$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft File: 8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft (raw, json) Hash identifier: HaWgqv6Cj4eKMimtDUIBbp8e+dh88XPp2sR9Qnb9lKY= Subject key identifier: EA:F2:93:BE:D8:76:5A:2B:1F:61:84:94:4C:ED:5C:A8:91:01:78:6C Authority key identifier: F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED Certificate issuer: /CN=A91E094D/serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED Certificate serial: 06AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft Manifest number: 0690 Signing time: Sat 24 Oct 2026 22:31:01 +0000 Manifest this update: Sat 24 Oct 2026 22:31:01 +0000 Manifest next update: Sat 31 Oct 2026 22:31:01 +0000 Files and hashes: 1: 8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl (hash: zk6cKV2mjLOFzNjSon51PUiPsoBbtdDAZV58/4TFPGo=) 2: ED49BD3C649A11ECBDAC9565C4F9AE02.roa (hash: rD15pka7RGN6Dr3Q8e78ui79TCm39qYtp73M6ru8354=) 3: 22A3D2E4E5D311EFB5545A4EC4F9AE02.roa (hash: 7YGEH26/VxaZx42ktq8JCfF1YkYo6OxRUmmxiiA6G3g=) 4: 660A349884C511EFB2831C16C4F9AE02.roa (hash: 60YZnkNCt62OM9R5IdYDqAi54oL/bd0p0DzGTJOCooU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 22:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1709 (0x6ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E094D, serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED Validity Not Before: Oct 24 22:31:01 2026 GMT Not After : Oct 31 22:31:01 2026 GMT Subject: CN=6add31a5-21eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b8:e5:94:49:da:ec:1a:56:db:99:dc:d7:aa: 65:6d:14:21:42:47:fb:76:c7:5e:5b:d4:d9:33:9c: d8:bc:89:13:67:58:84:77:bc:5e:8c:19:43:5e:fc: 08:a4:03:fc:b8:13:f1:8a:88:32:7f:54:7a:82:eb: 9d:e7:74:89:95:ba:d9:70:86:c7:47:dc:6d:44:73: 0f:47:25:8e:56:3e:df:89:ca:2d:a3:d7:60:3d:b5: 74:02:2f:4f:50:fa:9d:35:ba:cc:a9:b8:98:41:a2: cb:43:4b:51:1e:02:19:bb:8b:ad:d2:0e:e8:3e:bd: aa:55:d4:1c:97:7f:7e:07:74:ca:cb:0a:36:41:89: 08:0d:c5:0c:dd:bc:8b:4f:6c:b7:c1:65:55:d4:c3: 12:c8:77:f4:a7:53:e0:ba:4e:bf:14:74:91:b0:17: 9a:f6:2e:bc:3d:20:e9:12:82:32:26:57:90:83:c3: 23:4a:12:d5:56:9f:f4:ed:b0:4a:80:96:f8:94:65: f1:e3:21:0f:2c:92:9f:fb:1c:a2:c0:b8:97:f6:53: 3c:0d:51:53:04:95:26:a9:39:f8:b4:ab:d4:57:b5: fc:11:8e:b1:c9:e2:f9:be:c6:8a:43:e6:25:63:3b: ff:9e:92:69:e3:a5:ca:6c:b1:44:60:28:14:37:fc: e2:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:F2:93:BE:D8:76:5A:2B:1F:61:84:94:4C:ED:5C:A8:91:01:78:6C X509v3 Authority Key