$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E1EC4/6BFAA7A2B1A011F197311F9C7011F970/xFSxGDXtbsbp5N5uIg0chN6QSMU.mft File: xFSxGDXtbsbp5N5uIg0chN6QSMU.mft (raw, json) Hash identifier: 3ECOy1l24ApPB5BBiPGxKIun7zRJj6pTIeI+jerwzzw= Subject key identifier: 21:97:BE:5F:8D:2C:10:87:1B:0D:7F:F9:2B:32:B1:33:61:43:F8:49 Authority key identifier: C4:54:B1:18:35:ED:6E:C6:E9:E4:DE:6E:22:0D:1C:84:DE:90:48:C5 Certificate issuer: /CN=A91E1EC4/serialNumber=C454B11835ED6EC6E9E4DE6E220D1C84DE9048C5 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xFSxGDXtbsbp5N5uIg0chN6QSMU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1EC4/6BFAA7A2B1A011F197311F9C7011F970/xFSxGDXtbsbp5N5uIg0chN6QSMU.mft Manifest number: 0B Signing time: Sat 03 Oct 2026 09:56:27 +0000 Manifest this update: Sat 03 Oct 2026 09:56:26 +0000 Manifest next update: Sat 10 Oct 2026 09:56:26 +0000 Files and hashes: 1: xFSxGDXtbsbp5N5uIg0chN6QSMU.crl (hash: 2aAB2+hsOGudGXJjMKHNbRPBI+bjCFdZJIlAQIZPD9E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1EC4/6BFAA7A2B1A011F197311F9C7011F970/xFSxGDXtbsbp5N5uIg0chN6QSMU.crl rsync://rpki.apnic.net/member_repository/A91E1EC4/6BFAA7A2B1A011F197311F9C7011F970/xFSxGDXtbsbp5N5uIg0chN6QSMU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xFSxGDXtbsbp5N5uIg0chN6QSMU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 09:56:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1EC4, serialNumber=C454B11835ED6EC6E9E4DE6E220D1C84DE9048C5 Validity Not Before: Oct 3 09:56:26 2026 GMT Not After : Oct 10 09:56:26 2026 GMT Subject: CN=6ac0d14a-de8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:22:74:d0:d4:2f:2a:ea:2d:79:d4:14:93:5d: 62:a4:88:f5:72:ef:aa:63:b8:f7:9e:77:9d:07:47: a9:bd:ac:d1:3c:4a:27:d0:5c:9b:c1:3c:89:c9:3c: 7b:c2:98:48:c6:7d:96:54:ba:bb:06:4f:a7:e1:50: a9:40:fd:a3:4d:48:18:a8:71:ab:d9:ca:24:dc:c3: e0:13:1c:1c:43:b1:d9:1c:b0:9b:4b:91:88:df:05: 84:01:b4:67:f2:3c:9b:9f:a4:0e:cf:42:bc:2a:cd: ff:bc:41:77:12:4d:8a:7f:1d:6b:99:6e:23:9c:04: 04:a1:5f:ff:18:66:75:d6:e8:85:33:4c:c8:3a:bc: 66:e7:29:af:c4:b4:80:85:1c:f9:b9:0b:bb:19:fb: da:59:83:f4:e8:35:23:80:af:6c:28:a8:36:8d:5a: 9c:bd:52:98:db:a6:ec:5b:6d:02:61:a1:c9:6d:a3: 01:3e:cb:0f:a2:a6:48:32:cf:2e:73:72:dd:fe:d4: 37:bc:bc:cc:26:3b:36:6e:78:e4:2d:51:dc:d9:41: 93:eb:f8:40:15:6d:8f:10:b5:30:6b:4f:84:d6:27: 85:9d:f0:43:62:07:0f:cd:4f:1a:38:64:73:27:57: 41:dd:48:29:05:6c:7c:1b:78:21:bc:a1:9b:c9:2b: 36:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:97:BE:5F:8D:2C:10:87:1B:0D:7F:F9:2B:32:B1:33:61:43:F8:49 X509v3 Authority Key Identifier: