$ rpki-client -vvvf rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft File: -L04pMnwxPpzvw2Q_wzKgC2_1tw.mft (raw, json) Hash identifier: 3aZSASbYn0gYQEYM24eU+1lt8WkvU8NrNpgCtcfJ/4I= Subject key identifier: A8:CA:57:07:2B:14:BC:84:7E:33:54:3C:4A:A7:28:7F:E0:18:69:DB Authority key identifier: F8:BD:38:A4:C9:F0:C4:FA:73:BF:0D:90:FF:0C:CA:80:2D:BF:D6:DC Certificate issuer: /CN=A91407B7/serialNumber=F8BD38A4C9F0C4FA73BF0D90FF0CCA802DBFD6DC Certificate serial: 08F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L04pMnwxPpzvw2Q_wzKgC2_1tw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft Manifest number: 08E2 Signing time: Mon 26 Oct 2026 20:23:43 +0000 Manifest this update: Mon 26 Oct 2026 20:23:42 +0000 Manifest next update: Mon 02 Nov 2026 20:23:42 +0000 Files and hashes: 1: -L04pMnwxPpzvw2Q_wzKgC2_1tw.crl (hash: UsHw5/zFp37GYyXQjwkY02eMUvY/ynHtoTODwmWLHQ4=) 2: 4878EA2E954511EF87341210C4F9AE02.roa (hash: nPuGU4dIjV5NcDfw4+iA+iIUzRsqHity9f8+08+b7NA=) 3: 26833348954511EFA5D9B90FC4F9AE02.roa (hash: h8w/oRabDFzHFUZZQz0f2z/FRWd7Jq2xtW0buGwOh1U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.crl rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L04pMnwxPpzvw2Q_wzKgC2_1tw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 20:23:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2295 (0x8f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91407B7, serialNumber=F8BD38A4C9F0C4FA73BF0D90FF0CCA802DBFD6DC Validity Not Before: Oct 26 20:23:42 2026 GMT Not After : Nov 2 20:23:42 2026 GMT Subject: CN=6adfb6ce-69fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:07:9c:26:ea:9f:58:54:b3:c9:00:ef:fa:5c: 1f:b8:1a:0e:85:8a:af:06:45:6a:76:57:e0:ce:04: 48:2f:90:34:a1:0b:b8:ee:e1:f0:51:0b:dd:5a:61: 0b:db:bd:0b:77:60:4e:ae:6c:7b:fe:99:13:1c:a3: 18:b9:b6:24:1b:4f:16:c9:1b:75:98:db:7d:a2:29: 88:53:a5:a9:9d:5e:37:3c:2b:30:0d:0c:91:59:f0: 07:88:5c:9d:3d:93:b1:fb:7f:a6:00:60:90:d2:aa: 17:a9:a6:d2:2a:ab:bc:31:63:4d:da:53:7b:8d:27: 03:d1:22:f7:ac:d1:da:12:ac:0a:97:44:30:c1:0e: 6d:38:ee:78:b1:79:73:e4:90:45:c8:1e:56:a4:e7: d4:43:7d:17:f9:56:86:56:04:e6:49:92:e8:69:e1: 89:9d:f2:d6:8e:49:f2:09:46:0f:ef:2d:8a:0a:2b: 00:d0:78:3d:e9:f1:a7:2c:8d:d7:c2:3c:8d:8f:fe: 99:ad:e1:23:d6:5e:f1:b7:3d:c3:bc:26:32:37:9b: 34:0d:9e:d0:d3:be:5c:c2:e8:05:2f:e4:b8:c6:23: ef:11:18:a8:1d:e2:28:04:e9:89:46:2d:cb:8f:fe: 89:14:98:1f:89:4d:06:88:51:54:a3:a6:16:50:fc: cd:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:CA:57:07:2B:14:BC:84:7E:33:54:3C:4A:A7:28:7F:E0:18:69:DB X509v3 Authority Key Identifier: keyid:F8:BD:38:A4:C9:F0:C4:FA:73:BF:0D:90:FF:0C:CA:80:2D:BF:D6:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L04pMnwxPpzvw2Q_wzKgC2_1tw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:3e:ee:4c:a5:c2:4d:f0:b3:8a:f0:42:1e:03:67:c4:95:56: bf:92:d0:8f:f4:9b:19:99:2a:22:28:88:94:eb:a3:a3:ff:83: 60:34:89:81:63:a5:c9:e9:ef:ee:c4:cf:e8:b8:81:79:b5:de: 36:3c:e5:17:f4:40:f6:95:c5:39:c6:2b:db:f0:8f:43:db:d0: b7:28:aa:5b:e3:fa:b8:90:1b:15:0c:fb:0d:34:1f:c1:dc:94: 83:2f:1c:c6:79:ab:85:e3:46:a2:d9:b2:98:3a:13:43:50:54: 19:d4:9f:9b:5a:59:a7:6a:f2:77:2a:ee:91:c0:ab:a9:04:41: f7:9d:db:9e:14:71:e1:30:d8:57:98:84:01:02:08:ce:01:74: bb:b0:60:9b:ef:43:84:bf:fe:1d:b9:d5:c4:a4:43:1a:39:96: 3c:d3:f7:ed:d5:77:2e:c0:1a:39:97:92:6e:8b:7b:2f:10:71: 52:47:63:91:fe:00:80:4b:58:cd:f0:c3:76:e5:9f:8a:24:e8: 06:70:9b:89:d0:51:b7:14:d5:d6:73:d6:67:f6:d9:8e:9d:9e: c5:78:4a:72:70:c2:88:87:36:7e:4b:8c:d9:25:ad:cd:c5:eb: 81:a9:a9:92:7a:b4:95:72:37:ee:99:5b:b3:b8:37:9d:af:5d: d8:a6:76:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA3QjcxMTAvBgNVBAUTKEY4QkQzOEE0QzlGMEM0RkE3M0JGMEQ5MEZGMENDQTgw MkRCRkQ2REMwHhcNMjYxMDI2MjAyMzQyWhcNMjYxMTAyMjAyMzQyWjAYMRYwFAYD VQQDEw02YWRmYjZjZS02OWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2QecJuqfWFSzyQDv+lwfuBoOhYqvBkVqdlfgzgRIL5A0oQu47uHwUQvdWmEL 270Ld2BOrmx7/pkTHKMYubYkG08WyRt1mNt9oimIU6WpnV43PCswDQyRWfAHiFyd PZOx+3+mAGCQ0qoXqabSKqu8MWNN2lN7jScD0SL3rNHaEqwKl0QwwQ5tOO54sXlz 5JBFyB5WpOfUQ30X+VaGVgTmSZLoaeGJnfLWjknyCUYP7y2KCisA0Hg96fGnLI3X wjyNj/6ZreEj1l7xtz3DvCYyN5s0DZ7Q075cwugFL+S4xiPvERioHeIoBOmJRi3L j/6JFJgfiU0GiFFUo6YWUPzNKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKjKVwcr FLyEfjNUPEqnKH/gGGnbMB8GA1UdIwQYMBaAFPi9OKTJ8MT6c78NkP8MyoAtv9bc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDdCNy9CRDZGRTg1MEYx NzUxMUVBQjU2QjAwNENDNEY5QUUwMi8tTDA0cE1ud3hQcHp2dzJRX3d6S2dDMl8x dHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1MMDRwTW53eFBwenZ3MlFfd3pLZ0MyXzF0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDdCNy9CRDZGRTg1MEYxNzUxMUVBQjU2QjAwNENDNEY5QUUwMi8tTDA0cE1ud3hQ cHp2dzJRX3d6S2dDMl8xdHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdD7uTKXCTfCzivBCHgNnxJVWv5LQj/SbGZkqIiiIlOujo/+DYDSJgWOlyenv 7sTP6LiBebXeNjzlF/RA9pXFOcYr2/CPQ9vQtyiqW+P6uJAbFQz7DTQfwdyUgy8c xnmrheNGotmymDoTQ1BUGdSfm1pZp2rydyrukcCrqQRB953bnhRx4TDYV5iEAQII zgF0u7Bgm+9DhL/+HbnVxKRDGjmWPNP37dV3LsAaOZeSbot7LxBxUkdjkf4AgEtY zfDDduWfiiToBnCbidBRtxTV1nPWZ/bZjp2exXhKcnDCiIc2fkuM2SWtzcXrgamp knq0lXI37plbs7g3na9d2KZ2kw== -----END CERTIFICATE-----Generated at Wed Oct 28 18:14:25 2026 by rpki-client