$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft File: X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft (raw, json) Hash identifier: w9jTIeYBd0WGR3JnVul7pWt3o4XK4qfBJ1iJ4r66qb8= Subject key identifier: 09:6D:7A:FD:22:E0:32:BA:72:D5:4D:EE:C3:D0:8E:7F:13:69:54:14 Authority key identifier: 5F:C2:6B:92:8D:ED:C9:0C:39:1C:C4:F5:29:BA:7B:9E:09:A5:04:6E Certificate issuer: /CN=A91D298C/serialNumber=5FC26B928DEDC90C391CC4F529BA7B9E09A5046E Certificate serial: B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft Manifest number: A8 Signing time: Mon 05 Oct 2026 07:38:03 +0000 Manifest this update: Mon 05 Oct 2026 07:38:03 +0000 Manifest next update: Mon 12 Oct 2026 07:38:03 +0000 Files and hashes: 1: X8Jrko3tyQw5HMT1Kbp7ngmlBG4.crl (hash: AJh8rSyypXJey3wSHA2ld6QtTol0Y5123Osiep6K8c4=) 2: 585ECA9EC6D111F095FA7F7AC4F9AE02.roa (hash: ZeWmCmeKG6YzJDVsPwaISvsGtpek246l3XjiF4Hx9xE=) 3: E2F80382E56711F089CF515C3D6F56BC.roa (hash: jiyUxTwVRZsLVxG/BHfJuLNYZSHLDV9HZEQMtvvZ//4=) 4: E322A666B65C11F18F489CF26F11F970.roa (hash: RwkocUiEJJ/WlBdJ4xcIB1mybwRQyZ+jCn34n3mMFxg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.crl rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 07:38:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 177 (0xb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D298C, serialNumber=5FC26B928DEDC90C391CC4F529BA7B9E09A5046E Validity Not Before: Oct 5 07:38:03 2026 GMT Not After : Oct 12 07:38:03 2026 GMT Subject: CN=6ac353db-ca68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:61:fb:fe:19:a7:de:08:71:74:87:f4:40:cd: d9:37:82:9e:0a:9c:ad:81:97:4d:cf:f7:e6:5a:89: 86:6d:f4:83:19:d2:4c:49:5c:3a:5c:dd:3f:65:22: 3b:9e:73:a9:60:44:a3:54:4b:73:b4:68:6a:39:b4: b0:74:e2:0c:2c:4a:f9:8f:83:56:0c:51:ed:ed:c8: 2d:b3:c3:9b:8a:ef:3a:d4:c1:85:b2:24:f1:74:82: 1c:5f:55:bd:19:3f:a4:db:fc:25:a7:3b:f5:9e:c0: b2:3d:9c:bb:09:40:3b:2e:aa:1d:01:13:06:45:16: 13:86:0c:81:a7:36:76:80:41:7a:b9:a4:69:a2:71: 1a:4f:05:fc:ec:c9:bf:7b:b4:33:80:a9:9d:f0:fd: d5:2a:b8:49:58:b8:c0:42:e1:cd:3b:9f:ea:8f:a3: 27:02:bf:ea:fd:70:37:20:25:ce:38:13:07:6f:34: f7:46:bf:a2:27:85:1c:96:af:9a:b8:7c:f5:43:64: c2:3a:4b:6e:e4:1b:7e:75:f9:67:14:58:c7:2b:04: a3:e2:f9:e6:3b:eb:c4:0a:d0:05:2b:9f:ac:11:07: f3:41:d2:cb:c6:ef:76:ad:b7:f7:e5:24:44:65:53: fd:18:58:ba:cd:70:9d:06:73:25:11:db:16:21:62: a4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:6D:7A:FD:22:E0:32:BA:72:D5:4D:EE:C3:D0:8E:7F:13:69:54:14 X509v3 Authority Key Identifier: