$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E78B5/C0E1253C9FC311F185E331305311F970/xzzR1KOVMbsSy-v8HkDk1NsFkp0.mft File: xzzR1KOVMbsSy-v8HkDk1NsFkp0.mft (raw, json) Hash identifier: aGAbNf4wHWzlVkRhLexukIMbEvjwU5HWqGIrb1TCiKM= Subject key identifier: 4E:70:6D:BC:93:57:18:CB:12:FD:7B:A5:26:38:DB:8C:92:B3:44:E4 Authority key identifier: C7:3C:D1:D4:A3:95:31:BB:12:CB:EB:FC:1E:40:E4:D4:DB:05:92:9D Certificate issuer: /CN=A91E78B5/serialNumber=C73CD1D4A39531BB12CBEBFC1E40E4D4DB05929D Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xzzR1KOVMbsSy-v8HkDk1NsFkp0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E78B5/C0E1253C9FC311F185E331305311F970/xzzR1KOVMbsSy-v8HkDk1NsFkp0.mft Manifest number: 29 Signing time: Tue 03 Nov 2026 09:54:24 +0000 Manifest this update: Tue 03 Nov 2026 09:54:24 +0000 Manifest next update: Tue 10 Nov 2026 09:54:24 +0000 Files and hashes: 1: xzzR1KOVMbsSy-v8HkDk1NsFkp0.crl (hash: C3vV4RROBqgo9oFiJbaC4lfPgrTf2Oe47mBShukCgMs=) 2: EETTppjEYUf_m8voifsJ8sVQbnc.asa (hash: Cgu9fsEEcet/RCuYUFKNrT86EyCVpyYdWfbU51GWOhc=) 3: 2F09D8DCA03D11F1ACAFAFF83911F970.roa (hash: iSOyyo5mav1l9HpQwTOIdfMcOvVhaxQGyBb2UEsq09U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E78B5/C0E1253C9FC311F185E331305311F970/xzzR1KOVMbsSy-v8HkDk1NsFkp0.crl rsync://rpki.apnic.net/member_repository/A91E78B5/C0E1253C9FC311F185E331305311F970/xzzR1KOVMbsSy-v8HkDk1NsFkp0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xzzR1KOVMbsSy-v8HkDk1NsFkp0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 09:54:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E78B5, serialNumber=C73CD1D4A39531BB12CBEBFC1E40E4D4DB05929D Validity Not Before: Nov 3 09:54:24 2026 GMT Not After : Nov 10 09:54:24 2026 GMT Subject: CN=6ae9af50-1224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:63:0c:46:e8:6b:69:4b:97:e2:07:76:f8:aa: 85:71:e0:cf:3c:ce:19:6a:d3:af:d6:7c:ca:9a:ef: a5:2e:13:0c:be:13:75:68:03:be:6f:13:c9:65:c2: e0:91:e9:e0:07:57:4d:6a:82:a2:71:a3:ae:f1:c0: 86:8d:78:a2:7b:2e:8b:4b:8e:dc:39:8c:9b:44:26: dc:37:b0:55:55:31:92:c8:e1:aa:60:0c:dd:ad:f0: c9:a8:1e:1b:cb:f5:11:d2:08:ac:63:e4:88:11:2c: 7a:42:85:11:7a:de:f1:12:b3:08:fe:b9:86:e1:1d: 56:22:42:c1:e8:54:a4:02:cf:c2:67:4e:ec:2c:2b: 77:54:b6:a4:4c:dd:f0:a3:91:82:07:7f:a6:09:7b: 86:07:3d:e2:c8:e2:cc:f3:33:b9:af:aa:19:0a:00: 97:09:7c:27:a7:96:c8:4b:e7:2d:56:a0:dc:09:d7: 41:d2:ff:74:fc:24:65:76:0a:fa:64:f6:22:89:ab: a0:68:62:6b:5c:0f:9f:38:92:bb:7c:46:a8:ee:15: d1:98:97:b7:3b:e8:d4:4f:7e:aa:d5:30:27:24:f9: f4:25:eb:74:9c:bf:cb:a1:f0:87:d9:67:6d:97:cf: 51:28:7d:46:70:e0:63:9c:a6:c1:c3:c9:77:2e:51: ec:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:70:6D:BC:93:57:18:CB:12:FD:7B:A5:26:38:DB:8C:92:B3:44:E4 X509v3 Authority Key Identifier: keyid:C7:3C:D1:D4:A3:95:31:BB:12:CB:EB:FC:1E:40:E4:D4:DB:05:92:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E78B5/C0E1253C9FC311F185E331305311F970/xzzR1KOVMbsSy-v8HkDk1NsFkp0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xzzR1KOVMbsSy-v8HkDk1NsFkp0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E78B5/C0E1253C9FC311F185E331305311F970/xzzR1KOVMbsSy-v8HkDk1NsFkp0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:f3:7a:ae:68:66:84:71:bf:64:88:56:28:97:55:b5:b6:09: a4:03:ba:e4:81:05:d8:e6:6c:fe:4f:28:94:93:ec:aa:52:80: 7a:45:69:c9:70:1c:31:49:f3:e7:4e:1a:07:00:bf:f6:1f:9a: 52:ea:5b:8a:36:eb:a7:03:fd:e6:74:80:2f:a7:13:d7:44:64: 63:6d:95:bb:0d:22:0a:ab:10:e9:13:95:93:9c:15:70:43:5e: 2e:74:f3:71:9c:4a:62:d5:39:1b:0d:e2:53:39:48:8d:ec:93: e2:91:59:a8:23:51:63:ef:7e:e5:7d:9e:3c:3f:26:6b:bb:a7: f9:b1:6b:ee:65:56:20:23:60:c5:54:5e:bd:cb:a0:7e:88:23: 29:9c:d6:a4:60:9a:f4:90:48:f5:b4:89:94:94:d8:7c:ff:01: bc:30:d2:74:5c:66:b6:e3:f7:d2:af:c0:37:4b:b3:84:1d:a7: 3a:71:13:70:59:c8:c8:e0:62:40:86:4b:77:18:95:e8:fa:6e: 64:c5:e6:db:78:21:06:b1:2c:e4:1a:0a:14:48:40:94:1d:a1: cf:4a:6c:b5:3d:93:86:a9:2d:e7:6c:41:7f:18:21:ed:60:43: 43:d5:1b:ad:ed:67:83:ee:d9:96:20:e3:25:fb:8b:20:9a:c2: a8:34:2f:04 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NzhCNTExMC8GA1UEBRMoQzczQ0QxRDRBMzk1MzFCQjEyQ0JFQkZDMUU0MEU0RDRE QjA1OTI5RDAeFw0yNjExMDMwOTU0MjRaFw0yNjExMTAwOTU0MjRaMBgxFjAUBgNV BAMTDTZhZTlhZjUwLTEyMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsYwxG6GtpS5fiB3b4qoVx4M88zhlq06/WfMqa76UuEwy+E3VoA75vE8llwuCR 6eAHV01qgqJxo67xwIaNeKJ7LotLjtw5jJtEJtw3sFVVMZLI4apgDN2t8MmoHhvL 9RHSCKxj5IgRLHpChRF63vESswj+uYbhHVYiQsHoVKQCz8JnTuwsK3dUtqRM3fCj kYIHf6YJe4YHPeLI4szzM7mvqhkKAJcJfCenlshL5y1WoNwJ10HS/3T8JGV2Cvpk 9iKJq6BoYmtcD584krt8RqjuFdGYl7c76NRPfqrVMCck+fQl63Scv8uh8IfZZ22X z1EofUZw4GOcpsHDyXcuUexvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUTnBtvJNX GMsS/XulJjjbjJKzROQwHwYDVR0jBBgwFoAUxzzR1KOVMbsSy+v8HkDk1NsFkp0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU3OEI1L0MwRTEyNTNDOUZD MzExRjE4NUUzMzEzMDUzMTFGOTcwL3h6elIxS09WTWJzU3ktdjhIa0RrMU5zRmtw MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveHp6UjFLT1ZNYnNTeS12OEhrRGsxTnNGa3AwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU3 OEI1L0MwRTEyNTNDOUZDMzExRjE4NUUzMzEzMDUzMTFGOTcwL3h6elIxS09WTWJz U3ktdjhIa0RrMU5zRmtwMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB/83quaGaEcb9kiFYol1W1tgmkA7rkgQXY5mz+TyiUk+yqUoB6RWnJcBwxSfPn ThoHAL/2H5pS6luKNuunA/3mdIAvpxPXRGRjbZW7DSIKqxDpE5WTnBVwQ14udPNx nEpi1TkbDeJTOUiN7JPikVmoI1Fj737lfZ48PyZru6f5sWvuZVYgI2DFVF69y6B+ iCMpnNakYJr0kEj1tImUlNh8/wG8MNJ0XGa24/fSr8A3S7OEHac6cRNwWcjI4GJA hkt3GJXo+m5kxebbeCEGsSzkGgoUSECUHaHPSmy1PZOGqS3nbEF/GCHtYEND1Rut 7WeD7tmWIOMl+4sgmsKoNC8E -----END CERTIFICATE-----Generated at Thu Nov 5 04:53:58 2026 by rpki-client