$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft File: xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft (raw, json) Hash identifier: QzXozcT+5eiLHx1EVaSZCMM1wBgWMhfgtQ4yHSoQhbs= Subject key identifier: 4E:2A:90:7B:7C:18:36:24:69:C0:16:3F:FE:5C:F2:AA:7C:56:96:8E Authority key identifier: C4:9E:51:83:EA:2F:C4:9B:8A:83:C9:20:52:BC:E2:A8:B6:57:6C:70 Certificate issuer: /CN=A91DF937/serialNumber=C49E5183EA2FC49B8A83C92052BCE2A8B6576C70 Certificate serial: 2022 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft Manifest number: 2012 Signing time: Fri 02 Oct 2026 16:04:30 +0000 Manifest this update: Fri 02 Oct 2026 16:04:30 +0000 Manifest next update: Fri 09 Oct 2026 16:04:30 +0000 Files and hashes: 1: xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl (hash: qQPdIDkDD5cvIEOr35yYtAkL6LPQPyOgvx82gAEOb2Y=) 2: E723101E553D11E7B552CE31C4F9AE02.roa (hash: w2DU193yd2F7A76EdcHPjGzbuA2IEC9BLibhAE+t7oo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 16:04:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8226 (0x2022) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF937, serialNumber=C49E5183EA2FC49B8A83C92052BCE2A8B6576C70 Validity Not Before: Oct 2 16:04:30 2026 GMT Not After : Oct 9 16:04:30 2026 GMT Subject: CN=6abfd60e-711e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:df:a9:60:3b:dc:fb:62:53:cc:61:5f:3e:54: a1:b1:1f:7d:c9:ea:3a:ce:9d:d1:e2:70:ca:88:39: a0:2d:ab:aa:4e:69:01:87:65:50:3e:fd:ab:09:d0: 46:9c:8a:3a:5b:b8:89:db:50:c4:93:fd:99:85:e0: a8:fd:ae:41:c4:08:44:eb:c4:d6:e7:dc:0a:1c:f4: a7:fb:1a:75:f7:e1:45:cc:cf:42:1d:cb:aa:cc:8e: 72:9c:b6:ae:65:8a:ec:bb:00:41:ef:1f:5b:ef:5a: 4f:7d:4f:81:fb:35:64:e2:39:91:2e:1b:d4:20:68: 4d:c4:65:69:b4:17:ab:f5:d7:09:18:a1:c7:37:ac: 86:4a:b5:61:b0:85:52:23:98:4f:fd:0a:94:e3:68: 04:32:64:b2:87:f5:7a:5e:49:89:ea:07:7c:46:01: 5a:b2:9f:a8:8e:a2:0c:61:e3:38:3a:52:65:2c:25: d4:5a:73:b0:0c:9c:14:e5:b3:a0:43:9f:dc:8d:0e: 9d:58:bf:68:8f:12:dd:b0:18:64:63:bf:85:3f:2c: 8e:58:e3:65:c5:72:f5:e3:fc:dd:b8:f0:c5:57:e7: 8b:bd:9c:2b:f2:a5:f8:1b:4f:03:8d:66:94:06:78: 85:dd:b0:eb:39:27:8e:48:59:57:d2:a2:ab:d4:b6: 53:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:2A:90:7B:7C:18:36:24:69:C0:16:3F:FE:5C:F2:AA:7C:56:96:8E X509v3 Authority Key Identifier: keyid:C4:9E:51:83:EA:2F:C4:9B:8A:83:C9:20:52:BC:E2:A8:B6:57:6C:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:52:67:f3:36:58:ea:62:8f:93:3c:87:d3:09:89:3a:de:b4: 