$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.mft File: x_AoN9JFy4-rzUdBz6K0paL3Pq0.mft (raw, json) Hash identifier: FfdQoJzgLnVy1XuUbro0ue7VAu/H9heZE4Tbh5URbsw= Subject key identifier: 02:55:00:EE:DB:2C:F3:77:9D:AD:48:33:7B:AE:B1:4E:3F:FA:48:3E Authority key identifier: C7:F0:28:37:D2:45:CB:8F:AB:CD:47:41:CF:A2:B4:A5:A2:F7:3E:AD Certificate issuer: /CN=A91D8BB1/serialNumber=C7F02837D245CB8FABCD4741CFA2B4A5A2F73EAD Certificate serial: FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x_AoN9JFy4-rzUdBz6K0paL3Pq0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.mft Manifest number: FD Signing time: Sat 03 Oct 2026 06:55:38 +0000 Manifest this update: Sat 03 Oct 2026 06:55:37 +0000 Manifest next update: Sat 10 Oct 2026 06:55:37 +0000 Files and hashes: 1: x_AoN9JFy4-rzUdBz6K0paL3Pq0.crl (hash: wj60HRwuMclCMXQsXSekuExV2D3IfDpMr7uERAwOwt8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.crl rsync://rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x_AoN9JFy4-rzUdBz6K0paL3Pq0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 06:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 253 (0xfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8BB1, serialNumber=C7F02837D245CB8FABCD4741CFA2B4A5A2F73EAD Validity Not Before: Oct 3 06:55:37 2026 GMT Not After : Oct 10 06:55:37 2026 GMT Subject: CN=6ac0a6ea-77bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f3:2f:de:e7:0a:ec:31:ab:21:fe:43:a3:a3: 8f:b4:19:05:9d:39:77:f5:7d:68:ac:53:f1:08:a8: 45:d2:ea:29:0d:d9:7c:05:5c:52:8e:71:ba:e4:14: 4c:c8:65:21:d3:f9:b4:25:eb:77:b9:7a:2c:99:7a: 61:9e:ac:96:46:a5:97:09:6c:4c:3d:2a:4f:c0:05: 37:fd:2e:25:8c:2f:61:5b:56:82:ef:15:8a:4c:40: c1:17:35:fd:65:48:75:42:ce:5c:0e:92:86:17:80: 3b:72:c6:b1:27:93:9e:42:fa:91:d7:55:d7:6f:61: 97:a6:91:46:5e:18:9a:ba:b9:3b:59:eb:31:a2:54: c8:cf:89:a4:07:8d:24:8f:eb:cc:10:33:0d:aa:34: 6c:a4:43:59:2b:7e:ee:d2:04:2c:fe:59:fe:7c:c3: f4:7d:db:df:e0:3a:3e:a3:48:8a:e8:84:cb:b1:7e: bb:63:ea:99:c6:8d:2a:bb:3c:60:42:ba:25:1f:61: 5f:09:cb:67:fb:e9:ac:d1:ea:b3:62:ec:36:cf:cc: 54:dd:23:77:b0:14:7d:50:97:9a:97:b4:f0:66:e7: d0:b1:ac:b2:9b:bb:d3:73:95:f9:54:b8:2e:ef:db: a6:59:71:16:3e:09:9d:20:e8:e3:8a:18:66:f7:e0: 55:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:55:00:EE:DB:2C:F3:77:9D:AD:48:33:7B:AE:B1:4E:3F:FA:48:3E X509v3 Authority Key Identifier: