$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft File: rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft (raw, json) Hash identifier: g+0uif8m3s6PJt8WHGC5xEDRR+QJeXFvUGCYxog7C8c= Subject key identifier: E7:45:0B:7C:95:11:03:3D:2D:44:1D:B1:DB:B7:13:AB:1A:41:5F:BE Authority key identifier: AD:73:AD:B9:14:21:38:62:ED:8E:14:D7:70:69:F4:74:D8:3C:C8:F5 Certificate issuer: /CN=A91EE735/serialNumber=AD73ADB914213862ED8E14D77069F474D83CC8F5 Certificate serial: 0A87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXOtuRQhOGLtjhTXcGn0dNg8yPU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft Manifest number: 0A71 Signing time: Sat 10 Oct 2026 19:42:10 +0000 Manifest this update: Sat 10 Oct 2026 19:42:10 +0000 Manifest next update: Sat 17 Oct 2026 19:42:10 +0000 Files and hashes: 1: rXOtuRQhOGLtjhTXcGn0dNg8yPU.crl (hash: f6O5dyBfU4Lb9S5vj1gEegZKD0i2dII6VykGOopv8wM=) 2: E7F141609E9911EBB4117632C4F9AE02.roa (hash: BWMRKEzqCdvPb4VJWbmdWJfwpPUSHKLOetVFGH3P10s=) 3: 7AEEA290829E11F0975FC440C4F9AE02.roa (hash: NJ63YJDh2rXhGyC41ze8yWJyNkK6DiJWZj8EZ4mClWY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.crl rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXOtuRQhOGLtjhTXcGn0dNg8yPU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 19:42:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2695 (0xa87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE735, serialNumber=AD73ADB914213862ED8E14D77069F474D83CC8F5 Validity Not Before: Oct 10 19:42:10 2026 GMT Not After : Oct 17 19:42:10 2026 GMT Subject: CN=6aca9512-11b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a3:75:e4:26:e1:ed:8d:7d:58:c6:3d:5b:74: fd:b1:15:8a:50:0a:92:07:97:54:0b:63:b6:74:f1: 7f:1a:ea:e8:bb:58:8f:66:ad:ec:1d:a7:3e:7c:67: 9f:47:8a:0f:1b:dd:8e:f9:ab:d7:19:ce:86:5a:eb: 59:20:20:43:33:da:7b:16:20:1a:72:8f:3f:05:c5: c3:99:e5:09:f7:0c:16:cc:ea:e9:ae:33:10:42:d2: 24:a8:f3:fd:86:85:93:57:30:c6:12:08:3e:e7:1a: 9d:5a:77:e4:13:0d:08:98:d3:f7:22:37:60:90:8c: 1b:50:5d:38:dd:68:46:bc:4e:33:e1:9c:23:52:ce: 81:59:28:f3:50:f7:5c:31:e4:56:22:bc:ee:f5:36: aa:f7:cd:50:be:0b:3b:bc:c8:f3:32:e3:4e:01:fa: 21:26:f4:37:56:c6:ec:49:25:e4:c7:ef:27:2d:83: 86:ba:03:27:d8:cf:57:65:5f:37:8f:72:04:c0:f8: a9:e2:93:9f:16:1a:c2:45:1d:67:37:92:f5:93:fb: 50:fa:2b:7f:51:c0:2b:5c:70:de:b7:f2:0d:f9:db: 51:39:03:08:38:e6:44:d8:19:4f:f2:85:86:bf:30: 8c:d5:f4:6c:6f:94:67:ff:24:86:22:53:bc:47:0a: cf:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:45:0B:7C:95:11:03:3D:2D:44:1D:B1:DB:B7:13:AB:1A:41:5F:BE X509v3 Authority Key Identifier: keyid:AD:73:AD:B9:14:21:38:62:ED:8E:14:D7:70:69:F4:74:D8:3C:C8:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXOtuRQhOGLtjhTXcGn0dNg8yPU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:85:cd:15:0a:8b:b7:74:99:a0:fe:17:26:e0:f3:83:1e:7f: 5a:db:69:7f:cd:63:bd:58:23:af:98:c5:44:81:a4:46:08:17: 22:0e:ba:b0:e2:fb:87:68:14:66:ec:2f:ea:53:32:48:48:cb: dd:c8:a5:9b:fe:73:77:11:4a:12:f2:27:90:f0:bb:37:6b:ad: 27:8c:9d:83:b0:7a:da:00:6a:92:52:0a:ce:6c:0a:38:ab:b6: ab:23:af:57:bc:d2:74:59:3f:e4:6d:3e:ff:50:e5:a6:6f:f6: a6:32:a8:8d:b8:e0:b7:97:16:f2:e4:c9:ba:f5:13:cd:5e:63: 00:6b:1b:1c:2e:21:25:b4:c4:85:fd:5e:87:3b:cb:8b:76:90: 6d:fc:d8:1a:65:94:06:09:5e:69:0d:a4:8b:4e:68:d8:5d:dc: 1f:ec:0b:2a:2b:f3:84:b3:99:4e:e7:8c:0e:24:2f:12:ed:41: e0:a1:3f:a8:9e:73:fe:6e:11:27:24:4d:66:f7:59:1b:d3:4c: e8:0f:07:e8:8e:72:09:6e:15:4f:ef:13:08:ed:8d:92:c7:40: d1:32:dd:0a:4a:7d:57:a4:b4:e9:a2:e8:eb:3f:77:dd:75:de: 3c:2c:cd:93:c6:5d:51:72:df:b9:c3:f5:45:09:10:97:66:62: d4:e3:74:2f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUU3MzUxMTAvBgNVBAUTKEFENzNBREI5MTQyMTM4NjJFRDhFMTRENzcwNjlGNDc0 RDgzQ0M4RjUwHhcNMjYxMDEwMTk0MjEwWhcNMjYxMDE3MTk0MjEwWjAYMRYwFAYD VQQDEw02YWNhOTUxMi0xMWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1KN15Cbh7Y19WMY9W3T9sRWKUAqSB5dUC2O2dPF/Gurou1iPZq3sHac+fGef R4oPG92O+avXGc6GWutZICBDM9p7FiAaco8/BcXDmeUJ9wwWzOrprjMQQtIkqPP9 hoWTVzDGEgg+5xqdWnfkEw0ImNP3IjdgkIwbUF043WhGvE4z4ZwjUs6BWSjzUPdc MeRWIrzu9Taq981Qvgs7vMjzMuNOAfohJvQ3VsbsSSXkx+8nLYOGugMn2M9XZV83 j3IEwPip4pOfFhrCRR1nN5L1k/tQ+it/UcArXHDet/IN+dtROQMIOOZE2BlP8oWG vzCM1fRsb5Rn/ySGIlO8RwrPIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOdFC3yV EQM9LUQdsdu3E6saQV++MB8GA1UdIwQYMBaAFK1zrbkUIThi7Y4U13Bp9HTYPMj1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTczNS9FOEU2NjdDQTk0 QkUxMUVBOTg0RkFENThDNEY5QUUwMi9yWE90dVJRaE9HTHRqaFRYY0duMGROZzh5 UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JYT3R1UlFoT0dMdGpoVFhjR24wZE5nOHlQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTczNS9FOEU2NjdDQTk0QkUxMUVBOTg0RkFENThDNEY5QUUwMi9yWE90dVJRaE9H THRqaFRYY0duMGROZzh5UFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm4XNFQqLt3SZoP4XJuDzgx5/Wttpf81jvVgjr5jFRIGkRggXIg66sOL7h2gU Zuwv6lMySEjL3cilm/5zdxFKEvInkPC7N2utJ4ydg7B62gBqklIKzmwKOKu2qyOv V7zSdFk/5G0+/1Dlpm/2pjKojbjgt5cW8uTJuvUTzV5jAGsbHC4hJbTEhf1ehzvL i3aQbfzYGmWUBgleaQ2ki05o2F3cH+wLKivzhLOZTueMDiQvEu1B4KE/qJ5z/m4R JyRNZvdZG9NM6A8H6I5yCW4VT+8TCO2NksdA0TLdCkp9V6S06aLo6z933XXePCzN k8ZdUXLfucP1RQkQl2Zi1ON0Lw== -----END CERTIFICATE-----Generated at Sun Oct 11 19:36:00 2026 by rpki-client