$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft File: -XNJLtZGko7R8Q3oRmLlUj9VzI0.mft (raw, json) Hash identifier: Xq2b6+zI6+Xk7/l4ovMJUagE9ivf116wN+hAr5bPF3w= Subject key identifier: 1D:3E:AF:64:02:21:EC:20:CD:E6:9A:58:0A:DC:0D:AA:22:AA:AD:8D Authority key identifier: F9:73:49:2E:D6:46:92:8E:D1:F1:0D:E8:46:62:E5:52:3F:55:CC:8D Certificate issuer: /CN=A91E0875/serialNumber=F973492ED646928ED1F10DE84662E5523F55CC8D Certificate serial: 0BE5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft Manifest number: 0BB7 Signing time: Sun 04 Oct 2026 19:10:48 +0000 Manifest this update: Sun 04 Oct 2026 19:10:47 +0000 Manifest next update: Sun 11 Oct 2026 19:10:47 +0000 Files and hashes: 1: -XNJLtZGko7R8Q3oRmLlUj9VzI0.crl (hash: U6h8+nD2Codo8mQUTEgUBbfEI5df7lJe5nVPOZAN3r8=) 2: F1FC74DE7DE111EEB1BFD61AC4F9AE02.roa (hash: pNMivkkOLffKPDrh/XyyiMiyvZdESt4jTfT5doztz7c=) 3: 33CFE442C07511EE980AEC0CC4F9AE02.roa (hash: lAb12WKjWNZhERVfu+rXY9B+lTIhcdPrOzSWtvyJJG0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.crl rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 19:10:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3045 (0xbe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0875, serialNumber=F973492ED646928ED1F10DE84662E5523F55CC8D Validity Not Before: Oct 4 19:10:47 2026 GMT Not After : Oct 11 19:10:47 2026 GMT Subject: CN=6ac2a4b8-ba14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:45:04:92:a1:c9:65:65:c3:29:c8:bc:6a:a4: e4:23:a8:84:f3:01:82:5b:fe:6e:ee:fc:4e:18:a9: af:75:a8:1d:0f:10:a0:58:b9:4c:2f:30:61:26:28: 85:15:91:07:4a:02:35:ee:3d:5c:b2:4f:63:35:c4: 74:09:81:1c:26:b2:6e:25:04:86:69:2e:33:96:f3: ed:dc:c9:cd:da:9c:86:29:f0:cc:5c:5f:e9:e9:a6: f0:b8:88:a9:e0:06:9b:51:69:20:54:67:99:d2:c1: bb:9e:50:ba:90:5b:cd:f7:95:72:09:4b:43:7d:85: 0d:df:da:68:f7:ee:a6:c7:b5:d7:12:2f:70:9b:11: 91:1d:c5:da:39:c7:e6:96:e8:76:a9:34:77:db:da: 4e:97:f6:7c:80:70:c2:ef:0f:ee:4c:e7:8f:8e:7d: 22:4e:1e:98:9a:16:7d:b0:88:f6:cb:71:e4:36:ad: 07:0b:60:2a:ec:87:66:9b:be:f8:9d:09:27:c7:b7: fe:b4:dc:a7:7e:1c:1e:9d:7f:dd:6b:1a:d6:6c:96: 2e:81:15:f6:2d:47:8d:64:65:99:4b:5e:57:ad:82: f9:bc:58:f7:c4:7d:6e:b0:ad:70:1c:61:c8:81:13: 9f:fb:02:e7:4b:68:dd:46:56:20:62:f6:cd:c7:1b: b7:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:3E:AF:64:02:21:EC:20:CD:E6:9A:58:0A:DC:0D:AA:22:AA:AD:8D X509v3 Authority Key Identifier: keyid:F9:73:49:2E:D6:46:92:8E:D1:F1:0D:E8:46:62:E5:52:3F:55:CC:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:a8:cb:31:6e:12:91:cf:44:83:65:e7:68:81:c3:e7:d2:be: 