$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft File: lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft (raw, json) Hash identifier: /mF4F4bz1sI0Ekao2u/ZWSGw7T2FC4x+DCt+CMxR+hw= Subject key identifier: AC:89:92:C1:12:3F:E1:EF:70:D8:11:D2:29:57:A5:5E:8D:0E:BC:CF Authority key identifier: 95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C Certificate issuer: /CN=A91D0C8E/serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C Certificate serial: 055B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft Manifest number: 052D Signing time: Sun 01 Nov 2026 00:08:25 +0000 Manifest this update: Sun 01 Nov 2026 00:08:25 +0000 Manifest next update: Sun 08 Nov 2026 00:08:25 +0000 Files and hashes: 1: lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl (hash: R8K6+aXWED5Di/WVMfPrEXOwJB9ZQz7YrbxJ9Z0QiWU=) 2: AFF169A0F34111F0B7AB4BD35C6F56BC.roa (hash: pFySgYfQ+xZ6rwACdfd3mWWdJ/XmIO+H3i8NnPDCsAQ=) 3: F4D295243FDA11EFAF5E676AC4F9AE02.roa (hash: Hy/M1SuzjjtwQCWZGLtJSooNfC63JGvrwCvSA8jmPig=) 4: E248BDA63C5211EF94184A20C4F9AE02.roa (hash: aoDfXs/+Zo3bM4TZQqdH42AnP+MxbUZEFcCO4REaPpo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Nov 2026 00:08:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1371 (0x55b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0C8E, serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C Validity Not Before: Nov 1 00:08:25 2026 GMT Not After : Nov 8 00:08:25 2026 GMT Subject: CN=6ae682f9-39dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:52:c9:ea:21:16:6e:b5:bd:40:87:ee:d2:59: d8:f5:69:30:0c:2f:e9:03:34:d3:8e:08:c0:e3:c7: d7:88:6c:79:84:d7:1a:41:9f:69:33:33:f7:f3:d1: 4a:06:36:c8:1c:d9:0f:d2:cf:df:43:b2:d3:88:18: 47:d0:2d:3c:03:dd:ba:9f:64:49:9b:01:ca:8d:5a: 42:b0:4d:84:36:a6:87:81:2e:3e:2a:20:ce:44:5e: 62:be:fe:3c:e3:27:37:ec:34:19:0a:da:df:8c:e9: b4:d4:a4:a9:a3:d4:8a:91:24:b8:be:b4:c8:96:34: 89:ff:45:3c:79:45:da:9d:ce:9e:1c:bb:3e:2f:74: 50:7d:38:c1:35:8b:5c:4b:bc:07:fd:b5:88:0e:b8: 87:0f:11:57:32:16:c8:8d:ce:50:c9:c7:76:fb:52: 19:2f:6a:ea:43:8c:44:91:bc:1d:20:e7:a9:2e:b1: 25:08:db:23:da:34:5d:d5:1e:42:a6:cf:ff:50:a8: 65:a3:91:7b:fd:8d:3c:69:ce:1a:48:de:d3:71:8a: a4:be:fc:7b:ee:8f:ad:8f:b4:e0:e2:cf:29:5b:9b: 0b:8f:7a:52:f0:44:83:6d:c8:b3:c6:53:dc:83:82: b9:ad:51:48:6f:27:d2:9a:26:a7:3f:94:07:fc:aa: e1:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:89:92:C1:12:3F:E1:EF:70:D8:11:D2:29:57:A5:5E:8D:0E:BC:CF X509v3 Authority