$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/XYnzqvmxOgelsmTy3rpk1cUAZRw.mft File: XYnzqvmxOgelsmTy3rpk1cUAZRw.mft (raw, json) Hash identifier: 6d6tjqIBvIEMeCP1nkE4DYyVV9LmS+AcRo2wir2g4J0= Subject key identifier: E3:B4:72:D1:47:5C:03:25:8A:F2:24:84:EB:81:06:A3:77:CC:C0:B9 Authority key identifier: 5D:89:F3:AA:F9:B1:3A:07:A5:B2:64:F2:DE:BA:64:D5:C5:00:65:1C Certificate issuer: /CN=A91D5240/serialNumber=5D89F3AAF9B13A07A5B264F2DEBA64D5C500651C Certificate serial: 02CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XYnzqvmxOgelsmTy3rpk1cUAZRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/XYnzqvmxOgelsmTy3rpk1cUAZRw.mft Manifest number: 02BD Signing time: Sun 11 Oct 2026 01:47:04 +0000 Manifest this update: Sun 11 Oct 2026 01:47:03 +0000 Manifest next update: Sun 18 Oct 2026 01:47:03 +0000 Files and hashes: 1: XYnzqvmxOgelsmTy3rpk1cUAZRw.crl (hash: IRIOPw2k+bLza7h/aCtQr5tWPKHjZjXZxZhR8ycON4s=) 2: 5DCE1A1AA63C11ED9306165AC4F9AE02.roa (hash: ry8gAyMl/oF2tDrb6QBcr0lUpoct2VpMmyLx0Y2gIls=) 3: 9EA7B7D8A63911ED874E6630C4F9AE02.roa (hash: DHZLT6kRWzcG3+2PiBnd4pNnMfMfwzitkH/VyFmiyhk=) 4: 9FBA5FCCA63911ED874E6630C4F9AE02.roa (hash: ClwvMUH1LVLekjvPCckwoGuRynW5TD4w0EqiLo6Abj0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/XYnzqvmxOgelsmTy3rpk1cUAZRw.crl rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/XYnzqvmxOgelsmTy3rpk1cUAZRw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XYnzqvmxOgelsmTy3rpk1cUAZRw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 01:47:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 718 (0x2ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5240, serialNumber=5D89F3AAF9B13A07A5B264F2DEBA64D5C500651C Validity Not Before: Oct 11 01:47:03 2026 GMT Not After : Oct 18 01:47:03 2026 GMT Subject: CN=6acaea98-9926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9f:0c:ef:7d:52:4e:4e:1b:c5:77:79:f5:2c: 5f:d0:1e:08:bf:8d:e0:22:f9:ee:3f:4b:b1:c5:93: d6:b2:df:5f:3a:01:1a:8c:ae:5f:6b:f6:75:3c:49: 60:14:8f:71:07:10:0f:66:df:14:5c:b5:d0:ea:c5: 84:ed:6c:f6:59:d2:a3:79:ca:88:35:7e:8e:f6:f7: aa:1f:cc:af:43:dc:81:2e:20:33:07:c3:a6:83:2d: 07:95:3f:2e:4e:4b:15:2e:8d:1a:45:32:43:81:a1: 8d:1c:7e:aa:27:60:7e:c9:d7:6f:5b:b5:a6:81:e0: 3b:f6:e7:fe:36:5f:4b:a2:2c:d5:7e:7b:95:e6:71: 71:45:a4:e3:f8:2f:01:e9:e2:bd:ac:be:cb:68:f9: ce:50:b6:5a:b8:18:d8:ca:8f:cc:3c:d9:e3:d1:3a: 7c:49:9c:fa:9f:8c:b7:8a:ed:2c:18:45:52:4f:cf: 98:e5:94:c0:83:d6:2d:09:2e:bf:f4:8a:e8:c5:23: d4:19:3d:6e:3c:e0:c8:6f:08:66:5e:42:06:1d:13: f8:5e:6e:05:ae:61:37:3a:dd:84:bc:9e:ed:e3:aa: 96:8b:30:da:ac:94:1e:55:ec:be:91:e9:2a:71:f7: 10:9e:fa:da:3a:24:20:66:7b:74:16:67:e0:6e:c7: 03:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:B4:72:D1:47:5C:03:25:8A:F2:24:84:EB:81:06:A3:77:CC:C0:B9 