$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F7113/CD67F3266AD511F1A1558F9E6C47A888/xBA2pq0HEadA_q5RVOE3zud7x7E.mft File: xBA2pq0HEadA_q5RVOE3zud7x7E.mft (raw, json) Hash identifier: Xu4cEFpIn1SgNPpRTKmJ7lEUUWEkRSGwcd0qgynZw5g= Subject key identifier: 9D:54:30:31:85:EB:7D:CB:7E:C3:B4:D9:B6:C8:67:B3:53:36:3E:B8 Authority key identifier: C4:10:36:A6:AD:07:11:A7:40:FE:AE:51:54:E1:37:CE:E7:7B:C7:B1 Certificate issuer: /CN=A91F7113/serialNumber=C41036A6AD0711A740FEAE5154E137CEE77BC7B1 Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xBA2pq0HEadA_q5RVOE3zud7x7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7113/CD67F3266AD511F1A1558F9E6C47A888/xBA2pq0HEadA_q5RVOE3zud7x7E.mft Manifest number: 3F Signing time: Sat 17 Oct 2026 09:15:16 +0000 Manifest this update: Sat 17 Oct 2026 09:15:16 +0000 Manifest next update: Sat 24 Oct 2026 09:15:16 +0000 Files and hashes: 1: xBA2pq0HEadA_q5RVOE3zud7x7E.crl (hash: TD1XMbl8KG1HyOuoDBXmz0pFU+8X+RWoK0NmqwTDNN8=) 2: CA0D122C6AD711F18FD2EC236D47A888.roa (hash: YHQct6L4pL/zTQ4jersZLzeD7JHF3Rv1GS4aJY0I1+c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7113/CD67F3266AD511F1A1558F9E6C47A888/xBA2pq0HEadA_q5RVOE3zud7x7E.crl rsync://rpki.apnic.net/member_repository/A91F7113/CD67F3266AD511F1A1558F9E6C47A888/xBA2pq0HEadA_q5RVOE3zud7x7E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xBA2pq0HEadA_q5RVOE3zud7x7E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Oct 2026 09:15:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7113, serialNumber=C41036A6AD0711A740FEAE5154E137CEE77BC7B1 Validity Not Before: Oct 17 09:15:16 2026 GMT Not After : Oct 24 09:15:16 2026 GMT Subject: CN=6ad33ca4-a7a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:54:c4:64:fd:e6:65:85:33:85:16:19:5e:8e: 89:cf:f8:03:f8:77:39:0b:1a:92:e3:b3:31:b2:43: 04:5e:f2:64:ac:3a:84:0e:64:40:84:20:76:81:d5: f6:c8:7b:22:48:1c:8c:b6:aa:42:a5:8a:96:ee:ec: 23:64:47:11:30:be:16:02:03:b7:5b:61:45:dd:d3: 49:73:23:f8:3d:13:f7:8b:4c:d3:f0:33:ed:1e:ff: 4c:c7:31:dd:3b:f0:d9:9e:2c:29:62:ba:83:2c:8c: 91:f9:60:da:2f:f3:68:5d:de:9d:81:91:98:9f:15: d0:de:0b:c1:6c:b3:d1:93:a2:4a:6e:a4:3d:6d:26: a9:b7:de:d3:11:7c:17:e4:0c:05:38:a4:61:34:5d: df:f3:63:e8:6e:bb:67:05:b4:72:d9:19:ed:c7:f8: 45:cc:86:d7:ad:17:d4:89:1c:c8:c1:44:94:c0:13: 63:cb:b8:b4:f9:66:10:19:e0:a8:e1:0f:d8:e2:7b: 63:0d:53:a5:ad:f3:18:64:f3:52:6a:7e:12:99:d4: da:ec:3d:a7:3b:7e:e3:5d:07:77:72:2e:ac:dd:e9: e4:3f:4e:13:a9:17:c3:6c:85:e8:cf:c7:97:8d:4d: 1e:9b:41:d5:43:8d:b0:b2:80:78:85:3b:e9:22:ce: d3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:54:30:31:85:EB:7D:CB:7E:C3:B4:D9:B6:C8:67:B3:53:36:3E:B8 X509v3 Authority Key Identifier: