$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.mft File: Xs7vXyjy82UFPfuM780W4cPehK4.mft (raw, json) Hash identifier: pTU18PIms2ef0LmjHblP2dU+nqAE9Xc7crGSBNdkav0= Subject key identifier: 7E:BA:11:4B:AD:9F:5C:98:FF:9A:14:8C:1C:A3:88:AD:34:E9:E8:1B Authority key identifier: 5E:CE:EF:5F:28:F2:F3:65:05:3D:FB:8C:EF:CD:16:E1:C3:DE:84:AE Certificate issuer: /CN=A91DB8D9/serialNumber=5ECEEF5F28F2F365053DFB8CEFCD16E1C3DE84AE Certificate serial: 04B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xs7vXyjy82UFPfuM780W4cPehK4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.mft Manifest number: 04A6 Signing time: Sat 10 Oct 2026 23:59:29 +0000 Manifest this update: Sat 10 Oct 2026 23:59:28 +0000 Manifest next update: Sat 17 Oct 2026 23:59:28 +0000 Files and hashes: 1: Xs7vXyjy82UFPfuM780W4cPehK4.crl (hash: ObRXcNH9CnA6RIbg83sgC4J2nV0qaLtTz43cDr4pV8s=) 2: 7E044E58A06B11ECBF29B644C4F9AE02.roa (hash: JHvS1f6jdKLwIeNTGazWPjS7qbi1eE+mp2wF3npKP1k=) 3: F31E86967B2311EF93801A72C4F9AE02.roa (hash: D6LiWMFH6d2ytAEKNZQXXNvSijIWaNdo5eD9rEi5mZA=) 4: 728139D62FA311F0A9129814C4F9AE02.roa (hash: eWlYnOj+XzRjYM0rC0+ZAzd4ERRZ2swjPOnqLD6EJ/Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.crl rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xs7vXyjy82UFPfuM780W4cPehK4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 23:59:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1205 (0x4b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB8D9, serialNumber=5ECEEF5F28F2F365053DFB8CEFCD16E1C3DE84AE Validity Not Before: Oct 10 23:59:28 2026 GMT Not After : Oct 17 23:59:28 2026 GMT Subject: CN=6acad161-e2e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2a:41:54:e9:e4:db:7a:2e:9d:1b:eb:9d:97: 79:28:03:4a:79:f8:cd:be:de:a1:a7:22:71:50:c2: 66:fb:dc:a5:0d:a9:0d:79:8f:39:d0:cd:80:7b:34: ac:7e:a6:da:9d:1d:46:e9:96:fa:b9:d5:91:0d:f8: 72:e9:43:df:ce:3a:b9:a7:cc:39:37:97:4b:71:dc: cd:1b:ca:05:67:5c:c4:c3:19:f6:af:e2:fa:07:24: 2b:64:a2:ed:f7:a5:12:98:44:11:ae:24:3d:af:ce: fb:ed:26:d9:f0:84:e5:df:b7:b1:37:95:f3:27:87: ae:30:14:17:48:d4:e5:2d:a6:c3:5a:f4:11:d4:36: 74:29:47:99:61:e1:88:6a:21:8d:f2:ef:eb:b6:b4: 16:0a:3c:1b:91:4f:a3:08:dc:4f:cf:2a:eb:5d:eb: ed:bc:3c:b8:90:21:46:9c:7e:06:94:b2:23:bc:1e: a0:2d:a7:be:69:f9:ff:71:7f:f9:b0:77:c2:54:29: 91:80:84:3c:6e:d5:d5:cc:b4:64:fe:26:c7:4f:0f: 30:3d:9c:b0:91:da:75:49:b6:76:31:b1:c3:c6:25: 1a:af:4a:25:f7:32:27:c4:a6:38:16:e8:49:08:b5: df:0e:b6:58:cb:e5:e1:6f:9b:da:cc:dc:25:b6:e1: 51:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:BA:11:4B:AD:9F:5C:98:FF:9A:14:8C:1C:A3:88:AD:34:E9:E8:1B X509v3 