$ rpki-client -vvvf rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft File: 09Fa7ppPiuXCgRCKfS062B1Oec0.mft (raw, json) Hash identifier: AEXJUPs2J8dAQeFLi7jyCDQMEZyu9HEIlFs9NxAst68= Subject key identifier: 78:D0:37:A7:5F:88:8E:39:FD:69:CA:A9:05:C1:EC:51:0B:8F:A5:6D Authority key identifier: D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD Certificate issuer: /CN=A91397C2/serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD Certificate serial: 0921 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft Manifest number: 08E8 Signing time: Sat 24 Oct 2026 20:30:33 +0000 Manifest this update: Sat 24 Oct 2026 20:30:33 +0000 Manifest next update: Sat 31 Oct 2026 20:30:33 +0000 Files and hashes: 1: 09Fa7ppPiuXCgRCKfS062B1Oec0.crl (hash: +cmO2HayuJPctqjel9PQF1xFGes5PE5/hq08F8ri2PI=) 2: 7F9EB0A28CF111F09EC8727CC4F9AE02.roa (hash: gzcB5bzyDXKQ7TWulNDMH2WNKACJo+cBlc1OpEzaIqo=) 3: 29BC840E002711EB8FA6A142C4F9AE02.roa (hash: 1hK6aCJ+7Fb1oUPOZ4u6IyJKzDYRKvTsmB4Y2o3Noe8=) 4: B7AD6F08264611F1A7E2573D9F833773.roa (hash: cAi1E/gIPdIvRZ5EylPtBXr5xfvPwzP6uzvwERgkasg=) 5: BE79CDCE16AF11F08B8C4061C4F9AE02.roa (hash: PXtviaHqQJLCMEu9tn+Fq2a2NfU37e2CJGxdPkOxh1g=) 6: E4FA38362D2311F1A198B1F8B7833773.roa (hash: AxJKOqSnxksdZpHOPb0q92RjtR735qgr4EIIyE6SdIo=) 7: C3738F60A78511F0B1D3342CC4F9AE02.roa (hash: tB/DnIqV82CpIIhO+TP7hcH1C9TgViQTWGZ17z9LsKo=) 8: 931A1664264611F1BB7525369F833773.roa (hash: O+dFRmqz0HLQWE2NlORO6GptWeFGJW4FEbE2GeFkulo=) 9: 0C64C6B2821011F0B329B866C4F9AE02.roa (hash: UuZBWjQy/vvCDj1GH11Ut9+9Pjsx/5KL/8Qu7tKsi7U=) 10: 3AA556009A8411EFB791ED77C4F9AE02.roa (hash: 6t+wjHRQ/GqT5IcSFRj+6zc7NKRi89qTochP2LMsRS8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 20:30:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2337 (0x921) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91397C2, serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD Validity Not Before: Oct 24 20:30:33 2026 GMT Not After : Oct 31 20:30:33 2026 GMT Subject: CN=6add1569-4644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2b:32:bd:7f:57:81:66:2d:a6:69:35:96:ef: 31:f9:c5:33:ca:2a:57:84:ce:56:3e:ca:b2:f9:09: d3:49:ac:cc:88:cd:b9:1c:77:8f:5f:d0:78:bc:7d: 33:27:f6:42:95:55:00:90:be:aa:1e:cb:b2:7b:e2: 39:06:d3:d9:67:19:cb:4f:19:94:11:71:6b:6b:f5: d6:92:eb:30:d6:d6:5e:44:bf:78:72:08:bd:bd:fe: 0d:73:e7:c1:78:d4:04:97:91:83:3e:a5:85:91:be: a1:76:86:09:ee:74:c6:53:40:90:9c:3d:9a:f7:29: 58:a6:a5:95:4c:de:59:a3:f1:9a:9a:66:b7:04:34: fe:96:e8:8e:c9:f1:c6:2e:4d:be:00:09:1c:9d:86: 97:59:93:7a:84:c0:20:1a:2e:67:25:04:94:0f:8a: c7:c9:63:0d:d6:5f:7c:2b:1d:8b:24:a0:a6:f4:ff: a2:a3:dc:19:cc:17:d3:3a:de:b2:b7:6b:fd:a8:c5: 7b:0a:74:f8:3f:79:de:65:6f:8b:69:68:87:08:41: cb:e2:a7:07:5e:38:98:04:0a:77:46:44:8f:e9:cc: b9:35:fa:3e:37:1d:71:fa:dc:8d:0e:cd:51:be:a1: fe:66:29:41:bc:cc:cf:ae:13:85:94:24:ee:9f:8d: 63:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:D0:37:A7:5F:88:8E:39:FD:69:CA:A9:05:C1:EC:51:0B:8F:A5:6D X509v3 Authority Key Identifier: keyid:D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:86:ca:ef:12:b6:c6:94:37:f7:06:f0:a1:10:2f:62:0c:f0: 8c:db:35:4c:ba:69:1f:cd:4c:67:44:e8:3e:41:fc:29:d9:db: ea:43:36:71:45:74:50:19:7c:31:bd:7b:4f:1e:27:19:39:07: 68:72:82:2e:06:13:01:b4:e9:dc:15:01:97:c8:62:83:60:c8: bd:be:b5:cf:cf:3f:1b:da:df:20:5d:a2:60:ea:d4:12:91:c7: d1:12:f1:1a:9d:cd:dc:06:29:b0:82:77:09:d3:f1:ac:23:e3: 52:87:6b:13:d0:11:2b:68:07:b1:b7:50:2d:0b:27:29:98:68: 4a:2a:71:cc:26:72:38:64:42:d1:0d:1b:e0:8d:42:be:a3:a8: d5:59:7a:c8:e6:d9:02:95:1f:10:be:01:14:40:9d:1a:f2:76: d9:53:1a:29:ff:49:10:49:2c:83:d9:af:bf:d3:32:a1:bb:54: 12:bb:77:e9:7d:c9:5a:0a:e3:cf:5c:bb:26:13:56:25:db:73: 02:84:e8:7c:30:3c:09:1b:ed:3b:84:97:5d:9a:23:b9:81:33: 73:a6:f4:f7:41:d0:41:33:c0:8e:9f:da:46:e4:64:82:f7:d6: 69:f7:17:f6:47:6e:fe:a9:63:dd:92:f3:9b:cc:6b:47:67:a5: af:03:4b:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCSEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk3QzIxMTAvBgNVBAUTKEQzRDE1QUVFOUE0RjhBRTVDMjgxMTA4QTdEMkQzQUQ4 MUQ0RTc5Q0QwHhcNMjYxMDI0MjAzMDMzWhcNMjYxMDMxMjAzMDMzWjAYMRYwFAYD VQQDEw02YWRkMTU2OS00NjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApysyvX9XgWYtpmk1lu8x+cUzyipXhM5WPsqy+QnTSazMiM25HHePX9B4vH0z J/ZClVUAkL6qHsuye+I5BtPZZxnLTxmUEXFra/XWkusw1tZeRL94cgi9vf4Nc+fB eNQEl5GDPqWFkb6hdoYJ7nTGU0CQnD2a9ylYpqWVTN5Zo/Gamma3BDT+luiOyfHG Lk2+AAkcnYaXWZN6hMAgGi5nJQSUD4rHyWMN1l98Kx2LJKCm9P+io9wZzBfTOt6y t2v9qMV7CnT4P3neZW+LaWiHCEHL4qcHXjiYBAp3RkSP6cy5Nfo+Nx1x+tyNDs1R vqH+ZilBvMzPrhOFlCTun41jOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHjQN6df iI45/WnKqQXB7FELj6VtMB8GA1UdIwQYMBaAFNPRWu6aT4rlwoEQin0tOtgdTnnN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTdDMi80RTQyNkRFOEZC RUExMUVBOTQwQTFEMTlDNEY5QUUwMi8wOUZhN3BwUGl1WENnUkNLZlMwNjJCMU9l YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5RmE3cHBQaXVYQ2dSQ0tmUzA2MkIxT2VjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTdDMi80RTQyNkRFOEZCRUExMUVBOTQwQTFEMTlDNEY5QUUwMi8wOUZhN3BwUGl1 WENnUkNLZlMwNjJCMU9lYzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIobK7xK2xpQ39wbwoRAvYgzwjNs1TLppH81MZ0ToPkH8Kdnb6kM2cUV0UBl8 Mb17Tx4nGTkHaHKCLgYTAbTp3BUBl8hig2DIvb61z88/G9rfIF2iYOrUEpHH0RLx Gp3N3AYpsIJ3CdPxrCPjUodrE9ARK2gHsbdQLQsnKZhoSipxzCZyOGRC0Q0b4I1C vqOo1Vl6yObZApUfEL4BFECdGvJ22VMaKf9JEEksg9mvv9MyobtUErt36X3JWgrj z1y7JhNWJdtzAoTofDA8CRvtO4SXXZojuYEzc6b090HQQTPAjp/aRuRkgvfWafcX 9kdu/qlj3ZLzm8xrR2elrwNLUA== -----END CERTIFICATE-----Generated at Mon Oct 26 01:54:11 2026 by rpki-client