keyid:C4:10:36:A6:AD:07:11:A7:40:FE:AE:51:54:E1:37:CE:E7:7B:C7:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7113/CD67F3266AD511F1A1558F9E6C47A888/xBA2pq0HEadA_q5RVOE3zud7x7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xBA2pq0HEadA_q5RVOE3zud7x7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7113/CD67F3266AD511F1A1558F9E6C47A888/xBA2pq0HEadA_q5RVOE3zud7x7E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:86:33:a0:19:a1:20:60:73:bd:98:64:ab:f5:e8:95:df:15: 53:93:ab:47:6e:05:e4:4d:1e:0a:84:10:7d:69:ce:e8:f4:3d: b6:3a:73:80:6d:b5:bf:a0:0f:21:32:b0:68:fb:6d:95:c3:8b: f6:aa:0a:de:46:1b:f5:99:ba:59:46:64:65:fe:97:87:46:1a: 91:a0:95:d8:c6:e9:cb:fa:ec:b0:4e:b2:be:61:e3:0e:34:b4: 36:c9:36:d3:56:c6:3e:a6:00:20:82:d6:ba:8e:5b:cb:ca:c9: dc:41:7e:a1:28:e3:1f:7f:9c:91:34:e8:93:61:5e:f8:c6:e5: 6b:1b:71:3d:b1:c7:a4:01:bc:ab:f3:e4:e7:1b:ab:2d:d9:84: 37:2d:7c:36:81:30:75:46:ab:4e:1f:59:66:4c:b3:bb:62:f2: 1a:dd:04:3d:d0:a1:5d:75:61:72:65:34:17:8e:46:e9:ca:e8: a8:53:34:ab:54:60:30:db:26:c3:62:8b:c5:c4:54:76:c0:a0: 68:86:72:9d:a0:fd:63:d5:94:3d:cd:d3:fb:1f:fe:0b:9e:a6: 4d:69:b6:66:4b:62:47:2a:6b:0f:dd:9d:4d:32:c3:07:f4:8c: c8:a4:a5:36:cb:eb:a6:e7:55:45:83:a3:07:23:19:a7:4a:5f: 84:c3:69:13 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NzExMzExMC8GA1UEBRMoQzQxMDM2QTZBRDA3MTFBNzQwRkVBRTUxNTRFMTM3Q0VF NzdCQzdCMTAeFw0yNjEwMTcwOTE1MTZaFw0yNjEwMjQwOTE1MTZaMBgxFjAUBgNV BAMTDTZhZDMzY2E0LWE3YTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD6VMRk/eZlhTOFFhlejonP+AP4dzkLGpLjszGyQwRe8mSsOoQOZECEIHaB1fbI eyJIHIy2qkKlipbu7CNkRxEwvhYCA7dbYUXd00lzI/g9E/eLTNPwM+0e/0zHMd07 8NmeLCliuoMsjJH5YNov82hd3p2BkZifFdDeC8Fss9GTokpupD1tJqm33tMRfBfk DAU4pGE0Xd/zY+huu2cFtHLZGe3H+EXMhtetF9SJHMjBRJTAE2PLuLT5ZhAZ4Kjh D9jie2MNU6Wt8xhk81JqfhKZ1NrsPac7fuNdB3dyLqzd6eQ/ThOpF8NshejPx5eN TR6bQdVDjbCygHiFO+kiztNRAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUnVQwMYXr fct+w7TZtshns1M2PrgwHwYDVR0jBBgwFoAUxBA2pq0HEadA/q5RVOE3zud7x7Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3MTEzL0NENjdGMzI2NkFE NTExRjFBMTU1OEY5RTZDNDdBODg4L3hCQTJwcTBIRWFkQV9xNVJWT0UzenVkN3g3 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveEJBMnBxMEhFYWRBX3E1UlZPRTN6dWQ3eDdFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3 MTEzL0NENjdGMzI2NkFENTExRjFBMTU1OEY5RTZDNDdBODg4L3hCQTJwcTBIRWFk QV9xNVJWT0UzenVkN3g3RS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB0hjOgGaEgYHO9mGSr9eiV3xVTk6tHbgXkTR4KhBB9ac7o9D22OnOAbbW/oA8h MrBo+22Vw4v2qgreRhv1mbpZRmRl/peHRhqRoJXYxunL+uywTrK+YeMONLQ2yTbT VsY+pgAggta6jlvLysncQX6hKOMff5yRNOiTYV74xuVrG3E9scekAbyr8+TnG6st 2YQ3LXw2gTB1RqtOH1lmTLO7YvIa3QQ90KFddWFyZTQXjkbpyuioUzSrVGAw2ybD YovFxFR2wKBohnKdoP1j1ZQ9zdP7H/4LnqZNabZmS2JHKmsP3Z1NMsMH9IzIpKU2 y+um51VFg6MHIxmnSl+Ew2kT -----END CERTIFICATE-----Generated at Sun Oct 18 09:17:19 2026 by rpki-client