$ rpki-client -vvvf rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft File: Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft (raw, json) Hash identifier: yDBySy5fqAbqIRlpGtkBQvd25SaMrx960960jBILjRg= Subject key identifier: 6C:DD:46:BC:31:A0:29:57:A1:06:DC:49:C7:BE:4B:2F:E0:8F:2E:AA Authority key identifier: 3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60 Certificate issuer: /CN=A91188EE/serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360 Certificate serial: 0205 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft Manifest number: 01ED Signing time: Wed 21 Oct 2026 04:07:41 +0000 Manifest this update: Wed 21 Oct 2026 04:07:40 +0000 Manifest next update: Wed 28 Oct 2026 04:07:40 +0000 Files and hashes: 1: Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl (hash: BCSy5IQHvhEdLascAiAp1O5DKQWVEdm355z2UBat7pY=) 2: 6AAF8E08F51C11F09AD046EA586F56BC.roa (hash: SP0l74PQqvrBQ9lrsUma09WUsHYdqT0/VfQ61jRKUvk=) 3: B7B28B24B29611F091864D65C4F9AE02.roa (hash: 1Y5EWX2B5Sr7pLRnjhTyg4ghHXLoKpdO7vaR/h8E6x0=) 4: 4DC69458F51C11F0B1C1D2E9586F56BC.roa (hash: E5hqQqMyoQ9aOSGCT2wM7hBxXm+pQQiTCiLoJNmSSp0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 04:07:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 517 (0x205) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91188EE, serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360 Validity Not Before: Oct 21 04:07:40 2026 GMT Not After : Oct 28 04:07:40 2026 GMT Subject: CN=6ad83a8d-5ff1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d2:4a:b6:1e:c2:35:34:64:64:45:8e:a8:87: 0b:da:c9:8a:f0:a7:b1:8e:c9:20:f6:2a:10:f8:30: 92:26:90:a6:89:7f:4a:bd:6b:35:62:cc:b7:59:63: 9c:28:99:94:0e:75:f9:ce:74:79:78:4a:36:c4:26: d5:f5:e8:f1:b3:06:85:d7:99:dc:7d:fe:ca:70:ca: a1:3c:21:b1:df:c5:1c:74:17:d5:3f:ae:60:7d:81: 3c:76:08:7e:2d:8e:39:05:f7:87:aa:3a:40:9a:46: 2f:13:ac:87:3d:64:91:42:42:78:63:1a:10:a7:8c: b2:3b:b9:35:64:ca:d6:e3:6f:46:5d:f1:ed:05:fc: 41:4f:42:95:08:15:77:f2:b8:2e:0b:5f:89:98:be: 8c:d5:49:2f:be:3d:44:88:58:58:f0:72:19:5e:de: d6:a1:82:a3:f9:0c:2d:48:a8:5d:64:6c:95:f7:c7: f5:ff:68:52:35:54:d6:dc:11:31:86:63:13:3f:70: 81:0e:08:e5:11:4c:17:cb:91:12:44:66:b9:99:43: b2:cb:50:14:02:8f:42:56:4d:69:13:07:f1:54:7e: 0c:b5:af:63:81:ee:5b:4e:c8:37:32:25:46:94:60: a8:f8:08:61:db:82:bf:40:46:80:70:32:d3:ed:0a: 9b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:DD:46:BC:31:A0:29:57:A1:06:DC:49:C7:BE:4B:2F:E0:8F:2E:AA X509v3 