$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.mft File: xIoOQPt_45dbEsI-AwrFTFIFcWM.mft (raw, json) Hash identifier: lKMc6HIovCUxjKmLs25QYKiCBQc5mmXdbfLRj9LRxL0= Subject key identifier: 59:E6:DC:19:F6:31:9A:2C:E7:B4:0F:23:E8:0C:8C:42:60:DF:71:66 Authority key identifier: C4:8A:0E:40:FB:7F:E3:97:5B:12:C2:3E:03:0A:C5:4C:52:05:71:63 Certificate issuer: /CN=A91D28BC/serialNumber=C48A0E40FB7FE3975B12C23E030AC54C52057163 Certificate serial: 0669 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIoOQPt_45dbEsI-AwrFTFIFcWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.mft Manifest number: 0662 Signing time: Wed 28 Oct 2026 22:49:22 +0000 Manifest this update: Wed 28 Oct 2026 22:49:21 +0000 Manifest next update: Wed 04 Nov 2026 22:49:21 +0000 Files and hashes: 1: xIoOQPt_45dbEsI-AwrFTFIFcWM.crl (hash: oU+g3Cql8ShjV/DzHGd5pwqRUJH0JwC5MLT6ZYKWXnM=) 2: 2B07FA82EADC11EBBE430B5EC4F9AE02.roa (hash: bBojOiS31o6PX2SPb7aw0i/v7gUX2MMQIPUxqEZpkrw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.crl rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIoOQPt_45dbEsI-AwrFTFIFcWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 22:49:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1641 (0x669) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D28BC, serialNumber=C48A0E40FB7FE3975B12C23E030AC54C52057163 Validity Not Before: Oct 28 22:49:21 2026 GMT Not After : Nov 4 22:49:21 2026 GMT Subject: CN=6ae27bf1-ebb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:84:18:09:0f:26:57:80:1d:34:54:d9:2f:7c: 9a:a9:f3:2f:3b:b9:fc:ba:8e:f7:b5:6b:70:d0:55: f1:66:fd:98:80:18:7c:d1:a7:1d:21:5c:4b:88:a8: 7c:0e:b4:72:f3:31:84:7b:70:68:c8:80:92:66:59: 82:29:26:8a:af:20:4c:2b:1c:53:26:d6:bc:b7:ef: 2b:1c:6d:b9:d7:16:cd:36:8e:f6:51:a7:0a:56:54: 70:19:32:d9:fc:77:cc:6d:c0:05:5b:65:66:df:8b: 77:d6:08:6c:f1:64:eb:95:b2:c5:da:22:40:e8:bf: e0:da:52:0c:ad:bf:73:69:a5:92:b3:25:ab:80:dc: aa:2b:36:e6:49:9b:ca:d1:49:27:4a:92:02:51:9c: 1c:d2:a2:0b:96:a0:1a:38:07:00:35:92:91:0e:74: 9c:bb:7d:d1:bf:9f:43:ac:4c:56:c7:67:29:f2:0b: 32:70:f2:8a:e9:41:f9:e4:c9:b7:7c:00:89:c2:66: 32:46:4b:1c:aa:47:60:2b:e6:26:36:4f:94:50:1d: 0d:cc:ab:ea:bb:ec:fe:5b:ba:eb:56:0a:c0:9a:b0: 03:32:ce:d5:2e:99:f2:fc:69:2e:e3:db:14:d7:d1: 00:5c:40:47:a7:60:95:28:37:84:5d:69:10:79:d5: 31:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:E6:DC:19:F6:31:9A:2C:E7:B4:0F:23:E8:0C:8C:42:60:DF:71:66 X509v3 Authority Key Identifier: