$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft File: -xEsrVYxm_qsoasoznvX9MsmjOk.mft (raw, json) Hash identifier: eX3M4zQCydfNiO19u24W9CuSVDIrPrryz7pxd8eDpBQ= Subject key identifier: 2D:BD:A9:A0:8D:58:D6:38:08:7C:98:4A:15:9B:93:37:5D:8F:74:CA Authority key identifier: FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9 Certificate issuer: /CN=A91ADDD5/serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9 Certificate serial: 068A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft Manifest number: 0674 Signing time: Fri 02 Oct 2026 22:54:09 +0000 Manifest this update: Fri 02 Oct 2026 22:54:08 +0000 Manifest next update: Fri 09 Oct 2026 22:54:08 +0000 Files and hashes: 1: -xEsrVYxm_qsoasoznvX9MsmjOk.crl (hash: AQ28GtlterSWv4tCDsknPDkw83gNtxnZX00hweIMmyw=) 2: F50A884C5DDF11F197B40288B8833773.roa (hash: q5ErDtvJGiFQsfi0aNFW5nSZE39VbQoqOQCebpIWByc=) 3: 128DFF02E14611EE80D6C425C4F9AE02.roa (hash: O4RI8nFWIUHGr3lrmWvMSynoOuRE0fzWotx1sdpRx0k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 22:54:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1674 (0x68a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADDD5, serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9 Validity Not Before: Oct 2 22:54:08 2026 GMT Not After : Oct 9 22:54:08 2026 GMT Subject: CN=6ac03610-1766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:56:ae:b4:80:0e:c0:a2:2e:f4:fc:44:d9:5f: 5f:a7:75:54:5d:dd:fd:7c:bd:26:84:ee:59:e8:de: 25:b5:31:7f:f0:1b:a9:69:1d:18:76:f2:58:02:75: 8a:d4:f0:77:fc:0b:04:01:cf:6c:db:55:66:e6:19: 9c:cc:af:48:9e:15:02:fd:56:ae:54:e4:ba:fb:4c: 09:2f:a8:30:31:97:6d:6f:64:f4:f1:75:ae:c5:9f: 25:4e:12:a8:4a:10:ae:bb:1a:68:37:53:f7:7a:c2: 6b:51:f7:50:14:9f:74:b2:8f:84:39:df:4b:e7:c2: d3:f7:60:96:9d:7a:a4:ff:c3:94:24:96:bb:a1:13: 82:49:36:79:6d:0f:67:fd:7d:61:0a:fb:9a:c4:96: ec:55:25:84:8f:87:20:db:d3:df:1e:9f:9c:4c:fe: 67:36:f4:fd:bf:f7:5d:3e:ac:16:59:9e:34:e1:e4: 83:ef:f7:d2:f5:76:36:62:64:99:1f:00:8e:13:e0: 85:d7:d2:ab:27:67:9b:5c:67:12:72:fd:b5:57:ef: 74:e2:c3:13:9d:7d:dc:e7:9f:20:80:9a:bf:0b:a4: a0:b1:6f:61:97:86:65:1d:e8:44:fd:9c:f1:42:19: 17:4d:26:dd:bb:cd:93:b2:80:09:03:cb:33:3d:9b: 23:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:BD:A9:A0:8D:58:D6:38:08:7C:98:4A:15:9B:93:37:5D:8F:74:CA X509v3 Authority Key Identifier: keyid:FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:f6:04:70:39:96:4c:97:6f:a5:69:d1:b1:2d:67:fc:a8:b9: 