$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft File: 4XI0Y4kx9DllENfQutUfivTrhrY.mft (raw, json) Hash identifier: P1KtZXE5TcKYQFDFb7ptI0tOfvgDv53psL4qD8X1NDY= Subject key identifier: BC:22:6D:AB:7E:73:A7:6F:BC:9F:81:71:7C:BD:22:4F:43:81:9C:2E Authority key identifier: E1:72:34:63:89:31:F4:39:65:10:D7:D0:BA:D5:1F:8A:F4:EB:86:B6 Certificate issuer: /CN=A91F34FA/serialNumber=E17234638931F4396510D7D0BAD51F8AF4EB86B6 Certificate serial: 02EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft Manifest number: 02E2 Signing time: Tue 27 Oct 2026 01:11:02 +0000 Manifest this update: Tue 27 Oct 2026 01:11:01 +0000 Manifest next update: Tue 03 Nov 2026 01:11:01 +0000 Files and hashes: 1: 4XI0Y4kx9DllENfQutUfivTrhrY.crl (hash: 7kU+Q4g8VxoNqUF2ezlcasrR8pLZ29b4z6QLo+ug1z4=) 2: 8256A692444A11EFB043DE36C4F9AE02.roa (hash: njRtUmWh28sEJdny2UAVhz1Kq7GPfTs7B6QSE7PmNLk=) 3: 81B847F4444A11EFB043DE36C4F9AE02.roa (hash: 5iqjCv1RhNYq1/L2yE4akZcT4DKvHpIvppn9eVWXMXE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.crl rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 01:11:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 748 (0x2ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F34FA, serialNumber=E17234638931F4396510D7D0BAD51F8AF4EB86B6 Validity Not Before: Oct 27 01:11:01 2026 GMT Not After : Nov 3 01:11:01 2026 GMT Subject: CN=6adffa26-297f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:77:66:e3:2c:b7:e3:97:b7:f9:d8:f0:85:93: c6:cd:36:44:0a:8d:9a:5b:0d:78:71:88:d1:ab:e8: 56:dc:65:e0:67:d1:07:47:7c:ae:45:d1:e7:e9:ce: 8f:c2:cc:91:5c:6e:85:47:7e:9e:b8:7e:38:f9:0d: 27:32:c4:54:6e:48:cb:4f:c6:52:1f:02:66:df:7d: eb:7f:f6:b5:55:7c:f4:b0:66:ae:f0:f9:92:4d:6a: e4:64:17:cc:66:4d:da:75:c5:2a:4f:fc:0b:07:6f: 5f:e2:37:17:50:4d:ba:a7:b0:5f:cd:1f:14:07:a5: fc:11:19:b9:96:8e:70:c4:1e:61:76:7b:d3:a3:9c: 00:23:16:98:55:f7:34:5f:81:d4:ed:cc:44:ff:8e: bc:43:21:8e:86:0e:75:87:f1:c3:88:33:16:4a:83: a2:fc:f0:83:b2:17:3e:d3:39:55:cf:08:e0:f0:11: 64:b6:b9:50:af:3d:c1:41:bc:11:8e:e8:f5:41:70: d3:18:0c:1b:cf:c5:7e:cb:46:b4:ba:68:d5:d7:ec: 12:6f:6e:d8:dd:2a:c3:8a:ac:a4:cd:53:3b:c7:3d: f4:78:c9:76:79:e8:9b:a4:8f:68:7d:ac:0c:c2:cc: aa:24:de:98:15:4c:53:fe:28:d4:c8:5b:5d:cd:2d: 9b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:22:6D:AB:7E:73:A7:6F:BC:9F:81:71:7C:BD:22:4F:43:81:9C:2E X509v3 Authority Key Identifier: keyid:E1:72:34:63:89:31:F4:39:65:10:D7:D0:BA:D5:1F:8A:F4:EB:86:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:d3:8a:78:85:98:7c:8e:77:44:2a:27:87:b5:cb:7d:c3:5b: 