$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.mft File: Xs7vXyjy82UFPfuM780W4cPehK4.mft (raw, json) Hash identifier: D9QP2NCsEtVjmF9WpBNvnzaMu95BleVQZREmewV4TrY= Subject key identifier: 66:CC:39:F5:F0:91:2C:F1:41:96:64:48:4C:EA:E7:41:71:23:07:EF Authority key identifier: 5E:CE:EF:5F:28:F2:F3:65:05:3D:FB:8C:EF:CD:16:E1:C3:DE:84:AE Certificate issuer: /CN=A91DB8D9/serialNumber=5ECEEF5F28F2F365053DFB8CEFCD16E1C3DE84AE Certificate serial: 04BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xs7vXyjy82UFPfuM780W4cPehK4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.mft Manifest number: 04AE Signing time: Mon 26 Oct 2026 23:47:24 +0000 Manifest this update: Mon 26 Oct 2026 23:47:23 +0000 Manifest next update: Mon 02 Nov 2026 23:47:23 +0000 Files and hashes: 1: Xs7vXyjy82UFPfuM780W4cPehK4.crl (hash: R+1wHGWf6G+tukdVYSt+QGU0FLXj5lTJBX/C8Rreoq0=) 2: 7E044E58A06B11ECBF29B644C4F9AE02.roa (hash: JHvS1f6jdKLwIeNTGazWPjS7qbi1eE+mp2wF3npKP1k=) 3: F31E86967B2311EF93801A72C4F9AE02.roa (hash: D6LiWMFH6d2ytAEKNZQXXNvSijIWaNdo5eD9rEi5mZA=) 4: 728139D62FA311F0A9129814C4F9AE02.roa (hash: eWlYnOj+XzRjYM0rC0+ZAzd4ERRZ2swjPOnqLD6EJ/Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.crl rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xs7vXyjy82UFPfuM780W4cPehK4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 23:47:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1213 (0x4bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB8D9, serialNumber=5ECEEF5F28F2F365053DFB8CEFCD16E1C3DE84AE Validity Not Before: Oct 26 23:47:23 2026 GMT Not After : Nov 2 23:47:23 2026 GMT Subject: CN=6adfe68c-2d18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:03:1d:e6:48:a1:64:17:fe:26:20:f3:e9:58: cc:3b:28:5f:35:8c:14:c8:18:f3:8f:a3:64:9a:2c: 87:6a:7d:45:d0:7d:e0:16:d4:45:f0:0a:31:e0:8d: 07:79:34:7e:19:c2:1d:6b:0b:4a:51:8c:bf:85:d9: 16:30:9f:21:0c:46:00:24:e0:bf:6a:2b:8b:a0:cd: b2:35:96:ef:19:88:bc:ed:cd:ea:9b:34:ee:11:75: ee:46:0b:31:76:10:d2:3f:1f:78:f8:78:45:75:3e: f9:da:27:48:76:c6:8f:92:4a:33:c5:55:9b:ec:ee: d1:66:49:75:29:fc:da:14:1a:bc:44:6b:25:d3:54: 66:ce:bb:75:5a:9c:2e:2b:55:00:5b:ff:89:45:0e: d0:30:c9:2d:8a:2e:d0:95:b2:91:4f:e6:78:be:87: 45:cd:1b:00:5c:61:b2:ae:db:25:58:2f:18:0b:e3: fb:ef:a0:e0:50:9c:ea:87:25:17:33:07:9d:54:2d: db:8c:ab:0b:14:0f:9c:2b:5e:f1:a5:6a:fd:ab:57: 52:01:c9:02:b7:49:49:e5:c0:98:2d:fc:07:b0:0e: 6b:1d:53:eb:9b:ed:67:f8:a0:8f:ab:c8:37:d1:f8: ad:0c:7a:02:07:67:0c:7a:ee:d2:07:39:4f:d5:30: 7e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:CC:39:F5:F0:91:2C:F1:41:96:64:48:4C:EA:E7:41:71:23:07:EF X509v3 