$ rpki-client -vvvf rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft File: m7K00aj-gR3ElT2ALRAvXQSNCB0.mft (raw, json) Hash identifier: c8E9yYZR3HPM51isAkThcSvi8PRMBgjolfiEcraTrYk= Subject key identifier: 41:4C:07:32:7E:DF:F0:87:95:92:D0:77:BE:E7:1B:EC:C6:44:B4:D7 Authority key identifier: 9B:B2:B4:D1:A8:FE:81:1D:C4:95:3D:80:2D:10:2F:5D:04:8D:08:1D Certificate issuer: /CN=A91454A8/serialNumber=9BB2B4D1A8FE811DC4953D802D102F5D048D081D Certificate serial: 095B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft Manifest number: 0944 Signing time: Sat 24 Oct 2026 20:10:45 +0000 Manifest this update: Sat 24 Oct 2026 20:10:45 +0000 Manifest next update: Sat 31 Oct 2026 20:10:45 +0000 Files and hashes: 1: m7K00aj-gR3ElT2ALRAvXQSNCB0.crl (hash: 4Wkb5VZU9eDHeD2QA5uf+Q3pDWBO9rlda0D1VO0NbO4=) 2: 91CB02E0DBDD11F0B3C660C858641951.roa (hash: S9P6S3zHGxSIuuK6o8a+ulaM7AA43gLPQGWTZ+ootLs=) 3: 7B3B0868DBDD11F089B5B5C658641951.roa (hash: DCiubbftabSxu91ah+p7CZ1dSt4rSpuPeVIKNRHm1PY=) 4: 5EA3F4042E5C11F1A98E57D89B833773.roa (hash: N+uHaG3MJr82cfnEajXUFCCao7Ru1SBdTbuDh04l7Ng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.crl rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 20:10:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2395 (0x95b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91454A8, serialNumber=9BB2B4D1A8FE811DC4953D802D102F5D048D081D Validity Not Before: Oct 24 20:10:45 2026 GMT Not After : Oct 31 20:10:45 2026 GMT Subject: CN=6add10c5-cb5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6f:34:82:94:a5:b0:89:12:87:88:53:10:b5: 4d:71:11:4d:65:a4:49:5d:ef:a4:94:80:bc:36:53: da:83:61:5e:a6:2f:87:1f:83:67:99:e5:d8:2b:bc: 7e:a6:cb:86:e4:e4:08:44:55:fd:9b:1a:6c:37:4d: 74:b5:b3:1c:f4:a6:6d:80:9c:f7:b0:fd:de:f8:f1: 24:3e:1c:71:ba:ad:39:10:52:e1:70:b3:81:0f:83: 57:f1:ab:4b:51:1b:53:b9:aa:c3:77:f4:3f:fa:42: 24:52:76:68:4a:47:49:cf:cd:77:da:51:63:ac:fb: 94:22:0a:b9:a2:8f:c6:78:80:2e:cb:41:d0:62:3b: 52:84:7d:29:28:6b:46:a0:0e:c1:38:81:3e:5e:c6: d3:9d:d4:29:d7:c5:9b:e4:61:54:47:1e:e4:78:19: c4:19:b8:14:b1:78:a9:70:ca:e1:b1:72:7b:21:71: 62:2d:f7:3a:45:57:00:52:d6:57:ed:f0:95:4a:62: e5:e7:79:bc:46:cf:21:ce:72:cd:9c:7c:0c:04:7c: 99:5c:14:e8:e7:39:3a:3f:8d:4d:2f:7a:12:1d:0a: 44:70:55:0d:2d:3a:1f:c6:f4:55:14:ad:33:b3:ca: 55:97:91:63:e1:0e:c2:9c:f8:5b:4a:59:1f:e6:b5: 3a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:4C:07:32:7E:DF:F0:87:95:92:D0:77:BE:E7:1B:EC:C6:44:B4:D7 X509v3 Authority Key Identifier: