$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE285/5E1648B684BC11EAA5262263C4F9AE02/X4rzWXP9T6Vj8ztzdlNGghB7yPk.mft File: X4rzWXP9T6Vj8ztzdlNGghB7yPk.mft (raw, json) Hash identifier: Fh7hE+T+9skLCKUxQ6nApk5NQpXnfcoIT1sn8M7S9+U= Subject key identifier: 44:C9:DD:B6:8A:BB:62:5A:90:A3:86:39:7B:DF:DE:72:73:F1:89:A6 Authority key identifier: 5F:8A:F3:59:73:FD:4F:A5:63:F3:3B:73:76:53:46:82:10:7B:C8:F9 Certificate issuer: /CN=A91CE285/serialNumber=5F8AF35973FD4FA563F33B7376534682107BC8F9 Certificate serial: 0AC0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X4rzWXP9T6Vj8ztzdlNGghB7yPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE285/5E1648B684BC11EAA5262263C4F9AE02/X4rzWXP9T6Vj8ztzdlNGghB7yPk.mft Manifest number: 0AB7 Signing time: Sat 10 Oct 2026 19:33:25 +0000 Manifest this update: Sat 10 Oct 2026 19:33:24 +0000 Manifest next update: Sat 17 Oct 2026 19:33:24 +0000 Files and hashes: 1: X4rzWXP9T6Vj8ztzdlNGghB7yPk.crl (hash: K9jjMqY59iQdRMIR0B0J82AJ4kKJtJH1i9yIqVn65hQ=) 2: E5C4974689CF11EAA39AF441C4F9AE02.roa (hash: IRbA2qv5Q9PCpzmTQD2wXuc1UqDUPOEjncg/wUZE3hc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE285/5E1648B684BC11EAA5262263C4F9AE02/X4rzWXP9T6Vj8ztzdlNGghB7yPk.crl rsync://rpki.apnic.net/member_repository/A91CE285/5E1648B684BC11EAA5262263C4F9AE02/X4rzWXP9T6Vj8ztzdlNGghB7yPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X4rzWXP9T6Vj8ztzdlNGghB7yPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 19:33:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2752 (0xac0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE285, serialNumber=5F8AF35973FD4FA563F33B7376534682107BC8F9 Validity Not Before: Oct 10 19:33:24 2026 GMT Not After : Oct 17 19:33:24 2026 GMT Subject: CN=6aca9305-966f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2a:19:2f:d8:91:4a:56:7c:c4:5b:24:9b:3b: 71:28:48:2e:8e:eb:20:cf:5a:ac:66:e4:4c:c0:69: 99:09:20:64:85:33:af:97:90:7d:8c:29:74:95:75: ad:bb:62:b4:bf:54:2b:e7:3c:73:a5:58:53:eb:88: a7:10:92:0c:3b:56:53:fc:78:11:57:3e:e3:1b:19: 56:81:df:3d:c5:61:92:71:aa:3d:43:5c:58:73:63: 3e:bd:54:66:2f:f6:d9:da:64:d1:4b:05:43:65:01: df:a2:4f:d1:cb:1f:e3:4f:3e:a3:81:7b:3c:f5:5b: 50:66:18:de:8e:da:09:0a:15:90:d9:99:9d:c2:57: 7e:4a:68:35:45:51:06:9b:43:b4:63:ab:6c:35:e9: f6:c4:ac:f9:2f:75:d2:48:11:e5:73:e1:89:ca:73: f1:89:dc:a5:63:7d:c6:20:fd:90:30:02:0f:8f:98: 29:e7:37:1a:89:d3:ca:65:31:65:f9:77:46:3c:2d: 48:a7:2c:07:02:63:25:5f:fa:8b:88:5a:35:b7:66: cc:f0:58:4a:a8:5e:ca:ab:e1:81:25:00:7d:95:ba: e1:63:37:f7:c7:21:bc:7e:d0:94:4b:c4:38:44:27: de:07:6a:79:44:74:80:2a:3d:c9:14:d9:b3:d8:bb: 3e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:C9:DD:B6:8A:BB:62:5A:90:A3:86:39:7B:DF:DE:72:73:F1:89:A6 X509v3 Authority Key Identifier: keyid:5F:8A:F3:59:73:FD:4F:A5:63:F3:3B:73:76:53:46:82:10:7B:C8:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE285/5E1648B684BC11EAA5262263C4F9AE02/X4rzWXP9T6Vj8ztzdlNGghB7yPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X4rzWXP9T6Vj8ztzdlNGghB7yPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE285/5E1648B684BC11EAA5262263C4F9AE02/X4rzWXP9T6Vj8ztzdlNGghB7yPk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:72:0c:1f:e2:07:d7:a6:84:bb:81:93:28:fc:7f:39:cd:95: d1:9b:2b:ad:71:70:66:70:68:a6:00:bf:11:06:ce:90:8e:00: 17:08:6c:02:d9:6b:98:73:4c:d5:21:f6:8f:39:ef:f2:26:98: ee:c5:b9:2b:08:a2:00:9a:89:05:a3:d6:d6:a2:ce:17:f4:25: 68:3e:cd:df:e8:a2:12:31:8d:d4:4b:8d:2b:a2:be:76:a3:72: 01:f9:99:78:e8:c3:c7:8a:31:ce:cd:54:02:bb:9c:0a:50:a3: 32:77:f2:88:6f:ec:4b:a6:96:c8:40:13:a2:d7:86:6e:5a:56: f5:4c:78:3b:46:2f:e1:ab:e6:91:f5:33:f9:da:83:27:b6:61: 9e:8d:df:49:ad:c9:5f:8f:6b:e6:d0:92:19:b2:ab:59:24:2c: 0c:0a:2f:7b:34:a9:68:de:bc:cc:36:8a:28:ab:69:fe:ed:fa: c6:4b:22:16:b5:d6:18:f9:ba:2d:6c:c4:e7:be:13:6e:c3:5c: 6a:e1:0f:59:95:90:c5:c3:41:44:32:96:22:41:38:1e:00:52: 31:d3:18:ae:12:b6:5e:74:13:91:7b:37:f6:30:b9:23:80:3a: 1d:35:f1:46:8b:83:cd:05:6d:ac:1d:14:bd:d5:83:ca:70:95: a0:62:66:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UyODUxMTAvBgNVBAUTKDVGOEFGMzU5NzNGRDRGQTU2M0YzM0I3Mzc2NTM0Njgy MTA3QkM4RjkwHhcNMjYxMDEwMTkzMzI0WhcNMjYxMDE3MTkzMzI0WjAYMRYwFAYD VQQDEw02YWNhOTMwNS05NjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnioZL9iRSlZ8xFskmztxKEgujusgz1qsZuRMwGmZCSBkhTOvl5B9jCl0lXWt u2K0v1Qr5zxzpVhT64inEJIMO1ZT/HgRVz7jGxlWgd89xWGScao9Q1xYc2M+vVRm L/bZ2mTRSwVDZQHfok/Ryx/jTz6jgXs89VtQZhjejtoJChWQ2Zmdwld+Smg1RVEG m0O0Y6tsNen2xKz5L3XSSBHlc+GJynPxidylY33GIP2QMAIPj5gp5zcaidPKZTFl +XdGPC1IpywHAmMlX/qLiFo1t2bM8FhKqF7Kq+GBJQB9lbrhYzf3xyG8ftCUS8Q4 RCfeB2p5RHSAKj3JFNmz2Ls+zwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFETJ3baK u2JakKOGOXvf3nJz8YmmMB8GA1UdIwQYMBaAFF+K81lz/U+lY/M7c3ZTRoIQe8j5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTI4NS81RTE2NDhCNjg0 QkMxMUVBQTUyNjIyNjNDNEY5QUUwMi9YNHJ6V1hQOVQ2Vmo4enR6ZGxOR2doQjd5 UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g0cnpXWFA5VDZWajh6dHpkbE5HZ2hCN3lQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTI4NS81RTE2NDhCNjg0QkMxMUVBQTUyNjIyNjNDNEY5QUUwMi9YNHJ6V1hQOVQ2 Vmo4enR6ZGxOR2doQjd5UGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ3IMH+IH16aEu4GTKPx/Oc2V0ZsrrXFwZnBopgC/EQbOkI4AFwhsAtlrmHNM 1SH2jznv8iaY7sW5KwiiAJqJBaPW1qLOF/QlaD7N3+iiEjGN1EuNK6K+dqNyAfmZ eOjDx4oxzs1UArucClCjMnfyiG/sS6aWyEAToteGblpW9Ux4O0Yv4avmkfUz+dqD J7Zhno3fSa3JX49r5tCSGbKrWSQsDAovezSpaN68zDaKKKtp/u36xksiFrXWGPm6 LWzE574TbsNcauEPWZWQxcNBRDKWIkE4HgBSMdMYrhK2XnQTkXs39jC5I4A6HTXx RouDzQVtrB0UvdWDynCVoGJmSw== -----END CERTIFICATE-----Generated at Sun Oct 11 08:04:51 2026 by rpki-client