$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft File: c4TcZntNSaWs1QpYtIkWoVrCYWs.mft (raw, json) Hash identifier: JQiE29+NtUaFxgMML7M/zCyJQZToslNsvgDahk7u2uY= Subject key identifier: C6:9F:C4:22:DC:17:76:08:62:7D:89:C2:63:C4:8C:3F:77:46:96:63 Authority key identifier: 73:84:DC:66:7B:4D:49:A5:AC:D5:0A:58:B4:89:16:A1:5A:C2:61:6B Certificate issuer: /CN=A91E8D07/serialNumber=7384DC667B4D49A5ACD50A58B48916A15AC2616B Certificate serial: 023D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft Manifest number: 0238 Signing time: Sat 31 Oct 2026 02:58:39 +0000 Manifest this update: Sat 31 Oct 2026 02:58:38 +0000 Manifest next update: Sat 07 Nov 2026 02:58:38 +0000 Files and hashes: 1: c4TcZntNSaWs1QpYtIkWoVrCYWs.crl (hash: zzNcItR/G6L7pUGIwMrLR4fyVKKnm6geo9nkMmSBeMU=) 2: F1E9B236718E11EEAF67DB48C4F9AE02.roa (hash: CKnFh68MZ6vWZLs6HZZnzt3hxWfZ7SKFfyFAeNeD5aI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.crl rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Nov 2026 02:58:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 573 (0x23d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8D07, serialNumber=7384DC667B4D49A5ACD50A58B48916A15AC2616B Validity Not Before: Oct 31 02:58:38 2026 GMT Not After : Nov 7 02:58:38 2026 GMT Subject: CN=6ae5595f-6ef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:24:8c:c9:cb:6f:87:6c:3e:cf:34:35:e5:f7: 13:67:04:86:66:ac:38:7b:91:34:6e:53:c6:7f:06: 29:9a:c6:73:16:7c:81:71:7b:e2:59:fb:53:03:b7: 81:70:54:ff:7d:1c:e5:8d:bc:e1:f5:76:01:cf:3f: 23:e8:0f:19:93:bd:14:54:6e:d4:7e:f8:38:f8:7f: e7:02:b2:fe:30:4f:c8:83:7c:13:8a:ae:bc:4f:c9: 74:aa:42:0b:8d:2b:d9:c3:d2:ed:69:80:3f:a2:ee: 9f:22:49:5a:8d:e1:90:68:0c:8d:7c:6b:9d:3b:38: 16:e5:be:5b:b7:62:c4:7f:5d:ff:e5:02:b5:95:14: 86:8c:7d:65:73:dc:06:8f:5f:85:f9:4c:bc:4e:98: 4a:5b:99:68:1d:b1:a8:fd:3a:ca:3c:a6:cf:e4:f0: 48:2a:cd:80:60:69:02:0f:77:0c:5c:61:a9:d4:34: bb:7a:fd:0a:83:48:a2:a4:2c:97:75:1c:a8:fe:34: 09:59:9f:55:50:f3:8b:f5:a6:36:68:a0:8a:5e:85: c4:55:25:f9:92:e6:8c:c0:a1:8f:f0:26:a5:d2:2b: d8:1a:cc:73:00:9d:0b:69:2a:4c:a0:0a:8d:64:fb: 68:72:7c:38:b1:e2:5f:76:91:07:68:82:c7:23:93: 72:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:9F:C4:22:DC:17:76:08:62:7D:89:C2:63:C4:8C:3F:77:46:96:63 X509v3 Authority Key Identifier: keyid:73:84:DC:66:7B:4D:49:A5:AC:D5:0A:58:B4:89:16:A1:5A:C2:61:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:68:41:f5:e7:d3:77:d4:5d:ed:1f:39:a7:74:1b:2a:b3:d9: 