$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft File: xCkJXLK5d7BnGRGTtDubL14Zyug.mft (raw, json) Hash identifier: DbxPvTf+eJ4fDkqrdGdSjk84ElO64JrVs7dfBrZCZFk= Subject key identifier: 75:07:A6:CC:3A:1E:D7:8B:15:E6:19:3C:88:88:68:E6:24:0A:B5:FC Authority key identifier: C4:29:09:5C:B2:B9:77:B0:67:19:11:93:B4:3B:9B:2F:5E:19:CA:E8 Certificate issuer: /CN=A91CDBF5/serialNumber=C429095CB2B977B067191193B43B9B2F5E19CAE8 Certificate serial: 014E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft Manifest number: 014C Signing time: Mon 05 Oct 2026 05:42:10 +0000 Manifest this update: Mon 05 Oct 2026 05:42:10 +0000 Manifest next update: Mon 12 Oct 2026 05:42:10 +0000 Files and hashes: 1: xCkJXLK5d7BnGRGTtDubL14Zyug.crl (hash: Qss+pAk+32whv4wYeToe+tRXfC6pzWxXkWJRy6tJv+A=) 2: 51AEB7D2836811F1A730906667A30FBC.roa (hash: w/8aO2cFZ6PvgX1rLpRaspZazjaxpcImO3eTh4c/56M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.crl rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 05:42:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 334 (0x14e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDBF5, serialNumber=C429095CB2B977B067191193B43B9B2F5E19CAE8 Validity Not Before: Oct 5 05:42:10 2026 GMT Not After : Oct 12 05:42:10 2026 GMT Subject: CN=6ac338b2-dd96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d1:bd:aa:b6:7f:e7:bc:1c:46:5a:54:3a:d9: 11:30:51:8f:33:b4:ec:3f:77:cd:a8:c4:ed:0b:28: 1d:ee:6b:c6:3e:7e:34:1d:5f:c4:64:40:2a:76:cc: 59:aa:7b:6f:f0:29:8a:85:e0:ad:cc:94:cf:69:fb: 03:63:d4:5e:19:e2:c6:e4:5a:9b:1c:d7:39:84:0f: 8c:70:f6:08:d0:7b:fe:54:83:51:cc:74:b6:23:5a: 28:98:4b:f3:3e:5b:c1:59:65:6b:8a:dc:d1:b0:6b: 20:98:41:20:47:ce:7d:9e:95:48:a0:c5:de:cb:fe: 9a:1e:31:11:e0:a6:ee:25:9f:b4:d4:07:8e:04:b1: a4:ec:72:dd:44:cd:31:81:31:7a:e2:04:8c:41:c7: 72:04:46:68:b6:49:18:34:dc:ed:c6:3c:8f:1d:48: 97:3e:42:03:68:ab:20:70:93:a1:c9:26:a0:6e:13: cf:3b:69:a4:43:ae:87:c9:63:23:c2:9a:59:0d:c2: 5f:ec:22:b1:07:c5:71:4b:43:47:ba:47:9b:58:73: a7:4f:c2:7c:8b:e1:3a:c6:4b:bf:19:7c:5c:ad:c1: 03:f3:a5:19:3e:5e:c6:44:57:83:1f:b1:6e:d4:4e: d8:80:ea:24:d9:06:55:f4:59:56:40:db:4e:12:05: ee:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:07:A6:CC:3A:1E:D7:8B:15:E6:19:3C:88:88:68:E6:24:0A:B5:FC X509v3 Authority Key Identifier: keyid:C4:29:09:5C:B2:B9:77:B0:67:19:11:93:B4:3B:9B:2F:5E:19:CA:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:ac:83:3e:c2:f5:49:f5:ac:f0:56:3e:21:d4:79:e1:e0:55: 