$ rpki-client -vvvf rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft File: sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft (raw, json) Hash identifier: B9nF+jcwg9tGam+nxmu8MvvHBEYor3XnCt4X7vP+ku0= Subject key identifier: 0C:97:43:CF:DE:3F:B0:87:08:C5:3F:C8:C6:6B:E4:F8:8B:C6:35:E7 Authority key identifier: B0:D5:25:EA:99:D4:C8:EC:75:60:71:26:A4:9E:F6:70:7B:D6:F4:AD Certificate issuer: /CN=A91144C9/serialNumber=B0D525EA99D4C8EC75607126A49EF6707BD6F4AD Certificate serial: 0130 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sNUl6pnUyOx1YHEmpJ72cHvW9K0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft Manifest number: 012B Signing time: Thu 29 Oct 2026 06:26:54 +0000 Manifest this update: Thu 29 Oct 2026 06:26:54 +0000 Manifest next update: Thu 05 Nov 2026 06:26:54 +0000 Files and hashes: 1: sNUl6pnUyOx1YHEmpJ72cHvW9K0.crl (hash: X4SA74aFe3Lh2l1xC61MpNvmTju2ZPlPVmmdduRKHWk=) 2: 9F25E6340ECA11F0BAAE344AC4F9AE02.roa (hash: oZt0DncXTvvxAu6W6XuMxsXB6h7QjU6a+ul8Hylf5MI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.crl rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sNUl6pnUyOx1YHEmpJ72cHvW9K0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 06:26:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 304 (0x130) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91144C9, serialNumber=B0D525EA99D4C8EC75607126A49EF6707BD6F4AD Validity Not Before: Oct 29 06:26:54 2026 GMT Not After : Nov 5 06:26:54 2026 GMT Subject: CN=6ae2e72e-0185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:4b:c3:97:37:fe:5f:2f:b1:fd:5d:ad:d2:bc: 95:34:c0:0a:d0:1a:d1:c9:01:ad:8a:76:b9:dd:3c: 69:cc:1e:26:cc:3c:7c:c3:41:2c:cd:25:4b:85:cb: 9c:94:e3:69:c9:61:61:b8:07:de:67:86:fb:1d:31: ab:33:ca:14:75:98:05:c8:c1:ef:9a:ae:ef:e2:99: ce:da:6a:e3:0b:2e:22:7d:13:31:f7:ff:3e:37:d7: 55:73:2b:b8:c1:ff:05:9d:d6:94:f2:ab:6d:bb:39: d0:94:8b:cb:fe:9a:28:51:8d:a8:09:65:f2:c3:b2: 45:20:12:e4:42:15:11:1b:fb:c3:2a:b8:6b:55:7c: e0:7e:35:23:f2:b5:e5:58:f0:73:64:02:db:82:33: f2:52:70:d9:7b:35:11:3a:fa:a8:9d:6c:a5:0f:6b: 53:33:71:3e:3d:a8:c3:52:14:93:af:57:a4:34:41: 61:7a:b2:ad:22:c6:af:ca:ae:c0:dd:a4:1b:b6:91: a0:da:a3:f3:28:ea:11:c5:76:04:b0:66:4a:eb:da: 1f:3b:9a:48:17:bb:85:6d:8a:e8:8b:0e:a9:18:42: 91:e0:66:3c:f1:71:6d:92:88:42:9c:fc:86:c1:de: c6:14:37:60:a2:30:0b:79:4c:b9:e8:84:2c:a5:93: 6c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:97:43:CF:DE:3F:B0:87:08:C5:3F:C8:C6:6B:E4:F8:8B:C6:35:E7 X509v3 Authority Key Identifier: