$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3BF2/509096A8F6C311EC833AEF39C4F9AE02/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.mft File: xHGlbulPBbQ3wJ7uD0QgP6RZJzY.mft (raw, json) Hash identifier: Zq/ZbxVXcGvJLGx8R5BwBA3wM2szDDr2Ulk/aGKk5SI= Subject key identifier: D7:5C:F8:84:11:48:DB:95:53:09:53:16:0C:DB:9C:55:68:CC:B1:DF Authority key identifier: C4:71:A5:6E:E9:4F:05:B4:37:C0:9E:EE:0F:44:20:3F:A4:59:27:36 Certificate issuer: /CN=A91E3BF2/serialNumber=C471A56EE94F05B437C09EEE0F44203FA4592736 Certificate serial: 03B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3BF2/509096A8F6C311EC833AEF39C4F9AE02/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.mft Manifest number: 03AF Signing time: Wed 07 Oct 2026 00:43:39 +0000 Manifest this update: Wed 07 Oct 2026 00:43:39 +0000 Manifest next update: Wed 14 Oct 2026 00:43:39 +0000 Files and hashes: 1: xHGlbulPBbQ3wJ7uD0QgP6RZJzY.crl (hash: zRWLm3ppIW55w+RJU3uzsg02L0MQAFxyMRMCpK6XMAc=) 2: 6B7C33C8F6C811ECBDF7DD40C4F9AE02.roa (hash: 9JY6uhEn8EF+36wJRXg1147V4xC6zP83VrmQeBhwfUg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3BF2/509096A8F6C311EC833AEF39C4F9AE02/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.crl rsync://rpki.apnic.net/member_repository/A91E3BF2/509096A8F6C311EC833AEF39C4F9AE02/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 00:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 952 (0x3b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3BF2, serialNumber=C471A56EE94F05B437C09EEE0F44203FA4592736 Validity Not Before: Oct 7 00:43:39 2026 GMT Not After : Oct 14 00:43:39 2026 GMT Subject: CN=6ac595bb-1dfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9c:f2:42:9f:9d:4e:3a:f3:c6:71:79:a9:62: 50:d0:65:a3:ab:4e:69:dc:ba:39:13:1f:f8:b6:c0: e0:04:da:f1:87:41:32:66:1f:0a:47:92:54:8e:1a: 23:9e:5b:36:f6:b1:8a:bf:50:e0:f2:ab:3a:40:26: 17:85:d6:b5:78:bd:03:70:bd:5a:e2:fa:01:54:57: 61:75:09:a6:23:39:40:54:eb:f4:9a:bf:aa:db:78: 4d:9e:59:23:15:f4:bc:09:07:0b:dc:b9:5a:0d:40: 35:03:6a:d9:64:5f:6c:a3:68:0c:87:be:29:4b:de: 07:b1:2f:a6:e5:62:1d:3f:65:4b:88:2b:5f:38:f9: c9:02:39:40:3d:d4:72:3b:b5:d5:13:a4:b3:bb:26: c0:15:0a:07:32:98:4e:58:b4:29:eb:44:d0:21:01: ac:19:44:7e:6e:44:72:f4:d8:49:05:32:9f:0f:82: b9:4e:4a:c0:ab:48:74:f4:42:34:91:4a:5b:6e:dd: 9e:af:c1:b1:a3:13:98:c9:09:6b:13:c0:b8:79:74: 9b:41:89:52:74:eb:23:b1:a2:fa:7a:1a:91:5c:30: 7d:da:5e:f5:dc:04:5a:35:9c:cf:45:36:55:bc:2b: d6:3e:ce:17:b4:9c:8f:ae:ad:a4:88:d6:2e:d6:92: 8f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:5C:F8:84:11:48:DB:95:53:09:53:16:0C:DB:9C:55:68:CC:B1:DF X509v3 Authority Key Identifier: keyid:C4:71:A5:6E:E9:4F:05:B4:37:C0:9E:EE:0F:44:20:3F:A4:59:27:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3BF2/509096A8F6C311EC833AEF39C4F9AE02/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3BF2/509096A8F6C311EC833AEF39C4F9AE02/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:1a:4c:2e:58:b7:b5:47:38:b8:9c:42:29:a2:f3:6a:6c:23: cf:d2:e6:fd:9e:69:42:d5:d0:99:7f:07:0f:ac:d3:3b:3a:7c: a6:9f:5c:c1:9c:c1:46:f7:14:ce:8f:b6:ea:b7:3e:a9:db:22: 55:d8:22:50:f4:61:80:3b:f6:f3:be:62:e6:f9:bc:64:b0:d5: a5:b8:5d:9b:23:b6:2e:0e:9b:66:41:82:15:d0:3a:21:e0:ac: 9c:b4:b8:d2:d2:59:01:15:59:50:1a:0b:59:cc:88:90:36:d7: c1:7a:bd:24:b0:72:3d:3a:51:06:2d:f1:f0:dd:75:c3:7a:82: 22:7a:6e:41:a5:c2:32:6a:7c:4a:bc:31:f5:3c:2d:11:1f:09: 29:9f:ea:ba:a5:9d:fe:ee:66:b7:19:79:fb:0e:bd:fb:bf:29: b7:dd:d5:41:e8:c9:ff:04:62:c9:5d:1b:0b:28:d7:8d:83:37: f7:8d:e4:b9:77:d8:fd:b9:65:c9:a7:63:65:9c:e4:e5:a7:0b: d2:64:b0:7a:bc:63:a9:b5:b3:b7:50:78:6c:2a:bc:7a:8a:b0: 9d:65:fc:a1:e1:33:46:50:0c:8e:ea:18:6c:21:51:56:9d:f2: 5f:e9:b2:46:70:9a:62:0f:7b:f3:ed:f1:80:44:11:23:0a:90: a5:13:08:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNCRjIxMTAvBgNVBAUTKEM0NzFBNTZFRTk0RjA1QjQzN0MwOUVFRTBGNDQyMDNG QTQ1OTI3MzYwHhcNMjYxMDA3MDA0MzM5WhcNMjYxMDE0MDA0MzM5WjAYMRYwFAYD VQQDEw02YWM1OTViYi0xZGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs5zyQp+dTjrzxnF5qWJQ0GWjq05p3Lo5Ex/4tsDgBNrxh0EyZh8KR5JUjhoj nls29rGKv1Dg8qs6QCYXhda1eL0DcL1a4voBVFdhdQmmIzlAVOv0mr+q23hNnlkj FfS8CQcL3LlaDUA1A2rZZF9so2gMh74pS94HsS+m5WIdP2VLiCtfOPnJAjlAPdRy O7XVE6SzuybAFQoHMphOWLQp60TQIQGsGUR+bkRy9NhJBTKfD4K5TkrAq0h09EI0 kUpbbt2er8GxoxOYyQlrE8C4eXSbQYlSdOsjsaL6ehqRXDB92l713ARaNZzPRTZV vCvWPs4XtJyPrq2kiNYu1pKP6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNdc+IQR SNuVUwlTFgzbnFVozLHfMB8GA1UdIwQYMBaAFMRxpW7pTwW0N8Ce7g9EID+kWSc2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0JGMi81MDkwOTZBOEY2 QzMxMUVDODMzQUVGMzlDNEY5QUUwMi94SEdsYnVsUEJiUTN3Sjd1RDBRZ1A2UlpK elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hIR2xidWxQQmJRM3dKN3VEMFFnUDZSWkp6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0JGMi81MDkwOTZBOEY2QzMxMUVDODMzQUVGMzlDNEY5QUUwMi94SEdsYnVsUEJi UTN3Sjd1RDBRZ1A2UlpKelkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoxpMLli3tUc4uJxCKaLzamwjz9Lm/Z5pQtXQmX8HD6zTOzp8pp9cwZzBRvcU zo+26rc+qdsiVdgiUPRhgDv2875i5vm8ZLDVpbhdmyO2Lg6bZkGCFdA6IeCsnLS4 0tJZARVZUBoLWcyIkDbXwXq9JLByPTpRBi3x8N11w3qCInpuQaXCMmp8Srwx9Twt ER8JKZ/quqWd/u5mtxl5+w69+78pt93VQejJ/wRiyV0bCyjXjYM3943kuXfY/bll yadjZZzk5acL0mSwerxjqbWzt1B4bCq8eoqwnWX8oeEzRlAMjuoYbCFRVp3yX+my RnCaYg978+3xgEQRIwqQpRMIvw== -----END CERTIFICATE-----Generated at Wed Oct 7 07:44:32 2026 by rpki-client