$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft File: XhBeDvkNGLn6S4j640EMah3vcZA.mft (raw, json) Hash identifier: dqGQQ8kl8FcHM0QRC785jKO0sZO6gn0GvCL8H4Br1CU= Subject key identifier: F5:C6:42:7A:6E:EA:E5:4A:2E:B0:60:2D:A1:EF:E5:4B:D1:F1:A7:F6 Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90 Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190 Certificate serial: 0D35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft Manifest number: 0BCB Signing time: Mon 26 Oct 2026 10:10:56 +0000 Manifest this update: Mon 26 Oct 2026 10:10:55 +0000 Manifest next update: Mon 02 Nov 2026 10:10:55 +0000 Files and hashes: 1: XhBeDvkNGLn6S4j640EMah3vcZA.crl (hash: HnHa+7315PgNUmiOLzm7yh/WB9bHsIZQHCbjutfUtKA=) 2: 6C077F6ED12511F183F530770266CEF9.roa (hash: +swwGnNIX577Reop6CRebSh+ZcvmKs64vX7y6ad2OBI=) 3: 89135068FD2911F09BBA873E426F56BC.roa (hash: G+CGpJq2wyuPyQGaM4s2D9OHsywLygPeDy8KgTJbqJY=) 4: 6DB93158AB7911F1BECE43F54111F970.roa (hash: IRcbgEsi3KJFHU7B78l5Vz4OTToECdQQnAQEosAbwLM=) 5: FA6E449673E611F1867DB2D08DA30FBC.roa (hash: +tW7tHejIYKoYKqOq2smvtzDYp77mmrOMwvb3pDQW94=) 6: 7E4EFF5473E611F1BA32CE558DA30FBC.roa (hash: w3nJAvkXJEIzmicXwGGQBI76P6FyACHze3HfaF8mchk=) 7: F0DB98A21BA811F1919C26950A3D8C67.roa (hash: RtmyRR3d6OPwYkVSdWWWffif6qpbEZX2ROCZDUrt4HY=) 8: DE2C490EFDDA11F08A9BDF026F6F56BC.roa (hash: dMqL0RXvcl4t2gqq+Dorzer6i+VmVso2r8Pwzf3DLMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 10:10:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3381 (0xd35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F69E7, serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190 Validity Not Before: Oct 26 10:10:55 2026 GMT Not After : Nov 2 10:10:55 2026 GMT Subject: CN=6adf272f-f9c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:88:70:44:16:5d:4a:2e:ca:f1:cc:e9:11:52: e2:72:b4:8d:37:4a:18:91:64:c7:78:c1:a8:bb:86: ff:2d:6f:e1:d4:ab:27:52:c0:1b:1e:28:c9:8e:1e: 69:a8:f6:c2:67:db:47:c7:39:3d:2a:40:c8:c8:4e: e4:e4:54:ba:59:b8:da:e5:cc:cd:7f:93:95:27:8e: e8:c2:61:b9:92:9b:8e:4c:46:63:6c:82:24:39:1f: ce:b9:3b:1c:36:3e:6a:c4:f7:70:59:43:cb:80:56: 80:47:d3:e8:ec:18:f1:e0:7e:58:66:9c:b7:51:33: 06:bd:68:af:94:78:8d:55:82:95:39:aa:aa:2a:fa: 2b:9d:5a:ef:b3:a9:e9:35:cf:78:1b:61:c8:7c:07: 42:3f:1d:42:48:12:2d:de:e1:52:be:a4:f1:df:ec: dd:25:17:f7:73:84:8c:da:9b:16:f5:52:51:d6:3a: c1:46:56:36:4d:70:4e:58:4f:ef:95:a3:0f:b2:3d: 8a:c9:7e:9b:59:0a:d0:66:09:87:58:87:7c:7d:40: 09:22:f7:58:10:f6:02:a8:57:30:2d:61:ea:a3:e2: db:2c:0f:0e:1b:98:cd:a4:8b:7c:8a:8d:39:11:a7: d5:40:f4:86:cc:4e:34:85:d5:db:87:13:6a:d4:e0: 