keyid:B0:D5:25:EA:99:D4:C8:EC:75:60:71:26:A4:9E:F6:70:7B:D6:F4:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sNUl6pnUyOx1YHEmpJ72cHvW9K0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:8f:dd:99:99:d2:32:d6:d9:53:72:2d:94:9e:d0:39:c6:6c: f5:35:3d:e7:0f:1a:97:2b:d7:db:c8:c6:95:cb:35:d5:85:72: 36:50:a0:86:e5:df:8f:01:73:3f:fb:56:d0:75:ae:63:2b:45: e0:6c:1b:f7:be:28:38:35:6b:a3:e5:e7:e1:ad:44:59:11:92: 9f:0d:cf:d5:a9:6f:10:8c:18:54:9c:9c:79:89:fe:74:59:10: cf:3c:eb:57:5a:40:23:de:be:1d:8a:07:78:27:53:99:8b:2f: 2c:a5:37:7d:7c:eb:74:8f:ed:9b:c2:0e:92:41:91:a1:97:02: eb:00:8a:b6:a2:39:7e:a5:da:7f:c0:f1:bf:9e:a6:05:30:6a: 69:7d:4a:fa:99:7b:2a:a4:5d:97:f7:5f:af:15:3d:72:dd:83: d6:cf:4a:e7:67:a2:3b:c8:5b:6d:e9:d2:07:64:26:de:20:0d: ba:7a:5b:a0:f3:c7:5c:43:75:fb:7d:eb:d6:1e:6b:57:9a:85: db:d2:4f:29:f9:e6:b4:24:99:36:be:d8:b3:6a:cc:69:ed:d0: 13:61:09:83:25:ef:cb:e6:bf:b9:4a:fc:79:7f:cf:ba:b9:b4: fd:d8:96:9f:98:43:e8:37:ae:7d:de:d8:f9:5b:d1:20:54:d0: cf:27:51:a3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ0QzkxMTAvBgNVBAUTKEIwRDUyNUVBOTlENEM4RUM3NTYwNzEyNkE0OUVGNjcw N0JENkY0QUQwHhcNMjYxMDI5MDYyNjU0WhcNMjYxMTA1MDYyNjU0WjAYMRYwFAYD VQQDEw02YWUyZTcyZS0wMTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6EvDlzf+Xy+x/V2t0ryVNMAK0BrRyQGtina53TxpzB4mzDx8w0EszSVLhcuc lONpyWFhuAfeZ4b7HTGrM8oUdZgFyMHvmq7v4pnO2mrjCy4ifRMx9/8+N9dVcyu4 wf8FndaU8qttuznQlIvL/pooUY2oCWXyw7JFIBLkQhURG/vDKrhrVXzgfjUj8rXl WPBzZALbgjPyUnDZezUROvqonWylD2tTM3E+PajDUhSTr1ekNEFherKtIsavyq7A 3aQbtpGg2qPzKOoRxXYEsGZK69ofO5pIF7uFbYroiw6pGEKR4GY88XFtkohCnPyG wd7GFDdgojALeUy56IQspZNsqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAyXQ8/e P7CHCMU/yMZr5PiLxjXnMB8GA1UdIwQYMBaAFLDVJeqZ1MjsdWBxJqSe9nB71vSt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDRDOS83QkEzRTcwQzBF QzkxMUYwQTI2RkYxNDRDNEY5QUUwMi9zTlVsNnBuVXlPeDFZSEVtcEo3MmNIdlc5 SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3NOVWw2cG5VeU94MVlIRW1wSjcyY0h2VzlLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDRDOS83QkEzRTcwQzBFQzkxMUYwQTI2RkYxNDRDNEY5QUUwMi9zTlVsNnBuVXlP eDFZSEVtcEo3MmNIdlc5SzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEI/dmZnSMtbZU3ItlJ7QOcZs9TU95w8alyvX28jGlcs11YVyNlCghuXfjwFz P/tW0HWuYytF4Gwb974oODVro+Xn4a1EWRGSnw3P1alvEIwYVJyceYn+dFkQzzzr V1pAI96+HYoHeCdTmYsvLKU3fXzrdI/tm8IOkkGRoZcC6wCKtqI5fqXaf8Dxv56m BTBqaX1K+pl7KqRdl/dfrxU9ct2D1s9K52eiO8hbbenSB2Qm3iANunpboPPHXEN1 +33r1h5rV5qF29JPKfnmtCSZNr7Ys2rMae3QE2EJgyXvy+a/uUr8eX/Purm0/diW n5hD6Deufd7Y+VvRIFTQzydRow== -----END CERTIFICATE-----Generated at Thu Oct 29 16:02:15 2026 by rpki-client