X509v3 Authority Key Identifier: keyid:5D:89:F3:AA:F9:B1:3A:07:A5:B2:64:F2:DE:BA:64:D5:C5:00:65:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/XYnzqvmxOgelsmTy3rpk1cUAZRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XYnzqvmxOgelsmTy3rpk1cUAZRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/XYnzqvmxOgelsmTy3rpk1cUAZRw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:a0:c4:b2:c3:5e:0a:1b:39:90:7f:13:44:de:6c:f1:ef:63: 15:64:da:9e:28:cd:c7:79:a0:6f:95:f3:ca:1d:55:46:d5:fe: 60:0a:c2:5f:19:34:f8:21:86:0a:48:f5:7d:bd:5a:04:02:fe: 44:86:3d:17:3e:4e:f2:6b:22:dd:0e:70:0d:04:7b:44:a3:58: 06:f0:c4:89:56:ba:70:38:89:b2:84:e8:30:c6:05:c7:f4:b7: 2f:41:7a:b0:15:de:63:83:df:be:01:5c:b5:ad:64:fa:75:fe: 21:52:b7:16:e2:af:47:f1:f6:c2:f8:c1:4e:d6:e1:65:ed:e5: 6b:cf:2d:fb:37:55:c1:70:67:49:d7:23:56:7f:28:9f:aa:7a: 6e:5f:79:9a:70:5b:21:5b:19:4e:5d:f0:bc:17:50:66:d0:47: e8:05:4e:7b:9d:fd:e8:3f:c2:f8:ee:3d:c4:9a:9d:f8:29:35: 71:53:8e:11:9d:66:10:d8:db:99:8d:d9:34:42:fe:54:69:52: 35:3e:67:c4:c5:a5:96:5c:4b:59:2f:02:7f:f1:e5:1a:31:4c: 06:7d:b8:3e:16:85:00:76:9d:a5:20:e8:6f:c5:be:e9:be:8c: 0c:72:9e:d4:a4:cc:a7:1c:df:bd:4c:78:59:86:8b:80:8f:4a: 67:fe:f9:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUyNDAxMTAvBgNVBAUTKDVEODlGM0FBRjlCMTNBMDdBNUIyNjRGMkRFQkE2NEQ1 QzUwMDY1MUMwHhcNMjYxMDExMDE0NzAzWhcNMjYxMDE4MDE0NzAzWjAYMRYwFAYD VQQDEw02YWNhZWE5OC05OTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJ8M731STk4bxXd59Sxf0B4Iv43gIvnuP0uxxZPWst9fOgEajK5fa/Z1PElg FI9xBxAPZt8UXLXQ6sWE7Wz2WdKjecqINX6O9veqH8yvQ9yBLiAzB8Omgy0HlT8u TksVLo0aRTJDgaGNHH6qJ2B+yddvW7WmgeA79uf+Nl9LoizVfnuV5nFxRaTj+C8B 6eK9rL7LaPnOULZauBjYyo/MPNnj0Tp8SZz6n4y3iu0sGEVST8+Y5ZTAg9YtCS6/ 9IroxSPUGT1uPODIbwhmXkIGHRP4Xm4FrmE3Ot2EvJ7t46qWizDarJQeVey+kekq cfcQnvraOiQgZnt0FmfgbscDWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOO0ctFH XAMlivIkhOuBBqN3zMC5MB8GA1UdIwQYMBaAFF2J86r5sToHpbJk8t66ZNXFAGUc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTI0MC8yN0RERTdEODlC N0QxMUVEQjNDMzNGNURDNEY5QUUwMi9YWW56cXZteE9nZWxzbVR5M3JwazFjVUFa UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hZbnpxdm14T2dlbHNtVHkzcnBrMWNVQVpSdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTI0MC8yN0RERTdEODlCN0QxMUVEQjNDMzNGNURDNEY5QUUwMi9YWW56cXZteE9n ZWxzbVR5M3JwazFjVUFaUncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA0qDEssNeChs5kH8TRN5s8e9jFWTanijNx3mgb5Xzyh1VRtX+YArCXxk0+CGG Ckj1fb1aBAL+RIY9Fz5O8msi3Q5wDQR7RKNYBvDEiVa6cDiJsoToMMYFx/S3L0F6 sBXeY4PfvgFcta1k+nX+IVK3FuKvR/H2wvjBTtbhZe3la88t+zdVwXBnSdcjVn8o n6p6bl95mnBbIVsZTl3wvBdQZtBH6AVOe5396D/C+O49xJqd+Ck1cVOOEZ1mENjb mY3ZNEL+VGlSNT5nxMWlllxLWS8Cf/HlGjFMBn24PhaFAHadpSDob8W+6b6MDHKe 1KTMpxzfvUx4WYaLgI9KZ/75Aw== -----END CERTIFICATE-----Generated at Sun Oct 11 18:04:31 2026 by rpki-client