$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft File: Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft (raw, json) Hash identifier: 1E5DgKZWc5GvVaJxgMd4QlqKyj6hJzqTFgRjmKLu2Lo= Subject key identifier: D2:40:AA:BC:A5:32:99:52:97:02:57:14:FF:4B:BF:5D:67:35:37:03 Authority key identifier: 5D:DF:DD:38:31:56:FA:5B:65:34:11:2E:9C:8E:15:3B:B2:00:57:C6 Certificate issuer: /CN=A91CB6E8/serialNumber=5DDFDD383156FA5B6534112E9C8E153BB20057C6 Certificate serial: C9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xd_dODFW-ltlNBEunI4VO7IAV8Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft Manifest number: C3 Signing time: Sun 25 Oct 2026 07:16:07 +0000 Manifest this update: Sun 25 Oct 2026 07:16:06 +0000 Manifest next update: Sun 01 Nov 2026 07:16:06 +0000 Files and hashes: 1: Xd_dODFW-ltlNBEunI4VO7IAV8Y.crl (hash: iZ6pPPmV6F6C6Gew5WUN6cxYZz7kSqsb2RcurgeZGZw=) 2: 1104D6A2AF1611F0AF70E679C4F9AE02.roa (hash: /VVN1pVbvBgJGM41ZpQK+E66Yb+yIlM6xDFzrudcVdc=) 3: 65FAD636AF1411F0BE4BF94FC4F9AE02.roa (hash: 9hr6Mrcekj4wBtLXcM+jj6TwfopvR4qZFirKjaGVgSI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.crl rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xd_dODFW-ltlNBEunI4VO7IAV8Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 07:16:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 201 (0xc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB6E8, serialNumber=5DDFDD383156FA5B6534112E9C8E153BB20057C6 Validity Not Before: Oct 25 07:16:06 2026 GMT Not After : Nov 1 07:16:06 2026 GMT Subject: CN=6addacb7-e218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d7:34:cb:da:37:5c:00:d4:92:78:44:95:88: 2e:a1:bf:c2:e1:e1:fe:09:8b:36:e4:6f:ff:4f:51: 46:cd:c0:41:ae:db:9d:8f:6e:bc:29:38:4f:25:6f: 00:e8:7d:e9:7d:28:73:f3:d3:e1:0d:83:cb:59:26: ca:18:54:87:24:1c:11:1c:b5:4c:ed:6a:2e:01:2e: 7c:22:c0:d7:c1:df:7d:85:b7:7a:54:84:48:29:d5: 88:2a:79:be:8a:99:b6:41:ed:c4:00:93:4d:ac:0e: a2:d2:04:58:14:d5:b7:01:12:59:19:99:0c:b7:e1: 2f:1b:9b:2b:68:c5:19:90:a3:f0:72:62:ce:db:22: 7f:2c:a4:1a:61:36:65:5d:1d:99:88:4c:9d:d0:ee: af:01:6e:50:ec:75:80:51:cd:11:8d:d5:bd:d6:ca: c1:eb:f0:a5:26:54:d9:b6:91:eb:3b:c1:ee:ef:54: 71:df:d8:65:8d:d7:f3:f9:a7:90:36:86:f4:da:b6: 6f:62:88:cd:50:87:90:43:d2:5d:f9:7a:d6:eb:bd: 93:27:a7:67:f3:b5:05:ff:4c:73:11:56:fb:47:67: b6:44:77:89:f0:4d:bb:fb:81:3e:0e:3e:35:97:60: 72:46:c5:50:dd:fe:fb:84:79:ed:fd:5a:e6:76:70: 73:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:40:AA:BC:A5:32:99:52:97:02:57:14:FF:4B:BF:5D:67:35:37:03 X509v3 Authority Key Identifier: keyid:5D:DF:DD:38:31:56:FA:5B:65:34:11:2E:9C:8E:15:3B:B2:00:57:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xd_dODFW-ltlNBEunI4VO7IAV8Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:d7:94:93:8e:7f:e6:c0:9e:81:0b:1e:04:62:a1:79:36:0c: d9:c2:34:b4:37:fe:55:77:30:80:41:52:47:b7:78:41:23:f7: 14:e5:62:34:02:ab:f4:dd:7a:59:db:d3:54:36:0d:68:22:84: 3b:b5:d4:8b:35:9b:33:63:1b:b9:5a:ca:dc:51:48:d8:b7:67: 47:26:10:bd:98:88:0c:2b:6e:14:a5:3b:03:68:85:2d:88:3d: 81:3d:bc:38:d7:06:89:e6:ce:14:14:13:dc:f0:78:e2:85:7c: c1:0b:46:88:bf:31:b0:b7:04:00:1e:eb:e2:59:c2:06:03:19: 79:27:c6:19:75:14:36:49:75:7d:1d:30:50:b4:f1:a2:57:a9: c1:5c:08:3c:78:ff:13:fe:eb:98:d1:c1:68:0c:59:42:cc:67: e6:7b:26:e3:29:5a:df:00:95:5e:d2:ff:a6:c4:49:4f:5a:de: ea:ad:2c:23:1a:33:90:96:b7:19:23:bf:27:6e:87:d3:99:c0: ae:63:ec:9f:0a:89:4f:83:b3:95:02:00:5f:44:73:33:1f:5b: d6:89:bf:80:a2:6a:4b:fa:e0:3f:4b:a3:ff:f4:9b:8e:e8:4c: 65:3a:5d:ec:38:bc:00:32:92:c4:84:24:9f:56:cd:40:8b:a6: 47:75:0c:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I2RTgxMTAvBgNVBAUTKDVEREZERDM4MzE1NkZBNUI2NTM0MTEyRTlDOEUxNTNC QjIwMDU3QzYwHhcNMjYxMDI1MDcxNjA2WhcNMjYxMTAxMDcxNjA2WjAYMRYwFAYD VQQDEw02YWRkYWNiNy1lMjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwdc0y9o3XADUknhElYguob/C4eH+CYs25G//T1FGzcBBrtudj268KThPJW8A 6H3pfShz89PhDYPLWSbKGFSHJBwRHLVM7WouAS58IsDXwd99hbd6VIRIKdWIKnm+ ipm2Qe3EAJNNrA6i0gRYFNW3ARJZGZkMt+EvG5sraMUZkKPwcmLO2yJ/LKQaYTZl XR2ZiEyd0O6vAW5Q7HWAUc0RjdW91srB6/ClJlTZtpHrO8Hu71Rx39hljdfz+aeQ Nob02rZvYojNUIeQQ9Jd+XrW672TJ6dn87UF/0xzEVb7R2e2RHeJ8E27+4E+Dj41 l2ByRsVQ3f77hHnt/VrmdnBz/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNJAqryl MplSlwJXFP9Lv11nNTcDMB8GA1UdIwQYMBaAFF3f3TgxVvpbZTQRLpyOFTuyAFfG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjZFOC9GOUIwMjg4OEFF RkUxMUYwODhCOTlDMjdDNEY5QUUwMi9YZF9kT0RGVy1sdGxOQkV1bkk0Vk83SUFW OFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hkX2RPREZXLWx0bE5CRXVuSTRWTzdJQVY4WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjZFOC9GOUIwMjg4OEFFRkUxMUYwODhCOTlDMjdDNEY5QUUwMi9YZF9kT0RGVy1s dGxOQkV1bkk0Vk83SUFWOFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ9eUk45/5sCegQseBGKheTYM2cI0tDf+VXcwgEFSR7d4QSP3FOViNAKr9N16 WdvTVDYNaCKEO7XUizWbM2MbuVrK3FFI2LdnRyYQvZiIDCtuFKU7A2iFLYg9gT28 ONcGiebOFBQT3PB44oV8wQtGiL8xsLcEAB7r4lnCBgMZeSfGGXUUNkl1fR0wULTx olepwVwIPHj/E/7rmNHBaAxZQsxn5nsm4yla3wCVXtL/psRJT1re6q0sIxozkJa3 GSO/J26H05nArmPsnwqJT4OzlQIAX0RzMx9b1om/gKJqS/rgP0uj//SbjuhMZTpd 7Di8ADKSxIQkn1bNQIumR3UMQg== -----END CERTIFICATE-----Generated at Mon Oct 26 12:43:43 2026 by rpki-client