$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft File: xPfGGVRtktYGb7L0x2VFqc4v4wM.mft (raw, json) Hash identifier: c6/JVsoT1qccVQa1/XTn1+ALicDbd+9tp2btnsGgofQ= Subject key identifier: 90:CF:AB:18:F9:DE:E2:DE:9C:52:58:ED:14:06:4F:02:65:7C:E7:83 Authority key identifier: C4:F7:C6:19:54:6D:92:D6:06:6F:B2:F4:C7:65:45:A9:CE:2F:E3:03 Certificate issuer: /CN=A91DC0C0/serialNumber=C4F7C619546D92D6066FB2F4C76545A9CE2FE303 Certificate serial: 0953 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft Manifest number: 0941 Signing time: Tue 06 Oct 2026 20:17:28 +0000 Manifest this update: Tue 06 Oct 2026 20:17:28 +0000 Manifest next update: Tue 13 Oct 2026 20:17:28 +0000 Files and hashes: 1: xPfGGVRtktYGb7L0x2VFqc4v4wM.crl (hash: XpIU2HgmJ8rtIOU/ghUlkxEXuhkcaMW2y+3ZhfWHbH0=) 2: BEB276EECCE311EAA397205EC4F9AE02.roa (hash: eazjY0QI0IkousembgiUMF6ex//mtspG+XkKlVCT+t4=) 3: BE243D98CCE311EAA397205EC4F9AE02.roa (hash: u1RDbYNdHTAW3BTDzKScEWLA3q8xl+IocU5STlH9Ois=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.crl rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 20:17:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2387 (0x953) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC0C0, serialNumber=C4F7C619546D92D6066FB2F4C76545A9CE2FE303 Validity Not Before: Oct 6 20:17:28 2026 GMT Not After : Oct 13 20:17:28 2026 GMT Subject: CN=6ac55758-8c66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:52:56:1b:3f:71:b6:56:59:5a:c6:40:ba:01: 55:2d:f1:b1:9d:f9:45:4a:6d:1f:00:e3:71:98:22: 26:29:65:8c:eb:df:25:15:b5:e9:2f:34:5d:c0:5f: c2:8e:2a:84:0f:74:3d:16:44:e5:ae:d5:bc:e5:a5: 3d:16:9b:c8:9c:17:d3:2f:f8:fe:e1:f4:32:4d:25: de:ec:5e:da:e6:98:18:b5:f2:99:1e:fd:4c:6f:f2: 6d:25:4f:62:f8:d5:6b:63:a6:87:0c:bb:4b:25:07: 30:fd:35:f4:1e:72:61:f4:56:c1:34:4f:6f:6b:b2: de:7c:f0:4c:a7:6c:bc:0e:01:6b:2b:84:7a:d3:a0: c7:88:d8:84:3a:3c:82:7e:7e:8e:26:46:dc:86:42: 0f:c1:4e:07:f9:3d:3b:c8:f7:f3:8e:38:fc:27:0d: fa:72:dd:53:ba:e7:c3:ad:0a:df:e0:51:15:ed:17: 3f:b3:63:91:02:6b:6c:c6:f7:09:47:e6:a7:93:d1: ee:9e:3d:c1:c8:29:a0:d0:04:42:2b:96:0c:d6:37: 75:2e:2a:ee:bf:f0:51:c5:54:54:62:7f:a8:6b:f2: 63:67:06:d3:4c:92:b6:31:e9:e8:06:a5:c4:c1:49: b2:96:f7:1f:61:d8:58:9b:f9:fe:6f:d0:82:f9:8a: 44:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:CF:AB:18:F9:DE:E2:DE:9C:52:58:ED:14:06:4F:02:65:7C:E7:83 X509v3 Authority Key Identifier: keyid:C4:F7:C6:19:54:6D:92:D6:06:6F:B2:F4:C7:65:45:A9:CE:2F:E3:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:0c:04:fc:b7:d2:e6:63:0d:c0:a9:ff:e2:d8:eb:45:07:a9: a9:5f:c2:4f:14:2a:b4:26:72:08:ec:9f:7c:c6:31:9b:22:ae: 51:e0:34:65:5d:30:87:c4:18:72:9b:b3:92:b1:96:87:9c:2d: 7e:84:31:55:9d:6c:31:c3:c3:dc:03:93:d4:59:d7:c6:f4:93: 98:95:7d:8d:cd:5f:b5:95:4d:86:cd:31:b4:73:f3:e1:30:ba: 75:58:29:14:21:79:44:d9:dd:a3:1b:49:47:01:47:63:b8:3c: 49:fb:2f:6a:98:f3:a6:5d:c8:76:c7:f8:3d:0e:14:c4:d5:24: cc:8f:da:3f:dd:88:7e:14:83:f4:62:f7:42:2b:8b:e8:65:2d: 47:b5:86:33:ad:ec:7f:3b:e7:21:a6:0f:bd:35:53:b0:ea:82: 39:7f:0c:6d:e7:e3:a8:3d:44:bd:d8:5b:c8:2e:2a:3c:df:99: 24:61:73:ea:04:8a:6a:ca:91:d6:1a:8c:9f:c7:bc:be:6f:83: 41:3c:14:b2:6e:4a:44:3f:a5:3f:e6:50:f4:66:c0:1e:d4:52: 51:d4:6f:87:cd:64:02:1a:0e:4e:f1:02:e4:f3:45:8c:65:44: f6:ca:da:6a:75:2a:f8:b5:bf:44:09:5b:a2:08:02:6a:bd:34: 11:38:78:af -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwQzAxMTAvBgNVBAUTKEM0RjdDNjE5NTQ2RDkyRDYwNjZGQjJGNEM3NjU0NUE5 Q0UyRkUzMDMwHhcNMjYxMDA2MjAxNzI4WhcNMjYxMDEzMjAxNzI4WjAYMRYwFAYD VQQDEw02YWM1NTc1OC04YzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArlJWGz9xtlZZWsZAugFVLfGxnflFSm0fAONxmCImKWWM698lFbXpLzRdwF/C jiqED3Q9FkTlrtW85aU9FpvInBfTL/j+4fQyTSXe7F7a5pgYtfKZHv1Mb/JtJU9i +NVrY6aHDLtLJQcw/TX0HnJh9FbBNE9va7LefPBMp2y8DgFrK4R606DHiNiEOjyC fn6OJkbchkIPwU4H+T07yPfzjjj8Jw36ct1TuufDrQrf4FEV7Rc/s2ORAmtsxvcJ R+ank9Hunj3ByCmg0ARCK5YM1jd1Liruv/BRxVRUYn+oa/JjZwbTTJK2MenoBqXE wUmylvcfYdhYm/n+b9CC+YpEkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJDPqxj5 3uLenFJY7RQGTwJlfOeDMB8GA1UdIwQYMBaAFMT3xhlUbZLWBm+y9MdlRanOL+MD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzBDMC8wMjJEQkNBNEND RTMxMUVBQUY3M0ZDNURDNEY5QUUwMi94UGZHR1ZSdGt0WUdiN0wweDJWRnFjNHY0 d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQZkdHVlJ0a3RZR2I3TDB4MlZGcWM0djR3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzBDMC8wMjJEQkNBNENDRTMxMUVBQUY3M0ZDNURDNEY5QUUwMi94UGZHR1ZSdGt0 WUdiN0wweDJWRnFjNHY0d00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANgwE/LfS5mMNwKn/4tjrRQepqV/CTxQqtCZyCOyffMYxmyKuUeA0ZV0wh8QY cpuzkrGWh5wtfoQxVZ1sMcPD3AOT1FnXxvSTmJV9jc1ftZVNhs0xtHPz4TC6dVgp FCF5RNndoxtJRwFHY7g8Sfsvapjzpl3Idsf4PQ4UxNUkzI/aP92IfhSD9GL3QiuL 6GUtR7WGM63sfzvnIaYPvTVTsOqCOX8MbefjqD1EvdhbyC4qPN+ZJGFz6gSKasqR 1hqMn8e8vm+DQTwUsm5KRD+lP+ZQ9GbAHtRSUdRvh81kAhoOTvEC5PNFjGVE9sra anUq+LW/RAlboggCar00ETh4rw== -----END CERTIFICATE-----Generated at Wed Oct 7 13:07:52 2026 by rpki-client