$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.mft File: XTDuvxHkF41iO-G95Nu0y1nMhDc.mft (raw, json) Hash identifier: zxn0MdSF/TrvDczYTxdiew6G0TtRWlCz2/eSEDml9RE= Subject key identifier: AA:24:68:79:1F:B5:30:97:75:C7:81:B0:71:BB:2A:16:C5:9D:13:DB Authority key identifier: 5D:30:EE:BF:11:E4:17:8D:62:3B:E1:BD:E4:DB:B4:CB:59:CC:84:37 Certificate issuer: /CN=A91AB1C2/serialNumber=5D30EEBF11E4178D623BE1BDE4DBB4CB59CC8437 Certificate serial: A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTDuvxHkF41iO-G95Nu0y1nMhDc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.mft Manifest number: 9E Signing time: Sun 11 Oct 2026 08:00:13 +0000 Manifest this update: Sun 11 Oct 2026 08:00:12 +0000 Manifest next update: Sun 18 Oct 2026 08:00:12 +0000 Files and hashes: 1: XTDuvxHkF41iO-G95Nu0y1nMhDc.crl (hash: soF/z1DlWYMQZlLFqT1DTpLhT0CsaRxuTXSWYl/fMms=) 2: 24992E62E0FC11F0B50D6A7D5F6F56BC.roa (hash: eAx7dd7W8IzFugozPftJzHrtY4Ej4f42CnK31HLLaRE=) 3: 253978EAE0FC11F0B50D6A7D5F6F56BC.roa (hash: 6RxldyO2/Y3wToEhzB/mHNRPtNgIGcUmqFl9NgQBrdA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.crl rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTDuvxHkF41iO-G95Nu0y1nMhDc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 08:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164 (0xa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB1C2, serialNumber=5D30EEBF11E4178D623BE1BDE4DBB4CB59CC8437 Validity Not Before: Oct 11 08:00:12 2026 GMT Not After : Oct 18 08:00:12 2026 GMT Subject: CN=6acb420d-a156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cd:d6:f8:bf:8d:96:00:0d:2f:5b:62:56:45: e9:d0:f4:1e:0b:6d:5c:26:7c:1f:98:e6:31:bc:c9: cf:c3:2b:19:28:fe:cf:28:18:f3:f0:09:24:b7:e7: c3:9a:92:cd:70:b2:79:7f:ee:a7:04:d5:9c:2e:26: b1:44:62:c6:7a:ff:7b:0c:59:15:b5:d9:34:fb:ce: 61:72:30:3c:0e:36:4a:c9:2e:46:7b:e1:49:0c:d0: 98:da:ef:30:7f:41:78:98:65:28:3f:2d:49:43:05: 5a:3b:5c:b5:86:f6:4b:48:19:69:bb:cb:63:b9:a2: 97:e5:50:0e:fa:97:f7:b7:b1:4f:1b:01:53:f0:44: 92:cc:bd:0e:6e:16:fd:e3:ba:cd:ba:99:9e:48:e4: 04:04:7c:35:04:65:b0:f4:9a:83:20:c9:47:77:54: 21:f6:96:2c:22:c9:a3:0f:93:8d:01:a2:d0:a5:ab: 66:5f:7c:55:88:f2:c6:75:a8:8a:1d:7a:c3:76:b3: 1c:67:35:40:98:f6:e7:c4:fa:2d:ec:fb:25:9a:c1: fe:0d:6b:ad:5d:03:1c:9d:93:eb:91:11:17:95:fc: ef:52:dc:2f:af:82:15:41:0c:f3:ab:2e:80:3c:2a: 64:99:46:ee:ef:48:2b:66:46:73:fd:3e:26:52:69: 89:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:24:68:79:1F:B5:30:97:75:C7:81:B0:71:BB:2A:16:C5:9D:13:DB X509v3 Authority Key Identifier: keyid:5D:30:EE:BF:11:E4:17:8D:62:3B:E1:BD:E4:DB:B4:CB:59:CC:84:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTDuvxHkF41iO-G95Nu0y1nMhDc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:8c:49:b4:d6:23:09:c4:24:75:81:ba:e2:3a:0a:62:77:a3: 94:9e:d3:86:33:3e:b6:e4:88:23:d8:2d:43:ef:58:15:8e:3a: 5c:4b:8e:a0:91:c8:71:0c:1e:73:98:e5:1e:5b:8e:0e:78:28: b4:5f:68:31:02:2e:bc:65:07:57:c1:ee:74:be:73:40:76:a4: 75:1e:52:c8:92:ca:6e:0b:6f:e8:b7:57:0b:4f:99:3a:38:33: 42:da:9f:7c:72:51:30:63:65:dc:fc:8c:03:76:00:14:3f:cd: e6:a0:57:68:23:d9:25:43:9e:fb:7c:87:da:2c:84:fe:2f:f6: b3:23:a8:04:32:bd:07:6d:04:95:f6:1e:90:e9:95:e7:5f:93: 3e:5e:b0:6d:78:28:d7:4b:f9:67:ec:a8:08:a1:3e:f3:99:cc: 37:51:ce:4b:36:a0:89:f2:09:60:6c:eb:6a:f3:fa:89:09:cc: 18:63:84:43:d4:7b:e5:eb:61:20:dd:24:b5:22:a6:16:42:79: 3a:3d:58:19:86:bc:90:7b:5b:79:da:ad:6b:1a:68:b6:ab:2b: ff:04:1c:6a:1b:2f:ff:19:7d:0e:20:9d:51:e5:47:de:1c:25: 69:5f:7a:04:c3:63:a6:89:11:00:62:ae:79:0b:b5:55:97:18: d7:89:9d:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIxQzIxMTAvBgNVBAUTKDVEMzBFRUJGMTFFNDE3OEQ2MjNCRTFCREU0REJCNENC NTlDQzg0MzcwHhcNMjYxMDExMDgwMDEyWhcNMjYxMDE4MDgwMDEyWjAYMRYwFAYD VQQDEw02YWNiNDIwZC1hMTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvs3W+L+NlgANL1tiVkXp0PQeC21cJnwfmOYxvMnPwysZKP7PKBjz8Akkt+fD mpLNcLJ5f+6nBNWcLiaxRGLGev97DFkVtdk0+85hcjA8DjZKyS5Ge+FJDNCY2u8w f0F4mGUoPy1JQwVaO1y1hvZLSBlpu8tjuaKX5VAO+pf3t7FPGwFT8ESSzL0Obhb9 47rNupmeSOQEBHw1BGWw9JqDIMlHd1Qh9pYsIsmjD5ONAaLQpatmX3xViPLGdaiK HXrDdrMcZzVAmPbnxPot7PslmsH+DWutXQMcnZPrkREXlfzvUtwvr4IVQQzzqy6A PCpkmUbu70grZkZz/T4mUmmJjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKokaHkf tTCXdceBsHG7KhbFnRPbMB8GA1UdIwQYMBaAFF0w7r8R5BeNYjvhveTbtMtZzIQ3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjFDMi8wRjkxMDc1NERD QTMxMUYwODVENkYxNUI0MzZGNTZCQy9YVER1dnhIa0Y0MWlPLUc5NU51MHkxbk1o RGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hURHV2eEhrRjQxaU8tRzk1TnUweTFuTWhEYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjFDMi8wRjkxMDc1NERDQTMxMUYwODVENkYxNUI0MzZGNTZCQy9YVER1dnhIa0Y0 MWlPLUc5NU51MHkxbk1oRGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPIxJtNYjCcQkdYG64joKYnejlJ7ThjM+tuSII9gtQ+9YFY46XEuOoJHIcQwe c5jlHluODngotF9oMQIuvGUHV8HudL5zQHakdR5SyJLKbgtv6LdXC0+ZOjgzQtqf fHJRMGNl3PyMA3YAFD/N5qBXaCPZJUOe+3yH2iyE/i/2syOoBDK9B20ElfYekOmV 51+TPl6wbXgo10v5Z+yoCKE+85nMN1HOSzagifIJYGzravP6iQnMGGOEQ9R75eth IN0ktSKmFkJ5Oj1YGYa8kHtbedqtaxpotqsr/wQcahsv/xl9DiCdUeVH3hwlaV96 BMNjpokRAGKueQu1VZcY14mdog== -----END CERTIFICATE-----Generated at Sun Oct 11 18:42:34 2026 by rpki-client