Authority Key Identifier: keyid:5E:CE:EF:5F:28:F2:F3:65:05:3D:FB:8C:EF:CD:16:E1:C3:DE:84:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xs7vXyjy82UFPfuM780W4cPehK4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:63:38:ce:e6:a0:1f:2c:e9:11:66:d1:3a:9e:fc:82:50:7a: 0f:36:0b:15:14:54:59:86:78:20:ac:ee:8f:a8:82:d1:10:db: e5:62:eb:4e:89:8b:8f:d0:35:94:99:5a:40:00:6e:5b:15:58: 2e:0b:11:ef:2a:c9:91:f7:02:56:cb:12:ad:d8:c8:45:d2:09: 1a:38:aa:0b:15:fb:2c:5c:d6:f8:4b:e2:d1:94:29:86:63:f5: 25:17:5c:00:f5:37:c7:95:8f:19:ec:7b:90:59:e6:2d:89:18: 20:d8:9b:2a:99:0b:8a:d6:6d:78:55:67:07:13:35:2d:0e:b4: 9c:9b:3e:16:2f:45:cd:1c:88:ca:e3:11:64:05:15:da:5d:90: c8:4b:2f:e7:a0:4a:f4:4c:31:34:55:f5:f3:ad:75:c9:a4:c3: c5:ed:12:e7:ae:6c:21:70:91:f9:fa:eb:bb:5d:b0:0d:32:64: 38:7e:b1:9d:43:58:f7:44:72:7b:c5:65:14:83:65:3d:5a:75: 6d:ce:96:69:78:5e:3e:69:84:6d:b3:36:93:5b:07:14:50:7b: 4c:3e:3a:ec:91:33:4e:d7:1d:c1:6f:ff:4b:22:eb:5d:c3:7d: 86:e2:a9:16:c7:35:32:f2:d0:1d:50:d2:9c:cb:f9:01:7a:44: 2e:8b:8e:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI4RDkxMTAvBgNVBAUTKDVFQ0VFRjVGMjhGMkYzNjUwNTNERkI4Q0VGQ0QxNkUx QzNERTg0QUUwHhcNMjYxMDI2MjM0NzIzWhcNMjYxMTAyMjM0NzIzWjAYMRYwFAYD VQQDEw02YWRmZTY4Yy0yZDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzgMd5kihZBf+JiDz6VjMOyhfNYwUyBjzj6NkmiyHan1F0H3gFtRF8Aox4I0H eTR+GcIdawtKUYy/hdkWMJ8hDEYAJOC/aiuLoM2yNZbvGYi87c3qmzTuEXXuRgsx dhDSPx94+HhFdT752idIdsaPkkozxVWb7O7RZkl1KfzaFBq8RGsl01Rmzrt1Wpwu K1UAW/+JRQ7QMMktii7QlbKRT+Z4vodFzRsAXGGyrtslWC8YC+P776DgUJzqhyUX MwedVC3bjKsLFA+cK17xpWr9q1dSAckCt0lJ5cCYLfwHsA5rHVPrm+1n+KCPq8g3 0fitDHoCB2cMeu7SBzlP1TB+/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGbMOfXw kSzxQZZkSEzq50FxIwfvMB8GA1UdIwQYMBaAFF7O718o8vNlBT37jO/NFuHD3oSu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjhEOS84QjAwMjM3NjlB MDIxMUVDOEI4MTc3ODVDNEY5QUUwMi9Yczd2WHlqeTgyVUZQZnVNNzgwVzRjUGVo SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hzN3ZYeWp5ODJVRlBmdU03ODBXNGNQZWhLNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjhEOS84QjAwMjM3NjlBMDIxMUVDOEI4MTc3ODVDNEY5QUUwMi9Yczd2WHlqeTgy VUZQZnVNNzgwVzRjUGVoSzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAmM4zuagHyzpEWbROp78glB6DzYLFRRUWYZ4IKzuj6iC0RDb5WLrTomLj9A1 lJlaQABuWxVYLgsR7yrJkfcCVssSrdjIRdIJGjiqCxX7LFzW+Evi0ZQphmP1JRdc APU3x5WPGex7kFnmLYkYINibKpkLitZteFVnBxM1LQ60nJs+Fi9FzRyIyuMRZAUV 2l2QyEsv56BK9EwxNFX18611yaTDxe0S565sIXCR+frru12wDTJkOH6xnUNY90Ry e8VlFINlPVp1bc6WaXhePmmEbbM2k1sHFFB7TD467JEzTtcdwW//SyLrXcN9huKp Fsc1MvLQHVDSnMv5AXpELouOlA== -----END CERTIFICATE-----Generated at Tue Oct 27 09:24:44 2026 by rpki-client