$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CC8BE/127257F48FA711F18CCC416F6011F970/Xa8F0ZASWq672xrRAQ6jhBdPc7A.mft File: Xa8F0ZASWq672xrRAQ6jhBdPc7A.mft (raw, json) Hash identifier: 4QCWYCUplJ5FQQNUieWW1V1J6xyuEIeBJxrJ/zZWJSg= Subject key identifier: 3C:48:F1:D3:4E:A1:8F:C8:46:9C:D1:8B:AD:D0:49:CC:6B:7E:63:23 Authority key identifier: 5D:AF:05:D1:90:12:5A:AE:BB:DB:1A:D1:01:0E:A3:84:17:4F:73:B0 Certificate issuer: /CN=A91CC8BE/serialNumber=5DAF05D190125AAEBBDB1AD1010EA384174F73B0 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xa8F0ZASWq672xrRAQ6jhBdPc7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC8BE/127257F48FA711F18CCC416F6011F970/Xa8F0ZASWq672xrRAQ6jhBdPc7A.mft Manifest number: 26 Signing time: Sat 03 Oct 2026 09:37:13 +0000 Manifest this update: Sat 03 Oct 2026 09:37:12 +0000 Manifest next update: Sat 10 Oct 2026 09:37:12 +0000 Files and hashes: 1: Xa8F0ZASWq672xrRAQ6jhBdPc7A.crl (hash: C1khCs18FkJmHTxY+O1/L/TAtp7pkazZX1O9MviBWKo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC8BE/127257F48FA711F18CCC416F6011F970/Xa8F0ZASWq672xrRAQ6jhBdPc7A.crl rsync://rpki.apnic.net/member_repository/A91CC8BE/127257F48FA711F18CCC416F6011F970/Xa8F0ZASWq672xrRAQ6jhBdPc7A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xa8F0ZASWq672xrRAQ6jhBdPc7A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 09:37:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC8BE, serialNumber=5DAF05D190125AAEBBDB1AD1010EA384174F73B0 Validity Not Before: Oct 3 09:37:12 2026 GMT Not After : Oct 10 09:37:12 2026 GMT Subject: CN=6ac0ccc9-6b74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:23:11:55:a4:9d:eb:d3:b4:9d:16:af:f7:a9: e2:c4:0f:cb:41:ec:9d:0e:70:de:06:45:df:bd:66: 15:0f:68:19:08:3d:69:fa:63:9e:40:5a:99:de:fc: 21:21:5b:69:97:98:cc:60:28:32:85:d9:97:17:d4: ee:ad:00:ec:fe:73:2e:d5:1d:4b:85:2e:11:44:e2: b8:24:26:e3:69:0e:0b:04:af:a1:91:4a:0c:67:2d: 1f:8c:0d:69:3b:29:54:98:33:03:60:4f:e4:a8:2b: 23:b2:0f:e9:09:c2:65:03:e6:87:56:5a:c0:c4:ab: 74:8c:fa:0f:1e:2a:59:0b:46:f8:a5:e9:ac:2e:4c: 1e:af:bd:90:c5:3a:c5:a1:f7:8a:38:a3:a2:be:84: 94:99:22:fc:93:dc:39:20:c2:b3:0b:2b:eb:72:c1: f9:f9:63:38:50:7e:85:f3:96:9e:71:3b:be:e2:5a: 30:c6:74:ab:26:1a:7c:4b:97:f5:54:63:13:cd:1e: bb:92:82:b9:13:b5:e2:4d:63:5c:c6:1b:a1:f4:bc: 14:00:c5:86:01:4a:73:aa:ec:2e:aa:a2:2f:c0:ab: 50:fd:49:9b:f6:c7:1b:db:8f:2a:90:ae:62:8b:00: 3f:ec:80:27:c9:0d:40:68:93:40:b2:54:69:34:dc: f0:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:48:F1:D3:4E:A1:8F:C8:46:9C:D1:8B:AD:D0:49:CC:6B:7E:63:23 X509v3 Authority Key Identifier: keyid:5D:AF:05:D1:90:12:5A:AE:BB:DB:1A:D1:01:0E:A3:84:17:4F:73:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC8BE/127257F48FA711F18CCC416F6011F970/Xa8F0ZASWq672xrRAQ6jhBdPc7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xa8F0ZASWq672xrRAQ6jhBdPc7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC8BE/127257F48FA711F18CCC416F6011F970/Xa8F0ZASWq672xrRAQ6jhBdPc7A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:e5:d3:cb:5a:8a:a0:54:a2:3c:03:b2:aa:6d:81:fd:9b:0d: 16:17:d1:2e:cb:c7:31:c9:b2:5a:66:c1:38:b4:ef:3e:33:aa: 45:ca:b4:23:9c:c6:f2:0f:b0:f4:5a:4e:fb:b1:fb:40:8f:e8: 65:b8:84:8e:fc:4b:37:ea:8e:3b:09:0b:bc:8b:1d:c8:96:56: f8:bc:e2:60:04:3b:66:da:56:fc:c2:a7:44:5e:e3:85:83:46: 30:18:0b:55:96:0e:34:93:ce:96:61:a0:7c:99:10:f0:f8:2c: a8:97:7a:fc:7d:82:3c:31:84:ce:83:67:80:48:f1:89:0a:82: 26:42:65:a5:38:63:26:d6:5a:36:27:00:db:6b:a0:94:c2:3a: 2b:23:f5:ef:e8:21:5c:ed:82:26:c4:b5:92:f1:94:d2:41:0c: 2a:7d:b2:49:96:37:0c:21:6e:e1:a1:95:43:3f:e0:59:2f:01: 4f:8f:92:45:c8:27:2a:e6:f4:f7:da:26:00:9b:c0:37:89:19: fd:d1:53:0b:17:b5:97:ad:b8:b3:45:c2:12:53:06:3c:01:e0: 9f:f1:67:62:df:19:94:44:c7:f1:3e:4b:11:80:88:3c:98:6d: d1:d4:75:5a:65:d2:ce:21:1d:7c:fe:a0:65:13:96:b5:67:b0: 96:e4:75:59 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QzhCRTExMC8GA1UEBRMoNURBRjA1RDE5MDEyNUFBRUJCREIxQUQxMDEwRUEzODQx NzRGNzNCMDAeFw0yNjEwMDMwOTM3MTJaFw0yNjEwMTAwOTM3MTJaMBgxFjAUBgNV BAMTDTZhYzBjY2M5LTZiNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfIxFVpJ3r07SdFq/3qeLED8tB7J0OcN4GRd+9ZhUPaBkIPWn6Y55AWpne/CEh W2mXmMxgKDKF2ZcX1O6tAOz+cy7VHUuFLhFE4rgkJuNpDgsEr6GRSgxnLR+MDWk7 KVSYMwNgT+SoKyOyD+kJwmUD5odWWsDEq3SM+g8eKlkLRvil6awuTB6vvZDFOsWh 94o4o6K+hJSZIvyT3DkgwrMLK+tywfn5YzhQfoXzlp5xO77iWjDGdKsmGnxLl/VU YxPNHruSgrkTteJNY1zGG6H0vBQAxYYBSnOq7C6qoi/Aq1D9SZv2xxvbjyqQrmKL AD/sgCfJDUBok0CyVGk03PBrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUPEjx006h j8hGnNGLrdBJzGt+YyMwHwYDVR0jBBgwFoAUXa8F0ZASWq672xrRAQ6jhBdPc7Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDOEJFLzEyNzI1N0Y0OEZB NzExRjE4Q0NDNDE2RjYwMTFGOTcwL1hhOEYwWkFTV3E2NzJ4clJBUTZqaEJkUGM3 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWGE4RjBaQVNXcTY3MnhyUkFRNmpoQmRQYzdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND OEJFLzEyNzI1N0Y0OEZBNzExRjE4Q0NDNDE2RjYwMTFGOTcwL1hhOEYwWkFTV3E2 NzJ4clJBUTZqaEJkUGM3QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCX5dPLWoqgVKI8A7KqbYH9mw0WF9Euy8cxybJaZsE4tO8+M6pFyrQjnMbyD7D0 Wk77sftAj+hluISO/Es36o47CQu8ix3Illb4vOJgBDtm2lb8wqdEXuOFg0YwGAtV lg40k86WYaB8mRDw+Cyol3r8fYI8MYTOg2eASPGJCoImQmWlOGMm1lo2JwDba6CU wjorI/Xv6CFc7YImxLWS8ZTSQQwqfbJJljcMIW7hoZVDP+BZLwFPj5JFyCcq5vT3 2iYAm8A3iRn90VMLF7WXrbizRcISUwY8AeCf8Wdi3xmURMfxPksRgIg8mG3R1HVa ZdLOIR18/qBlE5a1Z7CW5HVZ -----END CERTIFICATE-----Generated at Sun Oct 4 17:32:28 2026 by rpki-client