$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FFE2A/6C8773128D5B11F197683D0E6A11F970/-WJTlSWdVbnjutm2QuFbY5vAe8c.mft File: -WJTlSWdVbnjutm2QuFbY5vAe8c.mft (raw, json) Hash identifier: 3uaGDNzxkSmJLmXruBpg+jT9zV1KmK8R+hUsLCQacqI= Subject key identifier: FA:0A:69:34:B6:F0:10:14:07:B9:18:C6:81:FF:CA:85:43:E2:E3:B8 Authority key identifier: F9:62:53:95:25:9D:55:B9:E3:BA:D9:B6:42:E1:5B:63:9B:C0:7B:C7 Certificate issuer: /CN=A91FFE2A/serialNumber=F9625395259D55B9E3BAD9B642E15B639BC07BC7 Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WJTlSWdVbnjutm2QuFbY5vAe8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFE2A/6C8773128D5B11F197683D0E6A11F970/-WJTlSWdVbnjutm2QuFbY5vAe8c.mft Manifest number: 30 Signing time: Tue 27 Oct 2026 09:00:07 +0000 Manifest this update: Tue 27 Oct 2026 09:00:07 +0000 Manifest next update: Tue 03 Nov 2026 09:00:07 +0000 Files and hashes: 1: -WJTlSWdVbnjutm2QuFbY5vAe8c.crl (hash: gM2IKxun82EiKVDl2tjBlfck0w1Xjl++4sBU0GMZIe4=) 2: 1E1845C88D5E11F18A7850066B11F970.roa (hash: hm1LeJzMvNJnJ0qU8ZDYrWN+bMQ1p67o2pDficVOHz8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFE2A/6C8773128D5B11F197683D0E6A11F970/-WJTlSWdVbnjutm2QuFbY5vAe8c.crl rsync://rpki.apnic.net/member_repository/A91FFE2A/6C8773128D5B11F197683D0E6A11F970/-WJTlSWdVbnjutm2QuFbY5vAe8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WJTlSWdVbnjutm2QuFbY5vAe8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 09:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFE2A, serialNumber=F9625395259D55B9E3BAD9B642E15B639BC07BC7 Validity Not Before: Oct 27 09:00:07 2026 GMT Not After : Nov 3 09:00:07 2026 GMT Subject: CN=6ae06817-4626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3b:17:ba:82:7e:92:29:5d:5f:07:87:c1:36: 7b:d1:38:45:d2:53:c8:81:29:5e:68:87:8f:e0:25: 91:c9:6a:21:8f:7c:f1:c0:2b:93:0a:a7:f4:49:87: 43:44:02:c0:5a:bc:93:a5:a2:96:64:76:45:ba:43: 09:cb:0d:7c:83:56:b8:26:ef:81:c2:ab:50:8a:58: 48:e2:ef:0c:71:d8:fc:3f:65:2f:26:a2:fe:ef:65: 07:d7:65:26:1f:e6:59:f2:80:cd:c4:da:8d:f6:f1: 6b:ec:60:c5:16:b4:91:e8:70:8a:bd:f6:55:e0:04: a4:a6:cd:12:98:b1:97:d8:c7:00:38:87:c8:a0:9d: 57:d5:78:1f:a3:f0:fc:ab:a5:68:78:6d:f3:b3:9e: 61:2d:96:61:d3:7e:8c:9c:8c:00:b1:7a:3e:85:85: a3:5e:26:89:2f:f8:3c:eb:e3:d4:42:89:33:8b:ce: 24:91:41:80:ff:bc:b1:af:0d:09:2f:e2:f5:a7:df: cc:d3:bd:4a:a9:cc:f6:ee:04:f5:58:20:f3:9b:23: d6:39:6c:4f:22:da:a4:d1:ba:fc:d4:ba:49:22:3b: 71:d5:b1:3d:cb:a6:7c:4d:90:96:f4:4a:1b:eb:51: 2e:44:cd:8f:ce:ac:2a:35:e8:5a:75:bf:b9:a9:10: 02:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:0A:69:34:B6:F0:10:14:07:B9:18:C6:81:FF:CA:85:43:E2:E3:B8 X509v3 Authority Key Identifier: keyid:F9:62:53:95:25:9D:55:B9:E3:BA:D9:B6:42:E1:5B:63:9B:C0:7B:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFE2A/6C8773128D5B11F197683D0E6A11F970/-WJTlSWdVbnjutm2QuFbY5vAe8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WJTlSWdVbnjutm2QuFbY5vAe8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFE2A/6C8773128D5B11F197683D0E6A11F970/-WJTlSWdVbnjutm2QuFbY5vAe8c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:17:d8:46:2d:b8:ca:de:8a:11:a3:dc:e7:62:db:51:28:9e: 77:31:f6:5c:ae:84:03:05:3f:fa:61:0a:0c:b7:54:84:46:3b: 94:37:9a:22:44:f4:c5:07:d1:b8:e5:4e:42:35:f0:ee:4f:f4: 67:fd:46:b5:cc:2c:0d:71:4e:2c:fe:25:1d:3e:2b:a8:33:d9: e4:86:99:16:69:35:50:bd:a5:3c:5e:d6:37:0b:86:02:73:51: 67:58:b4:ad:eb:c4:fd:9f:39:97:ff:a3:b8:2c:cd:79:73:87: 8b:31:85:76:fe:5f:9b:55:f2:68:b7:ed:e0:cc:7b:29:f4:09: 55:04:e5:8e:f5:67:c4:a2:f1:66:a3:64:b8:07:e2:45:0d:00: 98:6d:5f:f0:f1:10:be:4c:4c:cf:3b:ae:2b:51:0b:81:a5:8f: 86:f5:d8:e4:6b:7a:50:ba:1e:6c:6b:3a:fa:72:29:9b:8e:68: 11:34:63:12:77:6c:85:cb:50:23:2b:3f:9e:51:ef:22:f3:08: 46:1d:a0:63:58:c3:d1:bc:9a:87:b9:66:63:ec:04:a0:01:13: 87:c1:aa:80:9d:98:bc:36:f9:4d:90:a2:e6:80:41:6f:85:73: ba:94:65:3d:b2:9f:8d:89:93:d0:ba:ca:76:72:c0:79:1e:10: 63:ac:10:04 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RkUyQTExMC8GA1UEBRMoRjk2MjUzOTUyNTlENTVCOUUzQkFEOUI2NDJFMTVCNjM5 QkMwN0JDNzAeFw0yNjEwMjcwOTAwMDdaFw0yNjExMDMwOTAwMDdaMBgxFjAUBgNV BAMTDTZhZTA2ODE3LTQ2MjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIOxe6gn6SKV1fB4fBNnvROEXSU8iBKV5oh4/gJZHJaiGPfPHAK5MKp/RJh0NE AsBavJOlopZkdkW6QwnLDXyDVrgm74HCq1CKWEji7wxx2Pw/ZS8mov7vZQfXZSYf 5lnygM3E2o328WvsYMUWtJHocIq99lXgBKSmzRKYsZfYxwA4h8ignVfVeB+j8Pyr pWh4bfOznmEtlmHTfoycjACxej6FhaNeJokv+Dzr49RCiTOLziSRQYD/vLGvDQkv 4vWn38zTvUqpzPbuBPVYIPObI9Y5bE8i2qTRuvzUukkiO3HVsT3LpnxNkJb0Shvr US5EzY/OrCo16Fp1v7mpEAL7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU+gppNLbw EBQHuRjGgf/KhUPi47gwHwYDVR0jBBgwFoAU+WJTlSWdVbnjutm2QuFbY5vAe8cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZGRTJBLzZDODc3MzEyOEQ1 QjExRjE5NzY4M0QwRTZBMTFGOTcwLy1XSlRsU1dkVmJuanV0bTJRdUZiWTV2QWU4 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLVdKVGxTV2RWYm5qdXRtMlF1RmJZNXZBZThjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZG RTJBLzZDODc3MzEyOEQ1QjExRjE5NzY4M0QwRTZBMTFGOTcwLy1XSlRsU1dkVmJu anV0bTJRdUZiWTV2QWU4Yy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAaF9hGLbjK3ooRo9znYttRKJ53MfZcroQDBT/6YQoMt1SERjuUN5oiRPTFB9G4 5U5CNfDuT/Rn/Ua1zCwNcU4s/iUdPiuoM9nkhpkWaTVQvaU8XtY3C4YCc1FnWLSt 68T9nzmX/6O4LM15c4eLMYV2/l+bVfJot+3gzHsp9AlVBOWO9WfEovFmo2S4B+JF DQCYbV/w8RC+TEzPO64rUQuBpY+G9djka3pQuh5sazr6cimbjmgRNGMSd2yFy1Aj Kz+eUe8i8whGHaBjWMPRvJqHuWZj7ASgAROHwaqAnZi8NvlNkKLmgEFvhXO6lGU9 sp+NiZPQusp2csB5HhBjrBAE -----END CERTIFICATE-----Generated at Thu Oct 29 00:59:39 2026 by rpki-client