Authority Key Identifier: keyid:5E:CE:EF:5F:28:F2:F3:65:05:3D:FB:8C:EF:CD:16:E1:C3:DE:84:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xs7vXyjy82UFPfuM780W4cPehK4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:35:ed:1a:c9:84:ef:3d:ae:00:8b:91:db:02:38:fe:d0:c6: db:59:96:35:39:57:cc:3d:7a:22:25:cd:e0:1f:2e:40:2f:1b: 0f:29:29:85:3f:98:f8:39:2e:7e:16:f4:46:73:33:b4:94:e2: 46:70:43:58:3e:45:ae:98:34:c2:b5:2e:b5:a0:d8:a1:38:88: a0:ce:c2:bb:78:1b:4f:4b:1e:26:75:3f:28:1e:6a:a5:78:d3: d9:41:6a:7a:44:7a:aa:15:ce:15:a7:b3:f3:7d:af:50:76:b6: 26:cc:c6:df:e9:46:ee:aa:e2:9b:84:94:27:02:c4:4a:92:a2: b9:71:4d:fc:36:97:8a:f2:94:f6:ac:42:05:47:f4:4b:fd:d5: 10:82:1a:e7:22:ec:14:32:ab:8c:69:22:69:5b:11:29:84:c6: e4:75:f4:bb:42:a9:a6:7b:f1:0d:7b:39:ea:26:59:d0:e3:c7: 25:fe:25:02:12:a2:f0:ca:62:97:32:d1:07:3e:90:9d:f4:e1: 3d:36:5b:96:54:83:3e:98:79:c3:de:7f:5c:54:68:fe:e2:5a: d5:56:1e:b1:c7:b5:b8:44:be:9b:97:6c:ed:52:c7:85:7d:65: 61:cd:44:10:38:12:07:31:5a:f9:75:18:58:ce:f5:de:56:c3: 06:1e:79:29 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI4RDkxMTAvBgNVBAUTKDVFQ0VFRjVGMjhGMkYzNjUwNTNERkI4Q0VGQ0QxNkUx QzNERTg0QUUwHhcNMjYxMDEwMjM1OTI4WhcNMjYxMDE3MjM1OTI4WjAYMRYwFAYD VQQDEw02YWNhZDE2MS1lMmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAySpBVOnk23ounRvrnZd5KANKefjNvt6hpyJxUMJm+9ylDakNeY850M2AezSs fqbanR1G6Zb6udWRDfhy6UPfzjq5p8w5N5dLcdzNG8oFZ1zEwxn2r+L6ByQrZKLt 96USmEQRriQ9r8777SbZ8ITl37exN5XzJ4euMBQXSNTlLabDWvQR1DZ0KUeZYeGI aiGN8u/rtrQWCjwbkU+jCNxPzyrrXevtvDy4kCFGnH4GlLIjvB6gLae+afn/cX/5 sHfCVCmRgIQ8btXVzLRk/ibHTw8wPZywkdp1SbZ2MbHDxiUar0ol9zInxKY4FuhJ CLXfDrZYy+Xhb5vazNwltuFRzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH66EUut n1yY/5oUjByjiK006egbMB8GA1UdIwQYMBaAFF7O718o8vNlBT37jO/NFuHD3oSu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjhEOS84QjAwMjM3NjlB MDIxMUVDOEI4MTc3ODVDNEY5QUUwMi9Yczd2WHlqeTgyVUZQZnVNNzgwVzRjUGVo SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hzN3ZYeWp5ODJVRlBmdU03ODBXNGNQZWhLNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjhEOS84QjAwMjM3NjlBMDIxMUVDOEI4MTc3ODVDNEY5QUUwMi9Yczd2WHlqeTgy VUZQZnVNNzgwVzRjUGVoSzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABTXtGsmE7z2uAIuR2wI4/tDG21mWNTlXzD16IiXN4B8uQC8bDykphT+Y+Dku fhb0RnMztJTiRnBDWD5Frpg0wrUutaDYoTiIoM7Cu3gbT0seJnU/KB5qpXjT2UFq ekR6qhXOFaez832vUHa2JszG3+lG7qrim4SUJwLESpKiuXFN/DaXivKU9qxCBUf0 S/3VEIIa5yLsFDKrjGkiaVsRKYTG5HX0u0KppnvxDXs56iZZ0OPHJf4lAhKi8Mpi lzLRBz6QnfThPTZbllSDPph5w95/XFRo/uJa1VYesce1uES+m5ds7VLHhX1lYc1E EDgSBzFa+XUYWM713lbDBh55KQ== -----END CERTIFICATE-----Generated at Mon Oct 12 00:36:26 2026 by rpki-client