$ rpki-client -vvvf rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft File: rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft (raw, json) Hash identifier: J/WkkF9vNQetkmxNf1PS+2MAaVGoAhK/VYocddvC/cs= Subject key identifier: 00:FF:25:94:F9:D6:F8:C8:CA:1E:BB:7F:35:4E:B2:3C:D4:02:A5:38 Authority key identifier: AC:F2:C8:D0:DC:FB:A7:45:16:B3:3C:EB:E2:6A:E1:4F:8B:06:7C:80 Certificate issuer: /CN=A9191A09/serialNumber=ACF2C8D0DCFBA74516B33CEBE26AE14F8B067C80 Certificate serial: 363E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft Manifest number: 35E9 Signing time: Wed 28 Oct 2026 14:41:58 +0000 Manifest this update: Wed 28 Oct 2026 14:41:57 +0000 Manifest next update: Wed 04 Nov 2026 14:41:57 +0000 Files and hashes: 1: rPLI0Nz7p0UWszzr4mrhT4sGfIA.crl (hash: /OtZ1Gbvfwh5iTry8c/y5WWfZCcav3wLFIC1nMOlNqM=) 2: F8A618E05E3511F0ACCE4C26C4F9AE02.roa (hash: YNlGAXVG6Otxz1oTc91JGnEKWMVhDfGSlJsoaRX0wMo=) 3: Z9-6VWmjVibb9mz71Wr2_x0XiqU.asa (hash: PpCgbDdhDsNJ+1XfYUgVsTpjur83vpH3CEHbDTNRS/s=) 4: FF64D6AAD4BB11ECBE4E9E71C4F9AE02.roa (hash: mOn42WnRE+/Mos3ahI73htZV2BdO/yRo2Jrd4NQohQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.crl rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 14:41:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13886 (0x363e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191A09, serialNumber=ACF2C8D0DCFBA74516B33CEBE26AE14F8B067C80 Validity Not Before: Oct 28 14:41:57 2026 GMT Not After : Nov 4 14:41:57 2026 GMT Subject: CN=6ae209b5-18ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ea:1f:cd:ae:65:eb:66:6d:a2:27:ee:ec:17: 10:9b:bc:c4:8c:29:9f:65:c2:d3:d5:3a:e8:9c:93: 46:d7:04:d1:63:5c:6c:cb:a0:97:a0:d3:58:a4:79: 35:f3:45:aa:4e:fb:f0:c7:0f:79:cd:ea:41:cf:50: 86:20:01:8f:60:6d:10:d2:4d:23:e0:86:8e:6c:a4: 3e:46:35:12:8f:32:b9:e2:4c:28:be:7f:63:61:4a: 1d:99:64:fd:8a:79:d8:68:74:ec:6e:d7:67:5c:25: 6f:2d:77:6e:f3:58:33:cb:ff:84:b1:01:b9:89:84: 7c:13:b1:67:93:b5:dd:14:90:b8:1a:75:e9:96:39: d8:dd:d2:71:fc:23:e4:68:e5:c9:7a:c3:db:2e:ac: 46:5e:76:0b:c4:cc:57:bf:2f:e7:c9:53:4f:86:d3: 28:83:6d:e1:3d:84:92:fc:77:54:28:5c:e7:47:a0: 77:5f:7e:9a:7d:f5:e0:4c:35:fe:aa:6e:d7:87:39: 7e:4e:59:d0:2b:38:4a:bb:93:a9:1d:ea:47:35:72: 15:bd:e3:bb:df:93:e0:fc:c2:74:b2:73:24:42:1d: f7:27:77:7d:53:b0:6d:fe:ba:04:5e:ca:64:18:86: 3d:96:06:13:c8:2f:38:e1:24:13:15:2f:58:37:86: 70:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:FF:25:94:F9:D6:F8:C8:CA:1E:BB:7F:35:4E:B2:3C:D4:02:A5:38 X509v3 Authority Key Identifier: keyid:AC:F2:C8:D0:DC:FB:A7:45:16:B3:3C:EB:E2:6A:E1:4F:8B:06:7C:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dd:b7:62:1b:b5:a1:a6:e9:ae:d4:a0:1f:e9:fd:8d:e8:e2:f2: 46:8a:19:1d:7c:18:6e:dd:48:a3:84:57:01:90:6c:98:b6:66: 02:57:8a:4a:ab:42:bb:aa:0f:7f:49:b4:d5:b3:1f:67:61:70: af:f8:ac:37:ef:2e:cb:67:fd:a6:69:0d:f0:99:a5:4a:4d:46: 46:e4:b0:3d:28:e6:e7:86:54:a1:20:49:df:34:9e:c2:00:13: 61:ac:95:82:b7:8a:c1:4e:d1:f7:db:30:ae:b9:2f:06:81:6e: 09:dd:67:00:14:ef:64:d1:48:69:59:e8:f0:f7:47:22:23:19: ca:82:f6:49:aa:ee:03:d6:a0:5a:63:24:07:46:b2:06:70:1b: 3e:38:9d:b2:61:75:56:1d:b2:70:08:c2:e4:5a:39:c4:3d:89: 10:79:b4:db:ac:16:c3:af:28:7a:f5:7c:98:08:a0:94:a4:3b: ad:f0:d3:04:9b:f9:79:db:9a:3e:0e:a1:af:7c:74:fd:26:96: 2d:c4:0c:d8:05:1e:1b:ca:51:95:4c:a7:dc:95:61:ae:8d:c1: a4:e2:86:53:6c:a3:af:65:39:27:36:0c:5d:e0:5a:4c:eb:d7: f1:52:32:83:d2:58:90:87:15:b6:17:4a:2b:90:20:51:02:b9: 55:11:f1:95 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFBMDkxMTAvBgNVBAUTKEFDRjJDOEQwRENGQkE3NDUxNkIzM0NFQkUyNkFFMTRG OEIwNjdDODAwHhcNMjYxMDI4MTQ0MTU3WhcNMjYxMTA0MTQ0MTU3WjAYMRYwFAYD VQQDEw02YWUyMDliNS0xOGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvOofza5l62Ztoifu7BcQm7zEjCmfZcLT1TronJNG1wTRY1xsy6CXoNNYpHk1 80WqTvvwxw95zepBz1CGIAGPYG0Q0k0j4IaObKQ+RjUSjzK54kwovn9jYUodmWT9 innYaHTsbtdnXCVvLXdu81gzy/+EsQG5iYR8E7Fnk7XdFJC4GnXpljnY3dJx/CPk aOXJesPbLqxGXnYLxMxXvy/nyVNPhtMog23hPYSS/HdUKFznR6B3X36affXgTDX+ qm7Xhzl+TlnQKzhKu5OpHepHNXIVveO735Pg/MJ0snMkQh33J3d9U7Bt/roEXspk GIY9lgYTyC844SQTFS9YN4ZwowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAD/JZT5 1vjIyh67fzVOsjzUAqU4MB8GA1UdIwQYMBaAFKzyyNDc+6dFFrM86+Jq4U+LBnyA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUEwOS80QUNGRjM2MDFE OTAxMUUyQjg3Q0YyRUYwOEIwMkNEMi9yUExJME56N3AwVVdzenpyNG1yaFQ0c0dm SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JQTEkwTno3cDBVV3N6enI0bXJoVDRzR2ZJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUEwOS80QUNGRjM2MDFEOTAxMUUyQjg3Q0YyRUYwOEIwMkNEMi9yUExJME56N3Aw VVdzenpyNG1yaFQ0c0dmSUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA3bdiG7Whpumu1KAf6f2N6OLyRooZHXwYbt1Io4RXAZBsmLZmAleKSqtCu6oP f0m01bMfZ2Fwr/isN+8uy2f9pmkN8JmlSk1GRuSwPSjm54ZUoSBJ3zSewgATYayV greKwU7R99swrrkvBoFuCd1nABTvZNFIaVno8PdHIiMZyoL2SaruA9agWmMkB0ay BnAbPjidsmF1Vh2ycAjC5Fo5xD2JEHm026wWw68oevV8mAiglKQ7rfDTBJv5edua Pg6hr3x0/SaWLcQM2AUeG8pRlUyn3JVhro3BpOKGU2yjr2U5JzYMXeBaTOvX8VIy g9JYkIcVthdKK5AgUQK5VRHxlQ== -----END CERTIFICATE-----Generated at Thu Oct 29 06:16:03 2026 by rpki-client