$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft File: xOTw2gEK9YY3zFlihHHpmLckPFI.mft (raw, json) Hash identifier: uP2J9LacUWtKMGVbSGg/9ukWgmWwk751xdYgsqeutkI= Subject key identifier: F4:72:04:48:E4:2D:66:C9:80:34:6A:9B:8B:69:67:5D:79:DF:30:70 Authority key identifier: C4:E4:F0:DA:01:0A:F5:86:37:CC:59:62:84:71:E9:98:B7:24:3C:52 Certificate issuer: /CN=A91D83D0/serialNumber=C4E4F0DA010AF58637CC59628471E998B7243C52 Certificate serial: 0A18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xOTw2gEK9YY3zFlihHHpmLckPFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft Manifest number: 09ED Signing time: Tue 06 Oct 2026 19:58:31 +0000 Manifest this update: Tue 06 Oct 2026 19:58:30 +0000 Manifest next update: Tue 13 Oct 2026 19:58:30 +0000 Files and hashes: 1: xOTw2gEK9YY3zFlihHHpmLckPFI.crl (hash: MUGaAkrpAvpQI/LvV+oMevZw1j7IXSBn1Ia3/vBTWH4=) 2: 2BFE357EF06211F08763644E5C6F56BC.roa (hash: 7NcbnhD/HJ8NBFUu7bu5fda+cHjTW1crabfldM6QJwo=) 3: 863670328FD011EEB6FFC636C4F9AE02.roa (hash: soe5Moz4gQVVes64vfH27mxJAWxDV9xSP3vrYYcdBj8=) 4: 7B3252CC014911F1B56055C9516F56BC.roa (hash: Q4zhbv5IYafCWF+cKZ+N5EqVvhygYSFdunW/fgxR9Ms=) 5: 03706138786411EC8624EB12C4F9AE02.roa (hash: BrG7Q3Tkykmo9xilseoxsNjwLBVZ7ijytYCkK61f/ms=) 6: 6A6E4770A10F11EF840C2548C4F9AE02.roa (hash: +RYGeu7uX4uBBcHWusqQhkXqLpcB4R1AKfIKops3PNA=) 7: F4E74AA8B99911EF9A0C3B63C4F9AE02.roa (hash: rC7/cLhAbtNiKypXkgnC2P4P5so5I+YnfNchz84YMA0=) 8: 5353EA28781F11EEBA05B17FC4F9AE02.roa (hash: 95lSl7vVPRfDQ24xYlePTZRf3aCd1VmR4GdHAdsIHtU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.crl rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xOTw2gEK9YY3zFlihHHpmLckPFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 19:58:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2584 (0xa18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D83D0, serialNumber=C4E4F0DA010AF58637CC59628471E998B7243C52 Validity Not Before: Oct 6 19:58:30 2026 GMT Not After : Oct 13 19:58:30 2026 GMT Subject: CN=6ac552e6-f2e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:60:6f:b0:a9:06:6d:eb:29:2c:70:aa:ba:b4: a4:aa:60:47:6b:d9:36:af:5a:0a:23:70:26:74:7b: d5:a1:b3:02:10:78:4c:f1:04:31:0f:f6:ce:69:e2: 46:42:a2:bf:a6:63:d1:11:c5:3e:90:e8:b4:26:47: 9b:73:ad:5d:ef:eb:aa:48:84:0d:52:1f:90:96:ac: 2c:4f:0c:99:e0:c2:03:9c:33:5f:69:00:6f:5d:b2: b0:3a:89:ad:ab:f8:dc:3a:37:ad:ec:31:c5:27:34: f1:18:aa:43:da:f4:35:d6:59:ed:9a:eb:2d:5f:50: e8:b2:22:c5:93:31:e1:d3:ac:d9:f9:be:7c:79:e2: c5:22:7f:00:0c:b5:92:40:57:a7:39:d4:d8:b6:bc: c3:89:8c:3d:97:ae:27:08:97:00:9c:f8:c3:14:4b: 88:9e:ec:e2:07:73:96:fd:36:d3:ac:c8:dc:2c:74: 67:fd:bb:e3:ac:77:ca:78:bd:40:e8:48:90:38:b6: 77:80:fd:7c:24:61:87:49:68:dc:81:af:fe:19:08: 37:78:df:62:ab:5d:61:15:ac:52:ea:89:37:cb:7d: 6b:79:ab:25:f4:94:25:09:fb:f1:19:37:16:49:9b: e7:49:60:11:b4:92:28:e2:96:5f:5f:d5:15:72:d6: d5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:72:04:48:E4:2D:66:C9:80:34:6A:9B:8B:69:67:5D:79:DF:30:70 X509v3 Authority Key Identifier: keyid:C4:E4:F0:DA:01:0A:F5:86:37:CC:59:62:84:71:E9:98:B7:24:3C:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xOTw2gEK9YY3zFlihHHpmLckPFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:f4:c6:81:1c:d7:ed:8d:2d:ea:5b:60:a3:b3:b2:22:d2:bc: 94:6e:e9:10:b0:e3:85:3a:9b:2d:25:ba:6e:fd:91:a4:82:4e: 12:23:b8:7a:06:5f:da:23:2d:15:10:1f:07:76:60:9d:12:7b: 82:80:29:de:40:fc:f8:40:2d:e9:48:bd:ae:c1:45:24:5d:6f: 88:4f:64:f2:c4:48:38:44:ae:b7:d0:99:88:f9:86:32:65:57: ab:67:b3:f6:e5:62:92:98:da:70:b1:16:fb:3a:b9:ab:1a:58: 0e:85:a6:d7:c3:3f:57:da:da:96:58:48:79:84:39:09:15:12: 0a:37:e5:26:fa:6b:6a:a9:f2:62:2b:1c:dd:3c:7b:fd:36:e6: 2f:01:ad:55:ff:b1:91:33:1d:fd:8c:d1:b9:61:a3:d7:a1:57: c9:4f:9f:86:4e:e8:83:68:fd:e5:be:41:47:1a:cd:d5:0a:d1: 76:d9:11:4b:23:c1:85:b5:70:f8:8b:fa:e4:bf:f2:76:c1:c1: 90:ba:af:f5:d3:b9:14:0c:91:2d:2d:d9:a7:fd:d2:3f:a7:5f: b3:93:5c:05:8e:46:1c:e6:a4:d7:07:76:27:c2:e4:6b:98:47: 8a:3d:78:0c:25:ea:8b:74:37:1f:26:79:bc:e0:76:8e:a1:96: ae:f4:14:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICChgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgzRDAxMTAvBgNVBAUTKEM0RTRGMERBMDEwQUY1ODYzN0NDNTk2Mjg0NzFFOTk4 QjcyNDNDNTIwHhcNMjYxMDA2MTk1ODMwWhcNMjYxMDEzMTk1ODMwWjAYMRYwFAYD VQQDEw02YWM1NTJlNi1mMmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyWBvsKkGbespLHCqurSkqmBHa9k2r1oKI3AmdHvVobMCEHhM8QQxD/bOaeJG QqK/pmPREcU+kOi0Jkebc61d7+uqSIQNUh+QlqwsTwyZ4MIDnDNfaQBvXbKwOomt q/jcOjet7DHFJzTxGKpD2vQ11lntmustX1DosiLFkzHh06zZ+b58eeLFIn8ADLWS QFenOdTYtrzDiYw9l64nCJcAnPjDFEuInuziB3OW/TbTrMjcLHRn/bvjrHfKeL1A 6EiQOLZ3gP18JGGHSWjcga/+GQg3eN9iq11hFaxS6ok3y31reasl9JQlCfvxGTcW SZvnSWARtJIo4pZfX9UVctbVnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPRyBEjk LWbJgDRqm4tpZ1153zBwMB8GA1UdIwQYMBaAFMTk8NoBCvWGN8xZYoRx6Zi3JDxS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODNEMC8wQTE2MjA4QUFG QkMxMUVBQTk2MUNCODZDNEY5QUUwMi94T1R3MmdFSzlZWTN6RmxpaEhIcG1MY2tQ RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hPVHcyZ0VLOVlZM3pGbGloSEhwbUxja1BGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODNEMC8wQTE2MjA4QUFGQkMxMUVBQTk2MUNCODZDNEY5QUUwMi94T1R3MmdFSzlZ WTN6RmxpaEhIcG1MY2tQRkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlPTGgRzX7Y0t6ltgo7OyItK8lG7pELDjhTqbLSW6bv2RpIJOEiO4egZf2iMt FRAfB3ZgnRJ7goAp3kD8+EAt6Ui9rsFFJF1viE9k8sRIOESut9CZiPmGMmVXq2ez 9uVikpjacLEW+zq5qxpYDoWm18M/V9rallhIeYQ5CRUSCjflJvpraqnyYisc3Tx7 /TbmLwGtVf+xkTMd/YzRuWGj16FXyU+fhk7og2j95b5BRxrN1QrRdtkRSyPBhbVw +Iv65L/ydsHBkLqv9dO5FAyRLS3Zp/3SP6dfs5NcBY5GHOak1wd2J8Lka5hHij14 DCXqi3Q3HyZ5vOB2jqGWrvQUNg== -----END CERTIFICATE-----Generated at Thu Oct 8 12:25:49 2026 by rpki-client