keyid:9B:B2:B4:D1:A8:FE:81:1D:C4:95:3D:80:2D:10:2F:5D:04:8D:08:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:6a:9c:9b:a2:35:75:05:45:bc:1f:9a:8c:ec:1b:bf:41:a9: 27:62:da:9a:5b:33:07:f9:51:70:70:a6:37:9a:33:e1:e4:b9: 87:c6:a8:b2:c9:65:50:f6:a3:27:dc:78:ee:ec:bf:72:b5:63: 5e:0c:b2:75:a2:c9:8e:b9:29:4d:8b:e5:e0:2e:11:df:9e:13: a6:b2:04:75:65:1f:c4:2b:01:f6:63:2e:42:20:42:76:71:3c: c2:c6:83:b5:ee:bb:c7:96:3c:cd:58:99:1f:49:db:16:a0:50: db:14:a4:5a:81:5a:de:57:70:75:ae:af:e6:d7:07:fe:2a:6c: 4d:54:39:e3:0d:6b:a3:57:b5:66:6d:ff:41:15:46:2f:9e:ba: e4:ae:89:7e:0f:3a:6c:5b:71:84:1a:4a:04:7a:03:dd:38:cb: 33:fe:71:ed:55:2f:5b:8e:94:97:9a:3f:ea:85:cf:70:71:49: 59:c2:a9:92:a6:3d:45:a3:61:f5:e3:55:74:d2:10:cc:e0:8d: f3:bc:e5:65:d6:39:16:81:f1:7b:c6:04:f0:cb:c0:7a:23:90: d7:60:ec:fc:75:b4:d8:e8:b4:ad:e8:80:b6:ed:b8:66:28:13: 01:c4:3b:c3:6b:44:8c:07:6c:80:46:e0:44:59:d3:c8:b9:4f: 8b:71:f0:0d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU0QTgxMTAvBgNVBAUTKDlCQjJCNEQxQThGRTgxMURDNDk1M0Q4MDJEMTAyRjVE MDQ4RDA4MUQwHhcNMjYxMDI0MjAxMDQ1WhcNMjYxMDMxMjAxMDQ1WjAYMRYwFAYD VQQDEw02YWRkMTBjNS1jYjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtG80gpSlsIkSh4hTELVNcRFNZaRJXe+klIC8NlPag2Fepi+HH4NnmeXYK7x+ psuG5OQIRFX9mxpsN010tbMc9KZtgJz3sP3e+PEkPhxxuq05EFLhcLOBD4NX8atL URtTuarDd/Q/+kIkUnZoSkdJz8132lFjrPuUIgq5oo/GeIAuy0HQYjtShH0pKGtG oA7BOIE+XsbTndQp18Wb5GFURx7keBnEGbgUsXipcMrhsXJ7IXFiLfc6RVcAUtZX 7fCVSmLl53m8Rs8hznLNnHwMBHyZXBTo5zk6P41NL3oSHQpEcFUNLTofxvRVFK0z s8pVl5Fj4Q7CnPhbSlkf5rU6EQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEFMBzJ+ 3/CHlZLQd77nG+zGRLTXMB8GA1UdIwQYMBaAFJuytNGo/oEdxJU9gC0QL10EjQgd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTRBOC9FMjk1MjBCOEQx Q0QxMUVBQkE0QTM0NDBDNEY5QUUwMi9tN0swMGFqLWdSM0VsVDJBTFJBdlhRU05D QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL203SzAwYWotZ1IzRWxUMkFMUkF2WFFTTkNCMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTRBOC9FMjk1MjBCOEQxQ0QxMUVBQkE0QTM0NDBDNEY5QUUwMi9tN0swMGFqLWdS M0VsVDJBTFJBdlhRU05DQjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcWqcm6I1dQVFvB+ajOwbv0GpJ2LamlszB/lRcHCmN5oz4eS5h8aossllUPaj J9x47uy/crVjXgyydaLJjrkpTYvl4C4R354TprIEdWUfxCsB9mMuQiBCdnE8wsaD te67x5Y8zViZH0nbFqBQ2xSkWoFa3ldwda6v5tcH/ipsTVQ54w1ro1e1Zm3/QRVG L5665K6Jfg86bFtxhBpKBHoD3TjLM/5x7VUvW46Ul5o/6oXPcHFJWcKpkqY9RaNh 9eNVdNIQzOCN87zlZdY5FoHxe8YE8MvAeiOQ12Ds/HW02Oi0reiAtu24ZigTAcQ7 w2tEjAdsgEbgRFnTyLlPi3HwDQ== -----END CERTIFICATE-----Generated at Mon Oct 26 02:49:20 2026 by rpki-client