$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft File: xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft (raw, json) Hash identifier: kkjIVdc/n+uwgUXe8tBO4IQ3eOtYZ0Puv1akKc3nDJs= Subject key identifier: E0:21:82:C1:BC:27:38:89:B7:CB:02:A7:5D:BC:02:54:13:B6:AC:FE Authority key identifier: C4:9E:51:83:EA:2F:C4:9B:8A:83:C9:20:52:BC:E2:A8:B6:57:6C:70 Certificate issuer: /CN=A91DF937/serialNumber=C49E5183EA2FC49B8A83C92052BCE2A8B6576C70 Certificate serial: 2027 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft Manifest number: 2017 Signing time: Mon 12 Oct 2026 16:00:04 +0000 Manifest this update: Mon 12 Oct 2026 16:00:03 +0000 Manifest next update: Mon 19 Oct 2026 16:00:03 +0000 Files and hashes: 1: xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl (hash: GmUG86RP7So5xuJYKG7wvRkawceTil+D6Pulj3kOnCM=) 2: E723101E553D11E7B552CE31C4F9AE02.roa (hash: w2DU193yd2F7A76EdcHPjGzbuA2IEC9BLibhAE+t7oo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 16:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8231 (0x2027) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF937, serialNumber=C49E5183EA2FC49B8A83C92052BCE2A8B6576C70 Validity Not Before: Oct 12 16:00:03 2026 GMT Not After : Oct 19 16:00:03 2026 GMT Subject: CN=6acd0403-e7cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3d:43:5d:ab:4f:e0:04:06:db:32:e9:9e:f8: ba:27:71:28:a7:7a:c3:19:71:fa:0b:cb:85:07:be: f9:9a:0e:ea:4d:f5:ac:ca:54:cb:74:15:c6:20:11: e8:12:9b:a3:0e:b1:1e:99:b6:ee:4a:81:7e:1b:c8: a9:ed:31:d7:dc:02:36:0e:c0:ec:c6:77:dd:c4:7d: 6b:18:d3:e6:b7:73:49:f2:0b:a5:16:ea:bd:27:ff: ba:7d:6e:6e:78:f3:9d:7f:a8:ec:2a:e9:22:09:9b: 6b:1a:c1:d6:db:e4:e5:f9:94:9c:2f:cb:0b:a0:e1: d1:26:cd:39:e3:89:22:c6:45:6d:f2:b5:fd:27:b2: 3c:4a:fb:ff:de:8d:20:b4:19:a2:50:fb:75:99:e4: d8:06:69:4c:34:52:6a:a7:f7:2e:81:6c:4c:dc:b9: 83:ed:b8:b0:5e:72:e0:6f:45:58:c2:3f:68:07:09: d6:5b:9a:e2:14:42:93:4f:c6:ea:75:07:e7:c2:ad: cc:00:1c:2e:3d:86:4a:b2:44:7f:9f:9b:fd:7e:4d: 2b:7f:3a:1e:d6:f6:54:b3:11:f8:57:49:ae:37:65: 46:d7:b5:ae:18:53:33:82:df:19:6d:42:97:54:5a: 8a:42:1b:7a:d8:a7:46:e3:3c:4b:14:c1:21:fc:22: 67:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:21:82:C1:BC:27:38:89:B7:CB:02:A7:5D:BC:02:54:13:B6:AC:FE X509v3 Authority Key Identifier: keyid:C4:9E:51:83:EA:2F:C4:9B:8A:83:C9:20:52:BC:E2:A8:B6:57:6C:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:68:0f:d0:7d:2d:62:80:74:90:81:f7:ad:63:3e:12:72:b4: a1:12:ac:18:04:e4:a8:30:c1:e7:a0:f9:8a:b8:60:eb:34:01: 05:29:0c:af:c8:8b:5b:50:e3:8d:71:0a:48:2a:7d:c1:f5:33: 9a:ae:26:bb:ab:6a:44:23:b4:9e:c9:d2:ba:b0:68:33:44:f0: b0:ca:e2:c3:be:a9:94:9f:cd:e5:79:46:42:63:c8:2f:4e:ff: 26:11:0b:e4:9e:9a:69:6c:76:7d:77:5f:4a:a4:7c:99:2d:9d: c4:fe:ee:4a:1d:13:72:26:33:1d:e6:1a:ab:2d:af:16:4d:55: 75:22:c7:92:f4:f5:03:29:f1:34:3a:de:f3:b7:42:ee:f3:8b: 22:4a:0e:be:4b:81:4c:99:75:96:21:81:02:d3:84:2a:ed:32: 33:6b:f5:52:8e:30:a1:59:76:11:18:f9:04:ca:94:f4:92:33: 45:14:87:5c:f3:82:d0:7a:24:09:26:ff:2d:7c:ae:5a:5d:44: b3:3e:74:8f:94:f9:30:b5:f9:8b:59:13:fd:81:61:32:6b:5c: 93:78:51:f5:87:99:d0:ce:6c:1f:1a:fe:32:e3:36:95:67:c2: ba:15:c9:26:97:6d:26:0e:e5:d9:36:f7:de:d0:24:2c:49:71: f3:03:8e:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICICcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY5MzcxMTAvBgNVBAUTKEM0OUU1MTgzRUEyRkM0OUI4QTgzQzkyMDUyQkNFMkE4 QjY1NzZDNzAwHhcNMjYxMDEyMTYwMDAzWhcNMjYxMDE5MTYwMDAzWjAYMRYwFAYD VQQDEw02YWNkMDQwMy1lN2NjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApT1DXatP4AQG2zLpnvi6J3Eop3rDGXH6C8uFB775mg7qTfWsylTLdBXGIBHo EpujDrEembbuSoF+G8ip7THX3AI2DsDsxnfdxH1rGNPmt3NJ8gulFuq9J/+6fW5u ePOdf6jsKukiCZtrGsHW2+Tl+ZScL8sLoOHRJs0544kixkVt8rX9J7I8Svv/3o0g tBmiUPt1meTYBmlMNFJqp/cugWxM3LmD7biwXnLgb0VYwj9oBwnWW5riFEKTT8bq dQfnwq3MABwuPYZKskR/n5v9fk0rfzoe1vZUsxH4V0muN2VG17WuGFMzgt8ZbUKX VFqKQht62KdG4zxLFMEh/CJn9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOAhgsG8 JziJt8sCp128AlQTtqz+MB8GA1UdIwQYMBaAFMSeUYPqL8SbioPJIFK84qi2V2xw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjkzNy9BNDQ3QkZEQzU1 MzAxMUU2QTM2NDI3NDVDNEY5QUUwMi94SjVSZy1vdnhKdUtnOGtnVXJ6aXFMWlhi SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hKNVJnLW92eEp1S2c4a2dVcnppcUxaWGJIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjkzNy9BNDQ3QkZEQzU1MzAxMUU2QTM2NDI3NDVDNEY5QUUwMi94SjVSZy1vdnhK dUtnOGtnVXJ6aXFMWlhiSEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAj2gP0H0tYoB0kIH3rWM+EnK0oRKsGATkqDDB56D5irhg6zQBBSkMr8iLW1Dj jXEKSCp9wfUzmq4mu6tqRCO0nsnSurBoM0TwsMriw76plJ/N5XlGQmPIL07/JhEL 5J6aaWx2fXdfSqR8mS2dxP7uSh0TciYzHeYaqy2vFk1VdSLHkvT1AynxNDre87dC 7vOLIkoOvkuBTJl1liGBAtOEKu0yM2v1Uo4woVl2ERj5BMqU9JIzRRSHXPOC0Hok CSb/LXyuWl1Esz50j5T5MLX5i1kT/YFhMmtck3hR9YeZ0M5sHxr+MuM2lWfCuhXJ JpdtJg7l2Tb33tAkLElx8wOOrg== -----END CERTIFICATE-----Generated at Wed Oct 14 03:55:48 2026 by rpki-client