$ rpki-client -vvvf rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft File: xlWPj8DY0EKe14fq-We-_HoJ3BM.mft (raw, json) Hash identifier: PTtxjq9qTkr0mKwa9pLvu/flW+K7vKwPWIWDp+K2Hgs= Subject key identifier: ED:3F:1A:A1:42:6A:8F:8F:E1:C1:A9:73:98:77:BF:59:C5:C0:E5:8F Authority key identifier: C6:55:8F:8F:C0:D8:D0:42:9E:D7:87:EA:F9:67:BE:FC:7A:09:DC:13 Certificate issuer: /CN=A91383B0/serialNumber=C6558F8FC0D8D0429ED787EAF967BEFC7A09DC13 Certificate serial: 2CA9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlWPj8DY0EKe14fq-We-_HoJ3BM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft Manifest number: 2CA9 Signing time: Sat 10 Oct 2026 15:30:11 +0000 Manifest this update: Sat 10 Oct 2026 15:30:11 +0000 Manifest next update: Sat 17 Oct 2026 15:30:11 +0000 Files and hashes: 1: xlWPj8DY0EKe14fq-We-_HoJ3BM.crl (hash: VxlRcsnejL523Q8CPBL8TlgPG9+C2t/NCg5uiAszKZQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.crl rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlWPj8DY0EKe14fq-We-_HoJ3BM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 15:30:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11433 (0x2ca9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91383B0, serialNumber=C6558F8FC0D8D0429ED787EAF967BEFC7A09DC13 Validity Not Before: Oct 10 15:30:11 2026 GMT Not After : Oct 17 15:30:11 2026 GMT Subject: CN=6aca5a03-d741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:11:16:a3:45:d6:36:ac:6c:3c:a0:fe:2b:04: af:8e:84:a3:87:1c:ff:d0:fd:4a:cd:2f:79:97:b2: e5:b5:c4:0b:0e:78:de:36:6f:1e:cf:a7:e0:50:69: 85:d9:72:28:e8:f2:e1:2d:38:6c:9d:fe:13:67:d1: 2b:2f:58:a2:3a:12:ac:5a:e9:d8:a3:e8:e9:45:ae: 05:99:79:ec:de:83:d3:2c:89:87:f8:ea:e6:ff:21: 59:3f:8e:51:dc:26:1f:cd:6b:e9:1e:00:7b:17:91: 33:9d:8c:c2:08:02:4a:ad:4e:ec:52:54:e0:1b:0d: 61:f2:86:17:28:43:93:65:fc:8f:85:a6:43:aa:24: 3d:94:bf:76:75:66:d1:a8:70:99:0c:f5:09:0a:40: aa:38:0c:77:1c:49:be:d7:a4:f8:be:59:76:89:53: 80:89:02:bc:56:8d:c2:08:68:28:a4:83:d0:73:1c: 14:6d:aa:46:c0:3a:06:41:eb:22:98:08:ce:ac:e6: 08:41:f8:34:6d:3b:53:16:1a:51:86:fc:a4:aa:2f: 6c:87:bc:37:0e:8c:77:e6:2f:9c:17:e3:59:ba:33: 16:6b:e7:a0:6f:a3:41:d0:03:30:d9:75:ff:71:56: 7d:42:a2:10:69:e0:7c:2b:b8:7d:2e:1f:db:fe:67: 54:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:3F:1A:A1:42:6A:8F:8F:E1:C1:A9:73:98:77:BF:59:C5:C0:E5:8F X509v3 Authority Key Identifier: keyid:C6:55:8F:8F:C0:D8:D0:42:9E:D7:87:EA:F9:67:BE:FC:7A:09:DC:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlWPj8DY0EKe14fq-We-_HoJ3BM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:a1:50:88:91:db:7c:41:29:b5:6b:3b:c8:12:7d:e8:4b:d1: 