97:28:95:31:e9:f9:05:0b:5f:13:72:a9:aa:75:68:4e:3a:d7: d2:13:e6:c9:c5:ce:00:4f:3c:b5:94:a7:e1:1f:2f:05:b9:21: 51:1b:80:b6:f6:ca:0a:9a:01:75:d7:62:eb:72:a5:6c:2f:e2: ee:8c:95:de:26:18:e0:52:97:a8:a4:dd:e8:62:d4:35:9e:56: 5b:03:3d:4e:0b:02:a5:a6:93:1f:2e:99:f1:31:af:37:7e:6b: 96:76:a2:47:05:b8:55:96:bb:26:66:34:aa:95:87:03:d7:f0: 07:10:28:e6:74:b1:45:33:41:19:a1:50:d4:d4:df:54:52:4c: d2:29:b1:a2:bd:14:cf:c0:95:5c:cf:4d:b4:1b:27:88:de:19: 03:d9:5e:ae:5c:bd:83:d0:78:f7:3b:43:55:b6:0f:71:a5:14: 6d:2b:ad:dd:f2:4c:28:15:06:3a:a8:fe:06:ca:82:ef:d6:aa: 90:d5:95:c1:63:22:b2:1f:b6:20:50:0a:7f:85:c1:c4:c1:1a: 8b:32:b5:09:e4:ca:78:d5:37:10:ca:ed:60:df:92:83:6a:9b: 46:e2:c9:51:bb:39:38:6c:de:fe:d9:d2:a1:4e:a3:28:5d:b4: 9f:c7:91:6b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURERDUxMTAvBgNVBAUTKEZCMTEyQ0FENTYzMTlCRkFBQ0ExQUIyOENFN0JEN0Y0 Q0IyNjhDRTkwHhcNMjYxMDAyMjI1NDA4WhcNMjYxMDA5MjI1NDA4WjAYMRYwFAYD VQQDEw02YWMwMzYxMC0xNzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiVautIAOwKIu9PxE2V9fp3VUXd39fL0mhO5Z6N4ltTF/8BupaR0YdvJYAnWK 1PB3/AsEAc9s21Vm5hmczK9InhUC/VauVOS6+0wJL6gwMZdtb2T08XWuxZ8lThKo ShCuuxpoN1P3esJrUfdQFJ90so+EOd9L58LT92CWnXqk/8OUJJa7oROCSTZ5bQ9n /X1hCvuaxJbsVSWEj4cg29PfHp+cTP5nNvT9v/ddPqwWWZ404eSD7/fS9XY2YmSZ HwCOE+CF19KrJ2ebXGcScv21V+904sMTnX3c558ggJq/C6SgsW9hl4ZlHehE/Zzx QhkXTSbdu82TsoAJA8szPZsjEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC29qaCN WNY4CHyYShWbkzddj3TKMB8GA1UdIwQYMBaAFPsRLK1WMZv6rKGrKM571/TLJozp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRERENS84QjBEMEZGMkUz RjgxMUVCOUUwOERCMTRDNEY5QUUwMi8teEVzclZZeG1fcXNvYXNvem52WDlNc21q T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy14RXNyVll4bV9xc29hc296bnZYOU1zbWpPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RERENS84QjBEMEZGMkUzRjgxMUVCOUUwOERCMTRDNEY5QUUwMi8teEVzclZZeG1f cXNvYXNvem52WDlNc21qT2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhfYEcDmWTJdvpWnRsS1n/Ki5lyiVMen5BQtfE3KpqnVoTjrX0hPmycXOAE88 tZSn4R8vBbkhURuAtvbKCpoBdddi63KlbC/i7oyV3iYY4FKXqKTd6GLUNZ5WWwM9 TgsCpaaTHy6Z8TGvN35rlnaiRwW4VZa7JmY0qpWHA9fwBxAo5nSxRTNBGaFQ1NTf VFJM0imxor0Uz8CVXM9NtBsniN4ZA9lerly9g9B49ztDVbYPcaUUbSut3fJMKBUG Oqj+BsqC79aqkNWVwWMish+2IFAKf4XBxMEaizK1CeTKeNU3EMrtYN+Sg2qbRuLJ Ubs5OGze/tnSoU6jKF20n8eRaw== -----END CERTIFICATE-----Generated at Sat Oct 3 14:27:11 2026 by rpki-client