$ rpki-client -vvvf rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft File: C_K1lEw6LMq2wdErw2pa88Lc938.mft (raw, json) Hash identifier: sURWfAnfkzzyJe+rKVkMiaRxfLq2eTFruabYHKy4bhI= Subject key identifier: D5:90:9C:11:B3:48:BB:F5:E0:51:2B:D8:66:55:4A:00:5D:C3:A4:E5 Authority key identifier: 0B:F2:B5:94:4C:3A:2C:CA:B6:C1:D1:2B:C3:6A:5A:F3:C2:DC:F7:7F Certificate issuer: /CN=A91473F8/serialNumber=0BF2B5944C3A2CCAB6C1D12BC36A5AF3C2DCF77F Certificate serial: 0DC0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft Manifest number: 0DA6 Signing time: Tue 06 Oct 2026 18:00:48 +0000 Manifest this update: Tue 06 Oct 2026 18:00:48 +0000 Manifest next update: Tue 13 Oct 2026 18:00:48 +0000 Files and hashes: 1: C_K1lEw6LMq2wdErw2pa88Lc938.crl (hash: LHIBYT46HH/m5mQ4lB9+Mt/3JfvRaZPgxhEnBoawhKo=) 2: 3AED03D23F0211F186B62790C8833773.roa (hash: O/S7ipxs7LAaw3lfKf/6hOXusOP9np78Uf6jI39ajNI=) 3: F5660FBC160611ECB3912A7EC4F9AE02.roa (hash: jSGQxP09SiqSKhxNXc5lw5g218RQ1wLEioMxa2d9E88=) 4: C981BB3CF36A11E983B1D764C4F9AE02.roa (hash: utJ70W8kwk0UrAZBtfvLLdbnNC7YzT3hBvwvulsC1zU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.crl rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 18:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3520 (0xdc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91473F8, serialNumber=0BF2B5944C3A2CCAB6C1D12BC36A5AF3C2DCF77F Validity Not Before: Oct 6 18:00:48 2026 GMT Not After : Oct 13 18:00:48 2026 GMT Subject: CN=6ac53750-2e85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:79:35:d5:9b:49:23:8e:de:13:91:45:33:0d: 0c:1e:6b:96:47:2c:3f:65:6f:d8:b1:fd:0e:64:8a: e9:60:35:58:76:7e:ac:4b:df:0a:7d:76:52:70:7d: ef:ac:fc:d4:dc:16:5c:e8:4c:98:5c:43:ad:92:e5: 17:fa:e6:65:65:4e:4d:cf:a0:6d:fa:de:1e:e3:a0: e7:59:d2:08:a3:5e:cf:06:1a:ce:13:a6:5a:c6:40: c7:e9:2c:de:75:de:46:fd:18:58:80:5c:1b:3d:4f: df:09:31:55:c0:4c:62:f3:2f:fa:83:96:f4:ef:b4: b0:15:e8:e6:28:13:b6:2f:1c:48:76:b9:3a:78:52: a9:71:cb:ad:96:5e:04:a0:af:95:b5:3f:51:63:90: 97:f9:e3:18:24:9b:30:57:44:70:71:d1:46:7b:34: 68:d2:2e:b1:6a:2b:f2:94:62:f2:e9:ac:c5:5e:66: 1c:a5:89:cf:66:4b:fc:db:34:ad:64:83:b9:f0:87: ba:1b:4e:32:cb:7b:bc:96:ed:e3:8b:4a:ad:7d:f8: 2c:17:7e:fa:c6:04:9f:22:d5:65:87:d5:29:8a:ca: 75:10:0b:df:5d:54:1a:f1:2a:5b:54:4a:65:8e:a6: 31:de:c1:58:27:31:f2:31:c6:33:d9:10:4c:7d:aa: fd:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:90:9C:11:B3:48:BB:F5:E0:51:2B:D8:66:55:4A:00:5D:C3:A4:E5 X509v3 Authority Key Identifier: keyid:0B:F2:B5:94:4C:3A:2C:CA:B6:C1:D1:2B:C3:6A:5A:F3:C2:DC:F7:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:b3:b8:f4:f8:ef:c4:48:3a:15:50:dd:a5:9a:a6:1b:e1:7c: 81:8e:49:1c:93:93:9a:a5:63:53:38:10:3c:f0:27:27:6a:e3: d7:c2:99:bd:01:30:33:79:70:81:04:9b:e8:d7:f0:28:f5:65: 22:11:e7:49:5e:d4:ca:a1:fe:17:95:20:d3:2c:29:d6:ac:3f: 5d:1d:9d:56:c3:e1:2a:89:a0:f5:e0:83:bf:74:ed:f5:49:9b: f5:ed:b9:dc:a7:40:7e:9d:50:6a:4e:52:32:d7:9d:2c:12:d0: ea:de:5c:7d:6c:fe:1f:37:55:39:5a:28:02:14:d0:92:52:a4: ed:df:4d:a3:55:6c:9c:9f:6f:24:4b:3b:6f:25:29:74:8d:24: 21:c9:79:62:83:3c:ed:ca:70:77:b0:23:a3:50:44:f1:fa:80: 28:1c:c7:75:6a:4a:46:e3:d8:00:1c:4d:04:6e:b9:f3:62:c3: e5:92:2a:f7:26:59:72:d7:72:b7:c4:7b:82:fb:23:ef:62:3d: 26:0a:98:e8:a2:4f:35:18:7a:e5:b1:4b:b6:05:7f:b0:38:cc: bd:3f:16:99:82:00:91:4f:ba:d1:8e:14:4a:d6:66:be:32:d3: ef:fb:f6:14:b7:9a:af:7d:03:ae:71:a5:c4:53:29:14:fe:89: ed:32:b2:61 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDczRjgxMTAvBgNVBAUTKDBCRjJCNTk0NEMzQTJDQ0FCNkMxRDEyQkMzNkE1QUYz QzJEQ0Y3N0YwHhcNMjYxMDA2MTgwMDQ4WhcNMjYxMDEzMTgwMDQ4WjAYMRYwFAYD VQQDEw02YWM1Mzc1MC0yZTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHk11ZtJI47eE5FFMw0MHmuWRyw/ZW/Ysf0OZIrpYDVYdn6sS98KfXZScH3v rPzU3BZc6EyYXEOtkuUX+uZlZU5Nz6Bt+t4e46DnWdIIo17PBhrOE6ZaxkDH6Sze dd5G/RhYgFwbPU/fCTFVwExi8y/6g5b077SwFejmKBO2LxxIdrk6eFKpccutll4E oK+VtT9RY5CX+eMYJJswV0RwcdFGezRo0i6xaivylGLy6azFXmYcpYnPZkv82zSt ZIO58Ie6G04yy3u8lu3ji0qtffgsF376xgSfItVlh9Upisp1EAvfXVQa8SpbVEpl jqYx3sFYJzHyMcYz2RBMfar9JQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNWQnBGz SLv14FEr2GZVSgBdw6TlMB8GA1UdIwQYMBaAFAvytZRMOizKtsHRK8NqWvPC3Pd/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzNGOC80QjQ1NkM4OEYz NjkxMUU5OUM2N0EwNjFDNEY5QUUwMi9DX0sxbEV3NkxNcTJ3ZEVydzJwYTg4TGM5 MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NfSzFsRXc2TE1xMndkRXJ3MnBhODhMYzkzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzNGOC80QjQ1NkM4OEYzNjkxMUU5OUM2N0EwNjFDNEY5QUUwMi9DX0sxbEV3NkxN cTJ3ZEVydzJwYTg4TGM5MzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABbO49PjvxEg6FVDdpZqmG+F8gY5JHJOTmqVjUzgQPPAnJ2rj18KZvQEwM3lw gQSb6NfwKPVlIhHnSV7UyqH+F5Ug0ywp1qw/XR2dVsPhKomg9eCDv3Tt9Umb9e25 3KdAfp1Qak5SMtedLBLQ6t5cfWz+HzdVOVooAhTQklKk7d9No1VsnJ9vJEs7byUp dI0kIcl5YoM87cpwd7Ajo1BE8fqAKBzHdWpKRuPYABxNBG6582LD5ZIq9yZZctdy t8R7gvsj72I9JgqY6KJPNRh65bFLtgV/sDjMvT8WmYIAkU+60Y4UStZmvjLT7/v2 FLear30DrnGlxFMpFP6J7TKyYQ== -----END CERTIFICATE-----Generated at Thu Oct 8 15:41:58 2026 by rpki-client