03:31:7e:f5:ed:c0:c7:0b:f6:e4:02:31:1d:dd:f1:3f:e7:a5: 3b:79:32:e1:c1:c7:23:e3:ca:fb:76:21:b8:69:65:58:03:44: b8:37:82:3e:e8:17:0c:70:7c:7a:e5:34:13:26:41:ce:07:98: 8c:0a:1b:d7:74:58:28:9e:91:97:a1:95:6f:80:a6:de:9a:a4: 7d:f9:de:32:0c:6c:9e:35:89:22:b0:af:14:74:3e:b2:01:9e: f2:e5:a6:d5:f0:e7:8d:89:05:50:6c:f7:17:f8:0a:39:c6:8a: 2a:df:5a:1a:8d:5c:e9:15:e4:c5:c5:d5:1c:0c:f1:95:1d:eb: d2:5b:02:12:bb:1d:e8:41:bc:24:f4:c0:b7:82:c6:10:d6:6c: 3a:13:4e:b8:df:09:6d:e1:e5:f4:53:b0:b0:ed:49:eb:ac:58: 13:25:b9:17:56:13:6d:5c:fc:8b:b4:ea:6a:60:df:d0:5e:c0: bf:6c:af:60:2c:05:1b:89:b1:46:28:55:cc:2a:7e:11:1d:ab: 26:dc:b7:15:95:f9:b4:7d:17:aa:3b:9c:50:6a:fa:2c:2f:b7: 85:12:81:2c:bd:a8:0d:3c:08:a5:3c:98:7a:8a:a2:50:ae:65: 74:5f:e2:01 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAuwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM0RkExMTAvBgNVBAUTKEUxNzIzNDYzODkzMUY0Mzk2NTEwRDdEMEJBRDUxRjhB RjRFQjg2QjYwHhcNMjYxMDI3MDExMTAxWhcNMjYxMTAzMDExMTAxWjAYMRYwFAYD VQQDEw02YWRmZmEyNi0yOTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv3dm4yy345e3+djwhZPGzTZECo2aWw14cYjRq+hW3GXgZ9EHR3yuRdHn6c6P wsyRXG6FR36euH44+Q0nMsRUbkjLT8ZSHwJm333rf/a1VXz0sGau8PmSTWrkZBfM Zk3adcUqT/wLB29f4jcXUE26p7BfzR8UB6X8ERm5lo5wxB5hdnvTo5wAIxaYVfc0 X4HU7cxE/468QyGOhg51h/HDiDMWSoOi/PCDshc+0zlVzwjg8BFktrlQrz3BQbwR juj1QXDTGAwbz8V+y0a0umjV1+wSb27Y3SrDiqykzVM7xz30eMl2eeibpI9ofawM wsyqJN6YFUxT/ijUyFtdzS2bjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLwibat+ c6dvvJ+BcXy9Ik9DgZwuMB8GA1UdIwQYMBaAFOFyNGOJMfQ5ZRDX0LrVH4r064a2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzRGQS80NUU5RTE2QTY1 OEExMUVEOTlBMjFCNkZDNEY5QUUwMi80WEkwWTRreDlEbGxFTmZRdXRVZml2VHJo clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRYSTBZNGt4OURsbEVOZlF1dFVmaXZUcmhyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzRGQS80NUU5RTE2QTY1OEExMUVEOTlBMjFCNkZDNEY5QUUwMi80WEkwWTRreDlE bGxFTmZRdXRVZml2VHJoclkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVNOKeIWYfI53RConh7XLfcNbAzF+9e3Axwv25AIxHd3xP+elO3ky4cHHI+PK +3YhuGllWANEuDeCPugXDHB8euU0EyZBzgeYjAob13RYKJ6Rl6GVb4Cm3pqkffne MgxsnjWJIrCvFHQ+sgGe8uWm1fDnjYkFUGz3F/gKOcaKKt9aGo1c6RXkxcXVHAzx lR3r0lsCErsd6EG8JPTAt4LGENZsOhNOuN8JbeHl9FOwsO1J66xYEyW5F1YTbVz8 i7TqamDf0F7Av2yvYCwFG4mxRihVzCp+ER2rJty3FZX5tH0XqjucUGr6LC+3hRKB LL2oDTwIpTyYeoqiUK5ldF/iAQ== -----END CERTIFICATE-----Generated at Wed Oct 28 07:25:31 2026 by rpki-client