$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA23A/8D59A2E4582311F18D7F2C9EA7833773/CiXR8yHlCgvKx8HQfzGTl6ORAT8.mft File: CiXR8yHlCgvKx8HQfzGTl6ORAT8.mft (raw, json) Hash identifier: G6nRaAg99/ExgDYao2VCXtDtS0tnPSkudAdh11fGC+Q= Subject key identifier: 32:61:99:9D:AA:E2:7F:7E:18:36:6E:0B:02:9D:6F:E1:C1:39:B7:2B Authority key identifier: 0A:25:D1:F3:21:E5:0A:0B:CA:C7:C1:D0:7F:31:93:97:A3:91:01:3F Certificate issuer: /CN=A91EA23A/serialNumber=0A25D1F321E50A0BCAC7C1D07F319397A391013F Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiXR8yHlCgvKx8HQfzGTl6ORAT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA23A/8D59A2E4582311F18D7F2C9EA7833773/CiXR8yHlCgvKx8HQfzGTl6ORAT8.mft Manifest number: 55 Signing time: Sun 25 Oct 2026 08:41:56 +0000 Manifest this update: Sun 25 Oct 2026 08:41:56 +0000 Manifest next update: Sun 01 Nov 2026 08:41:56 +0000 Files and hashes: 1: CiXR8yHlCgvKx8HQfzGTl6ORAT8.crl (hash: Uuc4hqbCG2/l9XHZFFIM40SYzBj+GJGYuHAzw0nFHEw=) 2: A08CACAC631411F19BD88A887D47A888.roa (hash: cui5kt/ao4ZSMnSmpM+vFQ/6IaNn7ud21wvDYaj2E2c=) 3: 28140BB0B0E111F19AD90CA83211F970.roa (hash: fjC18ilBLVBqO47F+D+SM6LDqi09QTp22sC4WXLz5ik=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA23A/8D59A2E4582311F18D7F2C9EA7833773/CiXR8yHlCgvKx8HQfzGTl6ORAT8.crl rsync://rpki.apnic.net/member_repository/A91EA23A/8D59A2E4582311F18D7F2C9EA7833773/CiXR8yHlCgvKx8HQfzGTl6ORAT8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiXR8yHlCgvKx8HQfzGTl6ORAT8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 08:41:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA23A, serialNumber=0A25D1F321E50A0BCAC7C1D07F319397A391013F Validity Not Before: Oct 25 08:41:56 2026 GMT Not After : Nov 1 08:41:56 2026 GMT Subject: CN=6addc0d4-2642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1b:65:ef:1b:97:ba:db:c9:0f:f8:4d:cc:75: ed:60:a4:d3:42:1e:5d:3a:9c:b3:8e:50:2e:5e:15: 61:96:5f:e6:11:74:9a:73:0a:39:bf:95:ae:54:00: 7e:68:1e:19:64:24:3b:ba:d9:67:fe:b9:de:c8:e9: c1:c1:f5:a5:3e:1e:b2:c4:90:fc:4e:dc:38:6a:b2: 98:40:82:0b:88:f5:d7:26:fc:9d:35:ae:f8:b5:7a: 82:80:63:b5:28:d0:0b:1b:23:e2:18:87:d1:7a:e2: 69:d1:8b:68:55:6a:bc:9d:81:a5:26:4c:eb:86:b8: 15:ed:e8:1d:c5:10:7f:b2:dd:3a:93:17:c2:b6:41: a8:35:83:29:75:a2:67:51:58:0a:cc:7c:b9:88:09: 8d:03:05:ca:1e:26:00:09:c4:da:1c:5b:75:9f:f9: 2e:de:09:52:e1:c7:9b:06:8a:87:fb:98:34:3c:7e: 26:4a:3f:8a:e9:be:c3:37:96:46:94:5b:35:8f:0c: 9a:94:1d:d5:b9:a4:89:4f:74:c2:67:17:36:90:87: fe:da:ce:59:63:78:64:cc:86:03:67:b5:f6:25:74: 65:b8:5d:42:f2:0e:eb:a2:e1:4a:1d:91:a2:6b:6d: 2f:83:e9:59:70:61:f8:e4:f7:15:79:b0:ff:64:9b: 83:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:61:99:9D:AA:E2:7F:7E:18:36:6E:0B:02:9D:6F:E1:C1:39:B7:2B X509v3 Authority Key Identifier: