$ rpki-client -vvvf rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.mft File: a1P4D46IGzcxlyZjuhiXt0qS1E0.mft (raw, json) Hash identifier: +83Ekl+7L1IQBzw6kS8f7jEQAqu3VakWGb/Whim+l70= Subject key identifier: C1:7A:FA:CE:94:CD:64:B2:BC:24:58:F4:1E:C8:5E:CD:CA:F1:81:88 Authority key identifier: 6B:53:F8:0F:8E:88:1B:37:31:97:26:63:BA:18:97:B7:4A:92:D4:4D Certificate issuer: /CN=A91991D3/serialNumber=6B53F80F8E881B3731972663BA1897B74A92D44D Certificate serial: 0317 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.mft Manifest number: 02E9 Signing time: Tue 27 Oct 2026 01:24:35 +0000 Manifest this update: Tue 27 Oct 2026 01:24:34 +0000 Manifest next update: Tue 03 Nov 2026 01:24:34 +0000 Files and hashes: 1: a1P4D46IGzcxlyZjuhiXt0qS1E0.crl (hash: lSvgtZby7+Fhe612DLsh3uKMSpEt5gRF0LlDtABWq4o=) 2: 8361CB4E5AE611F0963E5C62C4F9AE02.roa (hash: ChtQ7E7ouU1ZtpiGgAkFXxRYiHmXmUon0aBoqRT+qGA=) 3: B856D46C3B9611F0B2363C74C4F9AE02.roa (hash: 3Los5Fk5uv8Zjyep01WdC/mre8t97Ev/BHex30PnCDw=) 4: 026537E8861E11F0BC465F85C4F9AE02.roa (hash: 2vx0Lm/B7sk0iUxHMwGEmW+ajrDlOQBf4XYQs9Jw/Ts=) 5: 6709E1D0D0FB11F08508FE58C4F9AE02.roa (hash: RtZZS8vjQLN5HCJ+RnkuMSW7X8opo6eQ5796K2b4HcQ=) 6: 531EFB4A8DD311EFAF53373AC4F9AE02.roa (hash: 7ywDWfiQfFdN8bz7KWNJbuw91lymTrAlLz+GL7Qyx6I=) 7: FA9BD5C2C5DC11F0A5504261C4F9AE02.roa (hash: /zCH58JCOnuVSUPYFxnBc3slgwTWpXhRMEpfJQ12Pqo=) 8: A216EC4E3C7911F0B25C0585C4F9AE02.roa (hash: gTDGMAplhPOFz3phIjWIL/NPhP1iB4MwwXzDiyB70jk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.crl rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 01:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 791 (0x317) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91991D3, serialNumber=6B53F80F8E881B3731972663BA1897B74A92D44D Validity Not Before: Oct 27 01:24:34 2026 GMT Not After : Nov 3 01:24:34 2026 GMT Subject: CN=6adffd53-b2c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:32:39:ea:55:a0:ca:f4:5b:16:bd:f2:eb:eb: 4d:f8:15:e8:c8:25:9b:35:31:18:a1:0f:d2:e5:09: e0:11:ce:8f:fe:81:58:99:d8:1b:d5:47:f6:f2:c2: ea:6c:95:0d:62:94:8d:0e:85:38:7a:fb:ce:5d:1b: 20:6c:e2:82:4c:bb:ae:30:46:95:f7:2e:d7:f0:36: 2c:84:35:bb:2e:45:65:3a:72:ff:24:3e:9a:3c:d6: 3c:9f:f1:55:76:2c:10:41:ff:eb:74:ac:37:1b:26: a8:0d:68:e9:fa:25:5f:0f:18:5f:d8:2c:8b:ce:a1: 59:24:08:5a:ca:74:8c:f2:a9:ab:0b:2d:76:24:18: a6:46:34:cc:55:10:e6:6f:77:6c:6d:f7:00:e1:97: df:32:f8:7a:59:ff:2a:41:75:bc:e2:b3:e9:cd:d6: b9:05:97:15:54:f8:5b:43:f1:a1:a7:64:62:e3:fc: 2d:53:16:4c:a4:36:8a:0e:d4:06:cf:b7:f7:df:d3: 3b:9e:b5:30:80:ea:55:1b:af:1a:46:1f:e1:92:b0: b3:52:7a:5f:4a:f1:d2:5a:ca:ab:8f:47:30:00:30: 34:c6:60:0f:a3:12:50:72:52:10:3f:c8:9d:8a:bd: ef:45:a7:d0:e5:bc:b0:37:76:4a:09:99:5e:eb:d2: 7e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:7A:FA:CE:94:CD:64:B2:BC:24:58:F4:1E:C8:5E:CD:CA:F1:81:88 X509v3 Authority Key Identifier: keyid:6B:53:F8:0F:8E:88:1B:37:31:97:26:63:BA:18:97:B7:4A:92:D4:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:b1:ff:3a:f5:05:79:42:4b:86:52:37:ea:57:a1:4b:2c:35: d3:09:69:b6:bb:e4:f4:c2:a4:61:b0:a4:87:b1:a2:ae:04:dc: e2:d9:6d:43:7e:60:39:0d:7a:30:d2:2e:63:cd:04:cb:8c:b0: a7:13:10:fb:d5:4d:b2:2c:9a:1e:83:c8:64:22:9d:e8:03:66: 42:e0:37:1c:5a:ae:97:29:0d:c0:e3:76:e4:98:d9:ab:28:48: e0:7f:59:b5:26:ef:65:29:5e:68:68:99:9c:a2:9a:10:69:60: 0e:84:f6:42:af:62:25:42:cd:8e:4b:15:59:5a:f7:3a:f1:00: 39:7f:ea:4f:93:73:88:38:1d:74:08:93:30:94:9f:ef:88:f9: 5f:35:02:96:9c:55:e8:34:6a:c8:69:ed:2d:38:1c:b4:07:26: 37:66:82:dd:95:f6:01:e3:1b:8d:5a:62:38:77:27:a0:e4:3b: b0:89:0b:6a:33:b9:90:92:de:c1:3b:65:27:e8:65:f4:2d:d9: 28:50:3b:d7:fd:49:b2:b9:5f:d7:9f:80:c3:e6:88:ac:bc:05: 70:68:94:f2:be:84:6d:18:8f:30:1f:3b:c2:e3:06:16:e8:0f: cd:f2:21:4a:77:2e:d8:46:6a:7b:ca:01:1b:07:1d:9c:34:e8: c7:6a:9d:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkxRDMxMTAvBgNVBAUTKDZCNTNGODBGOEU4ODFCMzczMTk3MjY2M0JBMTg5N0I3 NEE5MkQ0NEQwHhcNMjYxMDI3MDEyNDM0WhcNMjYxMTAzMDEyNDM0WjAYMRYwFAYD VQQDEw02YWRmZmQ1My1iMmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtDI56lWgyvRbFr3y6+tN+BXoyCWbNTEYoQ/S5QngEc6P/oFYmdgb1Uf28sLq bJUNYpSNDoU4evvOXRsgbOKCTLuuMEaV9y7X8DYshDW7LkVlOnL/JD6aPNY8n/FV diwQQf/rdKw3GyaoDWjp+iVfDxhf2CyLzqFZJAhaynSM8qmrCy12JBimRjTMVRDm b3dsbfcA4ZffMvh6Wf8qQXW84rPpzda5BZcVVPhbQ/Ghp2Ri4/wtUxZMpDaKDtQG z7f339M7nrUwgOpVG68aRh/hkrCzUnpfSvHSWsqrj0cwADA0xmAPoxJQclIQP8id ir3vRafQ5bywN3ZKCZle69J+OwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMF6+s6U zWSyvCRY9B7IXs3K8YGIMB8GA1UdIwQYMBaAFGtT+A+OiBs3MZcmY7oYl7dKktRN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTFEMy81RkEzNkUzNDg5 MjMxMUVEQkNBMjk2MTNDNEY5QUUwMi9hMVA0RDQ2SUd6Y3hseVpqdWhpWHQwcVMx RTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ExUDRENDZJR3pjeGx5Wmp1aGlYdDBxUzFFMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTFEMy81RkEzNkUzNDg5MjMxMUVEQkNBMjk2MTNDNEY5QUUwMi9hMVA0RDQ2SUd6 Y3hseVpqdWhpWHQwcVMxRTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg7H/OvUFeUJLhlI36lehSyw10wlptrvk9MKkYbCkh7GirgTc4tltQ35gOQ16 MNIuY80Ey4ywpxMQ+9VNsiyaHoPIZCKd6ANmQuA3HFqulykNwON25JjZqyhI4H9Z tSbvZSleaGiZnKKaEGlgDoT2Qq9iJULNjksVWVr3OvEAOX/qT5NziDgddAiTMJSf 74j5XzUClpxV6DRqyGntLTgctAcmN2aC3ZX2AeMbjVpiOHcnoOQ7sIkLajO5kJLe wTtlJ+hl9C3ZKFA71/1Jsrlf15+Aw+aIrLwFcGiU8r6EbRiPMB87wuMGFugPzfIh Sncu2EZqe8oBGwcdnDTox2qdGQ== -----END CERTIFICATE-----Generated at Tue Oct 27 18:48:59 2026 by rpki-client