$ rpki-client -vvvf rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft File: 7D2Af3k8nPX84zXuFeCYREm0MJY.mft (raw, json) Hash identifier: gOXIYIzh8/8vZM+sE0UjhwZIpwVwA+aJxAKcj17KqDc= Subject key identifier: 14:78:C8:28:F5:FA:86:61:D0:4C:02:BC:84:6B:CC:11:8F:AC:DA:5E Authority key identifier: EC:3D:80:7F:79:3C:9C:F5:FC:E3:35:EE:15:E0:98:44:49:B4:30:96 Certificate issuer: /CN=A91517CF/serialNumber=EC3D807F793C9CF5FCE335EE15E0984449B43096 Certificate serial: 015D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7D2Af3k8nPX84zXuFeCYREm0MJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft Manifest number: 0159 Signing time: Mon 05 Oct 2026 05:32:44 +0000 Manifest this update: Mon 05 Oct 2026 05:32:43 +0000 Manifest next update: Mon 12 Oct 2026 05:32:43 +0000 Files and hashes: 1: 7D2Af3k8nPX84zXuFeCYREm0MJY.crl (hash: VYzc5KFawGRgQ2ZthjwfCfl7sDeYJj4nS/DTYdXD+JM=) 2: 18164B6AB2C811EFA702DF80C4F9AE02.roa (hash: fbcyaAtrA1h5av9wkarvyax0xETi5abCoRaPXoCMR3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.crl rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7D2Af3k8nPX84zXuFeCYREm0MJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 05:32:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 349 (0x15d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91517CF, serialNumber=EC3D807F793C9CF5FCE335EE15E0984449B43096 Validity Not Before: Oct 5 05:32:43 2026 GMT Not After : Oct 12 05:32:43 2026 GMT Subject: CN=6ac3367b-46f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f7:e6:52:5c:23:f5:b2:71:52:7b:cd:a4:75: cd:fe:7d:70:af:95:43:56:40:a6:e8:56:99:09:2a: 0a:12:e6:3e:0d:47:06:e6:5d:16:2b:e7:32:91:a4: 0c:b7:95:7b:1f:58:21:e3:5f:94:fe:63:ff:ed:3b: 8f:9f:fd:44:91:83:96:35:c5:bd:4c:86:59:67:18: 7b:fb:99:3f:cf:fb:2d:00:ff:1a:63:b4:26:ec:1b: 3c:5f:d3:95:82:e5:dc:38:20:be:67:b0:bf:d5:00: 9e:fb:4e:54:7c:c6:94:03:5e:21:fb:46:43:be:fc: 28:68:76:a7:56:d8:2a:5d:47:51:53:34:ba:66:82: d5:a3:8d:5d:b3:99:02:18:0b:43:e5:b5:6b:39:b8: 4c:ca:2f:44:7e:46:e3:ca:38:15:24:4b:00:84:17: 31:53:df:ce:a0:6a:d9:8e:c5:05:78:32:86:e9:16: 30:91:c7:67:8a:7c:2a:ba:fd:68:f8:da:f4:bf:bc: 71:f9:64:0f:b8:7e:79:18:45:22:98:33:96:a6:a6: 55:fa:21:a1:3b:77:e1:d2:cd:05:22:69:f9:69:a6: 32:07:13:fc:a3:ba:30:e9:fa:6a:3d:39:a9:49:88: 2f:aa:12:20:12:a6:0b:d8:92:29:49:9b:ec:91:b7: 90:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:78:C8:28:F5:FA:86:61:D0:4C:02:BC:84:6B:CC:11:8F:AC:DA:5E X509v3 Authority Key Identifier: keyid:EC:3D:80:7F:79:3C:9C:F5:FC:E3:35:EE:15:E0:98:44:49:B4:30:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7D2Af3k8nPX84zXuFeCYREm0MJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:c9:f7:df:6c:94:38:5a:5a:f0:60:44:32:03:54:4b:be:e7: d1:7c:d2:7d:56:71:b7:05:50:36:b0:84:bd:d5:50:40:3a:6a: 60:ee:90:48:75:76:c4:49:7d:8d:26:1e:73:38:51:b1:df:9a: b9:b7:f6:ed:1c:97:2f:4c:2a:2b:fb:9c:4c:6b:02:8d:8b:89: 32:26:c5:67:47:9f:b6:d7:9a:14:52:4d:d2:1e:1b:e6:eb:14: 23:d0:23:80:36:e0:6b:c3:ba:c4:30:73:65:8b:95:79:c4:77: bc:58:88:a7:6a:41:19:4c:9d:a6:f2:28:23:92:e3:d5:84:ec: 58:36:54:29:b5:aa:10:2b:31:07:f2:4e:a4:24:e6:22:c9:f1: 1c:42:39:d4:42:27:8f:77:53:9a:60:67:a4:81:09:34:da:df: 83:33:c9:62:83:52:3f:65:01:e3:0c:d7:81:5a:d0:ec:bf:5c: 86:5c:c5:7e:38:75:bf:49:b6:f0:ce:f0:7e:3b:27:0b:c6:0e: c6:c8:79:10:7a:22:e8:4b:a6:46:db:a0:b6:b6:83:48:44:62: 28:3e:48:54:50:93:49:12:cb:be:f5:94:74:9a:07:7a:44:13: 7f:e1:d6:1f:b6:92:63:ed:3b:db:90:9b:8f:94:a3:15:ef:87: a4:c0:0e:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE3Q0YxMTAvBgNVBAUTKEVDM0Q4MDdGNzkzQzlDRjVGQ0UzMzVFRTE1RTA5ODQ0 NDlCNDMwOTYwHhcNMjYxMDA1MDUzMjQzWhcNMjYxMDEyMDUzMjQzWjAYMRYwFAYD VQQDEw02YWMzMzY3Yi00NmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsPfmUlwj9bJxUnvNpHXN/n1wr5VDVkCm6FaZCSoKEuY+DUcG5l0WK+cykaQM t5V7H1gh41+U/mP/7TuPn/1EkYOWNcW9TIZZZxh7+5k/z/stAP8aY7Qm7Bs8X9OV guXcOCC+Z7C/1QCe+05UfMaUA14h+0ZDvvwoaHanVtgqXUdRUzS6ZoLVo41ds5kC GAtD5bVrObhMyi9EfkbjyjgVJEsAhBcxU9/OoGrZjsUFeDKG6RYwkcdninwquv1o +Nr0v7xx+WQPuH55GEUimDOWpqZV+iGhO3fh0s0FImn5aaYyBxP8o7ow6fpqPTmp SYgvqhIgEqYL2JIpSZvskbeQCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBR4yCj1 +oZh0EwCvIRrzBGPrNpeMB8GA1UdIwQYMBaAFOw9gH95PJz1/OM17hXgmERJtDCW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTdDRi9CNDE1NTQ1OEIy QzcxMUVGOTE2QkI2N0ZDNEY5QUUwMi83RDJBZjNrOG5QWDg0elh1RmVDWVJFbTBN SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdEMkFmM2s4blBYODR6WHVGZUNZUkVtME1KWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTdDRi9CNDE1NTQ1OEIyQzcxMUVGOTE2QkI2N0ZDNEY5QUUwMi83RDJBZjNrOG5Q WDg0elh1RmVDWVJFbTBNSlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf8n332yUOFpa8GBEMgNUS77n0XzSfVZxtwVQNrCEvdVQQDpqYO6QSHV2xEl9 jSYeczhRsd+aubf27RyXL0wqK/ucTGsCjYuJMibFZ0eftteaFFJN0h4b5usUI9Aj gDbga8O6xDBzZYuVecR3vFiIp2pBGUydpvIoI5Lj1YTsWDZUKbWqECsxB/JOpCTm IsnxHEI51EInj3dTmmBnpIEJNNrfgzPJYoNSP2UB4wzXgVrQ7L9chlzFfjh1v0m2 8M7wfjsnC8YOxsh5EHoi6EumRtugtraDSERiKD5IVFCTSRLLvvWUdJoHekQTf+HW H7aSY+0725Cbj5SjFe+HpMAOVQ== -----END CERTIFICATE-----Generated at Wed Oct 7 02:42:59 2026 by rpki-client