C:B4:ED:D7:46:60:FD:6D:14:3C:29:36:22:95:08:C9:E7:C8 X509v3 Authority Key Identifier: keyid:C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:23:fd:e0:80:17:47:41:65:b6:e8:33:c8:9f:5d:89:fc:df: 3d:9b:85:88:5d:38:74:e1:df:9a:c0:b9:19:17:48:89:f9:68: 85:0a:00:ae:10:6d:b7:76:f0:bd:02:e3:a2:42:bb:d8:5c:1e: a0:9f:4f:61:2f:06:0d:d2:8c:0f:71:79:c3:f3:29:ef:89:b0: 39:76:68:5c:3c:3f:35:d0:55:d9:c5:dd:cd:2a:5c:fb:f4:e9: c4:05:ce:1a:32:8f:2e:4d:67:e8:69:69:d5:e3:38:87:57:64: 65:36:17:a2:23:0a:a6:69:ff:e3:1d:ff:9a:9c:31:f4:3e:dd: 37:b0:d2:e0:4a:82:1e:45:42:fa:56:57:7e:89:7e:e8:a6:2d: 40:60:5d:1d:de:e1:f5:38:94:06:fc:ba:82:24:4e:aa:71:0f: af:86:8a:d7:98:14:4d:c0:87:36:bf:7e:21:6e:0b:a8:d7:7a: 9a:7d:be:7f:72:e8:15:a3:6e:d1:8e:29:a7:bf:03:7d:d2:4a: a9:c7:6c:cc:b1:1b:92:98:e0:a5:d1:83:86:4a:8f:9a:b0:09: d5:f4:95:2a:bb:95:11:9b:8b:57:10:69:4d:bb:54:14:19:2e: ab:8c:30:fb:6a:9d:6b:f8:80:eb:a1:e6:b0:81:fb:82:99:06: 35:af:a3:26 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE2N0YxMTAvBgNVBAUTKEM3MzM4REYxQjc2OEMwNTA3NENEQUVEMEZEQjFBNEMx NEFERkI4QjUwHhcNMjYxMDI5MDM0ODI4WhcNMjYxMTA1MDM0ODI4WjAYMRYwFAYD VQQDEw02YWUyYzIwYy0xYzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvknDKt8bPFXcbYoMCXejYL+1MllAge9D4vqzT5+1+gDOpBdiwEqBChBvBCoH T+aU7z7FYFNbiEFVjLirGeFrrt+qAQOco83bPpuw1i5gw2cGx93evoyJx5F8TiaJ 1hlaAMCHkrsTenq0KuO+XD8XBmnQ23P1lqETxsqAPVF4LihZmBF4QRS+x/LVgFxt RJctRG810qkCe1c0XdClFoBek1YPwSzqf+3gUUFWsj8LGH56s8kFVIVWQIfvVkM7 9fBwN34eoL1fb+BKqpICKeAPPrRx/Y7fXJzdbXWJi4pSbfzMm09ybjeCTOOlyjqu A58xq6dDz5h/XmQhjtIYIIgCtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFISRfLTt 10Zg/W0UPCk2IpUIyefIMB8GA1UdIwQYMBaAFMczjfG3aMBQdM2u0P2xpMFK37i1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTY3Ri80QUFCN0JDQUM0 N0QxMUVFOUZDN0M4MEZDNEY5QUUwMi94ek9OOGJkb3dGQjB6YTdRX2JHa3dVcmZ1 TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3h6T044YmRvd0ZCMHphN1FfYkdrd1VyZnVMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTY3Ri80QUFCN0JDQUM0N0QxMUVFOUZDN0M4MEZDNEY5QUUwMi94ek9OOGJkb3dG QjB6YTdRX2JHa3dVcmZ1TFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZSP94IAXR0FltugzyJ9difzfPZuFiF04dOHfmsC5GRdIiflohQoArhBtt3bw vQLjokK72FweoJ9PYS8GDdKMD3F5w/Mp74mwOXZoXDw/NdBV2cXdzSpc+/TpxAXO GjKPLk1n6Glp1eM4h1dkZTYXoiMKpmn/4x3/mpwx9D7dN7DS4EqCHkVC+lZXfol+ 6KYtQGBdHd7h9TiUBvy6giROqnEPr4aK15gUTcCHNr9+IW4LqNd6mn2+f3LoFaNu 0Y4pp78DfdJKqcdszLEbkpjgpdGDhkqPmrAJ1fSVKruVEZuLVxBpTbtUFBkuq4ww +2qda/iA66HmsIH7gpkGNa+jJg== -----END CERTIFICATE-----Generated at Fri Oct 30 19:12:19 2026 by rpki-client