Key Identifier: keyid:95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:8b:05:a6:b5:5e:7c:1e:84:c1:33:07:6b:fc:32:03:95:a0: bc:56:df:45:08:45:ec:a1:74:a4:91:7f:5d:6f:2b:e3:a3:0f: d5:8a:86:0f:3d:c8:37:36:fb:ee:dc:7d:c7:41:0b:96:d6:71: e6:5a:4d:78:0e:5c:f9:d0:49:e0:c6:43:dc:1e:34:f4:4b:22: 6f:96:99:ed:45:44:26:20:10:6d:94:bb:f8:ba:47:5b:f8:6d: 79:81:ce:d5:1d:fc:8c:81:80:17:6e:e5:be:5e:69:15:3e:db: 29:d8:a6:f8:7e:37:fb:54:6e:1b:22:9b:38:ae:2c:27:0f:26: 06:02:0d:96:80:5b:cd:83:54:68:16:c8:6e:e7:56:3b:6e:ae: 11:6b:c4:0e:7b:a9:10:8c:88:9c:3f:84:1c:ec:c0:95:4b:6a: 75:d1:c4:49:ff:e0:2d:7f:8b:a3:4f:b9:de:e1:aa:e5:36:94: a7:ac:f3:f7:9d:39:93:18:73:ed:f0:bd:41:e3:4c:b6:55:b8: 39:7f:f1:63:96:69:8b:cb:8e:a8:ed:06:2c:2f:dc:36:2f:b1: 98:b1:a6:3f:49:e8:7e:b7:0b:0c:6e:06:ae:0f:c1:4e:2c:cd: 49:a5:5d:44:53:af:1f:48:1b:08:bc:99:49:c0:c9:2c:77:a6: f3:18:50:cd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBDOEUxMTAvBgNVBAUTKDk1MzVENzYxMTBCM0MwMjlDNTg1NUI0QzE3NDUwNUFG NjExOUYzMEMwHhcNMjYxMTAxMDAwODI1WhcNMjYxMTA4MDAwODI1WjAYMRYwFAYD VQQDEw02YWU2ODJmOS0zOWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtVLJ6iEWbrW9QIfu0lnY9WkwDC/pAzTTjgjA48fXiGx5hNcaQZ9pMzP389FK BjbIHNkP0s/fQ7LTiBhH0C08A926n2RJmwHKjVpCsE2ENqaHgS4+KiDORF5ivv48 4yc37DQZCtrfjOm01KSpo9SKkSS4vrTIljSJ/0U8eUXanc6eHLs+L3RQfTjBNYtc S7wH/bWIDriHDxFXMhbIjc5Qycd2+1IZL2rqQ4xEkbwdIOepLrElCNsj2jRd1R5C ps//UKhlo5F7/Y08ac4aSN7TcYqkvvx77o+tj7Tg4s8pW5sLj3pS8ESDbcizxlPc g4K5rVFIbyfSmianP5QH/KrhIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKyJksES P+HvcNgR0ilXpV6NDrzPMB8GA1UdIwQYMBaAFJU112EQs8ApxYVbTBdFBa9hGfMM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEM4RS8wMzJFNTdCODc0 MzkxMUVDQjU1NzIzNkZDNEY5QUUwMi9sVFhYWVJDendDbkZoVnRNRjBVRnIyRVo4 d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xUWFhZUkN6d0NuRmhWdE1GMFVGcjJFWjh3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEM4RS8wMzJFNTdCODc0MzkxMUVDQjU1NzIzNkZDNEY5QUUwMi9sVFhYWVJDendD bkZoVnRNRjBVRnIyRVo4d3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZosFprVefB6EwTMHa/wyA5WgvFbfRQhF7KF0pJF/XW8r46MP1YqGDz3INzb7 7tx9x0ELltZx5lpNeA5c+dBJ4MZD3B409Esib5aZ7UVEJiAQbZS7+LpHW/hteYHO 1R38jIGAF27lvl5pFT7bKdim+H43+1RuGyKbOK4sJw8mBgINloBbzYNUaBbIbudW O26uEWvEDnupEIyInD+EHOzAlUtqddHESf/gLX+Lo0+53uGq5TaUp6zz9505kxhz 7fC9QeNMtlW4OX/xY5Zpi8uOqO0GLC/cNi+xmLGmP0nofrcLDG4Grg/BTizNSaVd RFOvH0gbCLyZScDJLHem8xhQzQ== -----END CERTIFICATE-----Generated at Mon Nov 2 10:52:23 2026 by rpki-client