keyid:C4:54:B1:18:35:ED:6E:C6:E9:E4:DE:6E:22:0D:1C:84:DE:90:48:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1EC4/6BFAA7A2B1A011F197311F9C7011F970/xFSxGDXtbsbp5N5uIg0chN6QSMU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xFSxGDXtbsbp5N5uIg0chN6QSMU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1EC4/6BFAA7A2B1A011F197311F9C7011F970/xFSxGDXtbsbp5N5uIg0chN6QSMU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:7c:29:20:f3:8d:6c:e3:42:51:c8:99:38:e9:98:de:fb:97: 82:7d:c5:ba:87:76:e4:57:43:c3:6f:31:6b:3d:69:51:9c:e3: b8:3a:ca:1c:b9:95:7f:aa:24:20:2d:dc:b5:5a:e4:81:39:14: e5:90:e2:d4:8a:99:84:eb:a5:67:27:b7:a0:04:0d:d7:b9:d0: c4:a0:38:0f:d5:a0:c9:55:69:ee:80:7c:7a:92:4a:c5:2a:c2: aa:bf:32:c3:7c:94:f3:0f:55:6f:59:df:37:03:1e:73:3d:53: 09:c3:0d:0a:81:fe:23:24:77:15:f1:f3:e5:59:52:46:1d:26: b1:8d:d1:d0:ff:08:3c:0e:5c:1b:0f:5e:9c:0b:ba:2a:16:ad: b9:1d:e9:fb:cb:a5:af:39:74:52:f0:5c:3a:54:8e:78:50:a3: 59:e0:12:b9:ac:18:8c:c8:b6:b0:f0:ca:80:81:05:28:12:1b: 0c:71:1d:cd:25:7e:70:67:ff:10:cc:8d:d5:1b:34:20:c1:8f: 82:80:76:93:2d:1a:96:77:f7:20:e7:cb:04:94:b3:d3:15:0c: b4:78:23:50:4e:8f:d4:20:7a:ba:70:e2:ef:ce:03:6b:d8:11: 24:e3:4c:f8:f3:e8:a4:21:0f:ad:76:5f:73:8d:68:23:f5:29: 9d:60:df:ea -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MUVDNDExMC8GA1UEBRMoQzQ1NEIxMTgzNUVENkVDNkU5RTRERTZFMjIwRDFDODRE RTkwNDhDNTAeFw0yNjEwMDMwOTU2MjZaFw0yNjEwMTAwOTU2MjZaMBgxFjAUBgNV BAMTDTZhYzBkMTRhLWRlOGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCInTQ1C8q6i151BSTXWKkiPVy76pjuPeed50HR6m9rNE8SifQXJvBPInJPHvC mEjGfZZUursGT6fhUKlA/aNNSBiocavZyiTcw+ATHBxDsdkcsJtLkYjfBYQBtGfy PJufpA7PQrwqzf+8QXcSTYp/HWuZbiOcBAShX/8YZnXW6IUzTMg6vGbnKa/EtICF HPm5C7sZ+9pZg/ToNSOAr2woqDaNWpy9UpjbpuxbbQJhocltowE+yw+ipkgyzy5z ct3+1De8vMwmOzZueOQtUdzZQZPr+EAVbY8QtTBrT4TWJ4Wd8ENiBw/NTxo4ZHMn V0HdSCkFbHwbeCG8oZvJKzZzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUIZe+X40s EIcbDX/5KzKxM2FD+EkwHwYDVR0jBBgwFoAUxFSxGDXtbsbp5N5uIg0chN6QSMUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxRUM0LzZCRkFBN0EyQjFB MDExRjE5NzMxMUY5QzcwMTFGOTcwL3hGU3hHRFh0YnNicDVONXVJZzBjaE42UVNN VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveEZTeEdEWHRic2JwNU41dUlnMGNoTjZRU01VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx RUM0LzZCRkFBN0EyQjFBMDExRjE5NzMxMUY5QzcwMTFGOTcwL3hGU3hHRFh0YnNi cDVONXVJZzBjaE42UVNNVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBJfCkg841s40JRyJk46Zje+5eCfcW6h3bkV0PDbzFrPWlRnOO4OsocuZV/qiQg Ldy1WuSBORTlkOLUipmE66VnJ7egBA3XudDEoDgP1aDJVWnugHx6kkrFKsKqvzLD fJTzD1VvWd83Ax5zPVMJww0Kgf4jJHcV8fPlWVJGHSaxjdHQ/wg8DlwbD16cC7oq Fq25Hen7y6WvOXRS8Fw6VI54UKNZ4BK5rBiMyLaw8MqAgQUoEhsMcR3NJX5wZ/8Q zI3VGzQgwY+CgHaTLRqWd/cg58sElLPTFQy0eCNQTo/UIHq6cOLvzgNr2BEk40z4 8+ikIQ+tdl9zjWgj9SmdYN/q -----END CERTIFICATE-----Generated at Sun Oct 4 13:36:30 2026 by rpki-client