Authority Key Identifier: keyid:3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:a6:3d:3d:ca:3e:0b:e2:99:9b:ef:4a:91:3e:f2:d8:ce:d0: 5b:4d:3f:a9:2f:a2:5b:b3:eb:43:dd:9b:30:ed:56:d1:85:c6: dd:43:2b:c8:be:c0:39:b1:b6:33:83:3d:12:07:b1:cc:18:f7: df:6b:79:f2:33:6a:c6:68:3c:64:36:63:66:85:df:7c:06:cf: 12:da:51:ca:f3:18:e4:e6:17:2a:aa:dd:57:e9:1e:e8:7f:b2: d4:af:fa:1c:9e:90:30:ca:04:01:f0:c2:99:60:54:25:2b:24: aa:a1:2e:c4:ad:70:1c:da:82:d3:60:63:43:86:ff:30:5a:34: 07:9a:ab:11:c4:bd:54:d6:1c:8c:06:15:d8:44:e9:83:c0:42: 73:95:7e:7b:d4:58:1f:7c:ac:23:b3:c8:3c:85:9e:95:60:6d: ca:4b:f7:16:4f:f1:55:29:e7:c0:4b:22:86:15:88:60:cc:ed: ae:6c:10:45:b9:73:bd:a7:93:3a:ab:b0:e0:ab:26:db:93:a1: f0:44:f1:82:b6:3b:be:60:2c:b6:5b:55:77:c6:35:cd:c5:ca: bc:e5:f7:c1:bd:c1:97:80:35:e6:d2:4a:dd:19:4b:6f:46:76: f0:21:0b:53:06:a8:ce:18:81:c3:d2:45:50:86:fe:67:24:4a: 3e:49:43:61 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg4RUUxMTAvBgNVBAUTKDNBRURBODA0MDdENzdCQjUyODQ4QUJEOUY3MjU5QkQ4 MDdBNUQzNjAwHhcNMjYxMDIxMDQwNzQwWhcNMjYxMDI4MDQwNzQwWjAYMRYwFAYD VQQDEw02YWQ4M2E4ZC01ZmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw9JKth7CNTRkZEWOqIcL2smK8Kexjskg9ioQ+DCSJpCmiX9KvWs1Ysy3WWOc KJmUDnX5znR5eEo2xCbV9ejxswaF15ncff7KcMqhPCGx38UcdBfVP65gfYE8dgh+ LY45BfeHqjpAmkYvE6yHPWSRQkJ4YxoQp4yyO7k1ZMrW429GXfHtBfxBT0KVCBV3 8rguC1+JmL6M1Ukvvj1EiFhY8HIZXt7WoYKj+QwtSKhdZGyV98f1/2hSNVTW3BEx hmMTP3CBDgjlEUwXy5ESRGa5mUOyy1AUAo9CVk1pEwfxVH4Mta9jge5bTsg3MiVG lGCo+Ahh24K/QEaAcDLT7QqbSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGzdRrwx oClXoQbcSce+Sy/gjy6qMB8GA1UdIwQYMBaAFDrtqAQH13u1KEir2fclm9gHpdNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODhFRS8zMjA5NzMxQUZC QUYxMUVFQTZCQzM5NTJDNEY5QUUwMi9PdTJvQkFmWGU3VW9TS3ZaOXlXYjJBZWww MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL091Mm9CQWZYZTdVb1NLdlo5eVdiMkFlbDAyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODhFRS8zMjA5NzMxQUZCQUYxMUVFQTZCQzM5NTJDNEY5QUUwMi9PdTJvQkFmWGU3 VW9TS3ZaOXlXYjJBZWwwMkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGqY9Pco+C+KZm+9KkT7y2M7QW00/qS+iW7PrQ92bMO1W0YXG3UMryL7AObG2 M4M9EgexzBj332t58jNqxmg8ZDZjZoXffAbPEtpRyvMY5OYXKqrdV+ke6H+y1K/6 HJ6QMMoEAfDCmWBUJSskqqEuxK1wHNqC02BjQ4b/MFo0B5qrEcS9VNYcjAYV2ETp g8BCc5V+e9RYH3ysI7PIPIWelWBtykv3Fk/xVSnnwEsihhWIYMztrmwQRblzvaeT Oquw4Ksm25Oh8ETxgrY7vmAstltVd8Y1zcXKvOX3wb3Bl4A15tJK3RlLb0Z28CEL UwaozhiBw9JFUIb+ZyRKPklDYQ== -----END CERTIFICATE-----Generated at Wed Oct 21 22:48:23 2026 by rpki-client