$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft File: 8XD1e07KEpakIh1wemTkKYk7h9Q.mft (raw, json) Hash identifier: syjkxifnBIT0Fad3cd7z8NMHV7kLArqjKtT7W8MU82c= Subject key identifier: 9E:8D:80:30:64:80:AC:03:0D:64:B7:30:33:8E:1F:81:3A:40:D3:9A Authority key identifier: F1:70:F5:7B:4E:CA:12:96:A4:22:1D:70:7A:64:E4:29:89:3B:87:D4 Certificate issuer: /CN=A91C4F28/serialNumber=F170F57B4ECA1296A4221D707A64E429893B87D4 Certificate serial: 022C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft Manifest number: 0222 Signing time: Sun 25 Oct 2026 03:11:21 +0000 Manifest this update: Sun 25 Oct 2026 03:11:20 +0000 Manifest next update: Sun 01 Nov 2026 03:11:20 +0000 Files and hashes: 1: 8XD1e07KEpakIh1wemTkKYk7h9Q.crl (hash: DXC7ULCao0ysin+jk9RfxkQtPer0aXMrn0eaw0QLQPw=) 2: 6DAB109E8DF111EEA5BB4A1BC4F9AE02.roa (hash: p9m+Ky6KPaxoCxqhurBlkPRkCfywo+5r7qphI33Ipdo=) 3: B59362A28D5C11EEADDC522EC4F9AE02.roa (hash: yzwQF5BWuhV75DE3qzozKQNyER1bQqJr/dSB8bkYg7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.crl rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 03:11:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 556 (0x22c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4F28, serialNumber=F170F57B4ECA1296A4221D707A64E429893B87D4 Validity Not Before: Oct 25 03:11:20 2026 GMT Not After : Nov 1 03:11:20 2026 GMT Subject: CN=6add7359-fa4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3f:57:13:e4:a2:27:96:c5:28:45:dc:04:42: 2f:55:2a:c5:74:07:4e:fc:7c:bb:14:27:33:cd:07: c9:8a:aa:17:df:f1:a6:b1:cf:3a:7d:ba:21:c7:ec: 75:59:8e:bf:8c:26:bf:07:a1:a8:bb:cb:cb:57:88: 27:ae:bb:06:12:cd:9e:40:61:93:4a:31:25:4e:4f: 8c:18:08:7b:70:58:b2:ce:79:f2:05:38:62:f2:53: 17:5a:22:c8:7c:7e:ff:f8:8a:bc:a3:38:ce:c1:e8: 17:ff:e6:e1:75:3b:d8:f0:38:c5:e5:cf:de:a1:4a: 13:97:49:a4:c2:be:9f:a4:65:14:04:70:86:af:3c: 7b:f8:e7:f1:48:81:f4:f5:17:f6:8d:c4:66:11:41: d5:87:ac:2d:ce:a0:1b:50:db:eb:7c:30:b4:92:0f: 86:1d:01:b8:b6:e1:b5:10:d4:56:c4:48:14:0e:b5: be:b3:59:2d:fc:f7:a4:f6:f9:4c:8c:58:1b:f2:1a: 70:ef:7b:23:0f:16:23:4f:be:29:b8:00:c1:3c:9d: 02:91:fd:aa:93:8f:0f:80:aa:67:28:85:25:99:43: bb:83:2b:a0:da:f1:02:97:76:1e:c1:0f:3f:07:61: ec:9a:6c:4e:e1:94:9b:39:29:df:a6:8f:9e:01:d7: d7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:8D:80:30:64:80:AC:03:0D:64:B7:30:33:8E:1F:81:3A:40:D3:9A X509v3 Authority Key Identifier: keyid:F1:70:F5:7B:4E:CA:12:96:A4:22:1D:70:7A:64:E4:29:89:3B:87:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:4f:c2:11:76:6c:df:fa:8c:1a:4b:28:3b:21:1a:9c:f4:04: a7:60:f8:7a:eb:6a:72:36:44:90:ba:c5:ab:d2:a9:23:03:a9: e3:1e:58:cd:7e:f7:da:6d:b3:d3:fb:2e:74:74:ce:fe:13:41: 02:f0:e8:74:c7:4d:af:8a:54:bd:6e:f1:53:c9:08:04:e4:ae: 2d:a2:46:9b:41:1f:04:4e:ba:26:e0:25:62:d6:25:bc:a6:e6: fa:f4:d3:df:ec:c7:25:a6:d4:eb:82:df:5d:e2:7b:39:0d:77: 30:c7:59:fb:28:7e:ec:4a:6f:b3:84:10:26:0a:c1:e0:99:8d: 2f:0b:e2:5c:31:3e:c0:a6:20:de:c5:f8:54:6e:10:72:c0:93: ee:92:b9:29:c8:00:bb:9b:8b:e0:77:9d:b6:69:c8:50:1f:26: b3:fb:4d:5c:d0:74:9e:c1:83:70:f8:c3:e1:81:7d:50:6c:c9: 01:9a:df:ff:92:e7:6b:90:f7:65:39:1e:03:ba:46:04:6b:d3: f7:32:bc:a1:cb:61:bc:b3:f5:fe:b8:c7:e1:9a:96:23:76:be: f1:5e:40:1e:c1:76:79:13:1c:1c:04:77:06:36:8a:a5:7f:95: de:86:4d:19:0e:c9:b2:16:51:0d:e5:f8:92:69:d0:ca:99:ee: 84:98:fd:dd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRGMjgxMTAvBgNVBAUTKEYxNzBGNTdCNEVDQTEyOTZBNDIyMUQ3MDdBNjRFNDI5 ODkzQjg3RDQwHhcNMjYxMDI1MDMxMTIwWhcNMjYxMTAxMDMxMTIwWjAYMRYwFAYD VQQDEw02YWRkNzM1OS1mYTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3T9XE+SiJ5bFKEXcBEIvVSrFdAdO/Hy7FCczzQfJiqoX3/Gmsc86fbohx+x1 WY6/jCa/B6Gou8vLV4gnrrsGEs2eQGGTSjElTk+MGAh7cFiyznnyBThi8lMXWiLI fH7/+Iq8ozjOwegX/+bhdTvY8DjF5c/eoUoTl0mkwr6fpGUUBHCGrzx7+OfxSIH0 9Rf2jcRmEUHVh6wtzqAbUNvrfDC0kg+GHQG4tuG1ENRWxEgUDrW+s1kt/Pek9vlM jFgb8hpw73sjDxYjT74puADBPJ0Ckf2qk48PgKpnKIUlmUO7gyug2vECl3YewQ8/ B2HsmmxO4ZSbOSnfpo+eAdfX8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ6NgDBk gKwDDWS3MDOOH4E6QNOaMB8GA1UdIwQYMBaAFPFw9XtOyhKWpCIdcHpk5CmJO4fU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEYyOC9GNTdGRDBCODhE NTYxMUVFOTc4N0U3ODNDNEY5QUUwMi84WEQxZTA3S0VwYWtJaDF3ZW1Ua0tZazdo OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhYRDFlMDdLRXBha0loMXdlbVRrS1lrN2g5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEYyOC9GNTdGRDBCODhENTYxMUVFOTc4N0U3ODNDNEY5QUUwMi84WEQxZTA3S0Vw YWtJaDF3ZW1Ua0tZazdoOVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJk/CEXZs3/qMGksoOyEanPQEp2D4eutqcjZEkLrFq9KpIwOp4x5YzX732m2z 0/sudHTO/hNBAvDodMdNr4pUvW7xU8kIBOSuLaJGm0EfBE66JuAlYtYlvKbm+vTT 3+zHJabU64LfXeJ7OQ13MMdZ+yh+7Epvs4QQJgrB4JmNLwviXDE+wKYg3sX4VG4Q csCT7pK5KcgAu5uL4HedtmnIUB8ms/tNXNB0nsGDcPjD4YF9UGzJAZrf/5Lna5D3 ZTkeA7pGBGvT9zK8octhvLP1/rjH4ZqWI3a+8V5AHsF2eRMcHAR3BjaKpX+V3oZN GQ7JshZRDeX4kmnQypnuhJj93Q== -----END CERTIFICATE-----Generated at Mon Oct 26 22:07:44 2026 by rpki-client