keyid:5F:C2:6B:92:8D:ED:C9:0C:39:1C:C4:F5:29:BA:7B:9E:09:A5:04:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:f7:9a:c7:71:ef:55:f1:20:35:7d:9b:b4:62:b6:58:c9:a1: 78:ae:4b:24:31:fc:dc:7e:a8:19:94:33:d2:d5:b1:71:d0:c5: 8c:20:bb:ae:83:15:fd:f7:cc:e6:5e:c0:e3:6b:79:05:e9:3a: ee:4f:80:00:eb:25:c8:38:ad:26:f6:78:ab:31:80:06:8f:8c: 8b:04:24:b5:79:61:2d:76:13:31:e7:02:d7:41:39:ee:fb:d7: 47:7f:2c:91:5c:6c:bb:b5:f5:eb:3c:67:4d:19:b4:88:59:a3: cc:43:51:92:f8:fe:c9:c2:d8:a4:4b:80:eb:31:fc:20:18:af: 97:2b:17:39:89:23:14:e8:a1:fb:7e:88:69:d5:33:82:e7:5d: c4:b8:a2:c3:76:cf:3b:a9:aa:4d:f4:2d:2e:cb:aa:19:ab:61: c1:c6:7b:00:02:26:f4:16:10:bc:ba:7e:96:4b:6e:90:ed:cd: 2d:d6:ce:22:bc:33:17:a5:6e:23:94:d4:20:d8:1e:db:5a:fa: a8:78:2a:ed:db:b0:f2:c0:23:76:80:04:4e:c2:b7:c4:20:ad: 8a:3b:6f:44:07:e4:57:00:db:d6:d6:04:ee:35:85:55:42:1a: 42:21:fb:15:42:4d:8b:1b:c4:e6:18:52:f5:44:27:b3:0f:1b: 9b:16:52:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI5OEMxMTAvBgNVBAUTKDVGQzI2QjkyOERFREM5MEMzOTFDQzRGNTI5QkE3QjlF MDlBNTA0NkUwHhcNMjYxMDA1MDczODAzWhcNMjYxMDEyMDczODAzWjAYMRYwFAYD VQQDEw02YWMzNTNkYi1jYTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApWH7/hmn3ghxdIf0QM3ZN4KeCpytgZdNz/fmWomGbfSDGdJMSVw6XN0/ZSI7 nnOpYESjVEtztGhqObSwdOIMLEr5j4NWDFHt7cgts8Obiu861MGFsiTxdIIcX1W9 GT+k2/wlpzv1nsCyPZy7CUA7LqodARMGRRYThgyBpzZ2gEF6uaRponEaTwX87Mm/ e7QzgKmd8P3VKrhJWLjAQuHNO5/qj6MnAr/q/XA3ICXOOBMHbzT3Rr+iJ4Uclq+a uHz1Q2TCOktu5Bt+dflnFFjHKwSj4vnmO+vECtAFK5+sEQfzQdLLxu92rbf35SRE ZVP9GFi6zXCdBnMlEdsWIWKkuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAltev0i 4DK6ctVN7sPQjn8TaVQUMB8GA1UdIwQYMBaAFF/Ca5KN7ckMORzE9Sm6e54JpQRu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjk4Qy9BQzVFOEFDMkM2 RDAxMUYwQkQ4ODRBNzlDNEY5QUUwMi9YOEpya28zdHlRdzVITVQxS2JwN25nbWxC RzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g4SnJrbzN0eVF3NUhNVDFLYnA3bmdtbEJHNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Mjk4Qy9BQzVFOEFDMkM2RDAxMUYwQkQ4ODRBNzlDNEY5QUUwMi9YOEpya28zdHlR dzVITVQxS2JwN25nbWxCRzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsPeax3HvVfEgNX2btGK2WMmheK5LJDH83H6oGZQz0tWxcdDFjCC7roMV/ffM 5l7A42t5Bek67k+AAOslyDitJvZ4qzGABo+MiwQktXlhLXYTMecC10E57vvXR38s kVxsu7X16zxnTRm0iFmjzENRkvj+ycLYpEuA6zH8IBivlysXOYkjFOih+36IadUz guddxLiiw3bPO6mqTfQtLsuqGathwcZ7AAIm9BYQvLp+lktukO3NLdbOIrwzF6Vu I5TUINge21r6qHgq7duw8sAjdoAETsK3xCCtijtvRAfkVwDb1tYE7jWFVUIaQiH7 FUJNixvE5hhS9UQnsw8bmxZS0A== -----END CERTIFICATE-----Generated at Tue Oct 6 11:32:42 2026 by rpki-client