keyid:C4:8A:0E:40:FB:7F:E3:97:5B:12:C2:3E:03:0A:C5:4C:52:05:71:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIoOQPt_45dbEsI-AwrFTFIFcWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:19:3f:74:1a:cc:05:a9:9b:9f:4d:5a:17:cc:de:4a:50:fc: 2a:70:20:0f:d0:4b:de:f7:b6:f5:fe:f7:0b:77:de:0f:4e:4c: be:f0:3c:1d:ea:1d:95:f0:1a:e3:de:0b:48:67:d8:cb:0b:62: 3f:de:11:34:f6:58:ff:79:09:93:c5:cb:8e:f6:61:4a:6e:e6: e5:da:18:d4:9c:ab:91:26:fc:f9:f2:c0:6d:eb:8a:24:fc:3c: 4a:f9:6d:d9:1e:80:25:8b:d3:ea:50:7e:47:8a:88:6c:ad:2b: 4a:01:94:4a:d8:01:d0:45:9f:df:aa:81:f8:34:80:10:36:b7: 82:3b:bc:99:9e:6f:40:45:3b:ae:95:07:69:af:f7:79:d0:ce: 93:72:f9:d5:d1:eb:62:33:65:4b:37:09:8c:30:b6:de:cf:d9: 66:a9:eb:8f:46:44:e8:3c:5d:be:70:f6:34:e1:22:b2:8e:81: 70:37:c7:29:4b:fa:86:51:86:e2:29:97:6a:46:c8:5a:c7:a9: 6b:17:01:94:8e:59:48:a8:f9:be:ee:f8:cb:94:64:bc:b4:56: e7:94:bf:55:35:d6:56:20:15:b8:38:62:e8:12:ec:4d:5c:65: d3:27:a7:47:f7:92:26:3a:f5:b0:94:62:55:17:25:86:7e:04: 5c:98:06:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI4QkMxMTAvBgNVBAUTKEM0OEEwRTQwRkI3RkUzOTc1QjEyQzIzRTAzMEFDNTRD NTIwNTcxNjMwHhcNMjYxMDI4MjI0OTIxWhcNMjYxMTA0MjI0OTIxWjAYMRYwFAYD VQQDEw02YWUyN2JmMS1lYmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvoQYCQ8mV4AdNFTZL3yaqfMvO7n8uo73tWtw0FXxZv2YgBh80acdIVxLiKh8 DrRy8zGEe3BoyICSZlmCKSaKryBMKxxTJta8t+8rHG251xbNNo72UacKVlRwGTLZ /HfMbcAFW2Vm34t31ghs8WTrlbLF2iJA6L/g2lIMrb9zaaWSsyWrgNyqKzbmSZvK 0UknSpICUZwc0qILlqAaOAcANZKRDnScu33Rv59DrExWx2cp8gsycPKK6UH55Mm3 fACJwmYyRkscqkdgK+YmNk+UUB0NzKvqu+z+W7rrVgrAmrADMs7VLpny/Gku49sU 19EAXEBHp2CVKDeEXWkQedUxBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFnm3Bn2 MZos57QPI+gMjEJg33FmMB8GA1UdIwQYMBaAFMSKDkD7f+OXWxLCPgMKxUxSBXFj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjhCQy85MjA5MjM5MEVB RDgxMUVCQkQyQ0M3NThDNEY5QUUwMi94SW9PUVB0XzQ1ZGJFc0ktQXdyRlRGSUZj V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hJb09RUHRfNDVkYkVzSS1Bd3JGVEZJRmNXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjhCQy85MjA5MjM5MEVBRDgxMUVCQkQyQ0M3NThDNEY5QUUwMi94SW9PUVB0XzQ1 ZGJFc0ktQXdyRlRGSUZjV00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXBk/dBrMBambn01aF8zeSlD8KnAgD9BL3ve29f73C3feD05MvvA8HeodlfAa 494LSGfYywtiP94RNPZY/3kJk8XLjvZhSm7m5doY1JyrkSb8+fLAbeuKJPw8Svlt 2R6AJYvT6lB+R4qIbK0rSgGUStgB0EWf36qB+DSAEDa3gju8mZ5vQEU7rpUHaa/3 edDOk3L51dHrYjNlSzcJjDC23s/ZZqnrj0ZE6DxdvnD2NOEiso6BcDfHKUv6hlGG 4imXakbIWsepaxcBlI5ZSKj5vu74y5RkvLRW55S/VTXWViAVuDhi6BLsTVxl0yen R/eSJjr1sJRiVRclhn4EXJgGOA== -----END CERTIFICATE-----Generated at Thu Oct 29 08:42:54 2026 by rpki-client