7b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:C6:42:7A:6E:EA:E5:4A:2E:B0:60:2D:A1:EF:E5:4B:D1:F1:A7:F6 X509v3 Authority Key Identifier: keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:99:2a:6d:f6:32:39:4f:df:d9:c8:c5:cf:45:59:ca:31:a6: 57:b7:23:c8:d0:df:24:57:66:1b:2d:f7:af:76:12:c3:85:de: c1:0e:52:a1:61:f8:e4:79:9a:2a:d0:1e:31:d9:bc:20:db:5b: c1:9c:bc:6e:2e:09:50:22:0b:74:a6:a4:c1:07:6f:c3:dc:9b: 2b:54:18:98:b5:05:25:15:25:20:90:09:f2:7f:78:b6:46:e3: 0f:14:5c:17:c2:30:5a:55:d5:a3:d8:cf:64:6c:4f:15:dd:b3: da:09:76:d6:06:4b:de:a6:8f:75:f2:10:4f:cf:5c:3c:db:bb: 26:d4:8a:e0:96:2a:b1:9c:f8:88:26:d6:8c:ee:f3:30:4c:bd: 42:14:03:da:c4:fe:80:46:1d:ed:4e:c4:2b:97:5d:2a:3d:1c: cb:e8:ea:8f:8f:e1:38:b9:d7:e1:8f:ea:17:0e:da:0b:ea:05: e2:9d:70:e2:62:9a:cc:7a:ce:59:14:52:e1:e8:3c:d7:75:35: 1d:9e:e1:ae:13:44:7f:1b:5a:2c:28:c8:83:3d:c9:18:65:b5: d6:5c:4c:3d:e6:68:e0:e7:f4:46:f0:11:4f:ec:e0:0c:2e:bc: 4b:c5:e9:c4:51:8d:89:a3:15:d0:7b:ff:56:e4:f7:2a:30:6b: 50:d7:61:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDTUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY5RTcxMTAvBgNVBAUTKDVFMTA1RTBFRjkwRDE4QjlGQTRCODhGQUUzNDEwQzZB MURFRjcxOTAwHhcNMjYxMDI2MTAxMDU1WhcNMjYxMTAyMTAxMDU1WjAYMRYwFAYD VQQDEw02YWRmMjcyZi1mOWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0YhwRBZdSi7K8czpEVLicrSNN0oYkWTHeMGou4b/LW/h1KsnUsAbHijJjh5p qPbCZ9tHxzk9KkDIyE7k5FS6Wbja5czNf5OVJ47owmG5kpuOTEZjbIIkOR/OuTsc Nj5qxPdwWUPLgFaAR9Po7Bjx4H5YZpy3UTMGvWivlHiNVYKVOaqqKvornVrvs6np Nc94G2HIfAdCPx1CSBIt3uFSvqTx3+zdJRf3c4SM2psW9VJR1jrBRlY2TXBOWE/v laMPsj2KyX6bWQrQZgmHWId8fUAJIvdYEPYCqFcwLWHqo+LbLA8OG5jNpIt8io05 EafVQPSGzE40hdXbhxNq1OB7zwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPXGQnpu 6uVKLrBgLaHv5UvR8af2MB8GA1UdIwQYMBaAFF4QXg75DRi5+kuI+uNBDGod73GQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjlFNy80NkFBRDZCMjkw NDAxMUVBQTY4OEJFNDVDNEY5QUUwMi9YaEJlRHZrTkdMbjZTNGo2NDBFTWFoM3Zj WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hoQmVEdmtOR0xuNlM0ajY0MEVNYWgzdmNaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjlFNy80NkFBRDZCMjkwNDAxMUVBQTY4OEJFNDVDNEY5QUUwMi9YaEJlRHZrTkdM bjZTNGo2NDBFTWFoM3ZjWkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKpkqbfYyOU/f2cjFz0VZyjGmV7cjyNDfJFdmGy33r3YSw4XewQ5SoWH45Hma KtAeMdm8INtbwZy8bi4JUCILdKakwQdvw9ybK1QYmLUFJRUlIJAJ8n94tkbjDxRc F8IwWlXVo9jPZGxPFd2z2gl21gZL3qaPdfIQT89cPNu7JtSK4JYqsZz4iCbWjO7z MEy9QhQD2sT+gEYd7U7EK5ddKj0cy+jqj4/hOLnX4Y/qFw7aC+oF4p1w4mKazHrO WRRS4eg813U1HZ7hrhNEfxtaLCjIgz3JGGW11lxMPeZo4Of0RvART+zgDC68S8Xp xFGNiaMV0Hv/VuT3KjBrUNdhUg== -----END CERTIFICATE-----Generated at Mon Oct 26 21:01:07 2026 by rpki-client