3c:93:a4:a2:ae:ac:6d:1a:86:f8:92:d8:6a:14:6e:78:76:d2: 0b:53:8d:e1:71:86:7a:34:c8:82:53:92:42:87:c6:6a:9f:41: 19:8e:b8:f4:1f:66:06:86:fb:23:3b:d7:e2:c7:69:73:90:71: 11:b1:cb:03:3e:89:89:cf:ea:41:86:30:c0:b3:a1:23:7e:03: 09:c8:c1:d3:e1:f7:06:71:de:94:06:17:0f:12:0f:ac:34:6f: 9d:f7:d1:9b:61:43:2f:79:b4:7a:85:d6:ce:3b:9e:34:4d:ac: 07:8b:05:8d:16:60:b4:5a:b6:f0:5c:51:72:2e:a5:72:5c:b0: 2d:28:3e:a8:57:fa:01:14:d6:3f:a7:4e:1a:8f:33:59:bf:6e: f3:2c:7b:ec:08:e5:0c:5e:05:e3:ca:42:f2:f0:48:f0:ad:c8: a2:8d:1a:95:d3:61:33:74:34:bd:cf:c4:4e:b7:db:86:56:9d: 94:07:58:86:07:0c:59:dd:c1:55:e4:e9:a9:94:ca:14:47:e9: 39:65:ed:03:c0:03:50:af:40:74:5c:cf:e0:82:bd:d3:3e:0c: 96:24:8e:ac:3b:29:79:b7:af:2c:2e:de:ef:69:2d:18:49:0e: 2f:cb:10:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC+UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA4NzUxMTAvBgNVBAUTKEY5NzM0OTJFRDY0NjkyOEVEMUYxMERFODQ2NjJFNTUy M0Y1NUNDOEQwHhcNMjYxMDA0MTkxMDQ3WhcNMjYxMDExMTkxMDQ3WjAYMRYwFAYD VQQDEw02YWMyYTRiOC1iYTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtUUEkqHJZWXDKci8aqTkI6iE8wGCW/5u7vxOGKmvdagdDxCgWLlMLzBhJiiF FZEHSgI17j1csk9jNcR0CYEcJrJuJQSGaS4zlvPt3MnN2pyGKfDMXF/p6abwuIip 4AabUWkgVGeZ0sG7nlC6kFvN95VyCUtDfYUN39po9+6mx7XXEi9wmxGRHcXaOcfm luh2qTR329pOl/Z8gHDC7w/uTOePjn0iTh6YmhZ9sIj2y3HkNq0HC2Aq7Idmm774 nQknx7f+tNynfhwenX/daxrWbJYugRX2LUeNZGWZS15XrYL5vFj3xH1usK1wHGHI gROf+wLnS2jdRlYgYvbNxxu3fQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB0+r2QC IewgzeaaWArcDaoiqq2NMB8GA1UdIwQYMBaAFPlzSS7WRpKO0fEN6EZi5VI/VcyN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDg3NS82RDkxQUFCQzU5 MzExMUVBQUEzMUI0MEFDNEY5QUUwMi8tWE5KTHRaR2tvN1I4UTNvUm1MbFVqOVZ6 STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YTkpMdFpHa283UjhRM29SbUxsVWo5VnpJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDg3NS82RDkxQUFCQzU5MzExMUVBQUEzMUI0MEFDNEY5QUUwMi8tWE5KTHRaR2tv N1I4UTNvUm1MbFVqOVZ6STAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ6jLMW4Skc9Eg2XnaIHD59K+PJOkoq6sbRqG+JLYahRueHbSC1ON4XGGejTI glOSQofGap9BGY649B9mBob7IzvX4sdpc5BxEbHLAz6Jic/qQYYwwLOhI34DCcjB 0+H3BnHelAYXDxIPrDRvnffRm2FDL3m0eoXWzjueNE2sB4sFjRZgtFq28FxRci6l clywLSg+qFf6ARTWP6dOGo8zWb9u8yx77AjlDF4F48pC8vBI8K3Ioo0aldNhM3Q0 vc/ETrfbhladlAdYhgcMWd3BVeTpqZTKFEfpOWXtA8ADUK9AdFzP4IK90z4MliSO rDspebevLC7e72ktGEkOL8sQjw== -----END CERTIFICATE-----Generated at Mon Oct 5 14:38:44 2026 by rpki-client