$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/XYnzqvmxOgelsmTy3rpk1cUAZRw.mft File: XYnzqvmxOgelsmTy3rpk1cUAZRw.mft (raw, json) Hash identifier: H+zKqxbc7xzMUYBnCc1uYtbO/M5GG1dpHd+Lgd9vrPc= Subject key identifier: A2:23:0E:24:9B:DA:37:4A:D6:09:38:07:E8:56:97:22:E1:35:3D:54 Authority key identifier: 5D:89:F3:AA:F9:B1:3A:07:A5:B2:64:F2:DE:BA:64:D5:C5:00:65:1C Certificate issuer: /CN=A91D5240/serialNumber=5D89F3AAF9B13A07A5B264F2DEBA64D5C500651C Certificate serial: 02CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XYnzqvmxOgelsmTy3rpk1cUAZRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/XYnzqvmxOgelsmTy3rpk1cUAZRw.mft Manifest number: 02B9 Signing time: Sat 03 Oct 2026 02:00:29 +0000 Manifest this update: Sat 03 Oct 2026 02:00:28 +0000 Manifest next update: Sat 10 Oct 2026 02:00:28 +0000 Files and hashes: 1: XYnzqvmxOgelsmTy3rpk1cUAZRw.crl (hash: 9A0UaozKVz6gOqQ2HvVCBVEPjwsG0MaWLf9AfE9futM=) 2: 9EA7B7D8A63911ED874E6630C4F9AE02.roa (hash: DHZLT6kRWzcG3+2PiBnd4pNnMfMfwzitkH/VyFmiyhk=) 3: 9FBA5FCCA63911ED874E6630C4F9AE02.roa (hash: ClwvMUH1LVLekjvPCckwoGuRynW5TD4w0EqiLo6Abj0=) 4: 5DCE1A1AA63C11ED9306165AC4F9AE02.roa (hash: ry8gAyMl/oF2tDrb6QBcr0lUpoct2VpMmyLx0Y2gIls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/XYnzqvmxOgelsmTy3rpk1cUAZRw.crl rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/XYnzqvmxOgelsmTy3rpk1cUAZRw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XYnzqvmxOgelsmTy3rpk1cUAZRw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 02:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 714 (0x2ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5240, serialNumber=5D89F3AAF9B13A07A5B264F2DEBA64D5C500651C Validity Not Before: Oct 3 02:00:28 2026 GMT Not After : Oct 10 02:00:28 2026 GMT Subject: CN=6ac061bd-091c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cd:0c:56:0f:a0:49:98:af:97:d0:10:2f:df: 8d:b2:32:3a:9f:5f:cc:74:c7:95:9c:e0:c2:58:33: d1:04:ea:ef:a8:c6:99:fa:ae:19:d9:04:8c:7d:e8: dc:a4:0a:ed:82:4a:83:8a:70:dd:a5:f5:fe:be:7e: d6:12:bd:9d:e6:8c:33:35:66:e1:26:94:a1:81:96: 27:e7:d1:70:eb:dc:20:7d:6b:4f:c3:56:4d:98:7b: 01:5b:bd:51:56:8b:67:88:40:4f:f3:11:5e:38:22: 6a:88:17:17:fa:3d:af:d7:7a:96:5b:66:52:9f:f2: a6:0a:3b:86:51:c2:81:46:a5:ad:ff:eb:9a:3f:cc: ad:ce:2c:11:6a:e6:a4:14:8b:5e:63:5e:78:74:a4: 5c:f4:69:cb:d5:9e:c6:6b:67:14:62:92:5a:4f:20: 57:71:df:e5:d0:a1:a6:7b:2b:02:63:3d:43:99:fa: 23:3c:34:11:fd:72:70:fd:58:43:56:f7:ed:83:5a: 0f:34:61:27:d8:5a:00:6c:a4:b6:6f:13:c4:fb:68: 93:9f:0c:80:f2:3d:33:34:2b:93:8b:76:30:3e:3a: 3b:0b:3c:29:08:e6:0f:31:2f:2b:01:70:7d:1e:fe: 2b:7d:8c:fe:36:fd:d2:4a:c9:21:f4:3b:fc:92:4d: aa:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:23:0E:24:9B:DA:37:4A:D6:09:38:07:E8:56:97:22:E1:35:3D:54 X509v3 Authority Key Identifier: keyid:5D:89:F3:AA:F9:B1:3A:07:A5:B2:64:F2:DE:BA:64:D5:C5:00:65:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/XYnzqvmxOgelsmTy3rpk1cUAZRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XYnzqvmxOgelsmTy3rpk1cUAZRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/XYnzqvmxOgelsmTy3rpk1cUAZRw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:07:91:46:d3:f0:cb:d5:44:dc:7d:34:ea:f9:35:b7:17:e9: e5:07:cf:bf:04:5b:16:d4:1b:90:fd:58:fc:9e:9a:4e:c8:6b: 62:82:84:8e:41:94:63:5b:6f:c9:58:18:90:2b:6a:41:ab:43: 43:46:84:bd:59:c6:76:5f:6b:dc:d6:d8:52:6b:05:8b:7c:e7: 6e:82:f0:f1:c4:a0:b9:5a:03:5d:76:70:f3:35:58:f9:b4:27: a6:8a:ab:6f:65:b3:1d:80:dc:84:b4:b9:6a:72:45:d5:f6:38: e1:44:fb:99:f2:31:2b:42:29:92:aa:a7:4d:a3:c3:79:b1:95: 5e:45:d5:3f:d5:65:6f:ac:f1:9d:1a:ed:97:cd:eb:b2:05:c8: a5:9a:31:c7:cd:12:2d:59:eb:4f:2d:8f:f9:1d:4b:8d:20:cb: 97:5a:23:54:a6:13:31:b7:e7:c7:58:77:44:85:e9:ab:f8:3f: b3:82:37:f8:66:67:8e:a7:ad:e3:80:a8:9a:6c:54:a6:63:5d: f3:4f:3a:cc:fa:fc:60:73:d3:6e:9c:24:33:01:71:d7:c0:ae: f5:8f:55:90:ad:99:f0:c7:56:d8:1b:ea:1f:ec:ae:7e:b9:04: 72:7a:f9:a3:7d:c3:a0:b9:c2:c9:9f:1a:63:0a:4b:84:b7:d1: 62:e3:50:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAsowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUyNDAxMTAvBgNVBAUTKDVEODlGM0FBRjlCMTNBMDdBNUIyNjRGMkRFQkE2NEQ1 QzUwMDY1MUMwHhcNMjYxMDAzMDIwMDI4WhcNMjYxMDEwMDIwMDI4WjAYMRYwFAYD VQQDEw02YWMwNjFiZC0wOTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsM0MVg+gSZivl9AQL9+NsjI6n1/MdMeVnODCWDPRBOrvqMaZ+q4Z2QSMfejc pArtgkqDinDdpfX+vn7WEr2d5owzNWbhJpShgZYn59Fw69wgfWtPw1ZNmHsBW71R VotniEBP8xFeOCJqiBcX+j2v13qWW2ZSn/KmCjuGUcKBRqWt/+uaP8ytziwRauak FIteY154dKRc9GnL1Z7Ga2cUYpJaTyBXcd/l0KGmeysCYz1DmfojPDQR/XJw/VhD Vvftg1oPNGEn2FoAbKS2bxPE+2iTnwyA8j0zNCuTi3YwPjo7CzwpCOYPMS8rAXB9 Hv4rfYz+Nv3SSskh9Dv8kk2qZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKIjDiSb 2jdK1gk4B+hWlyLhNT1UMB8GA1UdIwQYMBaAFF2J86r5sToHpbJk8t66ZNXFAGUc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTI0MC8yN0RERTdEODlC N0QxMUVEQjNDMzNGNURDNEY5QUUwMi9YWW56cXZteE9nZWxzbVR5M3JwazFjVUFa UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hZbnpxdm14T2dlbHNtVHkzcnBrMWNVQVpSdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTI0MC8yN0RERTdEODlCN0QxMUVEQjNDMzNGNURDNEY5QUUwMi9YWW56cXZteE9n ZWxzbVR5M3JwazFjVUFaUncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjweRRtPwy9VE3H006vk1txfp5QfPvwRbFtQbkP1Y/J6aTshrYoKEjkGUY1tv yVgYkCtqQatDQ0aEvVnGdl9r3NbYUmsFi3znboLw8cSguVoDXXZw8zVY+bQnpoqr b2WzHYDchLS5anJF1fY44UT7mfIxK0IpkqqnTaPDebGVXkXVP9Vlb6zxnRrtl83r sgXIpZoxx80SLVnrTy2P+R1LjSDLl1ojVKYTMbfnx1h3RIXpq/g/s4I3+GZnjqet 44CommxUpmNd8086zPr8YHPTbpwkMwFx18Cu9Y9VkK2Z8MdW2BvqH+yufrkEcnr5 o33DoLnCyZ8aYwpLhLfRYuNQ8w== -----END CERTIFICATE-----Generated at Sun Oct 4 17:48:28 2026 by rpki-client