$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/X2mRhqLrzUWx_2oKSvYGBvOz0I0.mft File: X2mRhqLrzUWx_2oKSvYGBvOz0I0.mft (raw, json) Hash identifier: QKj+LYLbrzTu/nJH1iH1tnHlpu6agZm5OfBb93xPnNM= Subject key identifier: B5:CB:DD:29:B8:F8:DF:0E:54:6E:D0:14:69:0D:4F:E8:50:A6:69:2D Authority key identifier: 5F:69:91:86:A2:EB:CD:45:B1:FF:6A:0A:4A:F6:06:06:F3:B3:D0:8D Certificate issuer: /CN=A91DF856/serialNumber=5F699186A2EBCD45B1FF6A0A4AF60606F3B3D08D Certificate serial: 012E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mRhqLrzUWx_2oKSvYGBvOz0I0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/X2mRhqLrzUWx_2oKSvYGBvOz0I0.mft Manifest number: 0123 Signing time: Sun 25 Oct 2026 06:15:46 +0000 Manifest this update: Sun 25 Oct 2026 06:15:46 +0000 Manifest next update: Sun 01 Nov 2026 06:15:46 +0000 Files and hashes: 1: X2mRhqLrzUWx_2oKSvYGBvOz0I0.crl (hash: 5hQBKwVB5lilqJtYke5xSFndzlPR4Gn0KByIUsXTFUY=) 2: D522C16CBAEB11F09547BA51C4F9AE02.roa (hash: gWwM8BCGpWWubDG2MVtbVJvT2zPmgCLxqAql3fBRxFQ=) 3: B245BA601C4311F08254DE40C4F9AE02.roa (hash: dWmVj4jtVJHc4wNWMusSMHmYNjBn61d8/+MaIxcv/eU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/X2mRhqLrzUWx_2oKSvYGBvOz0I0.crl rsync://rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/X2mRhqLrzUWx_2oKSvYGBvOz0I0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mRhqLrzUWx_2oKSvYGBvOz0I0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 05:33:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 302 (0x12e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF856, serialNumber=5F699186A2EBCD45B1FF6A0A4AF60606F3B3D08D Validity Not Before: Oct 25 06:15:46 2026 GMT Not After : Nov 1 06:15:46 2026 GMT Subject: CN=6add9e92-e40e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c2:90:cf:93:cc:20:e0:12:24:d7:79:1d:45: c2:21:d4:c3:68:40:0f:de:60:a3:f4:cd:4d:42:f5: f3:bd:23:3c:3a:94:89:c5:06:72:5f:2b:29:34:a9: 66:15:88:e0:2e:ae:c5:d6:38:b2:2f:4f:cc:b0:33: ac:dc:8b:9e:95:bf:ff:36:06:aa:a9:3c:05:3f:37: 29:fe:ee:d5:dc:fe:8c:24:43:ce:5b:6c:a1:83:f4: 08:c2:c7:1d:eb:c8:7e:72:54:1b:4a:07:65:eb:8a: 69:69:97:96:db:43:6f:e2:c6:72:7f:72:27:18:8f: a8:b0:f2:7d:b6:e5:41:64:be:de:aa:b0:87:08:79: 26:3b:c1:6a:9a:47:83:68:82:b2:3d:02:8c:e7:ab: 60:44:19:e1:f8:5f:77:42:51:57:7c:90:20:b5:40: 7a:bf:1e:a8:89:f7:46:23:4e:ed:80:bb:df:67:2d: be:19:91:64:ef:08:53:e9:1a:d4:09:17:ac:24:71: c9:9e:e4:43:df:eb:90:5c:e3:d3:ad:f4:cf:e0:49: 4d:fd:fb:72:1a:d8:6b:f4:2f:7a:19:7f:e1:68:3c: b7:6c:ed:8f:fb:49:d2:b7:cb:3d:68:f5:0d:c3:6f: 2b:58:82:f7:b0:f4:60:f5:a3:83:5b:d0:32:3a:f1: bd:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:CB:DD:29:B8:F8:DF:0E:54:6E:D0:14:69:0D:4F:E8:50:A6:69:2D X509v3 Authority Key Identifier: keyid:5F:69:91:86:A2:EB:CD:45:B1:FF:6A:0A:4A:F6:06:06:F3:B3:D0:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/X2mRhqLrzUWx_2oKSvYGBvOz0I0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mRhqLrzUWx_2oKSvYGBvOz0I0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/X2mRhqLrzUWx_2oKSvYGBvOz0I0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:96:2a:23:cf:ec:0c:3f:b4:9f:d9:8f:ca:8d:a6:90:db:06: d2:53:e1:58:91:96:a1:e2:2c:07:b9:2c:27:8b:d0:27:c0:e0: 8a:39:68:2f:3f:52:ea:c3:61:a5:bc:f6:bb:99:04:2c:95:a6: d5:fa:72:51:56:25:88:c9:f1:d5:6b:87:90:3d:8b:3c:57:b4: d9:a6:52:e8:3d:2c:ef:ea:cf:af:bd:e6:68:45:1e:61:87:03: 6f:02:54:9b:78:06:67:27:4d:64:6b:6d:b8:81:e3:b3:3b:12: b0:93:1f:11:18:ff:a0:4c:fc:76:d0:74:6e:19:5c:26:00:e5: 8e:83:73:b7:0b:67:02:6c:02:74:f6:62:98:ac:a9:3e:3a:df: 18:87:34:c5:f5:5a:bb:ca:8b:22:86:32:29:b1:ff:03:d3:14: 44:70:8b:e3:21:8c:d9:20:3d:41:43:c1:43:f2:06:a9:d1:1d: 99:96:06:98:19:bc:81:8c:a8:05:3c:be:b2:2c:c0:47:50:34: 19:eb:29:db:da:ae:4c:de:d8:a2:bb:58:6c:05:5a:e4:43:d9: 57:d8:6f:31:3c:0a:22:fe:6f:0d:27:01:5e:d0:51:21:65:78: 76:f0:89:29:6b:1c:f7:41:f5:01:93:5f:a8:49:00:2b:5f:92: 09:57:56:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY4NTYxMTAvBgNVBAUTKDVGNjk5MTg2QTJFQkNENDVCMUZGNkEwQTRBRjYwNjA2 RjNCM0QwOEQwHhcNMjYxMDI1MDYxNTQ2WhcNMjYxMTAxMDYxNTQ2WjAYMRYwFAYD VQQDEw02YWRkOWU5Mi1lNDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6sKQz5PMIOASJNd5HUXCIdTDaEAP3mCj9M1NQvXzvSM8OpSJxQZyXyspNKlm FYjgLq7F1jiyL0/MsDOs3Iuelb//NgaqqTwFPzcp/u7V3P6MJEPOW2yhg/QIwscd 68h+clQbSgdl64ppaZeW20Nv4sZyf3InGI+osPJ9tuVBZL7eqrCHCHkmO8FqmkeD aIKyPQKM56tgRBnh+F93QlFXfJAgtUB6vx6oifdGI07tgLvfZy2+GZFk7whT6RrU CResJHHJnuRD3+uQXOPTrfTP4ElN/ftyGthr9C96GX/haDy3bO2P+0nSt8s9aPUN w28rWIL3sPRg9aODW9AyOvG9yQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLXL3Sm4 +N8OVG7QFGkNT+hQpmktMB8GA1UdIwQYMBaAFF9pkYai681Fsf9qCkr2Bgbzs9CN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjg1Ni9FRkYyQTBBMDFD NDExMUYwQTk4MjFGM0VDNEY5QUUwMi9YMm1SaHFMcnpVV3hfMm9LU3ZZR0J2T3ow STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gybVJocUxyelVXeF8yb0tTdllHQnZPejBJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Rjg1Ni9FRkYyQTBBMDFDNDExMUYwQTk4MjFGM0VDNEY5QUUwMi9YMm1SaHFMcnpV V3hfMm9LU3ZZR0J2T3owSTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkJYqI8/sDD+0n9mPyo2mkNsG0lPhWJGWoeIsB7ksJ4vQJ8DgijloLz9S6sNh pbz2u5kELJWm1fpyUVYliMnx1WuHkD2LPFe02aZS6D0s7+rPr73maEUeYYcDbwJU m3gGZydNZGttuIHjszsSsJMfERj/oEz8dtB0bhlcJgDljoNztwtnAmwCdPZimKyp PjrfGIc0xfVau8qLIoYyKbH/A9MURHCL4yGM2SA9QUPBQ/IGqdEdmZYGmBm8gYyo BTy+sizAR1A0Gesp29quTN7YortYbAVa5EPZV9hvMTwKIv5vDScBXtBRIWV4dvCJ KWsc90H1AZNfqEkAK1+SCVdWGQ== -----END CERTIFICATE-----Generated at Sun Oct 25 09:14:21 2026 by rpki-client