$ rpki-client -vvvf rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft File: XW8me3qjzDZHyTE7nux9aaFnOVg.mft (raw, json) Hash identifier: CgXYyRsmiPWM2IItN5K14kSTNN8qjSTe+LyopQJATZ8= Subject key identifier: 7A:07:F1:DA:3C:0F:43:F6:30:CB:29:EA:7F:44:02:E5:F6:48:8D:97 Authority key identifier: 5D:6F:26:7B:7A:A3:CC:36:47:C9:31:3B:9E:EC:7D:69:A1:67:39:58 Certificate issuer: /CN=A91583E2/serialNumber=5D6F267B7AA3CC3647C9313B9EEC7D69A1673958 Certificate serial: 0110 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft Manifest number: 0100 Signing time: Sat 03 Oct 2026 06:54:24 +0000 Manifest this update: Sat 03 Oct 2026 06:54:24 +0000 Manifest next update: Sat 10 Oct 2026 06:54:24 +0000 Files and hashes: 1: XW8me3qjzDZHyTE7nux9aaFnOVg.crl (hash: 6oP0J9vBJOCmOb3uTZWRIeVMaCyg+dnHW4VRn1JgOmI=) 2: B05F386E3B9911F09DE90D79C4F9AE02.roa (hash: 6w1HzCUg6p4mztXpRSikJO2Y5n7Og6kFlJojI34dx8M=) 3: 22D3C2B23B9E11F096AB407FC4F9AE02.roa (hash: AQbnIHwCJBjkidfFhnjxCBn8qJ9nAragqxJAtmgwlvI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.crl rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 06:54:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 272 (0x110) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91583E2, serialNumber=5D6F267B7AA3CC3647C9313B9EEC7D69A1673958 Validity Not Before: Oct 3 06:54:24 2026 GMT Not After : Oct 10 06:54:24 2026 GMT Subject: CN=6ac0a6a0-567f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7f:83:85:1f:66:f1:27:0c:e7:e2:49:ae:bb: 58:ca:36:84:66:1d:32:a8:7f:b4:43:19:d9:b5:e6: 71:37:59:89:90:77:75:b6:f2:f2:79:63:48:85:f6: 7c:3d:a3:64:68:4a:f1:95:fe:2b:95:4b:9f:f8:2d: 5b:f5:5c:42:75:e4:07:30:46:c8:71:17:49:b6:cc: 23:86:07:aa:f1:cf:9b:18:91:bd:0d:bd:88:58:0c: 4a:29:7d:2c:12:33:f6:85:fc:dd:82:cc:17:e7:a6: 51:bd:bb:dc:86:c0:5d:02:41:71:18:fa:78:c8:69: d6:68:cb:02:09:35:df:72:70:e8:7c:b6:42:71:f7: ff:37:f3:8a:27:e0:47:6c:34:88:ff:e2:3c:96:ec: 4d:19:40:c3:37:e5:94:a4:c7:3e:da:34:f0:4e:d1: f1:75:d3:f4:c0:f6:c9:38:3f:b6:c4:7a:fd:7d:2b: e6:61:2f:25:e7:d5:8c:ab:b4:67:d4:68:50:64:99: 10:61:77:88:e6:28:85:2d:f1:f5:2e:9f:f4:62:58: 33:0c:2d:f3:4f:5e:6b:f7:c1:ad:e6:84:f7:4c:a5: 80:c4:36:1b:c1:27:95:34:6f:f6:08:8f:69:40:c8: 8d:31:da:18:ac:d3:86:e8:63:5c:03:e0:98:93:f7: 16:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:07:F1:DA:3C:0F:43:F6:30:CB:29:EA:7F:44:02:E5:F6:48:8D:97 X509v3 Authority Key Identifier: keyid:5D:6F:26:7B:7A:A3:CC:36:47:C9:31:3B:9E:EC:7D:69:A1:67:39:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:f9:e1:79:71:e1:ab:04:dd:2c:9a:26:79:b1:84:cd:1d:fd: ee:34:96:53:f2:15:66:93:f6:b3:0c:d6:4d:b0:5e:3f:2b:e0: 7a:82:12:36:f4:2a:53:fc:c1:4c:cb:e4:75:67:5d:fc:62:32: c4:bf:02:96:86:af:87:61:bd:c1:a9:01:98:51:72:7f:79:c8: a0:51:8c:cd:8d:61:fe:7e:43:f9:ec:f5:45:4a:d2:41:27:f5: 94:eb:b9:be:0a:7b:12:d8:92:70:eb:4f:f5:2e:64:c6:09:8d: d6:ec:7b:07:86:79:57:a8:b1:9e:0a:7f:15:06:4f:a1:6b:12: db:c0:7a:ec:6d:fe:dc:63:52:74:9e:3d:5d:a6:89:5e:1a:e1: 87:cd:17:ef:21:0d:ec:9a:93:35:d2:b4:7a:97:88:f9:a2:12: 79:25:1c:71:26:3e:15:ec:16:16:16:db:a5:34:11:dc:ab:6e: f0:05:ac:f1:54:b9:9e:da:b4:70:e8:ed:75:7b:6b:50:65:e7: ab:79:e5:7c:ff:f2:a0:fa:7c:96:bb:c6:16:35:b1:4e:63:82: 39:f1:7c:d7:83:e2:28:29:dd:15:22:9d:0b:13:6f:99:1d:13: 46:c4:49:7a:8f:cb:bf:f0:dd:e8:5a:24:16:f8:3e:1f:18:ba: 49:7e:d1:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgzRTIxMTAvBgNVBAUTKDVENkYyNjdCN0FBM0NDMzY0N0M5MzEzQjlFRUM3RDY5 QTE2NzM5NTgwHhcNMjYxMDAzMDY1NDI0WhcNMjYxMDEwMDY1NDI0WjAYMRYwFAYD VQQDEw02YWMwYTZhMC01NjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnH+DhR9m8ScM5+JJrrtYyjaEZh0yqH+0QxnZteZxN1mJkHd1tvLyeWNIhfZ8 PaNkaErxlf4rlUuf+C1b9VxCdeQHMEbIcRdJtswjhgeq8c+bGJG9Db2IWAxKKX0s EjP2hfzdgswX56ZRvbvchsBdAkFxGPp4yGnWaMsCCTXfcnDofLZCcff/N/OKJ+BH bDSI/+I8luxNGUDDN+WUpMc+2jTwTtHxddP0wPbJOD+2xHr9fSvmYS8l59WMq7Rn 1GhQZJkQYXeI5iiFLfH1Lp/0YlgzDC3zT15r98Gt5oT3TKWAxDYbwSeVNG/2CI9p QMiNMdoYrNOG6GNcA+CYk/cWzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHoH8do8 D0P2MMsp6n9EAuX2SI2XMB8GA1UdIwQYMBaAFF1vJnt6o8w2R8kxO57sfWmhZzlY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODNFMi80M0ZCNzg3QzNC OTkxMUYwQTBDQzU5NzhDNEY5QUUwMi9YVzhtZTNxanpEWkh5VEU3bnV4OWFhRm5P VmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hXOG1lM3FqekRaSHlURTdudXg5YWFGbk9WZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODNFMi80M0ZCNzg3QzNCOTkxMUYwQTBDQzU5NzhDNEY5QUUwMi9YVzhtZTNxanpE Wkh5VEU3bnV4OWFhRm5PVmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAc/nheXHhqwTdLJomebGEzR397jSWU/IVZpP2swzWTbBePyvgeoISNvQqU/zB TMvkdWdd/GIyxL8Cloavh2G9wakBmFFyf3nIoFGMzY1h/n5D+ez1RUrSQSf1lOu5 vgp7EtiScOtP9S5kxgmN1ux7B4Z5V6ixngp/FQZPoWsS28B67G3+3GNSdJ49XaaJ Xhrhh80X7yEN7JqTNdK0epeI+aISeSUccSY+FewWFhbbpTQR3Ktu8AWs8VS5ntq0 cOjtdXtrUGXnq3nlfP/yoPp8lrvGFjWxTmOCOfF814PiKCndFSKdCxNvmR0TRsRJ eo/Lv/Dd6FokFvg+Hxi6SX7R5w== -----END CERTIFICATE-----Generated at Sun Oct 4 21:17:16 2026 by rpki-client