$ rpki-client -vvvf rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft File: r7qhUW6eF_JM-RRbjHzUuoGlekA.mft (raw, json) Hash identifier: NmV+8vBbIHzwxGXFY2OPEBDRUZu/VRya7jhmKtnLl24= Subject key identifier: F4:96:65:A8:7F:2A:03:DE:C4:DD:C8:8C:A3:F6:05:20:F3:8B:EC:96 Authority key identifier: AF:BA:A1:51:6E:9E:17:F2:4C:F9:14:5B:8C:7C:D4:BA:81:A5:7A:40 Certificate issuer: /CN=A91568A0/serialNumber=AFBAA1516E9E17F24CF9145B8C7CD4BA81A57A40 Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7qhUW6eF_JM-RRbjHzUuoGlekA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft Manifest number: CB Signing time: Sat 03 Oct 2026 07:28:45 +0000 Manifest this update: Sat 03 Oct 2026 07:28:45 +0000 Manifest next update: Sat 10 Oct 2026 07:28:45 +0000 Files and hashes: 1: r7qhUW6eF_JM-RRbjHzUuoGlekA.crl (hash: a5yPH1CkJsc8LgonZMsl90z45pMwGwMk9l02KDKdmmc=) 2: 1D0A29A68E2911F08D963C69C4F9AE02.roa (hash: N6CBwqrOqMiPVhe2XON5ueLRVOAkc+Y5PryJUTw3C2g=) 3: 492317188E2A11F0B9BB726BC4F9AE02.roa (hash: HYvMLgC1MHFAUoLdJHhGm7IqHD4gMmLft4YLWobMVbI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.crl rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7qhUW6eF_JM-RRbjHzUuoGlekA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 07:28:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91568A0, serialNumber=AFBAA1516E9E17F24CF9145B8C7CD4BA81A57A40 Validity Not Before: Oct 3 07:28:45 2026 GMT Not After : Oct 10 07:28:45 2026 GMT Subject: CN=6ac0aead-46de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:03:f4:4c:34:5e:0e:4a:c4:6f:5f:d7:e3:eb: 08:bb:83:45:a0:cc:fc:76:e8:7d:8e:05:a7:fd:1b: 79:4d:0a:32:4e:67:83:d3:27:1a:84:6e:da:9b:8b: 61:be:e7:53:2f:b6:f5:c5:b9:7e:6e:81:94:6d:db: c9:19:f6:a2:66:f5:b5:a4:bf:7e:b0:a3:d2:ed:f4: 08:ad:16:75:03:95:02:fc:3f:9b:bb:1b:96:c9:dd: 00:43:b6:d6:18:42:65:63:aa:22:ce:10:1a:75:29: b4:6a:cc:d9:e7:3d:99:1c:57:2d:13:8b:37:f0:b9: 35:e2:0b:b4:2f:5b:f1:18:f3:32:5a:2f:b5:56:fa: 04:3f:c7:ab:62:b7:cc:28:00:15:d9:7e:a9:de:b7: 1f:5e:f7:5b:d0:34:97:58:89:00:48:38:0e:f0:7d: 80:07:bc:17:ad:dd:ed:8f:f6:f9:05:bd:dc:3c:72: f9:b6:02:5c:81:c6:e8:05:1f:51:b1:64:6c:4a:6d: 72:df:0d:cb:29:a7:65:f4:07:76:ea:b7:4f:c7:96: 03:8e:e1:0b:bf:8a:25:c4:16:95:a0:66:f9:43:03: 47:03:ca:d4:ea:c1:75:b3:55:3a:fb:af:ee:f6:d6: e6:87:50:1b:14:7c:2a:95:31:8b:82:61:ec:45:97: f6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:96:65:A8:7F:2A:03:DE:C4:DD:C8:8C:A3:F6:05:20:F3:8B:EC:96 X509v3 Authority Key Identifier: keyid:AF:BA:A1:51:6E:9E:17:F2:4C:F9:14:5B:8C:7C:D4:BA:81:A5:7A:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7qhUW6eF_JM-RRbjHzUuoGlekA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:8a:7d:29:e9:3b:bf:a4:c8:14:49:ec:36:d0:4a:c3:02:49: e9:6c:4b:66:21:4e:0c:e2:7a:43:41:cd:84:6d:02:12:d0:de: 66:6e:15:92:cd:5f:13:dd:1e:9f:ef:81:a5:fa:3f:40:37:07: da:63:24:ca:90:83:86:35:01:6f:39:1b:f1:53:95:e4:d1:d9: fd:f1:1d:75:9d:e9:87:76:b7:4e:7f:f1:cb:77:98:f6:6e:2d: 37:9c:bb:fd:79:eb:f6:61:9b:15:36:9c:de:66:1a:59:7c:cd: 35:4b:b6:91:73:4a:7a:65:a1:e3:ff:ee:c6:25:55:b5:78:96: 20:2d:74:7c:c5:fa:78:97:77:ec:1b:88:8f:de:34:e3:0a:5e: b1:ba:db:74:34:d8:80:71:4c:a1:9f:51:f3:ac:5e:ee:85:dd: 09:58:18:cc:e3:d5:94:4c:03:0e:61:ba:62:79:27:9b:dc:e0: ed:7a:e2:44:c5:fb:a7:3d:48:ab:62:e0:73:98:13:d7:88:cd: 74:71:ee:9c:1d:25:c0:3d:9f:08:23:91:d8:3c:45:ba:dd:a6: 93:4b:e5:1d:91:8c:c2:75:28:3e:36:a5:e7:49:13:88:82:d3: 88:6d:c6:db:db:8b:2a:ca:12:a7:93:e4:f7:01:bb:35:47:82: 72:1b:e4:67 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY4QTAxMTAvBgNVBAUTKEFGQkFBMTUxNkU5RTE3RjI0Q0Y5MTQ1QjhDN0NENEJB ODFBNTdBNDAwHhcNMjYxMDAzMDcyODQ1WhcNMjYxMDEwMDcyODQ1WjAYMRYwFAYD VQQDEw02YWMwYWVhZC00NmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwAP0TDReDkrEb1/X4+sIu4NFoMz8duh9jgWn/Rt5TQoyTmeD0ycahG7am4th vudTL7b1xbl+boGUbdvJGfaiZvW1pL9+sKPS7fQIrRZ1A5UC/D+buxuWyd0AQ7bW GEJlY6oizhAadSm0aszZ5z2ZHFctE4s38Lk14gu0L1vxGPMyWi+1VvoEP8erYrfM KAAV2X6p3rcfXvdb0DSXWIkASDgO8H2AB7wXrd3tj/b5Bb3cPHL5tgJcgcboBR9R sWRsSm1y3w3LKadl9Ad26rdPx5YDjuELv4olxBaVoGb5QwNHA8rU6sF1s1U6+6/u 9tbmh1AbFHwqlTGLgmHsRZf2/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPSWZah/ KgPexN3IjKP2BSDzi+yWMB8GA1UdIwQYMBaAFK+6oVFunhfyTPkUW4x81LqBpXpA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjhBMC9CMjA2OENGODhF MjgxMUYwOUMyQTZCNDlDNEY5QUUwMi9yN3FoVVc2ZUZfSk0tUlJiakh6VXVvR2xl a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I3cWhVVzZlRl9KTS1SUmJqSHpVdW9HbGVrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjhBMC9CMjA2OENGODhFMjgxMUYwOUMyQTZCNDlDNEY5QUUwMi9yN3FoVVc2ZUZf Sk0tUlJiakh6VXVvR2xla0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgYp9Kek7v6TIFEnsNtBKwwJJ6WxLZiFODOJ6Q0HNhG0CEtDeZm4Vks1fE90e n++Bpfo/QDcH2mMkypCDhjUBbzkb8VOV5NHZ/fEddZ3ph3a3Tn/xy3eY9m4tN5y7 /Xnr9mGbFTac3mYaWXzNNUu2kXNKemWh4//uxiVVtXiWIC10fMX6eJd37BuIj940 4wpesbrbdDTYgHFMoZ9R86xe7oXdCVgYzOPVlEwDDmG6Ynknm9zg7XriRMX7pz1I q2Lgc5gT14jNdHHunB0lwD2fCCOR2DxFut2mk0vlHZGMwnUoPjal50kTiILTiG3G 29uLKsoSp5Pk9wG7NUeCchvkZw== -----END CERTIFICATE-----Generated at Mon Oct 5 06:31:38 2026 by rpki-client