keyid:0A:25:D1:F3:21:E5:0A:0B:CA:C7:C1:D0:7F:31:93:97:A3:91:01:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA23A/8D59A2E4582311F18D7F2C9EA7833773/CiXR8yHlCgvKx8HQfzGTl6ORAT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiXR8yHlCgvKx8HQfzGTl6ORAT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA23A/8D59A2E4582311F18D7F2C9EA7833773/CiXR8yHlCgvKx8HQfzGTl6ORAT8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:ae:0b:00:26:cf:6e:2d:df:1b:02:43:75:68:cf:58:87:1a: 9a:56:61:49:e7:93:16:10:e0:7c:a2:e0:d8:37:d1:b5:43:0f: 29:d3:35:5d:92:19:80:27:bd:74:2c:86:41:be:4d:2e:01:c7: 01:7b:51:52:0a:5a:76:d7:6d:f5:2a:9c:68:5a:c0:31:ea:9c: 5a:56:f5:81:2e:bd:00:a3:ca:24:d5:81:83:15:12:5b:e1:d8: 77:77:cf:2d:b0:d3:ab:ad:23:62:a8:a5:7a:f6:c2:86:44:76: 25:ca:01:3a:b5:08:ab:97:62:b7:d3:7c:be:a6:87:0a:28:fe: b3:7f:05:07:a9:3e:a1:00:f2:55:01:d4:cc:50:d5:a1:a1:fa: 39:7f:a6:95:00:62:73:3f:8c:bb:bb:8a:bd:23:45:6f:8f:bf: 57:89:ce:e0:25:cc:b3:0b:02:64:ac:be:ad:ec:4d:69:eb:11: 43:de:ef:03:9b:7f:fa:9b:03:5c:61:27:9c:22:59:4f:6d:e6: 45:46:b4:95:86:e7:ae:07:58:ff:5e:34:e3:9b:bf:b8:76:5b: 84:7a:58:cd:f7:d8:5b:c7:8f:79:f9:10:8c:ac:51:6e:83:7e: bf:37:8c:06:26:00:2b:87:f9:76:26:bd:51:8e:2d:87:19:e1: a8:00:ef:0a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QTIzQTExMC8GA1UEBRMoMEEyNUQxRjMyMUU1MEEwQkNBQzdDMUQwN0YzMTkzOTdB MzkxMDEzRjAeFw0yNjEwMjUwODQxNTZaFw0yNjExMDEwODQxNTZaMBgxFjAUBgNV BAMTDTZhZGRjMGQ0LTI2NDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoG2XvG5e628kP+E3Mde1gpNNCHl06nLOOUC5eFWGWX+YRdJpzCjm/la5UAH5o HhlkJDu62Wf+ud7I6cHB9aU+HrLEkPxO3DhqsphAgguI9dcm/J01rvi1eoKAY7Uo 0AsbI+IYh9F64mnRi2hVarydgaUmTOuGuBXt6B3FEH+y3TqTF8K2Qag1gyl1omdR WArMfLmICY0DBcoeJgAJxNocW3Wf+S7eCVLhx5sGiof7mDQ8fiZKP4rpvsM3lkaU WzWPDJqUHdW5pIlPdMJnFzaQh/7azlljeGTMhgNntfYldGW4XULyDuui4UodkaJr bS+D6VlwYfjk9xV5sP9km4OfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUMmGZnari f34YNm4LAp1v4cE5tyswHwYDVR0jBBgwFoAUCiXR8yHlCgvKx8HQfzGTl6ORAT8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBMjNBLzhENTlBMkU0NTgy MzExRjE4RDdGMkM5RUE3ODMzNzczL0NpWFI4eUhsQ2d2S3g4SFFmekdUbDZPUkFU OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ2lYUjh5SGxDZ3ZLeDhIUWZ6R1RsNk9SQVQ4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB MjNBLzhENTlBMkU0NTgyMzExRjE4RDdGMkM5RUE3ODMzNzczL0NpWFI4eUhsQ2d2 S3g4SFFmekdUbDZPUkFUOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCGrgsAJs9uLd8bAkN1aM9YhxqaVmFJ55MWEOB8ouDYN9G1Qw8p0zVdkhmAJ710 LIZBvk0uAccBe1FSClp21231KpxoWsAx6pxaVvWBLr0Ao8ok1YGDFRJb4dh3d88t sNOrrSNiqKV69sKGRHYlygE6tQirl2K303y+pocKKP6zfwUHqT6hAPJVAdTMUNWh ofo5f6aVAGJzP4y7u4q9I0Vvj79Xic7gJcyzCwJkrL6t7E1p6xFD3u8Dm3/6mwNc YSecIllPbeZFRrSVhueuB1j/XjTjm7+4dluEeljN99hbx495+RCMrFFug36/N4wG JgArh/l2Jr1Rji2HGeGoAO8K -----END CERTIFICATE-----Generated at Mon Oct 26 17:55:56 2026 by rpki-client