17:9d:d9:3e:04:f8:a2:c8:3e:f3:66:2e:59:f1:58:e1:dd:94: dc:98:15:3b:b3:00:e0:97:a6:07:8c:90:c8:3e:dd:54:01:1a: 1b:eb:62:e0:c8:e6:12:37:45:b3:45:90:1f:0f:e3:79:b1:c0: f6:7d:e5:ed:41:9e:c7:1d:0b:fd:46:a6:56:59:bc:2a:2c:6a: c2:a6:93:37:3c:c4:cd:4d:e4:4f:dd:ee:81:f2:70:d2:6d:9a: a7:a0:7d:eb:ed:94:bd:82:6d:88:6d:44:71:96:98:0c:07:70: 4a:f4:73:c3:cf:2d:49:77:c7:2e:eb:75:44:ec:d2:cd:ff:9e: ab:57:ab:08:b7:87:9e:49:ca:94:66:e4:36:cd:b0:d5:ae:5c: da:77:30:7d:1b:e5:97:2b:cc:a7:6a:93:e9:5a:55:ba:36:36: 76:ee:24:c6:de:05:92:12:93:93:d0:5d:7c:3d:cb:55:eb:b0: c7:5f:a0:df:16:33:46:b8:52:3d:cb:ee:0d:e8:79:f0:62:65: 4f:9b:39:4f:2a:b2:b3:01:4d:30:62:12:b8:12:1a:aa:60:e4: d6:cd:c6:b0:f6:07:0a:61:2c:dd:7a:05:fd:ec:12:35:70:3d: 30:60:2e:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICLKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgzQjAxMTAvBgNVBAUTKEM2NTU4RjhGQzBEOEQwNDI5RUQ3ODdFQUY5NjdCRUZD N0EwOURDMTMwHhcNMjYxMDEwMTUzMDExWhcNMjYxMDE3MTUzMDExWjAYMRYwFAYD VQQDEw02YWNhNWEwMy1kNzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtxEWo0XWNqxsPKD+KwSvjoSjhxz/0P1KzS95l7LltcQLDnjeNm8ez6fgUGmF 2XIo6PLhLThsnf4TZ9ErL1iiOhKsWunYo+jpRa4FmXns3oPTLImH+Orm/yFZP45R 3CYfzWvpHgB7F5EznYzCCAJKrU7sUlTgGw1h8oYXKEOTZfyPhaZDqiQ9lL92dWbR qHCZDPUJCkCqOAx3HEm+16T4vll2iVOAiQK8Vo3CCGgopIPQcxwUbapGwDoGQesi mAjOrOYIQfg0bTtTFhpRhvykqi9sh7w3Dox35i+cF+NZujMWa+egb6NB0AMw2XX/ cVZ9QqIQaeB8K7h9Lh/b/mdUfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO0/GqFC ao+P4cGpc5h3v1nFwOWPMB8GA1UdIwQYMBaAFMZVj4/A2NBCnteH6vlnvvx6CdwT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODNCMC80ODQ2MDRCMkRC QzIxMUUzOEY1NTE0NEY1OTExRUEzMi94bFdQajhEWTBFS2UxNGZxLVdlLV9Ib0oz Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hsV1BqOERZMEVLZTE0ZnEtV2UtX0hvSjNCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODNCMC80ODQ2MDRCMkRCQzIxMUUzOEY1NTE0NEY1OTExRUEzMi94bFdQajhEWTBF S2UxNGZxLVdlLV9Ib0ozQk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuaFQiJHbfEEptWs7yBJ96EvRF53ZPgT4osg+82YuWfFY4d2U3JgVO7MA4Jem B4yQyD7dVAEaG+ti4MjmEjdFs0WQHw/jebHA9n3l7UGexx0L/UamVlm8KixqwqaT NzzEzU3kT93ugfJw0m2ap6B96+2UvYJtiG1EcZaYDAdwSvRzw88tSXfHLut1ROzS zf+eq1erCLeHnknKlGbkNs2w1a5c2ncwfRvllyvMp2qT6VpVujY2du4kxt4FkhKT k9BdfD3LVeuwx1+g3xYzRrhSPcvuDeh58GJlT5s5TyqyswFNMGISuBIaqmDk1s3G sPYHCmEs3XoF/ewSNXA9MGAueg== -----END CERTIFICATE-----Generated at Sun Oct 11 19:31:46 2026 by rpki-client