$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E7B89/41BE4F44D9A011F093130E0768D3641D/XnhkKwPMN-Jv1BXn12G-SEc2xWY.mft File: XnhkKwPMN-Jv1BXn12G-SEc2xWY.mft (raw, json) Hash identifier: ejiNNxlCddozmhh6ZKCkJXygqpd6o5KS1fYPpERSnVo= Subject key identifier: 39:77:9A:32:F6:D6:CA:0B:B5:8A:AC:71:8E:D7:3E:6E:26:5B:7D:55 Authority key identifier: 5E:78:64:2B:03:CC:37:E2:6F:D4:15:E7:D7:61:BE:48:47:36:C5:66 Certificate issuer: /CN=A91E7B89/serialNumber=5E78642B03CC37E26FD415E7D761BE484736C566 Certificate serial: A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnhkKwPMN-Jv1BXn12G-SEc2xWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7B89/41BE4F44D9A011F093130E0768D3641D/XnhkKwPMN-Jv1BXn12G-SEc2xWY.mft Manifest number: 9F Signing time: Thu 15 Oct 2026 08:23:00 +0000 Manifest this update: Thu 15 Oct 2026 08:22:59 +0000 Manifest next update: Thu 22 Oct 2026 08:22:59 +0000 Files and hashes: 1: XnhkKwPMN-Jv1BXn12G-SEc2xWY.crl (hash: NO5v/C9lCpR6UBtlC2lbu+/+AG+80bvK/v56p/Tdy+c=) 2: 72480DC0D9A111F0989DD75268D3641D.roa (hash: 254YjhyMn8TcecNMQW2J/rfKDC3ffHZAOD2O4s1Qu3A=) 3: 1BD6E18E1D1A11F1B8E79D60103D8C67.roa (hash: rrytxPSd1VoT8yzZHF5nlkUhFP1WWEaU2+XamxIi/z8=) 4: 1C61CBFA1D1A11F1B8E79D60103D8C67.roa (hash: a189GeZn/qoKIWbLCd3ZJZBVaZ36ji3gpESDwYzEX9s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7B89/41BE4F44D9A011F093130E0768D3641D/XnhkKwPMN-Jv1BXn12G-SEc2xWY.crl rsync://rpki.apnic.net/member_repository/A91E7B89/41BE4F44D9A011F093130E0768D3641D/XnhkKwPMN-Jv1BXn12G-SEc2xWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnhkKwPMN-Jv1BXn12G-SEc2xWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Oct 2026 08:22:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 166 (0xa6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7B89, serialNumber=5E78642B03CC37E26FD415E7D761BE484736C566 Validity Not Before: Oct 15 08:22:59 2026 GMT Not After : Oct 22 08:22:59 2026 GMT Subject: CN=6ad08d64-1c39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:dd:ce:c6:94:5b:52:b3:0a:e1:fa:e3:59:6d: 05:0b:2c:96:29:b3:cc:cb:0e:0d:21:b0:a2:a7:97: 3e:c7:bc:7c:23:c3:65:37:a3:2d:43:4f:fb:14:67: a4:07:1f:d8:2e:7a:ee:98:ff:29:ba:5f:5c:e8:bf: 41:40:13:26:f3:f9:a6:47:7c:88:75:db:04:49:8f: d1:b6:94:91:42:5b:e7:9f:f5:ac:90:b4:40:d3:61: fd:a1:0c:bc:a0:5c:99:26:46:d3:11:1a:33:ae:0a: 86:5a:6e:32:a3:42:b5:d1:f4:4b:56:3c:1a:51:d6: f7:a1:1e:f5:eb:a1:ee:4f:35:de:ae:99:67:42:ac: 1c:c9:6c:4f:1d:d8:d5:d9:23:8d:69:84:1f:33:59: 31:87:0c:5e:0e:dc:3e:62:41:2b:1f:31:9a:53:bf: 26:7e:dd:a9:62:e0:19:74:aa:d4:76:f2:24:d4:29: 3c:49:83:c3:33:c3:ee:5f:eb:4c:e4:ec:c5:89:24: e9:3c:a4:28:69:a1:aa:52:95:51:29:d8:c0:97:f5: e4:fc:48:eb:b7:b1:da:cf:f7:8e:08:35:2b:ce:a6: 25:7a:aa:26:62:5c:a7:39:2a:0f:11:d7:c6:ed:4e: 71:f3:b3:b3:9e:87:0b:37:b4:e4:06:85:40:90:71: 7c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:77:9A:32:F6:D6:CA:0B:B5:8A:AC:71:8E:D7:3E:6E:26:5B:7D:55 