$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA23A/8D59A2E4582311F18D7F2C9EA7833773/CiXR8yHlCgvKx8HQfzGTl6ORAT8.mft File: CiXR8yHlCgvKx8HQfzGTl6ORAT8.mft (raw, json) Hash identifier: 8+VqlUH5fq5JZpPoj4GTdG2GIQRoEpTq4cABN6lmZHE= Subject key identifier: E2:C4:48:DA:70:23:FE:14:76:19:FC:80:D9:79:9A:AD:46:DF:78:B1 Authority key identifier: 0A:25:D1:F3:21:E5:0A:0B:CA:C7:C1:D0:7F:31:93:97:A3:91:01:3F Certificate issuer: /CN=A91EA23A/serialNumber=0A25D1F321E50A0BCAC7C1D07F319397A391013F Certificate serial: 56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiXR8yHlCgvKx8HQfzGTl6ORAT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA23A/8D59A2E4582311F18D7F2C9EA7833773/CiXR8yHlCgvKx8HQfzGTl6ORAT8.mft Manifest number: 4F Signing time: Tue 13 Oct 2026 09:10:14 +0000 Manifest this update: Tue 13 Oct 2026 09:10:13 +0000 Manifest next update: Tue 20 Oct 2026 09:10:13 +0000 Files and hashes: 1: CiXR8yHlCgvKx8HQfzGTl6ORAT8.crl (hash: zHo+oEXOW+om2Em1VBdKkgjT+QYGxbteEQ5O2nWfBzQ=) 2: A08CACAC631411F19BD88A887D47A888.roa (hash: cui5kt/ao4ZSMnSmpM+vFQ/6IaNn7ud21wvDYaj2E2c=) 3: 28140BB0B0E111F19AD90CA83211F970.roa (hash: fjC18ilBLVBqO47F+D+SM6LDqi09QTp22sC4WXLz5ik=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA23A/8D59A2E4582311F18D7F2C9EA7833773/CiXR8yHlCgvKx8HQfzGTl6ORAT8.crl rsync://rpki.apnic.net/member_repository/A91EA23A/8D59A2E4582311F18D7F2C9EA7833773/CiXR8yHlCgvKx8HQfzGTl6ORAT8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiXR8yHlCgvKx8HQfzGTl6ORAT8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 09:10:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA23A, serialNumber=0A25D1F321E50A0BCAC7C1D07F319397A391013F Validity Not Before: Oct 13 09:10:13 2026 GMT Not After : Oct 20 09:10:13 2026 GMT Subject: CN=6acdf575-4f68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9b:20:5e:30:d6:66:bc:57:65:23:61:3b:11: f1:11:4b:ed:6e:57:72:b3:a9:d9:a8:1c:86:e9:82: 12:c5:b2:d8:25:7c:c2:0a:29:4a:0a:b3:aa:52:2f: e6:d8:41:d5:b5:0f:ba:a0:7d:7c:36:de:d9:18:9e: e4:6e:cf:18:87:49:6c:72:27:96:2c:bb:f1:29:6a: 51:6e:f0:f8:31:5e:27:19:01:1a:32:c3:b3:48:4e: 18:9a:00:84:7d:6f:89:87:fa:37:be:57:a9:f1:1a: e7:78:8f:0d:53:2f:19:90:4d:6b:2f:31:f9:1b:c0: 44:26:0e:04:58:13:b7:d5:4d:b9:e6:04:fa:ea:e8: 12:f3:6f:f3:bf:10:18:38:6f:cb:77:75:ad:64:53: e9:4a:90:20:7a:4d:0d:e8:45:d9:29:b5:f7:1b:8d: 25:9d:f5:21:f6:7b:8b:0e:ad:be:15:e4:f1:25:8a: 6d:1c:af:25:7d:41:81:8d:29:8d:27:0f:dd:1c:43: 2f:55:35:9f:93:9b:7a:98:3b:eb:0e:e0:74:02:c0: a5:27:b9:70:a0:fd:76:88:dc:3c:a0:b1:46:47:cf: a4:16:04:93:3c:d7:23:24:b6:69:33:69:12:1b:de: 38:ff:8c:30:e0:39:22:d4:6a:63:cb:35:0a:5f:30: f5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:C4:48:DA:70:23:FE:14:76:19:FC:80:D9:79:9A:AD:46:DF:78:B1 X509v3 Authority Key Identifier: keyid:0A:25:D1:F3:21:E5:0A:0B:CA:C7:C1:D0:7F:31:93:97:A3:91:01:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA23A/8D59A2E4582311F18D7F2C9EA7833773/CiXR8yHlCgvKx8HQfzGTl6ORAT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiXR8yHlCgvKx8HQfzGTl6ORAT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA23A/8D59A2E4582311F18D7F2C9EA7833773/CiXR8yHlCgvKx8HQfzGTl6ORAT8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:07:fb:b8:f7:67:6a:e3:d3:36:7d:cc:0f:88:3e:d2:b8:65: 76:a1:2c:bb:ff:ee:59:2c:3d:54:cc:a7:3a:03:5a:87:82:bd: 78:c3:be:a1:9d:76:f0:a5:18:a9:f8:c8:e0:fa:e5:23:7a:76: 92:13:72:7c:4b:44:77:a9:f2:fb:a5:39:ec:fe:2b:b2:8c:93: a5:48:8b:bb:4a:b0:dd:d0:59:03:64:a0:c5:26:e2:38:04:94: b9:9d:ec:80:1a:41:53:28:20:31:98:75:29:e1:68:72:2b:47: e7:26:b6:19:bd:f9:cd:dd:e8:d3:14:a5:6c:46:63:1a:0f:7c: 96:d6:bd:65:fe:a3:60:fc:60:7e:f5:43:5b:af:bf:cc:eb:30: 79:f6:0e:e2:f7:92:31:6a:75:c7:85:94:f9:9d:19:a2:d9:4c: a8:d3:1d:5f:aa:0f:72:b8:16:10:f4:53:5d:4f:31:08:b5:cb: dc:ab:8d:b5:2b:bb:56:57:91:92:37:cc:82:b0:2d:de:51:1f: 6f:23:98:4f:2a:0a:a5:57:7e:e9:74:f8:55:25:db:4a:32:f0: 83:bc:e7:5e:a5:ef:6b:97:00:0f:27:35:2a:90:63:3f:18:21: 9a:8c:cd:0c:be:5d:db:91:2b:d2:f9:54:5b:eb:50:f6:df:84: 7c:bf:d0:a4 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QTIzQTExMC8GA1UEBRMoMEEyNUQxRjMyMUU1MEEwQkNBQzdDMUQwN0YzMTkzOTdB MzkxMDEzRjAeFw0yNjEwMTMwOTEwMTNaFw0yNjEwMjAwOTEwMTNaMBgxFjAUBgNV BAMTDTZhY2RmNTc1LTRmNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCdmyBeMNZmvFdlI2E7EfERS+1uV3KzqdmoHIbpghLFstglfMIKKUoKs6pSL+bY QdW1D7qgfXw23tkYnuRuzxiHSWxyJ5Ysu/EpalFu8PgxXicZARoyw7NIThiaAIR9 b4mH+je+V6nxGud4jw1TLxmQTWsvMfkbwEQmDgRYE7fVTbnmBPrq6BLzb/O/EBg4 b8t3da1kU+lKkCB6TQ3oRdkptfcbjSWd9SH2e4sOrb4V5PElim0cryV9QYGNKY0n D90cQy9VNZ+Tm3qYO+sO4HQCwKUnuXCg/XaI3DygsUZHz6QWBJM81yMktmkzaRIb 3jj/jDDgOSLUamPLNQpfMPWbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU4sRI2nAj /hR2GfyA2XmarUbfeLEwHwYDVR0jBBgwFoAUCiXR8yHlCgvKx8HQfzGTl6ORAT8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBMjNBLzhENTlBMkU0NTgy MzExRjE4RDdGMkM5RUE3ODMzNzczL0NpWFI4eUhsQ2d2S3g4SFFmekdUbDZPUkFU OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ2lYUjh5SGxDZ3ZLeDhIUWZ6R1RsNk9SQVQ4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB MjNBLzhENTlBMkU0NTgyMzExRjE4RDdGMkM5RUE3ODMzNzczL0NpWFI4eUhsQ2d2 S3g4SFFmekdUbDZPUkFUOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAXB/u492dq49M2fcwPiD7SuGV2oSy7/+5ZLD1UzKc6A1qHgr14w76hnXbwpRip +Mjg+uUjenaSE3J8S0R3qfL7pTns/iuyjJOlSIu7SrDd0FkDZKDFJuI4BJS5neyA GkFTKCAxmHUp4WhyK0fnJrYZvfnN3ejTFKVsRmMaD3yW1r1l/qNg/GB+9UNbr7/M 6zB59g7i95IxanXHhZT5nRmi2Uyo0x1fqg9yuBYQ9FNdTzEItcvcq421K7tWV5GS N8yCsC3eUR9vI5hPKgqlV37pdPhVJdtKMvCDvOdepe9rlwAPJzUqkGM/GCGajM0M vl3bkSvS+VRb61D234R8v9Ck -----END CERTIFICATE-----Generated at Wed Oct 14 04:13:06 2026 by rpki-client