$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.mft File: 10XhyGsYGPfQVj-Q6LoSvosa43g.mft (raw, json) Hash identifier: Fw6vMFxcWGSxksHhbguRxYkLTCjYPCKEr7pD8cvt2KI= Subject key identifier: 07:41:90:AB:49:08:6C:55:02:CD:DC:41:C2:CD:3F:E7:DA:2D:FF:3D Authority key identifier: D7:45:E1:C8:6B:18:18:F7:D0:56:3F:90:E8:BA:12:BE:8B:1A:E3:78 Certificate issuer: /CN=A91D97C4/serialNumber=D745E1C86B1818F7D0563F90E8BA12BE8B1AE378 Certificate serial: 0259 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10XhyGsYGPfQVj-Q6LoSvosa43g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.mft Manifest number: 0250 Signing time: Fri 25 Sep 2026 02:27:19 +0000 Manifest this update: Fri 25 Sep 2026 02:27:18 +0000 Manifest next update: Fri 02 Oct 2026 02:27:18 +0000 Files and hashes: 1: 10XhyGsYGPfQVj-Q6LoSvosa43g.crl (hash: fC27zrTeIVArAky1HmLz/hxiTh22VrGNiuOMIuy/PSs=) 2: 6E8D6EEA85AA11F1873A8CE75BA30FBC.roa (hash: iVDmlKturjsdPeMQ1ZgDutRftzZi0zhbWX3+CGjmM4A=) 3: 317FCFCA85B411F1928328FC5DA30FBC.roa (hash: it6HwI6gYN9kRsjao8LVj1cZthgpU769+I6sMCyi7EQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.crl rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10XhyGsYGPfQVj-Q6LoSvosa43g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 02:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 601 (0x259) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D97C4, serialNumber=D745E1C86B1818F7D0563F90E8BA12BE8B1AE378 Validity Not Before: Sep 25 02:27:18 2026 GMT Not After : Oct 2 02:27:18 2026 GMT Subject: CN=6ab5dc07-0f0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:76:b0:89:c1:00:88:eb:17:9b:77:1a:b9:e9: 0b:8c:b0:f1:a2:47:59:68:22:f8:99:9e:ed:1f:c7: 98:a8:31:93:57:90:b3:f3:cc:e2:7b:85:3e:d9:92: 96:d8:67:80:73:33:77:9d:55:f5:8d:a7:ef:2c:98: ef:8f:b9:c0:4d:62:9a:7a:75:01:bd:eb:72:e9:d3: 35:3a:de:86:aa:22:4f:eb:c6:cc:7d:0e:f4:ad:df: 7a:5a:78:56:f7:d7:b1:39:90:70:6e:0e:0d:c2:60: 4c:5c:92:a1:5e:fb:27:43:f2:1f:ae:a8:f2:ef:88: dc:a6:b3:33:5c:0a:5e:99:f0:cc:b5:b7:d0:37:8f: 45:78:77:31:9b:60:7e:13:9f:55:22:e8:f4:3a:bd: 53:d6:c8:de:64:11:fd:fb:25:f5:36:ad:e2:f4:b7: 15:a1:95:ff:c6:7c:50:55:ff:96:4b:dc:56:a4:df: a0:36:b0:26:76:9e:c5:1f:03:2f:49:95:a2:99:79: 3d:f8:f0:dd:76:9a:e6:c0:ed:1c:c1:ff:c9:18:48: 24:52:50:ef:a7:fd:e9:fd:fc:69:49:cc:62:66:71: 77:46:64:b2:37:6e:00:aa:99:93:22:50:8f:c3:d5: b2:38:5f:f6:4f:35:a9:0a:e2:3a:87:20:e7:b8:a3: 80:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:41:90:AB:49:08:6C:55:02:CD:DC:41:C2:CD:3F:E7:DA:2D:FF:3D X509v3 Authority Key Identifier: keyid:D7:45:E1:C8:6B:18:18:F7:D0:56:3F:90:E8:BA:12:BE:8B:1A:E3:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10XhyGsYGPfQVj-Q6LoSvosa43g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:4b:c9:c0:73:3c:7a:0c:93:4c:1c:15:34:a6:20:3e:01:3f: 71:d6:f5:30:65:30:71:22:d6:6b:be:3a:8e:94:38:aa:8f:e3: 91:49:7d:b6:82:79:8a:f4:e3:03:d9:b5:e9:c4:4b:ce:ac:80: 2b:78:45:c7:51:f3:0c:5c:c4:89:bd:e2:73:b3:4c:51:99:dd: 88:77:00:76:27:5d:c8:a8:01:32:d1:dc:27:9c:f6:64:64:36: cb:94:f0:e1:c5:e1:2c:84:b0:76:1f:07:14:b5:99:eb:58:ee: 37:9e:01:df:1b:d5:0d:de:47:fa:66:bd:6f:8d:da:7d:5b:2b: 57:ce:05:8b:7f:95:31:20:61:18:07:f2:fb:b6:f8:c8:ae:84: 82:00:73:dd:32:88:89:8b:a0:38:a4:57:cf:3e:fe:7d:51:14: 5f:07:59:ee:ba:fb:0a:d4:3e:23:7a:c9:01:35:43:0d:c6:2f: 25:ea:dc:8b:a8:4a:b0:11:66:70:78:86:3b:f8:c2:ab:ab:30: 97:e0:e9:09:cb:d3:d7:a0:61:ab:4a:93:8c:5d:5d:22:d1:fb: b0:24:06:cd:0f:a6:6b:cc:84:51:c8:c3:f2:6d:e1:1d:7a:eb: 47:51:6e:97:67:7b:50:c1:d6:67:45:13:d9:18:1d:5a:a9:d6: 34:4a:56:b9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk3QzQxMTAvBgNVBAUTKEQ3NDVFMUM4NkIxODE4RjdEMDU2M0Y5MEU4QkExMkJF OEIxQUUzNzgwHhcNMjYwOTI1MDIyNzE4WhcNMjYxMDAyMDIyNzE4WjAYMRYwFAYD VQQDEw02YWI1ZGMwNy0wZjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3nawicEAiOsXm3cauekLjLDxokdZaCL4mZ7tH8eYqDGTV5Cz88zie4U+2ZKW 2GeAczN3nVX1jafvLJjvj7nATWKaenUBvety6dM1Ot6GqiJP68bMfQ70rd96WnhW 99exOZBwbg4NwmBMXJKhXvsnQ/Ifrqjy74jcprMzXApemfDMtbfQN49FeHcxm2B+ E59VIuj0Or1T1sjeZBH9+yX1Nq3i9LcVoZX/xnxQVf+WS9xWpN+gNrAmdp7FHwMv SZWimXk9+PDddprmwO0cwf/JGEgkUlDvp/3p/fxpScxiZnF3RmSyN24AqpmTIlCP w9WyOF/2TzWpCuI6hyDnuKOA/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAdBkKtJ CGxVAs3cQcLNP+faLf89MB8GA1UdIwQYMBaAFNdF4chrGBj30FY/kOi6Er6LGuN4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTdDNC9DNjNERjIwMDND NjQxMUVFQkNBQzUxNzBDNEY5QUUwMi8xMFhoeUdzWUdQZlFWai1RNkxvU3Zvc2E0 M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzEwWGh5R3NZR1BmUVZqLVE2TG9Tdm9zYTQzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTdDNC9DNjNERjIwMDNDNjQxMUVFQkNBQzUxNzBDNEY5QUUwMi8xMFhoeUdzWUdQ ZlFWai1RNkxvU3Zvc2E0M2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm0vJwHM8egyTTBwVNKYgPgE/cdb1MGUwcSLWa746jpQ4qo/jkUl9toJ5ivTj A9m16cRLzqyAK3hFx1HzDFzEib3ic7NMUZndiHcAdiddyKgBMtHcJ5z2ZGQ2y5Tw 4cXhLISwdh8HFLWZ61juN54B3xvVDd5H+ma9b43afVsrV84Fi3+VMSBhGAfy+7b4 yK6EggBz3TKIiYugOKRXzz7+fVEUXwdZ7rr7CtQ+I3rJATVDDcYvJerci6hKsBFm cHiGO/jCq6swl+DpCcvT16Bhq0qTjF1dItH7sCQGzQ+ma8yEUcjD8m3hHXrrR1Fu l2d7UMHWZ0UT2RgdWqnWNEpWuQ== -----END CERTIFICATE-----Generated at Sat Sep 26 13:52:05 2026 by rpki-client