$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft File: XhBeDvkNGLn6S4j640EMah3vcZA.mft (raw, json) Hash identifier: A3cy4rrCyzwo+FxZxTrPUOzF4Rc6oE0ExcUg6PKIa/I= Subject key identifier: 65:D7:A4:78:D0:EF:7E:00:07:BB:8E:46:E0:9E:D4:49:2D:41:A6:55 Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90 Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190 Certificate serial: 0D2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft Manifest number: 0BC2 Signing time: Sat 10 Oct 2026 19:40:24 +0000 Manifest this update: Sat 10 Oct 2026 19:40:24 +0000 Manifest next update: Sat 17 Oct 2026 19:40:24 +0000 Files and hashes: 1: XhBeDvkNGLn6S4j640EMah3vcZA.crl (hash: Df99qKGQMGV7VUS+WJopq4umleNi6w7go9utNLiNlUY=) 2: 89135068FD2911F09BBA873E426F56BC.roa (hash: G+CGpJq2wyuPyQGaM4s2D9OHsywLygPeDy8KgTJbqJY=) 3: 6DB93158AB7911F1BECE43F54111F970.roa (hash: OzMlAYR7VUv4i4paT536pX3byadHC+Tpz5thN4DdoSo=) 4: F0DB98A21BA811F1919C26950A3D8C67.roa (hash: RtmyRR3d6OPwYkVSdWWWffif6qpbEZX2ROCZDUrt4HY=) 5: 37778C1E130A11F18BFDFDDD163D8C67.roa (hash: qD4FzBM9GJo1gDlcFGgv2r0jyPu0ckC4NLxrIlbLUp0=) 6: FA6E449673E611F1867DB2D08DA30FBC.roa (hash: +tW7tHejIYKoYKqOq2smvtzDYp77mmrOMwvb3pDQW94=) 7: 7E4EFF5473E611F1BA32CE558DA30FBC.roa (hash: w3nJAvkXJEIzmicXwGGQBI76P6FyACHze3HfaF8mchk=) 8: DE2C490EFDDA11F08A9BDF026F6F56BC.roa (hash: dMqL0RXvcl4t2gqq+Dorzer6i+VmVso2r8Pwzf3DLMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 19:40:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3370 (0xd2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F69E7, serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190 Validity Not Before: Oct 10 19:40:24 2026 GMT Not After : Oct 17 19:40:24 2026 GMT Subject: CN=6aca94a8-ccc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cf:00:53:d9:8b:a7:70:ac:34:71:a1:f5:cd: 72:7e:9d:f1:f9:89:e7:19:44:ed:70:2d:85:11:e1: fc:86:42:cf:37:07:3b:8c:e3:c6:f5:58:ca:80:ab: 62:dc:a3:92:c1:8b:9f:3c:2a:0e:93:ec:81:2e:a1: fa:84:c5:47:97:ca:af:73:76:a1:5d:7b:eb:49:83: 00:fd:96:5c:96:bb:89:e6:bf:f6:fb:08:14:ff:5f: e0:57:70:56:e3:cf:cc:d8:a3:a7:b2:88:36:5d:44: 6c:9f:9f:9c:63:ac:fe:43:b3:03:b1:03:55:ff:a8: 40:f8:7d:f9:62:50:a9:11:c3:a7:ff:f3:ea:4c:36: 44:ff:00:20:3d:1d:5e:8f:f7:f1:d9:a8:c9:4f:9c: a4:14:bb:1f:c1:0d:54:a5:76:77:87:2f:3a:79:4a: c4:0a:ba:99:74:76:a7:dc:a8:be:30:6e:55:9d:95: 44:29:d4:72:b9:6a:f6:d6:a7:ba:e8:f5:41:1c:ae: ed:5d:37:da:23:36:5a:6d:24:51:77:43:05:a0:c9: 68:39:47:f4:3f:b3:89:2b:14:d6:83:21:f2:13:16: 6a:74:44:de:ca:f6:b0:94:13:ae:c2:b0:51:8c:11: 9c:e4:58:b3:12:02:a3:ce:73:11:06:0e:e8:fa:e4: 29:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:D7:A4:78:D0:EF:7E:00:07:BB:8E:46:E0:9E:D4:49:2D:41:A6:55 X509v3 Authority Key Identifier: keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:68:5d:d2:50:18:0e:d2:ae:8e:03:40:14:ad:66:36:87:07: 4b:9e:05:61:05:77:0e:fa:26:17:05:c3:b2:e2:fd:cd:d2:c3: cb:2b:3f:82:c5:56:12:c0:80:1c:f8:fe:91:79:b2:88:19:da: d8:32:06:ee:08:75:f0:b2:a2:a8:bd:5d:56:b4:fd:6a:a3:48: 5a:ba:7a:e9:ca:98:6d:41:cc:2d:2c:20:95:11:ab:63:0b:74: bc:a2:11:31:25:00:65:14:84:f5:6c:91:c2:3c:57:0c:1c:8c: f2:74:92:3c:e1:5f:9a:48:d8:2d:9c:74:94:8b:2d:52:2d:cf: 79:ea:40:00:f5:af:dc:48:12:3f:3a:be:23:49:da:98:2f:a6: 30:07:7d:23:83:9a:36:e5:39:a1:e5:a8:c0:8f:3b:a9:e4:81: a5:5d:fc:4f:28:4c:e3:7d:28:11:30:32:08:e2:31:8d:ee:71: 19:49:c7:fb:cd:90:c6:14:fa:8c:b6:58:6c:49:af:d6:00:aa: c0:c6:31:54:c0:70:10:8d:8c:26:ee:6a:c3:5a:7f:e5:b8:cf: eb:37:20:b0:72:02:0a:48:3f:6c:22:76:6c:d7:f4:f0:1e:10: 73:88:81:f4:56:4d:ce:66:85:c9:14:cc:ec:cd:c4:34:2a:22: d3:f1:3e:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDSowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY5RTcxMTAvBgNVBAUTKDVFMTA1RTBFRjkwRDE4QjlGQTRCODhGQUUzNDEwQzZB MURFRjcxOTAwHhcNMjYxMDEwMTk0MDI0WhcNMjYxMDE3MTk0MDI0WjAYMRYwFAYD VQQDEw02YWNhOTRhOC1jY2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsM8AU9mLp3CsNHGh9c1yfp3x+YnnGUTtcC2FEeH8hkLPNwc7jOPG9VjKgKti 3KOSwYufPCoOk+yBLqH6hMVHl8qvc3ahXXvrSYMA/ZZclruJ5r/2+wgU/1/gV3BW 48/M2KOnsog2XURsn5+cY6z+Q7MDsQNV/6hA+H35YlCpEcOn//PqTDZE/wAgPR1e j/fx2ajJT5ykFLsfwQ1UpXZ3hy86eUrECrqZdHan3Ki+MG5VnZVEKdRyuWr21qe6 6PVBHK7tXTfaIzZabSRRd0MFoMloOUf0P7OJKxTWgyHyExZqdETeyvawlBOuwrBR jBGc5FizEgKjznMRBg7o+uQpwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGXXpHjQ 734AB7uORuCe1EktQaZVMB8GA1UdIwQYMBaAFF4QXg75DRi5+kuI+uNBDGod73GQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjlFNy80NkFBRDZCMjkw NDAxMUVBQTY4OEJFNDVDNEY5QUUwMi9YaEJlRHZrTkdMbjZTNGo2NDBFTWFoM3Zj WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hoQmVEdmtOR0xuNlM0ajY0MEVNYWgzdmNaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjlFNy80NkFBRDZCMjkwNDAxMUVBQTY4OEJFNDVDNEY5QUUwMi9YaEJlRHZrTkdM bjZTNGo2NDBFTWFoM3ZjWkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHGhd0lAYDtKujgNAFK1mNocHS54FYQV3DvomFwXDsuL9zdLDyys/gsVWEsCA HPj+kXmyiBna2DIG7gh18LKiqL1dVrT9aqNIWrp66cqYbUHMLSwglRGrYwt0vKIR MSUAZRSE9WyRwjxXDByM8nSSPOFfmkjYLZx0lIstUi3PeepAAPWv3EgSPzq+I0na mC+mMAd9I4OaNuU5oeWowI87qeSBpV38TyhM430oETAyCOIxje5xGUnH+82QxhT6 jLZYbEmv1gCqwMYxVMBwEI2MJu5qw1p/5bjP6zcgsHICCkg/bCJ2bNf08B4Qc4iB 9FZNzmaFyRTM7M3ENCoi0/E+fA== -----END CERTIFICATE-----Generated at Sat Oct 10 23:11:49 2026 by rpki-client