$ rpki-client -vvvf rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft File: aK5b6xu35ELO4KfgFAKf9y49tB8.mft (raw, json) Hash identifier: 9ZAnFTV2nmGuvhLibls7wlrh0c/eGNkvqn8TuKirRYA= Subject key identifier: 4B:06:0B:11:57:34:1A:52:97:75:58:3E:B3:80:F0:C6:3F:0D:DF:DE Authority key identifier: 68:AE:5B:EB:1B:B7:E4:42:CE:E0:A7:E0:14:02:9F:F7:2E:3D:B4:1F Certificate issuer: /CN=A91104C9/serialNumber=68AE5BEB1BB7E442CEE0A7E014029FF72E3DB41F Certificate serial: 0D08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK5b6xu35ELO4KfgFAKf9y49tB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft Manifest number: 0CF9 Signing time: Thu 08 Oct 2026 18:31:34 +0000 Manifest this update: Thu 08 Oct 2026 18:31:34 +0000 Manifest next update: Thu 15 Oct 2026 18:31:34 +0000 Files and hashes: 1: aK5b6xu35ELO4KfgFAKf9y49tB8.crl (hash: 54HRzPkhYrufzBbxt75Kv5Y3Q/lq4bV76ZgSz8C5n/4=) 2: 4C1F013E5AF511EFBAB1F86CC4F9AE02.roa (hash: r7Y9fnCxdSyyH2A4hgDRG+pQ+bI6QrGfxRhy4uVO9qQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.crl rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK5b6xu35ELO4KfgFAKf9y49tB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 18:31:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3336 (0xd08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91104C9, serialNumber=68AE5BEB1BB7E442CEE0A7E014029FF72E3DB41F Validity Not Before: Oct 8 18:31:34 2026 GMT Not After : Oct 15 18:31:34 2026 GMT Subject: CN=6ac7e186-046b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f7:92:20:30:9e:6c:c9:56:5b:8d:92:94:cf: de:50:d1:1c:15:49:04:04:1e:5c:de:ea:99:38:a2: c5:71:90:31:c8:38:28:90:ea:19:51:69:8a:57:b4: 02:02:ba:bd:41:4b:5c:44:41:df:11:95:db:75:2b: a2:e5:12:90:fb:80:01:c8:a6:3b:fb:e4:69:97:01: 35:3a:c1:84:51:e0:ce:8f:43:33:1f:ec:77:7d:59: 45:ad:80:b5:4a:5c:08:8e:d2:18:4d:9a:a0:c1:e9: 4f:91:c8:6e:de:37:60:0f:5e:7b:87:16:f8:48:36: 00:98:c5:92:08:ad:41:48:37:d4:e2:bc:54:11:5d: a5:27:9d:ad:c8:38:10:82:20:a6:ea:e2:f0:02:62: 5a:e8:70:1b:f5:10:dd:27:7c:64:f0:00:2c:b7:70: d3:22:4e:aa:42:39:21:98:80:4f:56:c3:e7:11:ac: 32:0a:e4:09:d1:df:a4:fb:43:ad:56:7d:be:57:83: 24:40:c4:57:4f:19:d9:7d:c4:53:91:ff:b0:ac:ae: 72:6f:0c:f3:18:c3:a4:20:97:c6:be:90:9a:66:48: 1b:f9:6d:1a:2c:f6:4b:8f:bd:44:83:13:51:95:b3: 26:a6:a8:5b:16:ec:71:01:6f:66:d1:fd:78:ba:3c: 04:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:06:0B:11:57:34:1A:52:97:75:58:3E:B3:80:F0:C6:3F:0D:DF:DE X509v3 Authority Key Identifier: keyid:68:AE:5B:EB:1B:B7:E4:42:CE:E0:A7:E0:14:02:9F:F7:2E:3D:B4:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK5b6xu35ELO4KfgFAKf9y49tB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:ef:e5:63:b1:02:8f:b4:68:13:d9:f4:44:3a:55:7b:63:6f: 03:26:8c:55:2c:18:3b:cb:80:c8:c7:64:f4:a7:31:15:26:b3: e9:11:08:89:8e:1e:9c:ac:ad:78:f7:fb:c9:7a:b6:c5:78:a9: 6c:67:81:f2:74:5e:f3:25:d5:e2:8b:fb:ad:f3:ad:d0:a5:8d: 62:11:e4:fb:ae:da:41:a9:a4:cb:22:8f:be:99:90:f0:9e:c1: 34:e9:1c:3e:32:8f:31:4d:08:aa:56:58:00:61:11:e0:01:20: 85:ed:ac:8c:23:97:35:2c:4c:67:29:f9:9b:8e:7a:67:1a:2d: 12:2a:b0:6f:f3:16:ab:36:3d:a5:20:e8:bc:57:9d:37:f9:52: ff:ce:9f:c3:6e:e2:d9:df:ce:a9:3a:2b:76:8b:b4:c0:fd:e6: bd:98:16:b4:c7:22:95:1e:72:9a:44:3d:03:32:64:3b:af:93: 25:d0:35:15:9a:6b:f5:06:2e:a6:42:86:03:e3:12:b7:96:c3: be:00:55:dc:06:9a:36:9f:53:3a:81:5e:3d:9e:87:5a:90:63: 4e:22:ca:0a:26:27:92:11:93:db:aa:d9:c1:9b:09:bb:9c:ef: a6:83:7b:10:fb:ac:49:3a:d9:5b:ac:22:73:25:3e:1b:5c:d4: 27:a6:ec:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA0QzkxMTAvBgNVBAUTKDY4QUU1QkVCMUJCN0U0NDJDRUUwQTdFMDE0MDI5RkY3 MkUzREI0MUYwHhcNMjYxMDA4MTgzMTM0WhcNMjYxMDE1MTgzMTM0WjAYMRYwFAYD VQQDEw02YWM3ZTE4Ni0wNDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkveSIDCebMlWW42SlM/eUNEcFUkEBB5c3uqZOKLFcZAxyDgokOoZUWmKV7QC Arq9QUtcREHfEZXbdSui5RKQ+4AByKY7++RplwE1OsGEUeDOj0MzH+x3fVlFrYC1 SlwIjtIYTZqgwelPkchu3jdgD157hxb4SDYAmMWSCK1BSDfU4rxUEV2lJ52tyDgQ giCm6uLwAmJa6HAb9RDdJ3xk8AAst3DTIk6qQjkhmIBPVsPnEawyCuQJ0d+k+0Ot Vn2+V4MkQMRXTxnZfcRTkf+wrK5ybwzzGMOkIJfGvpCaZkgb+W0aLPZLj71EgxNR lbMmpqhbFuxxAW9m0f14ujwERwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEsGCxFX NBpSl3VYPrOA8MY/Dd/eMB8GA1UdIwQYMBaAFGiuW+sbt+RCzuCn4BQCn/cuPbQf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDRDOS8yQUE4QjM4ODE0 QzgxMUVBODdEMTUxNkNDNEY5QUUwMi9hSzViNnh1MzVFTE80S2ZnRkFLZjl5NDl0 QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FLNWI2eHUzNUVMTzRLZmdGQUtmOXk0OXRCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDRDOS8yQUE4QjM4ODE0QzgxMUVBODdEMTUxNkNDNEY5QUUwMi9hSzViNnh1MzVF TE80S2ZnRkFLZjl5NDl0QjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAau/lY7ECj7RoE9n0RDpVe2NvAyaMVSwYO8uAyMdk9KcxFSaz6REIiY4enKyt ePf7yXq2xXipbGeB8nRe8yXV4ov7rfOt0KWNYhHk+67aQamkyyKPvpmQ8J7BNOkc PjKPMU0IqlZYAGER4AEghe2sjCOXNSxMZyn5m456ZxotEiqwb/MWqzY9pSDovFed N/lS/86fw27i2d/OqTordou0wP3mvZgWtMcilR5ymkQ9AzJkO6+TJdA1FZpr9QYu pkKGA+MSt5bDvgBV3AaaNp9TOoFePZ6HWpBjTiLKCiYnkhGT26rZwZsJu5zvpoN7 EPusSTrZW6wicyU+G1zUJ6bsAg== -----END CERTIFICATE-----Generated at Sat Oct 10 11:04:46 2026 by rpki-client