$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/XYnzqvmxOgelsmTy3rpk1cUAZRw.mft File: XYnzqvmxOgelsmTy3rpk1cUAZRw.mft (raw, json) Hash identifier: uqwtgpg6oUTnb677KyUl6lStDhBFgNy4E0rn6hIGaH0= Subject key identifier: B7:A8:CB:D6:CE:F9:E5:12:BB:AE:F9:C4:3F:49:7C:8B:67:6F:87:C7 Authority key identifier: 5D:89:F3:AA:F9:B1:3A:07:A5:B2:64:F2:DE:BA:64:D5:C5:00:65:1C Certificate issuer: /CN=A91D5240/serialNumber=5D89F3AAF9B13A07A5B264F2DEBA64D5C500651C Certificate serial: 02CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XYnzqvmxOgelsmTy3rpk1cUAZRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/XYnzqvmxOgelsmTy3rpk1cUAZRw.mft Manifest number: 02BE Signing time: Tue 13 Oct 2026 01:50:43 +0000 Manifest this update: Tue 13 Oct 2026 01:50:42 +0000 Manifest next update: Tue 20 Oct 2026 01:50:42 +0000 Files and hashes: 1: XYnzqvmxOgelsmTy3rpk1cUAZRw.crl (hash: ZjkyiJ7QxKH7RY4BRsaaUMKK0IdSFSrkik3VL0T/nuo=) 2: 9FBA5FCCA63911ED874E6630C4F9AE02.roa (hash: ClwvMUH1LVLekjvPCckwoGuRynW5TD4w0EqiLo6Abj0=) 3: 9EA7B7D8A63911ED874E6630C4F9AE02.roa (hash: DHZLT6kRWzcG3+2PiBnd4pNnMfMfwzitkH/VyFmiyhk=) 4: 5DCE1A1AA63C11ED9306165AC4F9AE02.roa (hash: ry8gAyMl/oF2tDrb6QBcr0lUpoct2VpMmyLx0Y2gIls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/XYnzqvmxOgelsmTy3rpk1cUAZRw.crl rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/XYnzqvmxOgelsmTy3rpk1cUAZRw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XYnzqvmxOgelsmTy3rpk1cUAZRw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 01:50:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 719 (0x2cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5240, serialNumber=5D89F3AAF9B13A07A5B264F2DEBA64D5C500651C Validity Not Before: Oct 13 01:50:42 2026 GMT Not After : Oct 20 01:50:42 2026 GMT Subject: CN=6acd8e73-95a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:7f:9f:65:ba:93:ee:e9:03:cf:9e:e2:dd:3b: d4:aa:7f:2d:c3:8b:41:35:14:0c:51:17:4d:c5:27: 81:bd:f7:a1:7d:10:de:e5:d2:dc:76:95:ad:5f:7c: 32:a8:12:a9:f3:e3:86:9d:95:51:d0:86:0c:1c:b9: 20:8b:e3:0b:3f:b1:d4:31:20:f5:92:a7:66:56:3a: 58:e1:5e:f4:51:8e:49:f9:d5:85:a8:e2:94:be:ca: 9c:98:bc:b6:fa:49:81:51:9e:a5:20:1c:15:57:87: 97:a5:28:85:6e:ac:a8:b8:ed:34:88:a6:04:88:e6: 31:f7:7c:02:bd:b8:6a:65:46:02:73:1c:45:4d:02: 58:e4:1f:c8:33:39:2d:98:03:7b:37:79:4c:9c:ba: fa:ed:c1:e9:f5:16:43:3f:39:80:f7:70:42:0d:78: 5f:ff:e7:7e:b2:d9:c1:5f:25:2b:f6:e6:f1:6d:72: 74:0c:70:ac:2d:03:a5:cd:e4:55:8a:f5:0b:47:a0: 9c:11:65:db:2d:98:1b:e8:d5:6f:c8:c2:15:cf:c9: 3b:b5:be:32:9c:91:5d:87:04:64:17:c5:56:59:a0: 96:13:db:38:c7:40:8f:6c:b6:d9:dc:69:ba:28:9e: cd:ff:9a:2e:86:60:86:87:50:44:03:2a:ad:95:f8: 02:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:A8:CB:D6:CE:F9:E5:12:BB:AE:F9:C4:3F:49:7C:8B:67:6F:87:C7 X509v3 Authority Key Identifier: keyid:5D:89:F3:AA:F9:B1:3A:07:A5:B2:64:F2:DE:BA:64:D5:C5:00:65:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/XYnzqvmxOgelsmTy3rpk1cUAZRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XYnzqvmxOgelsmTy3rpk1cUAZRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/XYnzqvmxOgelsmTy3rpk1cUAZRw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:da:8b:ec:71:7a:4d:fd:6e:96:9e:84:c4:f3:ec:8a:db:b0: 5f:d9:f5:91:b0:21:c7:c4:18:7a:e2:e7:dd:ce:42:d8:79:cf: 8d:89:f0:58:b7:40:ff:63:bf:83:50:ab:0f:6b:0e:0b:4b:c3: 99:75:c8:d8:3d:72:e1:2f:b0:3b:02:bf:da:8c:4a:4e:56:ea: a2:d2:2f:52:63:af:43:31:de:d6:e0:0d:ca:8f:37:aa:e7:ad: 28:f7:6c:cc:33:f6:1c:2c:60:45:a9:f2:79:7f:aa:7e:bd:b1: bb:c7:bf:45:1b:80:aa:fc:5b:93:f3:c7:39:20:bd:f9:22:ca: 75:2f:9b:80:0a:52:1c:ef:cc:94:33:a5:59:4d:a9:9c:73:c1: 40:81:00:64:a4:cb:65:e4:17:7e:c8:6c:e4:eb:b1:64:19:7f: 96:aa:8e:dc:06:fe:8d:45:44:93:a8:f4:69:60:eb:4c:4a:dd: 91:ff:da:24:63:b0:bb:70:43:28:d5:91:41:fe:3b:c8:bd:cc: 7f:2e:35:51:22:2a:54:d0:47:6d:04:6b:ba:15:77:c7:5f:bd: 00:41:81:96:8b:92:2f:4c:07:0b:e8:d4:38:1b:8d:10:b0:a5: d9:f4:d6:0f:a7:bb:e6:a5:fe:a0:bf:c1:ce:77:92:73:18:f8: 6a:3e:e7:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAs8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUyNDAxMTAvBgNVBAUTKDVEODlGM0FBRjlCMTNBMDdBNUIyNjRGMkRFQkE2NEQ1 QzUwMDY1MUMwHhcNMjYxMDEzMDE1MDQyWhcNMjYxMDIwMDE1MDQyWjAYMRYwFAYD VQQDEw02YWNkOGU3My05NWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmH+fZbqT7ukDz57i3TvUqn8tw4tBNRQMURdNxSeBvfehfRDe5dLcdpWtX3wy qBKp8+OGnZVR0IYMHLkgi+MLP7HUMSD1kqdmVjpY4V70UY5J+dWFqOKUvsqcmLy2 +kmBUZ6lIBwVV4eXpSiFbqyouO00iKYEiOYx93wCvbhqZUYCcxxFTQJY5B/IMzkt mAN7N3lMnLr67cHp9RZDPzmA93BCDXhf/+d+stnBXyUr9ubxbXJ0DHCsLQOlzeRV ivULR6CcEWXbLZgb6NVvyMIVz8k7tb4ynJFdhwRkF8VWWaCWE9s4x0CPbLbZ3Gm6 KJ7N/5ouhmCGh1BEAyqtlfgCXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLeoy9bO +eUSu675xD9JfItnb4fHMB8GA1UdIwQYMBaAFF2J86r5sToHpbJk8t66ZNXFAGUc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTI0MC8yN0RERTdEODlC N0QxMUVEQjNDMzNGNURDNEY5QUUwMi9YWW56cXZteE9nZWxzbVR5M3JwazFjVUFa UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hZbnpxdm14T2dlbHNtVHkzcnBrMWNVQVpSdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTI0MC8yN0RERTdEODlCN0QxMUVEQjNDMzNGNURDNEY5QUUwMi9YWW56cXZteE9n ZWxzbVR5M3JwazFjVUFaUncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJtqL7HF6Tf1ulp6ExPPsituwX9n1kbAhx8QYeuLn3c5C2HnPjYnwWLdA/2O/ g1CrD2sOC0vDmXXI2D1y4S+wOwK/2oxKTlbqotIvUmOvQzHe1uANyo83quetKPds zDP2HCxgRanyeX+qfr2xu8e/RRuAqvxbk/PHOSC9+SLKdS+bgApSHO/MlDOlWU2p nHPBQIEAZKTLZeQXfshs5OuxZBl/lqqO3Ab+jUVEk6j0aWDrTErdkf/aJGOwu3BD KNWRQf47yL3Mfy41USIqVNBHbQRruhV3x1+9AEGBlouSL0wHC+jUOBuNELCl2fTW D6e75qX+oL/BzneScxj4aj7n8A== -----END CERTIFICATE-----Generated at Tue Oct 13 17:18:08 2026 by rpki-client