$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.mft File: XEH4EDozCnVMPG44dNzKXcSOGwA.mft (raw, json) Hash identifier: Z/Qa2TXuNmU7e9X6P4R3cWpSGTksts7I9N6jWMfdzCM= Subject key identifier: B4:48:0E:A9:60:09:AC:8A:D5:3E:B6:B3:A4:EF:6A:43:4C:57:EC:CD Authority key identifier: 5C:41:F8:10:3A:33:0A:75:4C:3C:6E:38:74:DC:CA:5D:C4:8E:1B:00 Certificate issuer: /CN=A91DDB11/serialNumber=5C41F8103A330A754C3C6E3874DCCA5DC48E1B00 Certificate serial: 58 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XEH4EDozCnVMPG44dNzKXcSOGwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.mft Manifest number: 56 Signing time: Mon 19 Oct 2026 09:00:33 +0000 Manifest this update: Mon 19 Oct 2026 09:00:32 +0000 Manifest next update: Mon 26 Oct 2026 09:00:32 +0000 Files and hashes: 1: XEH4EDozCnVMPG44dNzKXcSOGwA.crl (hash: xv/jYYta0zbtXdXFltf3aXNZPykWowynQQp3RwGFMN8=) 2: 055A1AFA4E0911F188B16820CA833773.roa (hash: cNvYO9Mx94LSKruAtGYqSyqtbxJvaQBMA0ykxsLIG5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.crl rsync://rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XEH4EDozCnVMPG44dNzKXcSOGwA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 09:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDB11, serialNumber=5C41F8103A330A754C3C6E3874DCCA5DC48E1B00 Validity Not Before: Oct 19 09:00:32 2026 GMT Not After : Oct 26 09:00:32 2026 GMT Subject: CN=6ad5dc31-87d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1d:5b:4d:d0:b6:ba:a0:33:a2:54:47:ac:15: 5d:a0:e6:80:06:72:09:a5:b4:37:73:72:03:cd:a5: ac:10:06:21:aa:39:36:b5:8b:d8:5c:e1:88:c8:d6: 2b:5c:3f:53:40:7d:c4:bd:50:77:49:78:36:20:66: 70:e3:b2:61:f1:0b:84:69:bf:87:ea:3c:6b:6b:8d: 42:14:ee:13:67:a7:6a:14:34:e2:8c:a0:4e:b3:1f: 6b:78:0a:58:1f:96:63:61:a1:75:bd:2f:ba:a3:96: a6:51:3f:73:43:b2:87:32:ac:bc:35:c4:97:d4:1f: 5a:6d:52:8e:5f:51:8f:7b:31:5a:57:31:f8:8f:a0: 16:82:5b:05:c3:d2:8a:5c:a3:24:ce:e6:5c:e6:f6: 84:09:3e:e7:ca:8c:d6:8b:33:69:44:49:45:d5:4d: 18:07:11:1b:67:f9:20:38:aa:40:34:0c:c9:37:4d: 84:e3:06:e6:a5:37:9b:b9:c9:66:9d:e3:33:e8:b4: 57:e7:bf:24:75:9b:ff:e2:e0:5e:c1:b4:19:4a:d2: 06:0c:47:6a:a1:3e:83:99:87:39:5f:f3:b5:ab:9f: ac:a5:dc:de:49:4e:61:22:1b:4c:a3:78:3f:2f:13: 7f:ca:01:89:04:f7:31:b3:23:9f:3e:5d:a4:27:d8: 21:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:48:0E:A9:60:09:AC:8A:D5:3E:B6:B3:A4:EF:6A:43:4C:57:EC:CD X509v3 Authority Key Identifier: keyid:5C:41:F8:10:3A:33:0A:75:4C:3C:6E:38:74:DC:CA:5D:C4:8E:1B:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XEH4EDozCnVMPG44dNzKXcSOGwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:4f:13:e5:ab:f4:6b:ff:81:7d:1a:cf:4c:d0:2b:2b:d6:f0: 2f:a5:15:f7:30:e6:b9:76:54:04:aa:9f:ce:9e:ca:15:cf:2e: 8c:0e:9e:68:1d:b7:bc:f7:f3:8f:5e:d6:2e:ab:ed:6c:f9:2d: 15:af:f4:5d:0f:b5:de:78:42:f3:d9:e7:99:18:4e:80:49:c3: 9b:7f:22:a3:5d:79:ca:b4:ac:cd:ea:20:52:70:0e:87:48:c4: 67:97:ed:6f:9a:0d:3f:08:62:4a:dc:79:9c:65:9f:7e:1e:00: 4a:e5:69:b1:75:f4:1b:2b:04:e1:bd:02:ef:c4:29:2d:60:88: 9e:4f:16:f1:15:b4:ed:2a:a8:35:bf:46:8a:b6:6e:d1:ed:87: a0:32:7f:17:05:d6:f7:00:48:ca:7b:91:98:c7:a6:0d:1c:62: b8:64:98:d3:83:e4:ca:90:74:07:43:5e:1f:24:3e:1e:fe:f9: 5f:ec:b4:3b:4b:48:a7:64:d4:d0:8f:5f:b1:ec:28:92:47:21: 1a:b0:a6:c6:6a:cf:7c:e5:35:18:73:5e:60:4e:0f:ba:ee:bd: 1b:35:2b:33:7e:8a:7f:13:3a:42:93:9e:0e:f9:24:29:b4:65: 43:22:e6:72:e4:84:28:c9:77:19:ff:f9:33:c0:90:05:ed:49: 88:6c:e5:e1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE REIxMTExMC8GA1UEBRMoNUM0MUY4MTAzQTMzMEE3NTRDM0M2RTM4NzREQ0NBNURD NDhFMUIwMDAeFw0yNjEwMTkwOTAwMzJaFw0yNjEwMjYwOTAwMzJaMBgxFjAUBgNV BAMTDTZhZDVkYzMxLTg3ZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCeHVtN0La6oDOiVEesFV2g5oAGcgmltDdzcgPNpawQBiGqOTa1i9hc4YjI1itc P1NAfcS9UHdJeDYgZnDjsmHxC4Rpv4fqPGtrjUIU7hNnp2oUNOKMoE6zH2t4Clgf lmNhoXW9L7qjlqZRP3NDsocyrLw1xJfUH1ptUo5fUY97MVpXMfiPoBaCWwXD0opc oyTO5lzm9oQJPufKjNaLM2lESUXVTRgHERtn+SA4qkA0DMk3TYTjBualN5u5yWad 4zPotFfnvyR1m//i4F7BtBlK0gYMR2qhPoOZhzlf87Wrn6yl3N5JTmEiG0yjeD8v E3/KAYkE9zGzI58+XaQn2CENAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUtEgOqWAJ rIrVPrazpO9qQ0xX7M0wHwYDVR0jBBgwFoAUXEH4EDozCnVMPG44dNzKXcSOGwAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREQjExL0Q4NEMzRkUwNEUw NjExRjFBNjRCNjI5QUM5ODMzNzczL1hFSDRFRG96Q25WTVBHNDRkTnpLWGNTT0d3 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvWEVINEVEb3pDblZNUEc0NGROektYY1NPR3dBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE QjExL0Q4NEMzRkUwNEUwNjExRjFBNjRCNjI5QUM5ODMzNzczL1hFSDRFRG96Q25W TVBHNDRkTnpLWGNTT0d3QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCfTxPlq/Rr/4F9Gs9M0Csr1vAvpRX3MOa5dlQEqp/OnsoVzy6MDp5oHbe89/OP XtYuq+1s+S0Vr/RdD7XeeELz2eeZGE6AScObfyKjXXnKtKzN6iBScA6HSMRnl+1v mg0/CGJK3HmcZZ9+HgBK5WmxdfQbKwThvQLvxCktYIieTxbxFbTtKqg1v0aKtm7R 7YegMn8XBdb3AEjKe5GYx6YNHGK4ZJjTg+TKkHQHQ14fJD4e/vlf7LQ7S0inZNTQ j1+x7CiSRyEasKbGas985TUYc15gTg+67r0bNSszfop/EzpCk54O+SQptGVDIuZy 5IQoyXcZ//kzwJAF7UmIbOXh -----END CERTIFICATE-----Generated at Wed Oct 21 07:19:05 2026 by rpki-client