$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft File: xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft (raw, json) Hash identifier: 5CSJk0xvxwyzzF3/3zV2puI/cJm5l3FeDW6mi7YKhEQ= Subject key identifier: 38:09:E3:EF:C1:4B:8A:FE:92:09:D5:EA:9F:27:E8:30:15:B7:B9:03 Authority key identifier: C4:9E:51:83:EA:2F:C4:9B:8A:83:C9:20:52:BC:E2:A8:B6:57:6C:70 Certificate issuer: /CN=A91DF937/serialNumber=C49E5183EA2FC49B8A83C92052BCE2A8B6576C70 Certificate serial: 202D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft Manifest number: 201D Signing time: Sat 24 Oct 2026 15:56:13 +0000 Manifest this update: Sat 24 Oct 2026 15:56:12 +0000 Manifest next update: Sat 31 Oct 2026 15:56:12 +0000 Files and hashes: 1: xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl (hash: Ohy+JXonxPzuZTqtg3mUvflRA3udV2ZEsAKIOHWswms=) 2: E723101E553D11E7B552CE31C4F9AE02.roa (hash: w2DU193yd2F7A76EdcHPjGzbuA2IEC9BLibhAE+t7oo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 15:56:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8237 (0x202d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF937, serialNumber=C49E5183EA2FC49B8A83C92052BCE2A8B6576C70 Validity Not Before: Oct 24 15:56:12 2026 GMT Not After : Oct 31 15:56:12 2026 GMT Subject: CN=6adcd51d-27fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d7:05:53:8d:ca:98:5c:a7:65:f9:f8:16:00: c3:97:22:a0:69:f0:3a:ec:f0:a8:09:c3:44:08:dd: 59:a7:79:84:14:5c:e7:73:18:e3:7a:d3:9a:7d:0f: 2b:e4:3c:59:2e:26:91:e1:f9:75:98:67:6f:f7:f7: 26:8d:56:44:09:98:ef:1b:19:5b:3f:d4:60:dc:8b: 26:be:9b:ed:5a:cc:de:06:6d:60:2c:c0:1b:40:30: 88:06:a9:77:ee:f9:46:46:c5:07:cb:a5:1b:2e:13: 2b:10:81:d5:12:18:83:e8:8f:1c:41:4f:2a:03:7d: ba:34:10:3c:be:27:91:e9:01:43:1a:91:4f:2c:56: 4a:3f:3a:59:c8:fd:59:c6:5e:12:7f:a0:f0:1b:db: c5:b0:1a:14:d3:bb:f9:d2:54:98:fd:bd:e2:69:aa: 27:bc:6f:2f:56:99:12:3b:04:d5:dd:68:0b:45:c4: 10:27:f4:3f:19:5d:06:31:f9:89:4e:a2:f4:06:f5: 8b:00:d8:bc:1e:f4:3f:6f:98:23:bc:ac:2f:39:b8: e0:2c:1e:67:25:75:b4:9f:d0:c7:35:39:51:1e:e2: fe:91:fc:9d:57:76:f4:64:fd:9d:d2:e2:b4:77:46: e3:50:49:fa:8b:0a:8d:ce:5a:e8:18:c5:79:4a:4f: 2c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:09:E3:EF:C1:4B:8A:FE:92:09:D5:EA:9F:27:E8:30:15:B7:B9:03 X509v3 Authority Key Identifier: keyid:C4:9E:51:83:EA:2F:C4:9B:8A:83:C9:20:52:BC:E2:A8:B6:57:6C:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:ac:7b:75:7e:4b:ee:8d:05:81:0d:52:ec:33:4f:fb:97:28: 