$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F81D3/0A8459F4523511EA9A0CB273C4F9AE02/XpnXCH3VTqLn519cgIcHE4Posp4.mft File: XpnXCH3VTqLn519cgIcHE4Posp4.mft (raw, json) Hash identifier: WmlT3/aDIpSbt7vUd2+xx+ULWJgO3jHmYCIVQjZi7ps= Subject key identifier: 68:A6:56:94:18:EB:E1:BE:E9:C4:41:2C:7F:22:85:4A:3B:BB:16:0F Authority key identifier: 5E:99:D7:08:7D:D5:4E:A2:E7:E7:5F:5C:80:87:07:13:83:E8:B2:9E Certificate issuer: /CN=A91F81D3/serialNumber=5E99D7087DD54EA2E7E75F5C8087071383E8B29E Certificate serial: 0BFB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpnXCH3VTqLn519cgIcHE4Posp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F81D3/0A8459F4523511EA9A0CB273C4F9AE02/XpnXCH3VTqLn519cgIcHE4Posp4.mft Manifest number: 0BD7 Signing time: Mon 26 Oct 2026 19:02:02 +0000 Manifest this update: Mon 26 Oct 2026 19:02:01 +0000 Manifest next update: Mon 02 Nov 2026 19:02:01 +0000 Files and hashes: 1: XpnXCH3VTqLn519cgIcHE4Posp4.crl (hash: HpmgwPa6CIY7opzly8Fmcj8cxr+nvJNQoWLSlWmmqqU=) 2: 1ECAB88C1AD811F193E57F8A3E3D8C67.roa (hash: fuUoAX7qold+hBso2xjm+AtCXw9QMD6MxM+hCTTXcPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F81D3/0A8459F4523511EA9A0CB273C4F9AE02/XpnXCH3VTqLn519cgIcHE4Posp4.crl rsync://rpki.apnic.net/member_repository/A91F81D3/0A8459F4523511EA9A0CB273C4F9AE02/XpnXCH3VTqLn519cgIcHE4Posp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpnXCH3VTqLn519cgIcHE4Posp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 19:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3067 (0xbfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F81D3, serialNumber=5E99D7087DD54EA2E7E75F5C8087071383E8B29E Validity Not Before: Oct 26 19:02:01 2026 GMT Not After : Nov 2 19:02:01 2026 GMT Subject: CN=6adfa3aa-f824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:92:c0:3b:48:67:96:8c:66:13:8f:68:62:cc: ae:9b:9e:91:05:1f:ff:a0:ed:e8:31:71:41:87:8a: 5a:7c:f7:ed:a8:73:c1:53:e3:b7:55:79:4f:36:ec: cf:86:84:0a:9c:d1:e0:a1:80:65:51:03:5b:b9:ea: b5:66:5f:ca:90:bf:94:cd:f0:e4:9e:4e:14:85:fc: 68:94:fd:90:e3:99:6a:45:9c:bf:76:c8:f6:0d:d8: 0e:16:fd:02:fe:6d:0e:44:0f:a0:6b:ef:8e:ff:05: aa:39:e1:91:af:64:22:4b:3d:0d:c7:89:f3:8b:fe: 50:56:bd:41:1b:ef:70:ac:9c:43:ee:4f:b3:35:89: 06:c7:df:c1:d0:a9:1b:5a:db:8d:b0:de:c0:52:14: c8:fe:44:e5:1b:b9:d8:c6:34:3b:91:a8:b1:4e:fa: 57:5b:27:fd:b1:e8:90:b1:ec:7d:41:b3:e5:e5:68: 29:bf:ec:5a:35:78:92:11:49:47:f1:59:8d:d8:88: 83:cc:7a:60:4f:ba:03:35:7c:48:ec:6b:51:35:51: 01:b9:17:00:8b:87:b0:7e:87:4d:34:cd:a9:5d:e0: 92:6d:e8:2d:8d:a0:d8:af:46:81:6d:84:97:30:01: 3a:15:83:94:1b:45:41:34:86:34:c8:9b:4a:92:c6: d7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:A6:56:94:18:EB:E1:BE:E9:C4:41:2C:7F:22:85:4A:3B:BB:16:0F X509v3 Authority Key Identifier: keyid:5E:99:D7:08:7D:D5:4E:A2:E7:E7:5F:5C:80:87:07:13:83:E8:B2:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F81D3/0A8459F4523511EA9A0CB273C4F9AE02/XpnXCH3VTqLn519cgIcHE4Posp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpnXCH3VTqLn519cgIcHE4Posp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F81D3/0A8459F4523511EA9A0CB273C4F9AE02/XpnXCH3VTqLn519cgIcHE4Posp4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d9:16:07:93:06:94:af:5d:39:a7:f3:2f:08:bb:fa:81:fa:0b: d0:68:9d:b3:97:df:47:8c:32:5a:6d:5c:0c:c5:00:aa:d0:50: 54:d7:65:9a:5f:b7:2e:30:65:45:ac:45:7c:18:9f:15:b4:93: ac:1b:33:2f:0e:cf:9f:a6:24:e6:5b:b9:a2:bd:1d:12:38:e7: 88:2b:d2:a2:04:17:2b:36:be:a5:4d:15:47:93:8c:09:f8:5b: 21:bb:1a:31:10:b0:4d:92:77:eb:61:92:47:93:59:20:d7:9a: 82:d3:03:c8:aa:7a:8c:34:08:a2:ed:ab:77:53:e2:ba:21:7d: 66:54:3c:98:92:30:f5:53:32:4e:f1:2d:cd:86:e3:7a:02:70: f0:63:51:81:fb:2f:7a:f4:9c:95:fb:fa:4d:d9:86:80:04:0a: 55:05:4c:63:65:de:4f:21:4b:78:04:4f:a3:91:8c:79:cf:30: 13:8b:fc:55:cd:5a:e2:62:38:a8:75:1a:13:f3:20:29:b3:9b: 52:fe:45:95:e0:50:6b:40:bb:a8:3e:e9:e8:e6:83:10:60:be: ec:08:3e:92:c7:f5:37:e4:94:00:d1:d5:27:5f:dc:1f:5d:9f: aa:a2:f0:5a:fc:c2:52:2e:35:fc:0b:13:80:92:40:4c:df:f8: 5b:91:2b:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgxRDMxMTAvBgNVBAUTKDVFOTlENzA4N0RENTRFQTJFN0U3NUY1QzgwODcwNzEz ODNFOEIyOUUwHhcNMjYxMDI2MTkwMjAxWhcNMjYxMTAyMTkwMjAxWjAYMRYwFAYD VQQDEw02YWRmYTNhYS1mODI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+5LAO0hnloxmE49oYsyum56RBR//oO3oMXFBh4pafPftqHPBU+O3VXlPNuzP hoQKnNHgoYBlUQNbueq1Zl/KkL+UzfDknk4UhfxolP2Q45lqRZy/dsj2DdgOFv0C /m0ORA+ga++O/wWqOeGRr2QiSz0Nx4nzi/5QVr1BG+9wrJxD7k+zNYkGx9/B0Kkb WtuNsN7AUhTI/kTlG7nYxjQ7kaixTvpXWyf9seiQsex9QbPl5Wgpv+xaNXiSEUlH 8VmN2IiDzHpgT7oDNXxI7GtRNVEBuRcAi4ewfodNNM2pXeCSbegtjaDYr0aBbYSX MAE6FYOUG0VBNIY0yJtKksbXgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGimVpQY 6+G+6cRBLH8ihUo7uxYPMB8GA1UdIwQYMBaAFF6Z1wh91U6i5+dfXICHBxOD6LKe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODFEMy8wQTg0NTlGNDUy MzUxMUVBOUEwQ0IyNzNDNEY5QUUwMi9YcG5YQ0gzVlRxTG41MTljZ0ljSEU0UG9z cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hwblhDSDNWVHFMbjUxOWNnSWNIRTRQb3NwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODFEMy8wQTg0NTlGNDUyMzUxMUVBOUEwQ0IyNzNDNEY5QUUwMi9YcG5YQ0gzVlRx TG41MTljZ0ljSEU0UG9zcDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA2RYHkwaUr105p/MvCLv6gfoL0Gids5ffR4wyWm1cDMUAqtBQVNdlml+3LjBl RaxFfBifFbSTrBszLw7Pn6Yk5lu5or0dEjjniCvSogQXKza+pU0VR5OMCfhbIbsa MRCwTZJ362GSR5NZINeagtMDyKp6jDQIou2rd1PiuiF9ZlQ8mJIw9VMyTvEtzYbj egJw8GNRgfsvevSclfv6TdmGgAQKVQVMY2XeTyFLeARPo5GMec8wE4v8Vc1a4mI4 qHUaE/MgKbObUv5FleBQa0C7qD7p6OaDEGC+7Ag+ksf1N+SUANHVJ1/cH12fqqLw WvzCUi41/AsTgJJATN/4W5ErnA== -----END CERTIFICATE-----Generated at Wed Oct 28 16:30:13 2026 by rpki-client