45:6d:a9:b0:a3:bc:5e:58:9d:8b:45:55:47:56:f4:fd:76:58: f2:56:ff:37:6f:63:0b:ef:42:aa:ec:57:5b:74:74:14:94:81: 1a:44:bd:5a:36:b8:37:c9:4d:ea:fe:ed:e5:dd:00:31:be:fe: 83:57:c2:ed:3c:f6:b2:ad:84:69:8b:f6:9e:d0:96:72:75:23: 66:b0:11:0f:42:25:e5:df:1e:c3:43:82:a7:b3:0b:7f:e7:af: 52:2d:e8:70:78:f0:73:1c:da:a6:f0:74:8d:56:8e:df:b6:e9: a3:4d:dd:20:95:6b:08:8d:7f:89:ad:9d:54:f4:f4:e1:07:bd: ab:c3:7d:2f:65:b3:61:d9:09:30:47:16:43:6f:a3:c3:5b:34: 20:7a:c6:15:a5:8f:b2:76:ff:ce:b0:07:18:49:f4:22:ab:bb: 84:cc:d0:e4:be:83:62:fb:a9:7a:e8:c3:4e:12:b4:40:4b:37: 1f:89:16:66:8c:e2:d3:3c:51:5c:39:c4:26:69:1b:77:20:22: f8:ad:2a:9d:22:38:79:cb:99:59:3f:a7:f6:1e:05:47:ec:3c: 91:01:71:ab:31:ef:a6:ab:32:3d:f2:65:7b:61:a6:ee:db:09: 9f:9f:a9:53 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThEMDcxMTAvBgNVBAUTKDczODREQzY2N0I0RDQ5QTVBQ0Q1MEE1OEI0ODkxNkEx NUFDMjYxNkIwHhcNMjYxMDMxMDI1ODM4WhcNMjYxMTA3MDI1ODM4WjAYMRYwFAYD VQQDEw02YWU1NTk1Zi02ZWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqCSMyctvh2w+zzQ15fcTZwSGZqw4e5E0blPGfwYpmsZzFnyBcXviWftTA7eB cFT/fRzljbzh9XYBzz8j6A8Zk70UVG7Ufvg4+H/nArL+ME/Ig3wTiq68T8l0qkIL jSvZw9LtaYA/ou6fIklajeGQaAyNfGudOzgW5b5bt2LEf13/5QK1lRSGjH1lc9wG j1+F+Uy8TphKW5loHbGo/TrKPKbP5PBIKs2AYGkCD3cMXGGp1DS7ev0Kg0iipCyX dRyo/jQJWZ9VUPOL9aY2aKCKXoXEVSX5kuaMwKGP8Cal0ivYGsxzAJ0LaSpMoAqN ZPtocnw4seJfdpEHaILHI5NyvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMafxCLc F3YIYn2JwmPEjD93RpZjMB8GA1UdIwQYMBaAFHOE3GZ7TUmlrNUKWLSJFqFawmFr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEQwNy81MDU1NjBCNjZF N0IxMUVFQjdFOTdENUZDNEY5QUUwMi9jNFRjWm50TlNhV3MxUXBZdElrV29WckNZ V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M0VGNabnROU2FXczFRcFl0SWtXb1ZyQ1lXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEQwNy81MDU1NjBCNjZFN0IxMUVFQjdFOTdENUZDNEY5QUUwMi9jNFRjWm50TlNh V3MxUXBZdElrV29WckNZV3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZGhB9efTd9Rd7R85p3QbKrPZRW2psKO8Xlidi0VVR1b0/XZY8lb/N29jC+9C quxXW3R0FJSBGkS9Wja4N8lN6v7t5d0AMb7+g1fC7Tz2sq2EaYv2ntCWcnUjZrAR D0Il5d8ew0OCp7MLf+evUi3ocHjwcxzapvB0jVaO37bpo03dIJVrCI1/ia2dVPT0 4Qe9q8N9L2WzYdkJMEcWQ2+jw1s0IHrGFaWPsnb/zrAHGEn0Iqu7hMzQ5L6DYvup eujDThK0QEs3H4kWZozi0zxRXDnEJmkbdyAi+K0qnSI4ecuZWT+n9h4FR+w8kQFx qzHvpqsyPfJle2Gm7tsJn5+pUw== -----END CERTIFICATE-----Generated at Sat Oct 31 22:14:30 2026 by rpki-client