$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft File: Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft (raw, json) Hash identifier: m/hWeH6RbtTM2xrKwTHK37s3VryiBq6Zw6T/41gu5XY= Subject key identifier: 72:43:E5:BE:86:6C:8A:1B:9C:2F:BA:24:95:B5:F1:D4:CE:08:78:0C Authority key identifier: 5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A Certificate issuer: /CN=A91D63EA/serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A Certificate serial: 0234 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft Manifest number: 0222 Signing time: Sun 11 Oct 2026 03:30:06 +0000 Manifest this update: Sun 11 Oct 2026 03:30:05 +0000 Manifest next update: Sun 18 Oct 2026 03:30:05 +0000 Files and hashes: 1: Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl (hash: yhPUxn8KiUyl9d+1FXQFj1BWCtGNCcfXtT/uL2po8/s=) 2: 2B6413D4670811EF9D46FA4FC4F9AE02.roa (hash: sqpOzCSyWagdZtLDNG0fEoo6eV6DhP/ql0m0DJxSXx0=) 3: 21047C70672211EF998AEF2BC4F9AE02.roa (hash: cwZ4eVKobt7zlcwyDlS8wp8YfQlmfCEiAZE09BVtpC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 03:30:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 564 (0x234) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D63EA, serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A Validity Not Before: Oct 11 03:30:05 2026 GMT Not After : Oct 18 03:30:05 2026 GMT Subject: CN=6acb02bd-dbd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2b:ae:9f:de:9e:4d:3a:c4:4f:31:9f:ad:44: ea:cb:cf:a7:9d:4f:57:2d:85:6d:3f:7c:4b:2d:74: 4b:63:4b:b4:1b:89:f8:3d:01:d9:58:ba:4a:64:62: 65:bf:68:22:c6:ab:5f:15:87:7a:26:7e:2c:96:5c: 85:30:d2:72:6e:98:45:a1:52:0b:62:42:e8:44:59: 84:b3:8d:81:e9:2f:d8:68:09:82:fe:01:e2:e1:06: 38:24:d5:ec:66:7f:9a:59:70:57:a4:30:38:73:6d: fe:56:e9:d2:49:dd:f3:80:b2:e6:e1:ac:bd:aa:82: 9d:ed:2e:b6:2a:9d:3e:50:63:05:7c:0a:8b:6c:57: 79:6c:47:6a:72:fa:96:f8:51:07:19:3c:78:09:fb: a3:20:5a:7b:f3:10:03:3c:19:1a:eb:24:0a:a1:d1: 3d:fb:c7:6e:d8:a4:99:a1:ea:2f:7c:cf:0d:03:ca: 12:e4:dd:bc:8a:fd:62:89:86:87:6d:fa:c8:5d:4d: 61:8d:6c:fc:1b:0c:9b:a5:63:17:66:27:f2:3d:6d: 98:1d:b7:88:c3:1f:87:18:6c:56:ab:0e:c3:5d:fe: 29:ca:bd:2d:93:73:8c:5c:90:28:67:d4:8b:e1:fd: 7d:8d:31:0c:41:63:b0:eb:d1:8e:0f:11:8d:cc:23: 93:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:43:E5:BE:86:6C:8A:1B:9C:2F:BA:24:95:B5:F1:D4:CE:08:78:0C X509v3 Authority Key Identifier: keyid:5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:f4:2e:b8:78:0e:00:1b:b4:cb:b9:b7:56:99:c6:9c:bd:42: db:ed:ec:0e:c0:36:40:c3:86:e6:d6:75:59:c3:2d:7c:57:c2: 8b:bd:aa:ae:63:0c:3f:ba:4d:6b:4b:44:2e:45:07:11:7a:fa: 02:f9:e4:90:8f:c6:4e:5b:cc:35:73:8c:16:22:92:d9:29:ad: 29:8b:e0:6f:3d:d8:cf:46:9c:0e:2d:e9:80:06:98:dd:d2:c1: d4:9b:2b:be:ec:53:5b:d5:50:43:de:94:2c:3e:84:26:70:41: 22:36:69:b8:7f:21:14:80:cd:c4:89:96:9a:07:f7:37:60:97: 9f:5c:21:c0:9d:c9:19:5f:f8:5a:8d:df:9e:a1:6e:38:4a:61: 71:c9:e5:e6:82:61:66:ee:5a:0e:79:d4:69:64:06:1f:d2:12: d2:41:6d:c7:37:d7:72:48:42:e2:9d:38:9a:4b:e2:5c:b7:84: 63:2a:c8:3a:62:79:99:48:88:cd:1f:19:0a:d3:57:12:07:3c: a8:0f:bb:8d:cc:86:4e:a8:7c:50:6b:80:32:f5:a4:17:d1:d4: a9:cb:91:41:11:c0:92:af:03:ba:3a:65:0a:cd:43:42:49:a8: 29:24:fd:95:9f:3c:f4:9f:ff:eb:26:f9:2d:9c:54:89:47:9d: 29:99:e3:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYzRUExMTAvBgNVBAUTKDVFN0REMDVBOUMxQkUwNDQ0NEFDRTAzRkU0QTkyMDI2 ODA0RDRCMkEwHhcNMjYxMDExMDMzMDA1WhcNMjYxMDE4MDMzMDA1WjAYMRYwFAYD VQQDEw02YWNiMDJiZC1kYmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqSuun96eTTrETzGfrUTqy8+nnU9XLYVtP3xLLXRLY0u0G4n4PQHZWLpKZGJl v2gixqtfFYd6Jn4sllyFMNJybphFoVILYkLoRFmEs42B6S/YaAmC/gHi4QY4JNXs Zn+aWXBXpDA4c23+VunSSd3zgLLm4ay9qoKd7S62Kp0+UGMFfAqLbFd5bEdqcvqW +FEHGTx4CfujIFp78xADPBka6yQKodE9+8du2KSZoeovfM8NA8oS5N28iv1iiYaH bfrIXU1hjWz8GwybpWMXZifyPW2YHbeIwx+HGGxWqw7DXf4pyr0tk3OMXJAoZ9SL 4f19jTEMQWOw69GODxGNzCOT9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHJD5b6G bIobnC+6JJW18dTOCHgMMB8GA1UdIwQYMBaAFF590FqcG+BERKzgP+SpICaATUsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjNFQS81MEE0Mjg5RTk1 RkYxMUVFQTZBNEY3MEFDNEY5QUUwMi9YbjNRV3B3YjRFUkVyT0FfNUtrZ0pvQk5T eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1huM1FXcHdiNEVSRXJPQV81S2tnSm9CTlN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjNFQS81MEE0Mjg5RTk1RkYxMUVFQTZBNEY3MEFDNEY5QUUwMi9YbjNRV3B3YjRF UkVyT0FfNUtrZ0pvQk5TeW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK/QuuHgOABu0y7m3VpnGnL1C2+3sDsA2QMOG5tZ1WcMtfFfCi72qrmMMP7pN a0tELkUHEXr6AvnkkI/GTlvMNXOMFiKS2SmtKYvgbz3Yz0acDi3pgAaY3dLB1Jsr vuxTW9VQQ96ULD6EJnBBIjZpuH8hFIDNxImWmgf3N2CXn1whwJ3JGV/4Wo3fnqFu OEphccnl5oJhZu5aDnnUaWQGH9IS0kFtxzfXckhC4p04mkviXLeEYyrIOmJ5mUiI zR8ZCtNXEgc8qA+7jcyGTqh8UGuAMvWkF9HUqcuRQRHAkq8DujplCs1DQkmoKST9 lZ889J//6yb5LZxUiUedKZnjWg== -----END CERTIFICATE-----Generated at Sun Oct 11 16:34:44 2026 by rpki-client