$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/XDlbosoKv2WIhyaHTHgktpt4mZU.mft File: XDlbosoKv2WIhyaHTHgktpt4mZU.mft (raw, json) Hash identifier: H04WbgG1b3ChtjHxjKRIs7Z0JWNZhj4z3UmV/BnUHkY= Subject key identifier: DC:76:4C:C9:2D:EC:A7:BA:35:17:56:34:A7:36:59:29:76:B3:6D:37 Authority key identifier: 5C:39:5B:A2:CA:0A:BF:65:88:87:26:87:4C:78:24:B6:9B:78:99:95 Certificate issuer: /CN=A91E66E5/serialNumber=5C395BA2CA0ABF65888726874C7824B69B789995 Certificate serial: 0F54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDlbosoKv2WIhyaHTHgktpt4mZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/XDlbosoKv2WIhyaHTHgktpt4mZU.mft Manifest number: 0F45 Signing time: Mon 26 Oct 2026 17:34:15 +0000 Manifest this update: Mon 26 Oct 2026 17:34:14 +0000 Manifest next update: Mon 02 Nov 2026 17:34:14 +0000 Files and hashes: 1: XDlbosoKv2WIhyaHTHgktpt4mZU.crl (hash: SRr8/eunGhXc6tbN5LJKAIRHW5czxgUaadBNn96I6W8=) 2: AECDA1B0448F11EDACC30815C4F9AE02.roa (hash: Vv+ic3tuHHAEO62okYNeBPpK0SKMbTv6XBExdyT6xHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/XDlbosoKv2WIhyaHTHgktpt4mZU.crl rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/XDlbosoKv2WIhyaHTHgktpt4mZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDlbosoKv2WIhyaHTHgktpt4mZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 17:34:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3924 (0xf54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E66E5, serialNumber=5C395BA2CA0ABF65888726874C7824B69B789995 Validity Not Before: Oct 26 17:34:14 2026 GMT Not After : Nov 2 17:34:14 2026 GMT Subject: CN=6adf8f17-d151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:30:a9:98:03:35:fd:9c:3b:f6:8f:33:0c:d7: 60:8f:f2:3b:6d:ae:97:f1:af:4c:16:52:0c:a3:78: 25:16:e9:f0:e9:eb:8d:92:73:84:e1:8f:70:3f:e1: b3:6a:d6:76:c2:9b:18:0d:ec:99:ba:a7:7e:62:11: 6c:17:f5:76:f7:88:ca:6b:13:9d:b0:f5:1d:c7:62: 38:5e:a5:21:1b:3c:d8:c7:4d:28:03:2c:30:17:74: 1b:d6:f7:98:60:22:fb:3b:64:66:57:cc:d6:d1:9f: d8:8a:5e:2b:af:50:36:fe:48:c5:84:e3:49:39:f5: 02:e1:35:fa:d6:6f:4d:cb:63:1c:e8:f8:42:58:12: 66:fc:6e:9e:62:b5:aa:04:4d:b8:05:78:64:a9:87: 75:b9:86:d6:2d:3b:2f:a4:7c:11:bf:61:4a:94:31: 2e:a8:8c:59:0f:ee:7a:df:4f:a6:f4:4c:8a:e7:fa: 8b:38:c9:2f:d0:84:1d:a3:d3:07:48:e4:27:70:95: fb:06:98:ac:6a:53:7d:c2:59:22:e0:3f:03:17:95: 12:29:d4:f3:fd:b8:1a:6f:fe:98:d7:ca:4e:0e:e3: f4:e5:44:ca:a4:1d:97:12:82:fa:3a:a6:54:91:3e: 2d:3a:91:54:d6:75:69:86:42:56:81:d7:08:d3:93: 3e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:76:4C:C9:2D:EC:A7:BA:35:17:56:34:A7:36:59:29:76:B3:6D:37 X509v3 Authority Key Identifier: keyid:5C:39:5B:A2:CA:0A:BF:65:88:87:26:87:4C:78:24:B6:9B:78:99:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/XDlbosoKv2WIhyaHTHgktpt4mZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDlbosoKv2WIhyaHTHgktpt4mZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/XDlbosoKv2WIhyaHTHgktpt4mZU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:33:ae:a0:c0:28:e6:aa:11:53:2c:1d:9a:a1:d5:dd:58:fd: aa:59:bf:ca:44:bf:69:0e:1d:ec:a3:21:57:e8:29:6f:fa:dd: 79:84:14:3a:08:6d:fc:2d:34:c5:d4:65:66:a7:02:0e:73:45: 74:68:73:0c:55:2f:79:41:d3:2c:50:21:0e:20:83:b8:51:6a: 57:92:e2:0a:3f:f3:a3:df:5d:65:62:5f:9e:05:57:5d:7e:33: f1:69:6d:f1:cb:2c:ab:8a:3f:26:39:14:27:54:fe:b2:bd:9f: 0d:06:f6:27:95:9b:74:a3:42:b1:14:a2:e8:af:5a:6b:04:f3: e1:f9:16:b0:26:5d:17:50:3a:de:f7:ff:e9:9c:4e:52:54:bb: d2:7f:17:f9:5c:8c:fc:cd:4e:b4:84:e7:09:a6:2d:3e:cb:07: 57:3b:23:27:81:03:f2:4d:1d:42:46:23:a5:8f:47:d3:5c:98: 8e:17:73:da:a1:d0:03:78:5d:08:45:19:2c:2c:49:5e:c8:cf: 8c:01:5d:62:6c:c0:98:74:44:ba:52:ff:4f:ed:f2:ba:02:e9: 5c:ab:9c:fb:5c:44:c0:d1:95:34:d0:a6:7d:16:38:b5:93:2c: d3:e9:f0:99:07:b5:ab:3c:25:c5:b7:df:b7:66:4a:16:14:1f: b3:59:b1:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD1QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY2RTUxMTAvBgNVBAUTKDVDMzk1QkEyQ0EwQUJGNjU4ODg3MjY4NzRDNzgyNEI2 OUI3ODk5OTUwHhcNMjYxMDI2MTczNDE0WhcNMjYxMTAyMTczNDE0WjAYMRYwFAYD VQQDEw02YWRmOGYxNy1kMTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtzCpmAM1/Zw79o8zDNdgj/I7ba6X8a9MFlIMo3glFunw6euNknOE4Y9wP+Gz atZ2wpsYDeyZuqd+YhFsF/V294jKaxOdsPUdx2I4XqUhGzzYx00oAywwF3Qb1veY YCL7O2RmV8zW0Z/Yil4rr1A2/kjFhONJOfUC4TX61m9Ny2Mc6PhCWBJm/G6eYrWq BE24BXhkqYd1uYbWLTsvpHwRv2FKlDEuqIxZD+5630+m9EyK5/qLOMkv0IQdo9MH SOQncJX7BpisalN9wlki4D8DF5USKdTz/bgab/6Y18pODuP05UTKpB2XEoL6OqZU kT4tOpFU1nVphkJWgdcI05M+OwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNx2TMkt 7Ke6NRdWNKc2WSl2s203MB8GA1UdIwQYMBaAFFw5W6LKCr9liIcmh0x4JLabeJmV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjZFNS81NjQzMDU4NkEy NzUxMUU5QTc0RDRFODJDNEY5QUUwMi9YRGxib3NvS3YyV0loeWFIVEhna3RwdDRt WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hEbGJvc29LdjJXSWh5YUhUSGdrdHB0NG1aVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjZFNS81NjQzMDU4NkEyNzUxMUU5QTc0RDRFODJDNEY5QUUwMi9YRGxib3NvS3Yy V0loeWFIVEhna3RwdDRtWlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAATOuoMAo5qoRUywdmqHV3Vj9qlm/ykS/aQ4d7KMhV+gpb/rdeYQUOght/C00 xdRlZqcCDnNFdGhzDFUveUHTLFAhDiCDuFFqV5LiCj/zo99dZWJfngVXXX4z8Wlt 8cssq4o/JjkUJ1T+sr2fDQb2J5WbdKNCsRSi6K9aawTz4fkWsCZdF1A63vf/6ZxO UlS70n8X+VyM/M1OtITnCaYtPssHVzsjJ4ED8k0dQkYjpY9H01yYjhdz2qHQA3hd CEUZLCxJXsjPjAFdYmzAmHREulL/T+3yugLpXKuc+1xEwNGVNNCmfRY4tZMs0+nw mQe1qzwlxbfft2ZKFhQfs1mxDg== -----END CERTIFICATE-----Generated at Tue Oct 27 15:08:16 2026 by rpki-client