4d:0a:50:0f:b2:43:94:25:2c:e6:0f:45:d5:82:ff:6b:5b:6a: 6e:dc:f5:6f:c6:ad:e9:88:95:3c:4f:59:5b:f3:c3:9b:52:0b: d2:9b:4d:6c:1e:12:91:74:f9:41:40:ea:5d:8a:3a:41:cc:b3: de:d9:a3:2b:f4:59:b4:a0:e3:1e:08:b1:dd:47:48:04:ff:cb: b7:29:b8:68:b8:f2:dc:3e:df:0e:5c:b2:24:73:eb:01:f3:b5: 62:96:56:47:66:7e:33:91:39:51:d6:91:55:89:f6:e5:88:6c: ab:6a:48:a5:02:d7:be:d0:c3:e8:c7:d6:73:5c:fb:9d:5b:8b: 5e:13:a1:c9:32:56:b7:db:dd:ce:39:cb:b3:40:7d:ad:0f:a6: d6:08:b8:18:f4:32:04:91:ab:69:44:69:83:c6:cd:00:7f:b7: 36:a6:a3:eb:94:54:5b:ac:f7:53:96:e3:13:14:d9:3b:7b:d4: 76:5d:b5:e6:8e:a3:6f:a2:63:3e:21:74:9b:4f:b8:d0:8b:a9: 94:35:8e:eb:17:08:53:56:3c:e0:6c:05:b2:af:28:a9:3c:29: 9f:a5:f2:c5:5c:10:24:e5:bd:e2:3b:d8:9d:ba:e7:f9:cd:5c: 95:f4:30:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RCRjUxMTAvBgNVBAUTKEM0MjkwOTVDQjJCOTc3QjA2NzE5MTE5M0I0M0I5QjJG NUUxOUNBRTgwHhcNMjYxMDA1MDU0MjEwWhcNMjYxMDEyMDU0MjEwWjAYMRYwFAYD VQQDEw02YWMzMzhiMi1kZDk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuNG9qrZ/57wcRlpUOtkRMFGPM7TsP3fNqMTtCygd7mvGPn40HV/EZEAqdsxZ qntv8CmKheCtzJTPafsDY9ReGeLG5FqbHNc5hA+McPYI0Hv+VINRzHS2I1oomEvz PlvBWWVritzRsGsgmEEgR859npVIoMXey/6aHjER4KbuJZ+01AeOBLGk7HLdRM0x gTF64gSMQcdyBEZotkkYNNztxjyPHUiXPkIDaKsgcJOhySagbhPPO2mkQ66HyWMj wppZDcJf7CKxB8VxS0NHukebWHOnT8J8i+E6xku/GXxcrcED86UZPl7GRFeDH7Fu 1E7YgOok2QZV9FlWQNtOEgXuSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHUHpsw6 HteLFeYZPIiIaOYkCrX8MB8GA1UdIwQYMBaAFMQpCVyyuXewZxkRk7Q7my9eGcro MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREJGNS82NjU5RjUxRUNC NTExMUVGOTA0MDBEMTdDNEY5QUUwMi94Q2tKWExLNWQ3Qm5HUkdUdER1YkwxNFp5 dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hDa0pYTEs1ZDdCbkdSR1R0RHViTDE0Wnl1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REJGNS82NjU5RjUxRUNCNTExMUVGOTA0MDBEMTdDNEY5QUUwMi94Q2tKWExLNWQ3 Qm5HUkdUdER1YkwxNFp5dWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAc6yDPsL1SfWs8FY+IdR54eBVTQpQD7JDlCUs5g9F1YL/a1tqbtz1b8at6YiV PE9ZW/PDm1IL0ptNbB4SkXT5QUDqXYo6Qcyz3tmjK/RZtKDjHgix3UdIBP/Ltym4 aLjy3D7fDlyyJHPrAfO1YpZWR2Z+M5E5UdaRVYn25Yhsq2pIpQLXvtDD6MfWc1z7 nVuLXhOhyTJWt9vdzjnLs0B9rQ+m1gi4GPQyBJGraURpg8bNAH+3Nqaj65RUW6z3 U5bjExTZO3vUdl215o6jb6JjPiF0m0+40IuplDWO6xcIU1Y84GwFsq8oqTwpn6Xy xVwQJOW94jvYnbrn+c1clfQwNw== -----END CERTIFICATE-----Generated at Tue Oct 6 11:35:46 2026 by rpki-client