04:e4:d6:fb:80:7e:fe:dc:9b:ea:13:ef:75:a8:f6:ca:92:14: 31:f5:f2:a4:68:7c:42:f2:fd:5a:19:1d:81:c0:73:0e:91:ea: 7d:6b:84:6a:da:cc:78:66:58:1e:02:94:90:df:9b:35:8f:a5: e6:af:01:bc:cc:40:6e:fe:af:05:6e:a7:28:05:90:a9:e1:fb: 9d:ed:03:0e:4a:a5:c9:35:b6:ec:1d:33:1f:ff:fe:30:04:8e: 37:aa:17:a9:51:26:45:df:c6:a4:bf:6d:6e:95:17:2a:6d:82: c1:00:41:a1:ed:87:3b:63:de:d7:ed:03:52:cb:1a:d5:d7:15: 90:1a:14:8b:a8:91:aa:92:51:3e:1d:80:98:8c:b2:4e:da:13: 93:a6:78:b4:9a:d4:bf:51:24:a0:4b:2e:7b:c5:a4:99:c7:d8: d9:7c:8d:be:3b:77:3f:a4:76:88:1b:d2:7f:d0:dd:12:d1:52: 4b:19:08:a6:1e:3f:8d:49:cf:0d:0b:08:22:23:6a:82:14:51: d5:92:4c:4c:b0:84:a9:c2:a1:37:23:8d:16:42:15:fe:bc:9d: 35:f1:81:e0:e4:88:36:b4:62:84:4b:8a:1e:2e:8c:0d:0a:76: f5:eb:08:b7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIC0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY5MzcxMTAvBgNVBAUTKEM0OUU1MTgzRUEyRkM0OUI4QTgzQzkyMDUyQkNFMkE4 QjY1NzZDNzAwHhcNMjYxMDI0MTU1NjEyWhcNMjYxMDMxMTU1NjEyWjAYMRYwFAYD VQQDEw02YWRjZDUxZC0yN2ZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1tcFU43KmFynZfn4FgDDlyKgafA67PCoCcNECN1Zp3mEFFzncxjjetOafQ8r 5DxZLiaR4fl1mGdv9/cmjVZECZjvGxlbP9Rg3IsmvpvtWszeBm1gLMAbQDCIBql3 7vlGRsUHy6UbLhMrEIHVEhiD6I8cQU8qA326NBA8vieR6QFDGpFPLFZKPzpZyP1Z xl4Sf6DwG9vFsBoU07v50lSY/b3iaaonvG8vVpkSOwTV3WgLRcQQJ/Q/GV0GMfmJ TqL0BvWLANi8HvQ/b5gjvKwvObjgLB5nJXW0n9DHNTlRHuL+kfydV3b0ZP2d0uK0 d0bjUEn6iwqNzlroGMV5Sk8slQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDgJ4+/B S4r+kgnV6p8n6DAVt7kDMB8GA1UdIwQYMBaAFMSeUYPqL8SbioPJIFK84qi2V2xw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjkzNy9BNDQ3QkZEQzU1 MzAxMUU2QTM2NDI3NDVDNEY5QUUwMi94SjVSZy1vdnhKdUtnOGtnVXJ6aXFMWlhi SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hKNVJnLW92eEp1S2c4a2dVcnppcUxaWGJIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjkzNy9BNDQ3QkZEQzU1MzAxMUU2QTM2NDI3NDVDNEY5QUUwMi94SjVSZy1vdnhK dUtnOGtnVXJ6aXFMWlhiSEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOKx7dX5L7o0FgQ1S7DNP+5coBOTW+4B+/tyb6hPvdaj2ypIUMfXypGh8QvL9 WhkdgcBzDpHqfWuEatrMeGZYHgKUkN+bNY+l5q8BvMxAbv6vBW6nKAWQqeH7ne0D DkqlyTW27B0zH//+MASON6oXqVEmRd/GpL9tbpUXKm2CwQBBoe2HO2Pe1+0DUssa 1dcVkBoUi6iRqpJRPh2AmIyyTtoTk6Z4tJrUv1EkoEsue8WkmcfY2XyNvjt3P6R2 iBvSf9DdEtFSSxkIph4/jUnPDQsIIiNqghRR1ZJMTLCEqcKhNyONFkIV/rydNfGB 4OSINrRihEuKHi6MDQp29esItw== -----END CERTIFICATE-----Generated at Sun Oct 25 15:53:41 2026 by rpki-client