70:b4:36:a8:84:64:a0:66:82:32:c6:37:11:9f:ef:2a:dc:e6: 2f:c0:39:e7:ee:67:05:9a:f9:56:0d:6b:3f:56:00:61:00:0e: 52:42:ad:d6:e6:01:78:dd:26:9f:ec:87:93:25:8f:79:f7:f1: e5:77:a3:a6:70:c5:bb:e2:38:ba:31:97:37:7e:e4:53:5a:45: 17:98:41:c5:9f:cf:c0:20:fd:89:07:48:da:8f:18:ed:9c:0b: 5a:b0:63:dd:9d:ff:f4:19:ef:ac:e6:be:67:7a:f9:3b:ac:f6: 13:d3:b7:9e:04:92:83:e8:b9:2e:fa:9e:d8:44:9a:70:eb:b2: 0e:70:83:cf:04:ad:05:50:3c:1b:e8:52:f6:98:ce:73:60:f2: 52:5a:c0:4a:fd:84:2d:9f:aa:cf:f3:9d:5c:b6:62:ab:9a:00: 03:b6:7d:94:0b:29:f3:e7:dc:ad:0b:5d:19:a3:1c:46:1c:7d: f1:aa:a9:e1:d0:70:a9:b3:45:c2:56:3a:42:98:e4:74:08:a4: df:9d:ca:35:dd:c8:a5:c5:76:09:b7:ca:bc:2c:53:a7:78:92: 03:e1:50:11:84:86:32:5a:78:0b:8d:c1:9e:1a:ba:9d:71:fe: 19:a9:30:c4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICICIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY5MzcxMTAvBgNVBAUTKEM0OUU1MTgzRUEyRkM0OUI4QTgzQzkyMDUyQkNFMkE4 QjY1NzZDNzAwHhcNMjYxMDAyMTYwNDMwWhcNMjYxMDA5MTYwNDMwWjAYMRYwFAYD VQQDEw02YWJmZDYwZS03MTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9+pYDvc+2JTzGFfPlShsR99yeo6zp3R4nDKiDmgLauqTmkBh2VQPv2rCdBG nIo6W7iJ21DEk/2ZheCo/a5BxAhE68TW59wKHPSn+xp19+FFzM9CHcuqzI5ynLau ZYrsuwBB7x9b71pPfU+B+zVk4jmRLhvUIGhNxGVptBer9dcJGKHHN6yGSrVhsIVS I5hP/QqU42gEMmSyh/V6XkmJ6gd8RgFasp+ojqIMYeM4OlJlLCXUWnOwDJwU5bOg Q5/cjQ6dWL9ojxLdsBhkY7+FPyyOWONlxXL14/zduPDFV+eLvZwr8qX4G08DjWaU BniF3bDrOSeOSFlX0qKr1LZTYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE4qkHt8 GDYkacAWP/5c8qp8VpaOMB8GA1UdIwQYMBaAFMSeUYPqL8SbioPJIFK84qi2V2xw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjkzNy9BNDQ3QkZEQzU1 MzAxMUU2QTM2NDI3NDVDNEY5QUUwMi94SjVSZy1vdnhKdUtnOGtnVXJ6aXFMWlhi SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hKNVJnLW92eEp1S2c4a2dVcnppcUxaWGJIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjkzNy9BNDQ3QkZEQzU1MzAxMUU2QTM2NDI3NDVDNEY5QUUwMi94SjVSZy1vdnhK dUtnOGtnVXJ6aXFMWlhiSEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAp1Jn8zZY6mKPkzyH0wmJOt60cLQ2qIRkoGaCMsY3EZ/vKtzmL8A55+5nBZr5 Vg1rP1YAYQAOUkKt1uYBeN0mn+yHkyWPeffx5XejpnDFu+I4ujGXN37kU1pFF5hB xZ/PwCD9iQdI2o8Y7ZwLWrBj3Z3/9BnvrOa+Z3r5O6z2E9O3ngSSg+i5Lvqe2ESa cOuyDnCDzwStBVA8G+hS9pjOc2DyUlrASv2ELZ+qz/OdXLZiq5oAA7Z9lAsp8+fc rQtdGaMcRhx98aqp4dBwqbNFwlY6QpjkdAik353KNd3IpcV2CbfKvCxTp3iSA+FQ EYSGMlp4C43Bnhq6nXH+GakwxA== -----END CERTIFICATE-----Generated at Sat Oct 3 11:13:41 2026 by rpki-client