$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft File: XhBeDvkNGLn6S4j640EMah3vcZA.mft (raw, json) Hash identifier: d9bSFI6zsx8Hj8dz7UBwnFcRKZUy3Mom4DhBk5FY+fQ= Subject key identifier: C5:56:B7:F1:7B:DF:3F:27:24:84:D3:DB:7D:8D:62:EC:0A:2E:19:FA Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90 Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190 Certificate serial: 0D28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft Manifest number: 0BC0 Signing time: Tue 06 Oct 2026 19:43:53 +0000 Manifest this update: Tue 06 Oct 2026 19:43:52 +0000 Manifest next update: Tue 13 Oct 2026 19:43:52 +0000 Files and hashes: 1: XhBeDvkNGLn6S4j640EMah3vcZA.crl (hash: VnXvOAS+SK1c6Fz7oRUg05tO457WkA8RU5bIl2GPGgc=) 2: DE2C490EFDDA11F08A9BDF026F6F56BC.roa (hash: dMqL0RXvcl4t2gqq+Dorzer6i+VmVso2r8Pwzf3DLMs=) 3: FA6E449673E611F1867DB2D08DA30FBC.roa (hash: +tW7tHejIYKoYKqOq2smvtzDYp77mmrOMwvb3pDQW94=) 4: 37778C1E130A11F18BFDFDDD163D8C67.roa (hash: qD4FzBM9GJo1gDlcFGgv2r0jyPu0ckC4NLxrIlbLUp0=) 5: F0DB98A21BA811F1919C26950A3D8C67.roa (hash: RtmyRR3d6OPwYkVSdWWWffif6qpbEZX2ROCZDUrt4HY=) 6: 7E4EFF5473E611F1BA32CE558DA30FBC.roa (hash: w3nJAvkXJEIzmicXwGGQBI76P6FyACHze3HfaF8mchk=) 7: 6DB93158AB7911F1BECE43F54111F970.roa (hash: OzMlAYR7VUv4i4paT536pX3byadHC+Tpz5thN4DdoSo=) 8: 89135068FD2911F09BBA873E426F56BC.roa (hash: G+CGpJq2wyuPyQGaM4s2D9OHsywLygPeDy8KgTJbqJY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 19:43:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3368 (0xd28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F69E7, serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190 Validity Not Before: Oct 6 19:43:52 2026 GMT Not After : Oct 13 19:43:52 2026 GMT Subject: CN=6ac54f79-3c03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f3:c6:e8:b0:9f:8d:9e:7a:4d:19:81:8a:16: 00:06:b3:33:17:5e:be:77:93:3a:1b:b3:d1:7a:98: 76:72:48:fd:b0:4b:a0:d8:96:6d:c9:67:03:a0:a8: e6:73:fb:a4:e1:8b:4b:e8:b9:83:09:62:89:61:78: 21:03:f8:48:b0:60:4b:15:b9:2c:50:fb:97:b8:1d: 75:58:83:54:10:a9:e1:f6:00:ea:9f:f0:a2:c7:2c: 5d:31:ac:95:a2:23:18:ce:f2:e2:03:71:2d:25:4c: dc:4f:d9:37:cd:9b:72:64:e0:1a:30:cb:76:71:e2: f6:0f:16:74:75:1a:f5:73:4b:5a:9a:2e:26:bc:95: 6c:a4:2f:5b:3f:e9:77:e7:82:58:e0:37:77:a2:5c: 13:a9:c0:03:69:c9:14:b7:9a:85:f0:df:f8:0c:d2: d9:b2:79:19:50:59:ba:dd:88:50:b1:e6:5c:9b:af: d8:b1:70:da:ec:c6:9a:e9:e5:7e:99:05:f4:9d:1f: 78:7a:ce:65:5b:6b:c7:fe:4a:ef:87:f5:98:5c:b0: 65:e9:45:60:d8:98:dc:09:c2:d9:93:fd:66:4d:f7: 06:bd:14:e2:cb:ad:bc:f6:24:53:33:9d:28:52:37: 56:ea:68:04:b0:5c:95:ca:a0:5b:dc:5b:b2:54:2d: 66:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:56:B7:F1:7B:DF:3F:27:24:84:D3:DB:7D:8D:62:EC:0A:2E:19:FA X509v3 Authority Key Identifier: keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:a6:ae:96:de:67:25:57:ab:56:9d:92:45:2b:e9:90:5f:6d: 1f:27:c5:5f:6e:fb:5d:2b:b1:69:49:ac:c0:f0:61:71:28:de: 93:a6:11:2d:73:a2:e1:de:4f:52:1e:5f:22:00:7d:65:63:76: 62:66:6b:48:bc:fc:a7:93:ea:eb:88:01:0a:7d:c3:ce:f2:af: 01:07:24:ec:ec:0d:30:60:36:c4:ca:0e:1f:16:b8:c9:30:1e: 79:39:11:59:1b:c8:b0:66:cf:22:7a:f9:f5:38:5a:bc:7c:62: 2d:1e:7e:26:76:48:00:0a:bb:a6:46:a6:c9:2f:54:07:5f:05: d2:5e:22:44:1a:7a:0a:d2:43:c9:19:0c:21:5d:82:53:51:90: 26:66:92:58:7d:b2:ff:50:19:78:d8:12:ff:38:c2:97:4b:02: 90:ee:60:77:c9:bf:90:1c:f4:31:d9:81:de:2b:74:fc:99:5f: b6:ca:70:61:e8:88:a6:93:25:01:31:41:35:a1:5a:ea:9e:01: ef:30:bd:b4:49:bd:1b:1e:47:62:b5:43:cb:94:28:b6:2a:71: f7:19:64:50:56:8a:14:bc:56:a4:d7:f4:98:53:a0:ea:a2:99: 46:a2:b6:71:9e:f3:99:6d:54:27:af:df:41:75:19:c6:89:cb: 8c:63:3c:56 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDSgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY5RTcxMTAvBgNVBAUTKDVFMTA1RTBFRjkwRDE4QjlGQTRCODhGQUUzNDEwQzZB MURFRjcxOTAwHhcNMjYxMDA2MTk0MzUyWhcNMjYxMDEzMTk0MzUyWjAYMRYwFAYD VQQDEw02YWM1NGY3OS0zYzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwvPG6LCfjZ56TRmBihYABrMzF16+d5M6G7PReph2ckj9sEug2JZtyWcDoKjm c/uk4YtL6LmDCWKJYXghA/hIsGBLFbksUPuXuB11WINUEKnh9gDqn/CixyxdMayV oiMYzvLiA3EtJUzcT9k3zZtyZOAaMMt2ceL2DxZ0dRr1c0tami4mvJVspC9bP+l3 54JY4Dd3olwTqcADackUt5qF8N/4DNLZsnkZUFm63YhQseZcm6/YsXDa7Maa6eV+ mQX0nR94es5lW2vH/krvh/WYXLBl6UVg2JjcCcLZk/1mTfcGvRTiy6289iRTM50o UjdW6mgEsFyVyqBb3FuyVC1maQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMVWt/F7 3z8nJITT232NYuwKLhn6MB8GA1UdIwQYMBaAFF4QXg75DRi5+kuI+uNBDGod73GQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjlFNy80NkFBRDZCMjkw NDAxMUVBQTY4OEJFNDVDNEY5QUUwMi9YaEJlRHZrTkdMbjZTNGo2NDBFTWFoM3Zj WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hoQmVEdmtOR0xuNlM0ajY0MEVNYWgzdmNaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjlFNy80NkFBRDZCMjkwNDAxMUVBQTY4OEJFNDVDNEY5QUUwMi9YaEJlRHZrTkdM bjZTNGo2NDBFTWFoM3ZjWkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm6ault5nJVerVp2SRSvpkF9tHyfFX277XSuxaUmswPBhcSjek6YRLXOi4d5P Uh5fIgB9ZWN2YmZrSLz8p5Pq64gBCn3DzvKvAQck7OwNMGA2xMoOHxa4yTAeeTkR WRvIsGbPInr59ThavHxiLR5+JnZIAAq7pkamyS9UB18F0l4iRBp6CtJDyRkMIV2C U1GQJmaSWH2y/1AZeNgS/zjCl0sCkO5gd8m/kBz0MdmB3it0/JlftspwYeiIppMl ATFBNaFa6p4B7zC9tEm9Gx5HYrVDy5Qotipx9xlkUFaKFLxWpNf0mFOg6qKZRqK2 cZ7zmW1UJ6/fQXUZxonLjGM8Vg== -----END CERTIFICATE-----Generated at Thu Oct 8 17:16:01 2026 by rpki-client