$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.mft File: RITQfaaNUwUM3PaxPAwFReZFfOU.mft (raw, json) Hash identifier: geDugOyoM8YnR6TslMsRA+9d0TCtyktuN+CkvMVg2M0= Subject key identifier: E5:15:33:63:55:90:F0:70:F3:D1:77:9A:F3:B5:00:E0:94:CA:C2:A6 Authority key identifier: 44:84:D0:7D:A6:8D:53:05:0C:DC:F6:B1:3C:0C:05:45:E6:45:7C:E5 Certificate issuer: /CN=A91B5CEA/serialNumber=4484D07DA68D53050CDCF6B13C0C0545E6457CE5 Certificate serial: 02EE Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RITQfaaNUwUM3PaxPAwFReZFfOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.mft Manifest number: 02E7 Signing time: Sun 25 Oct 2026 01:16:47 +0000 Manifest this update: Sun 25 Oct 2026 01:16:46 +0000 Manifest next update: Sun 01 Nov 2026 01:16:46 +0000 Files and hashes: 1: RITQfaaNUwUM3PaxPAwFReZFfOU.crl (hash: Nk2IM1nGqTEeKqrToSz4MHTms1gYTfeB76oAboo1248=) 2: B3795CBC64F211ED9AEC046FC4F9AE02.roa (hash: +L8evKQDJ3nBMOn/L1rAEvoX4ISe7vPvaP460knk1K8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.crl rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RITQfaaNUwUM3PaxPAwFReZFfOU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 01:16:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 750 (0x2ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5CEA, serialNumber=4484D07DA68D53050CDCF6B13C0C0545E6457CE5 Validity Not Before: Oct 25 01:16:46 2026 GMT Not After : Nov 1 01:16:46 2026 GMT Subject: CN=6add587e-6275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:50:14:ea:37:22:f6:30:79:a6:ab:4a:be:0c: 52:8a:53:98:7c:a7:c0:f5:ac:19:1b:54:35:d6:b2: 9e:65:07:7f:e2:21:ec:8f:41:e2:b5:d1:bc:e2:c2: 53:90:39:56:10:ea:7f:64:49:d3:80:fe:68:db:1d: 16:2d:f1:a9:bf:92:1a:3a:5d:a5:9f:a1:1d:92:ec: 54:dd:7e:39:cc:bb:a1:55:07:b8:a2:75:2e:e6:ef: 26:b8:84:b2:00:d8:e4:07:5a:e3:15:f7:7a:a7:55: db:0e:48:92:c1:c6:cb:23:12:c0:54:5a:8b:52:50: 86:3e:f2:80:5c:bc:41:d5:03:f0:c0:44:f2:f0:92: a3:6e:a4:70:aa:9a:81:a7:49:d8:70:83:93:cf:5a: eb:d8:a7:a4:02:ea:22:06:01:c0:87:b7:e2:4f:4f: b0:4c:f3:ba:c3:44:39:8c:9b:6b:fb:1e:b1:a6:1f: 73:81:3a:4e:4b:44:e3:de:88:0b:c1:87:b4:58:9c: 39:c3:ff:a9:71:d8:97:52:90:bd:51:ba:df:36:55: 5a:53:51:77:c6:24:51:ba:75:56:42:e9:54:93:04: 7d:41:d3:1f:6f:a3:d8:46:ed:2e:26:34:11:fa:42: ee:cb:cd:44:61:be:d8:7d:2a:0e:44:57:0c:99:58: 99:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:15:33:63:55:90:F0:70:F3:D1:77:9A:F3:B5:00:E0:94:CA:C2:A6 X509v3 Authority Key Identifier: keyid:44:84:D0:7D:A6:8D:53:05:0C:DC:F6:B1:3C:0C:05:45:E6:45:7C:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RITQfaaNUwUM3PaxPAwFReZFfOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:c7:34:ef:6b:3e:68:f0:2d:49:f1:42:f1:a4:ed:7a:b5:05: 5c:db:08:87:4f:98:0a:19:b6:7f:4f:a4:5f:c5:d2:66:f0:ad: b9:67:ad:19:40:14:f2:84:c6:9b:70:8d:f4:b1:cd:10:72:6a: c6:90:f8:ab:e4:81:14:6d:69:81:7f:85:8f:49:42:d0:38:71: 58:23:97:cf:65:90:6e:c1:01:3b:07:bf:c2:dc:46:04:d3:3b: d9:fd:29:c8:6e:51:63:1c:87:eb:6a:33:61:39:5a:0c:2d:2e: 57:7e:ff:5f:43:a7:7b:f6:15:15:74:15:3f:b1:1a:51:27:a4: 45:7a:25:62:a8:e5:ce:9e:8e:d8:1c:1f:5b:db:47:54:a4:7a: c1:24:ba:9a:f7:3b:0b:4b:2b:f4:33:84:94:d9:01:fb:f9:7f: cc:5c:30:20:f4:e9:1e:e9:6c:d8:a8:b3:a5:9a:3f:4f:02:0d: a0:ce:f7:58:34:56:9f:94:ee:0a:97:67:55:d3:52:60:2a:00: d5:28:ea:b4:d2:6b:ec:4e:7e:f3:2a:c5:0e:4f:37:72:3f:ed: 32:bb:f1:49:f2:a9:1f:ee:08:b7:8c:70:86:1b:49:c5:9d:f5: a5:61:30:35:d3:f5:d7:14:09:69:47:2b:54:ad:0b:c9:c6:84: 10:f0:83:48 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVDRUExMTAvBgNVBAUTKDQ0ODREMDdEQTY4RDUzMDUwQ0RDRjZCMTNDMEMwNTQ1 RTY0NTdDRTUwHhcNMjYxMDI1MDExNjQ2WhcNMjYxMTAxMDExNjQ2WjAYMRYwFAYD VQQDEw02YWRkNTg3ZS02Mjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw1AU6jci9jB5pqtKvgxSilOYfKfA9awZG1Q11rKeZQd/4iHsj0HitdG84sJT kDlWEOp/ZEnTgP5o2x0WLfGpv5IaOl2ln6EdkuxU3X45zLuhVQe4onUu5u8muISy ANjkB1rjFfd6p1XbDkiSwcbLIxLAVFqLUlCGPvKAXLxB1QPwwETy8JKjbqRwqpqB p0nYcIOTz1rr2KekAuoiBgHAh7fiT0+wTPO6w0Q5jJtr+x6xph9zgTpOS0Tj3ogL wYe0WJw5w/+pcdiXUpC9UbrfNlVaU1F3xiRRunVWQulUkwR9QdMfb6PYRu0uJjQR +kLuy81EYb7YfSoORFcMmViZ6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOUVM2NV kPBw89F3mvO1AOCUysKmMB8GA1UdIwQYMBaAFESE0H2mjVMFDNz2sTwMBUXmRXzl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUNFQS8xRjYzQTU2ODY0 RUUxMUVEQTRBMzQ1MTNDNEY5QUUwMi9SSVRRZmFhTlV3VU0zUGF4UEF3RlJlWkZm T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1JJVFFmYWFOVXdVTTNQYXhQQXdGUmVaRmZPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUNFQS8xRjYzQTU2ODY0RUUxMUVEQTRBMzQ1MTNDNEY5QUUwMi9SSVRRZmFhTlV3 VU0zUGF4UEF3RlJlWkZmT1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFcc072s+aPAtSfFC8aTterUFXNsIh0+YChm2f0+kX8XSZvCtuWetGUAU8oTG m3CN9LHNEHJqxpD4q+SBFG1pgX+Fj0lC0DhxWCOXz2WQbsEBOwe/wtxGBNM72f0p yG5RYxyH62ozYTlaDC0uV37/X0One/YVFXQVP7EaUSekRXolYqjlzp6O2BwfW9tH VKR6wSS6mvc7C0sr9DOElNkB+/l/zFwwIPTpHuls2KizpZo/TwINoM73WDRWn5Tu CpdnVdNSYCoA1SjqtNJr7E5+8yrFDk83cj/tMrvxSfKpH+4It4xwhhtJxZ31pWEw NdP11xQJaUcrVK0LycaEEPCDSA== -----END CERTIFICATE-----Generated at Sun Oct 25 20:41:35 2026 by rpki-client