Identifier: keyid:F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:eb:58:ab:ea:0e:64:20:0b:95:aa:1e:54:a3:a3:77:66:cb: 47:96:35:93:2c:fe:11:c1:9f:a3:bb:95:72:bd:6b:1d:2a:b1: 85:5f:cc:73:3f:20:0c:6e:18:c5:55:96:34:22:37:ae:63:3b: 39:4d:4c:5b:8f:e3:a7:36:8b:ec:2c:df:a3:d6:4b:cf:6f:66: c0:e8:2e:14:c0:f8:ef:38:1b:1c:6d:0a:73:68:f1:38:9d:15: 12:89:43:a9:1a:81:04:48:5e:fa:77:e3:69:4b:4e:4f:7a:c4: 42:b4:82:71:5f:33:15:b1:34:60:56:d3:44:06:f3:9d:3f:ee: 09:d9:aa:36:74:0a:22:59:1e:cd:ad:79:b4:5f:65:90:2b:4c: 60:37:67:4b:e0:22:42:b9:1a:75:9f:f6:3f:a9:3a:9f:af:9c: 3d:9f:a7:ca:32:f0:d7:88:9b:5a:8f:3f:62:40:5e:81:94:69: bf:6d:be:e3:25:b1:ac:4d:d9:82:93:18:40:90:f6:09:fb:79: bf:45:23:6b:60:25:76:46:9e:db:e3:83:a8:c0:c0:00:36:26: 8c:05:fa:30:67:a9:30:18:77:0a:38:ff:e9:a0:76:54:73:dd: a1:3f:14:96:7f:ba:8c:70:b0:1a:b6:df:90:78:8f:8d:fe:0f: 70:9b:3e:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA5NEQxMTAvBgNVBAUTKEYzMTcwNUU4MThFQTQ4MDNCMDkzNDE5M0Y2MUZDNkUz MzcxNzcyRUQwHhcNMjYxMDI0MjIzMTAxWhcNMjYxMDMxMjIzMTAxWjAYMRYwFAYD VQQDEw02YWRkMzFhNS0yMWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAybjllEna7BpW25nc16plbRQhQkf7dsdeW9TZM5zYvIkTZ1iEd7xejBlDXvwI pAP8uBPxiogyf1R6guud53SJlbrZcIbHR9xtRHMPRyWOVj7ficoto9dgPbV0Ai9P UPqdNbrMqbiYQaLLQ0tRHgIZu4ut0g7oPr2qVdQcl39+B3TKywo2QYkIDcUM3byL T2y3wWVV1MMSyHf0p1Pguk6/FHSRsBea9i68PSDpEoIyJleQg8MjShLVVp/07bBK gJb4lGXx4yEPLJKf+xyiwLiX9lM8DVFTBJUmqTn4tKvUV7X8EY6xyeL5vsaKQ+Yl Yzv/npJp46XKbLFEYCgUN/zi/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOryk77Y dlorH2GElEztXKiRAXhsMB8GA1UdIwQYMBaAFPMXBegY6kgDsJNBk/YfxuM3F3Lt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDk0RC80MEI3Mzg2RURF ODExMUVCQTlGQzdENzJDNEY5QUUwMi84eGNGNkJqcVNBT3drMEdUOWhfRzR6Y1hj dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh4Y0Y2QmpxU0FPd2swR1Q5aF9HNHpjWGN1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDk0RC80MEI3Mzg2RURFODExMUVCQTlGQzdENzJDNEY5QUUwMi84eGNGNkJqcVNB T3drMEdUOWhfRzR6Y1hjdTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAD+tYq+oOZCALlaoeVKOjd2bLR5Y1kyz+EcGfo7uVcr1rHSqxhV/Mcz8gDG4Y xVWWNCI3rmM7OU1MW4/jpzaL7Czfo9ZLz29mwOguFMD47zgbHG0Kc2jxOJ0VEolD qRqBBEhe+nfjaUtOT3rEQrSCcV8zFbE0YFbTRAbznT/uCdmqNnQKIlkeza15tF9l kCtMYDdnS+AiQrkadZ/2P6k6n6+cPZ+nyjLw14ibWo8/YkBegZRpv22+4yWxrE3Z gpMYQJD2Cft5v0Uja2Aldkae2+ODqMDAADYmjAX6MGepMBh3Cjj/6aB2VHPdoT8U ln+6jHCwGrbfkHiPjf4PcJs+og== -----END CERTIFICATE-----Generated at Mon Oct 26 03:56:53 2026 by rpki-client