$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A622F/2CAE626C3E6111F18B94D20BB2EE528E/Kxn0VfTTBpR34BlB90IUn7kADYE.mft File: Kxn0VfTTBpR34BlB90IUn7kADYE.mft (raw, json) Hash identifier: 0X0m9uyUyNXEK1uP04nm6U05oPONd5H+GYtoJVQIJX8= Subject key identifier: F1:89:BE:BF:B9:8B:77:EE:A1:1D:1D:C4:E3:8A:66:8A:64:C2:E7:5C Authority key identifier: 2B:19:F4:55:F4:D3:06:94:77:E0:19:41:F7:42:14:9F:B9:00:0D:81 Certificate issuer: /CN=A91A622F/serialNumber=2B19F455F4D3069477E01941F742149FB9000D81 Certificate serial: 7A Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Kxn0VfTTBpR34BlB90IUn7kADYE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A622F/2CAE626C3E6111F18B94D20BB2EE528E/Kxn0VfTTBpR34BlB90IUn7kADYE.mft Manifest number: 70 Signing time: Wed 28 Oct 2026 15:39:53 +0000 Manifest this update: Wed 28 Oct 2026 15:39:52 +0000 Manifest next update: Wed 04 Nov 2026 15:39:52 +0000 Files and hashes: 1: Kxn0VfTTBpR34BlB90IUn7kADYE.crl (hash: RY5aXf8isV1wSRzjz7ln+rNdC4uK/xtCbUGmb9GblsM=) 2: 41E1B62C439B11F1B25C79F98F833773.roa (hash: 36yi6gPTHzcQX8APfBzmKqBXbIwiIVFpcf4UMN/XwEA=) 3: 8556D60A479011F187A637ED9C833773.roa (hash: grslGX/L7YYdiHw2ISG2NCkAz+QfsF2GNEwK6BVY9z4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A622F/2CAE626C3E6111F18B94D20BB2EE528E/Kxn0VfTTBpR34BlB90IUn7kADYE.crl rsync://rpki.apnic.net/member_repository/A91A622F/2CAE626C3E6111F18B94D20BB2EE528E/Kxn0VfTTBpR34BlB90IUn7kADYE.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Kxn0VfTTBpR34BlB90IUn7kADYE.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 14:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A622F, serialNumber=2B19F455F4D3069477E01941F742149FB9000D81 Validity Not Before: Oct 28 15:39:52 2026 GMT Not After : Nov 4 15:39:52 2026 GMT Subject: CN=6ae21749-e68d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:77:21:fa:28:3c:de:19:2a:17:4f:09:0f:40: af:7c:b2:e7:b4:20:37:27:64:bc:9f:00:87:41:4c: 1f:f6:75:1a:e5:b3:a7:ef:f6:64:93:a6:16:a2:9f: af:de:0d:77:ec:9c:87:ee:9b:b2:2c:cf:3e:1b:3c: ff:21:e3:0e:59:8e:4f:d5:42:02:82:4c:cc:26:36: fe:a6:50:20:a7:f8:0c:80:24:93:08:a6:0a:4e:2d: 5b:51:b3:89:7f:71:4f:89:6f:a5:fd:48:71:79:49: db:c7:52:8e:4a:b9:51:b3:f2:d3:05:40:af:23:25: 32:37:74:ea:7a:5d:07:e8:1a:d3:f2:bb:84:40:b9: 42:cd:89:6b:a5:a9:0f:54:82:2e:4b:e3:34:74:eb: 99:f3:8c:ab:86:9d:be:1b:cf:41:2b:72:ad:46:86: 65:47:b1:d0:56:e7:db:c3:d6:d7:97:83:2a:32:8d: 5c:fa:a8:83:f7:c2:d1:f4:2d:73:9d:45:3b:5c:10: 76:8e:4d:eb:4f:34:bb:40:8a:c8:fd:89:13:0e:53: d4:81:54:10:61:16:bd:09:09:0c:3a:1f:a2:3a:7b: b6:8a:58:35:5c:cb:88:de:10:e1:74:39:20:55:ce: cf:1f:0f:a0:b7:01:d3:07:26:04:cd:92:b8:c1:b2: 2b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:89:BE:BF:B9:8B:77:EE:A1:1D:1D:C4:E3:8A:66:8A:64:C2:E7:5C X509v3 Authority Key Identifier: keyid:2B:19:F4:55:F4:D3:06:94:77:E0:19:41:F7:42:14:9F:B9:00:0D:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A622F/2CAE626C3E6111F18B94D20BB2EE528E/Kxn0VfTTBpR34BlB90IUn7kADYE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Kxn0VfTTBpR34BlB90IUn7kADYE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A622F/2CAE626C3E6111F18B94D20BB2EE528E/Kxn0VfTTBpR34BlB90IUn7kADYE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:56:44:c3:9f:91:61:1b:e4:0b:33:37:f2:8c:ad:a6:ee:ed: 39:8c:ab:50:6e:3e:ee:00:9a:8b:a1:84:f5:69:21:29:31:55: 6a:b4:f0:36:a1:31:92:b4:0d:aa:09:70:d7:23:e7:7c:b9:59: fe:00:c0:7b:d9:e1:71:49:19:a0:a7:b8:7d:71:2c:88:a2:05: ed:72:38:ad:e3:8c:fe:69:1e:57:1b:5b:77:ed:46:56:cc:c1: d7:92:10:b7:37:29:d9:c6:a0:17:d2:ae:bc:60:54:4d:5e:47: 38:8c:6a:e0:dc:99:3b:67:d6:ca:d3:57:2e:3e:a5:58:70:75: c9:9d:f3:b9:c2:7c:c7:10:84:ea:aa:75:3c:b2:04:9c:cc:9d: 6a:dc:f1:ac:11:9e:61:b4:d1:c8:a5:2b:cb:77:06:cd:9a:df: 51:8e:7c:5d:fc:fb:09:0a:f1:e4:1d:24:a0:37:e8:77:47:ca: 5d:e8:b5:f8:25:91:91:89:0b:e3:e2:df:4a:1e:3a:cc:d4:2c: da:0b:53:a2:02:64:62:e0:df:3e:a7:de:08:c5:37:f2:87:4c: 51:92:2f:2f:9b:ac:0d:3a:b2:ce:05:a9:de:2c:d3:05:2b:df: 99:80:af:11:f8:49:b0:ab:03:8c:28:66:49:f3:46:60:b8:15: 4c:65:b1:48 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NjIyRjExMC8GA1UEBRMoMkIxOUY0NTVGNEQzMDY5NDc3RTAxOTQxRjc0MjE0OUZC OTAwMEQ4MTAeFw0yNjEwMjgxNTM5NTJaFw0yNjExMDQxNTM5NTJaMBgxFjAUBgNV BAMTDTZhZTIxNzQ5LWU2OGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCQdyH6KDzeGSoXTwkPQK98sue0IDcnZLyfAIdBTB/2dRrls6fv9mSTphain6/e DXfsnIfum7Iszz4bPP8h4w5Zjk/VQgKCTMwmNv6mUCCn+AyAJJMIpgpOLVtRs4l/ cU+Jb6X9SHF5SdvHUo5KuVGz8tMFQK8jJTI3dOp6XQfoGtPyu4RAuULNiWulqQ9U gi5L4zR065nzjKuGnb4bz0Ercq1GhmVHsdBW59vD1teXgyoyjVz6qIP3wtH0LXOd RTtcEHaOTetPNLtAisj9iRMOU9SBVBBhFr0JCQw6H6I6e7aKWDVcy4jeEOF0OSBV zs8fD6C3AdMHJgTNkrjBsiuXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU8Ym+v7mL d+6hHR3E44pmimTC51wwHwYDVR0jBBgwFoAUKxn0VfTTBpR34BlB90IUn7kADYEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2MjJGLzJDQUU2MjZDM0U2 MTExRjE4Qjk0RDIwQkIyRUU1MjhFL0t4bjBWZlRUQnBSMzRCbEI5MElVbjdrQURZ RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvS3huMFZmVFRCcFIzNEJsQjkwSVVuN2tBRFlFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2 MjJGLzJDQUU2MjZDM0U2MTExRjE4Qjk0RDIwQkIyRUU1MjhFL0t4bjBWZlRUQnBS MzRCbEI5MElVbjdrQURZRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQArVkTDn5FhG+QLMzfyjK2m7u05jKtQbj7uAJqLoYT1aSEpMVVqtPA2oTGStA2q CXDXI+d8uVn+AMB72eFxSRmgp7h9cSyIogXtcjit44z+aR5XG1t37UZWzMHXkhC3 NynZxqAX0q68YFRNXkc4jGrg3Jk7Z9bK01cuPqVYcHXJnfO5wnzHEITqqnU8sgSc zJ1q3PGsEZ5htNHIpSvLdwbNmt9Rjnxd/PsJCvHkHSSgN+h3R8pd6LX4JZGRiQvj 4t9KHjrM1CzaC1OiAmRi4N8+p94IxTfyh0xRki8vm6wNOrLOBaneLNMFK9+ZgK8R +EmwqwOMKGZJ80ZguBVMZbFI -----END CERTIFICATE-----Generated at Wed Oct 28 19:01:57 2026 by rpki-client