$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft File: tIGYczHh7UCLUcuf2O9KZQrIZpo.mft (raw, json) Hash identifier: CtRluWZLsxtsLaSmopVtNk1NV+zr2A8qC9kSxHgGHD4= Subject key identifier: 19:07:EE:84:FF:B9:82:39:E8:F2:D6:5A:EE:E8:F0:B7:B0:D7:23:06 Authority key identifier: B4:81:98:73:31:E1:ED:40:8B:51:CB:9F:D8:EF:4A:65:0A:C8:66:9A Certificate issuer: /CN=A91E28E2/serialNumber=B481987331E1ED408B51CB9FD8EF4A650AC8669A Certificate serial: 02D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft Manifest number: 02B4 Signing time: Thu 29 Oct 2026 02:13:25 +0000 Manifest this update: Thu 29 Oct 2026 02:13:24 +0000 Manifest next update: Thu 05 Nov 2026 02:13:24 +0000 Files and hashes: 1: tIGYczHh7UCLUcuf2O9KZQrIZpo.crl (hash: DPYyq8BxFVDPl15URq+duPFrXSAnAods93HWzB/odd4=) 2: 9C6F02C6249D11EF9532356DC4F9AE02.roa (hash: WJy0DDE3R4DJLfi+G/eV3lsb3PxP1zjDf/s8mlf+RmM=) 3: B4B581DEDFDB11F0B149F2E3536F56BC.roa (hash: BDN3eWU1QOvpwhp4B8qHZfh25EaapwZh0B/UqPtIRS4=) 4: 42D4386CDFDB11F0A18E0FE3536F56BC.roa (hash: +FOKSn3UMqNBdCkwTnN5e6gZKaXTHMKWX9i32crYuLc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.crl rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 02:13:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 721 (0x2d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E28E2, serialNumber=B481987331E1ED408B51CB9FD8EF4A650AC8669A Validity Not Before: Oct 29 02:13:24 2026 GMT Not After : Nov 5 02:13:24 2026 GMT Subject: CN=6ae2abc4-858c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:55:1a:cb:f7:06:24:3c:40:ef:f7:e9:63:68: db:f6:f7:aa:19:43:1f:9d:01:c4:b6:dc:38:6e:ea: 5b:74:1e:6f:9b:67:9a:c3:94:4a:bd:d6:fb:31:1c: 1e:39:03:88:4f:f9:24:af:04:2e:9e:d2:18:20:88: 86:6c:62:16:ba:2e:1c:fc:4f:9c:34:3d:87:6d:9d: 4a:bf:c2:c9:2c:08:78:db:e2:51:53:a3:5e:fd:70: e1:b4:ff:30:43:fc:24:d9:ac:48:6d:f7:43:c2:d1: a7:6f:bf:5b:b5:6f:27:1c:68:43:72:83:51:9f:f8: 9e:54:d3:74:61:52:48:b0:19:70:46:7c:50:57:3f: 88:85:ed:63:f4:3d:49:8f:fb:97:90:3f:30:2a:2b: 7b:a2:ac:58:f1:57:01:24:01:48:f0:6e:bc:63:f3: 28:0a:05:d8:be:05:1f:18:1c:63:7b:cc:28:77:7b: 45:b0:65:7a:bf:af:4e:c8:69:a6:0b:fe:1c:d3:91: 5f:2a:cd:5f:e3:03:e4:e9:86:82:4c:6c:b5:94:13: 5b:bb:99:6f:d6:39:da:64:c0:70:63:b0:77:83:92: f5:d9:c7:31:e9:ee:83:4c:a6:ac:ff:34:df:49:34: 12:a7:6d:de:60:df:76:70:5f:49:ef:65:c7:ca:72: b8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:07:EE:84:FF:B9:82:39:E8:F2:D6:5A:EE:E8:F0:B7:B0:D7:23:06 X509v3 Authority Key Identifier: keyid:B4:81:98:73:31:E1:ED:40:8B:51:CB:9F:D8:EF:4A:65:0A:C8:66:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:59:4a:aa:de:86:d9:c2:b0:d5:8c:de:b0:3b:3e:aa:d9:e2: 07:84:f0:87:32:7f:b5:6f:58:be:32:f8:f5:fe:be:67:a1:54: 3f:bb:14:dd:14:74:28:50:fb:6b:bb:08:ab:f4:72:34:e3:2a: 52:6d:f3:2d:29:d5:f6:08:38:f3:74:02:b3:18:d0:0b:59:e7: 49:6c:16:3a:5b:a7:c1:79:e9:83:94:39:f0:52:a2:38:c1:99: fe:8b:a9:96:be:20:b6:6e:e7:8a:f1:ef:d6:b3:79:f2:15:dc: 62:5c:cf:47:8e:0c:00:ce:6a:f3:bc:b3:5e:e6:91:d9:1f:e6: 1f:37:a2:13:c8:48:fb:56:57:0e:c9:26:d7:26:05:46:9b:e4: e7:68:3d:01:52:b7:73:69:e4:aa:c9:cd:45:fa:5d:bd:7b:9c: f4:4f:f4:34:12:3d:55:e6:c2:46:d4:5a:e5:9a:ec:b6:3d:cd: 13:cb:81:26:0d:16:9b:4c:12:98:81:f9:35:e1:18:e3:15:29: eb:df:aa:6b:e5:23:6e:94:b5:a1:d3:d8:f0:d6:b0:60:4f:d5: 5f:bf:1d:c1:d9:7d:c0:b4:cf:08:ca:24:a5:94:dd:a7:a5:80: da:3c:c6:17:bf:16:7a:bd:1f:92:59:9a:7c:9c:fa:89:6a:25: ae:b5:42:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4RTIxMTAvBgNVBAUTKEI0ODE5ODczMzFFMUVENDA4QjUxQ0I5RkQ4RUY0QTY1 MEFDODY2OUEwHhcNMjYxMDI5MDIxMzI0WhcNMjYxMTA1MDIxMzI0WjAYMRYwFAYD VQQDEw02YWUyYWJjNC04NThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuVUay/cGJDxA7/fpY2jb9veqGUMfnQHEttw4bupbdB5vm2eaw5RKvdb7MRwe OQOIT/kkrwQuntIYIIiGbGIWui4c/E+cND2HbZ1Kv8LJLAh42+JRU6Ne/XDhtP8w Q/wk2axIbfdDwtGnb79btW8nHGhDcoNRn/ieVNN0YVJIsBlwRnxQVz+Ihe1j9D1J j/uXkD8wKit7oqxY8VcBJAFI8G68Y/MoCgXYvgUfGBxje8wod3tFsGV6v69OyGmm C/4c05FfKs1f4wPk6YaCTGy1lBNbu5lv1jnaZMBwY7B3g5L12ccx6e6DTKas/zTf STQSp23eYN92cF9J72XHynK4xwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBkH7oT/ uYI56PLWWu7o8Lew1yMGMB8GA1UdIwQYMBaAFLSBmHMx4e1Ai1HLn9jvSmUKyGaa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjhFMi85NTJGQTYzMkQy RTYxMUVEOUE1MkQ1NUFDNEY5QUUwMi90SUdZY3pIaDdVQ0xVY3VmMk85S1pRckla cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RJR1ljekhoN1VDTFVjdWYyTzlLWlFySVpwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjhFMi85NTJGQTYzMkQyRTYxMUVEOUE1MkQ1NUFDNEY5QUUwMi90SUdZY3pIaDdV Q0xVY3VmMk85S1pRcklacG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMVlKqt6G2cKw1YzesDs+qtniB4TwhzJ/tW9YvjL49f6+Z6FUP7sU3RR0KFD7 a7sIq/RyNOMqUm3zLSnV9gg483QCsxjQC1nnSWwWOlunwXnpg5Q58FKiOMGZ/oup lr4gtm7nivHv1rN58hXcYlzPR44MAM5q87yzXuaR2R/mHzeiE8hI+1ZXDskm1yYF Rpvk52g9AVK3c2nkqsnNRfpdvXuc9E/0NBI9VebCRtRa5Zrstj3NE8uBJg0Wm0wS mIH5NeEY4xUp69+qa+UjbpS1odPY8NawYE/VX78dwdl9wLTPCMokpZTdp6WA2jzG F78Wer0fklmafJz6iWolrrVCgg== -----END CERTIFICATE-----Generated at Fri Oct 30 07:08:24 2026 by rpki-client