X509v3 Authority Key Identifier: keyid:5E:78:64:2B:03:CC:37:E2:6F:D4:15:E7:D7:61:BE:48:47:36:C5:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7B89/41BE4F44D9A011F093130E0768D3641D/XnhkKwPMN-Jv1BXn12G-SEc2xWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnhkKwPMN-Jv1BXn12G-SEc2xWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7B89/41BE4F44D9A011F093130E0768D3641D/XnhkKwPMN-Jv1BXn12G-SEc2xWY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:1b:b8:0d:b0:8d:bc:eb:81:0b:f3:31:de:1e:13:95:77:79: 62:b4:1a:c0:83:8c:0e:6c:54:a7:f8:f6:8b:a1:b6:7f:ba:40: c2:02:32:06:1f:a5:37:4c:59:ea:c0:63:bc:d4:5d:19:f9:4e: 38:21:2a:bc:17:18:a6:c8:5e:d2:68:9e:c3:79:30:cf:43:cb: d7:a6:9e:0b:21:d3:04:d0:a3:57:fa:75:32:22:cf:9d:18:f7: f1:45:f9:a5:6e:08:ab:78:c6:c8:00:61:e8:83:ea:84:00:da: da:78:e0:4f:76:78:03:b5:b8:40:d7:92:97:77:51:99:35:f0: 46:14:5a:c2:4c:e0:86:25:6e:8f:54:ca:3d:7a:df:f6:e7:a9: df:9e:12:1a:16:fc:da:05:52:79:2d:04:91:48:d1:4b:7a:19: c9:96:85:82:fc:8e:29:7a:a3:b2:bd:c8:54:34:6c:e4:1b:27: 06:9e:a8:fc:4f:52:82:61:7f:73:47:16:39:19:9a:aa:55:b4: d7:37:d9:22:01:21:77:6f:26:a7:2c:7a:6a:1f:01:a1:35:7c: 29:4a:68:d1:1e:cf:cf:ba:c0:5d:d2:30:3d:6c:38:77:3c:a7: b5:77:d2:09:f9:8d:54:6c:24:6f:13:e0:0e:a3:7a:ad:02:50: 4c:b9:50:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdCODkxMTAvBgNVBAUTKDVFNzg2NDJCMDNDQzM3RTI2RkQ0MTVFN0Q3NjFCRTQ4 NDczNkM1NjYwHhcNMjYxMDE1MDgyMjU5WhcNMjYxMDIyMDgyMjU5WjAYMRYwFAYD VQQDEw02YWQwOGQ2NC0xYzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo93OxpRbUrMK4frjWW0FCyyWKbPMyw4NIbCip5c+x7x8I8NlN6MtQ0/7FGek Bx/YLnrumP8pul9c6L9BQBMm8/mmR3yIddsESY/RtpSRQlvnn/WskLRA02H9oQy8 oFyZJkbTERozrgqGWm4yo0K10fRLVjwaUdb3oR7166HuTzXerplnQqwcyWxPHdjV 2SONaYQfM1kxhwxeDtw+YkErHzGaU78mft2pYuAZdKrUdvIk1Ck8SYPDM8PuX+tM 5OzFiSTpPKQoaaGqUpVRKdjAl/Xk/Ejrt7Haz/eOCDUrzqYleqomYlynOSoPEdfG 7U5x87OznocLN7TkBoVAkHF8oQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDl3mjL2 1soLtYqscY7XPm4mW31VMB8GA1UdIwQYMBaAFF54ZCsDzDfib9QV59dhvkhHNsVm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0I4OS80MUJFNEY0NEQ5 QTAxMUYwOTMxMzBFMDc2OEQzNjQxRC9YbmhrS3dQTU4tSnYxQlhuMTJHLVNFYzJ4 V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1huaGtLd1BNTi1KdjFCWG4xMkctU0VjMnhXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0I4OS80MUJFNEY0NEQ5QTAxMUYwOTMxMzBFMDc2OEQzNjQxRC9YbmhrS3dQTU4t SnYxQlhuMTJHLVNFYzJ4V1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfhu4DbCNvOuBC/Mx3h4TlXd5YrQawIOMDmxUp/j2i6G2f7pAwgIyBh+lN0xZ 6sBjvNRdGflOOCEqvBcYpshe0miew3kwz0PL16aeCyHTBNCjV/p1MiLPnRj38UX5 pW4Iq3jGyABh6IPqhADa2njgT3Z4A7W4QNeSl3dRmTXwRhRawkzghiVuj1TKPXrf 9uep354SGhb82gVSeS0EkUjRS3oZyZaFgvyOKXqjsr3IVDRs5BsnBp6o/E9SgmF/ c0cWORmaqlW01zfZIgEhd28mpyx6ah8BoTV8KUpo0R7Pz7rAXdIwPWw4dzyntXfS CfmNVGwkbxPgDqN6rQJQTLlQHg== -----END CERTIFICATE-----Generated at Fri Oct 16 23:39:46 2026 by rpki-client