keyid:C7:F0:28:37:D2:45:CB:8F:AB:CD:47:41:CF:A2:B4:A5:A2:F7:3E:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x_AoN9JFy4-rzUdBz6K0paL3Pq0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:8d:8f:4c:84:b6:30:8c:f1:1c:47:cc:ef:f7:6a:08:3f:d5: 40:f4:1e:2a:0e:58:7e:76:fa:e1:d9:26:e9:a2:ff:86:2e:b1: a1:14:5e:b6:03:f6:5d:5f:87:36:1c:eb:fa:c8:29:ae:55:85: b3:13:1b:d1:49:4f:5c:c4:cf:60:2e:2a:4d:78:93:12:2d:b1: b5:1c:71:13:9c:97:a8:04:f0:4e:78:d9:3c:19:a5:73:e7:29: b9:45:ac:a4:1e:9f:dc:ee:2a:67:5c:93:de:c5:e0:76:7b:6a: 5b:14:41:a3:55:ad:78:2a:3a:50:2e:46:2b:c5:40:66:5a:73: ea:ae:01:9d:fd:9d:97:72:c7:64:2e:13:74:80:7e:5a:90:5f: 1e:6d:ef:04:a4:cc:61:ec:8c:91:68:03:6c:b9:37:2e:7d:fe: 05:81:00:09:0c:be:5a:d7:a3:eb:50:8b:9a:11:62:84:e8:3d: 56:ee:41:cc:da:8e:f8:84:7a:bc:55:7b:e0:8b:9a:0f:b8:53: 49:95:32:b2:4f:01:f4:05:9d:3b:d4:be:7e:b1:45:c9:36:d0: 5f:b1:3d:b7:74:1a:38:16:79:5c:48:ad:9d:22:cb:52:fd:4b: dc:d5:93:c9:20:6b:29:f3:88:94:25:46:2a:08:d9:4c:1d:03: 3f:c3:06:56 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhCQjExMTAvBgNVBAUTKEM3RjAyODM3RDI0NUNCOEZBQkNENDc0MUNGQTJCNEE1 QTJGNzNFQUQwHhcNMjYxMDAzMDY1NTM3WhcNMjYxMDEwMDY1NTM3WjAYMRYwFAYD VQQDEw02YWMwYTZlYS03N2JmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1fMv3ucK7DGrIf5Do6OPtBkFnTl39X1orFPxCKhF0uopDdl8BVxSjnG65BRM yGUh0/m0Jet3uXosmXphnqyWRqWXCWxMPSpPwAU3/S4ljC9hW1aC7xWKTEDBFzX9 ZUh1Qs5cDpKGF4A7csaxJ5OeQvqR11XXb2GXppFGXhiaurk7WesxolTIz4mkB40k j+vMEDMNqjRspENZK37u0gQs/ln+fMP0fdvf4Do+o0iK6ITLsX67Y+qZxo0quzxg QrolH2FfCctn++ms0eqzYuw2z8xU3SN3sBR9UJeal7TwZufQsayym7vTc5X5VLgu 79umWXEWPgmdIOjjihhm9+BVdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAJVAO7b LPN3na1IM3uusU4/+kg+MB8GA1UdIwQYMBaAFMfwKDfSRcuPq81HQc+itKWi9z6t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEJCMS81QUQ3NjlCMDNE MjUxMUYwODBDNDg5NTVDNEY5QUUwMi94X0FvTjlKRnk0LXJ6VWRCejZLMHBhTDNQ cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hfQW9OOUpGeTQtcnpVZEJ6NkswcGFMM1BxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEJCMS81QUQ3NjlCMDNEMjUxMUYwODBDNDg5NTVDNEY5QUUwMi94X0FvTjlKRnk0 LXJ6VWRCejZLMHBhTDNQcTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh42PTIS2MIzxHEfM7/dqCD/VQPQeKg5Yfnb64dkm6aL/hi6xoRRetgP2XV+H Nhzr+sgprlWFsxMb0UlPXMTPYC4qTXiTEi2xtRxxE5yXqATwTnjZPBmlc+cpuUWs pB6f3O4qZ1yT3sXgdntqWxRBo1WteCo6UC5GK8VAZlpz6q4Bnf2dl3LHZC4TdIB+ WpBfHm3vBKTMYeyMkWgDbLk3Ln3+BYEACQy+Wtej61CLmhFihOg9Vu5BzNqO+IR6 vFV74IuaD7hTSZUysk8B9AWdO9S+frFFyTbQX7E9t3QaOBZ5XEitnSLLUv1L3NWT ySBrKfOIlCVGKgjZTB0DP8MGVg== -----END CERTIFICATE-----Generated at Sun Oct 4 13:07:57 2026 by rpki-client