$ rpki-client -vvvf rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft File: Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft (raw, json) Hash identifier: 7JNcxo1vGfkD/sIc/vojf2ffmiAz3fE6DgZ5U77+5U8= Subject key identifier: E6:B0:10:74:E5:F8:31:0F:90:06:2D:72:28:4A:AD:0B:87:D9:A9:B2 Authority key identifier: 02:AE:84:F6:11:B7:E8:2F:D7:D6:FF:8F:45:2D:87:25:EF:48:90:88 Certificate issuer: /CN=A91642A0/serialNumber=02AE84F611B7E82FD7D6FF8F452D8725EF489088 Certificate serial: 0DE4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft Manifest number: 0DB2 Signing time: Thu 08 Oct 2026 18:03:36 +0000 Manifest this update: Thu 08 Oct 2026 18:03:36 +0000 Manifest next update: Thu 15 Oct 2026 18:03:36 +0000 Files and hashes: 1: Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl (hash: Y30HtmxTiLo+4LiFHfig0QS5AR5G086NS2l/M4uCXi0=) 2: B0B70006B19211EC9EAAD44EC4F9AE02.roa (hash: rOY8YY2G5Nf7WrRKkM4ulRjlSyfS7GykOQgcR4ZajfI=) 3: 0EF0E842839E11EEA1892A12C4F9AE02.roa (hash: 2fkGW1bkGlUA5bGgALjxvNXrPUAl1hO1HVzydoUaRto=) 4: AFB0FFCCB19211EC9EAAD44EC4F9AE02.roa (hash: EzHhVhOcZNg4rGX3+arvWhv7Y1/rtxS40spbE5dRN4w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 18:03:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3556 (0xde4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91642A0, serialNumber=02AE84F611B7E82FD7D6FF8F452D8725EF489088 Validity Not Before: Oct 8 18:03:36 2026 GMT Not After : Oct 15 18:03:36 2026 GMT Subject: CN=6ac7daf8-1ecb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:cd:b2:ab:e8:00:97:6a:6b:b8:6b:00:60:aa: 51:51:e4:87:85:a8:90:fd:91:8a:a2:a3:ef:32:9e: 92:25:df:f8:0b:6f:6d:e2:4f:15:5a:ed:dd:c6:53: 4f:5f:13:20:ba:e9:15:97:93:88:0f:23:db:09:4b: 1e:60:73:6e:6e:4e:27:9f:83:4d:a3:ac:cd:49:0b: 74:4c:7c:b1:ba:cb:9d:7e:f8:5a:4c:c6:df:14:82: bb:8e:a4:43:d9:f0:58:45:4d:35:3e:83:4b:b8:5a: fe:7b:c9:00:2b:11:f7:f0:2b:93:99:88:94:81:70: 83:52:6a:17:ed:df:fc:8b:e4:54:56:31:11:53:44: f0:76:3a:ce:ac:27:d1:c9:24:6c:2c:f0:47:a5:3e: ef:f4:ed:26:35:7e:4a:b1:a0:2f:3e:90:43:69:5a: 80:ea:7e:af:3a:69:c2:8d:57:fc:94:5e:a4:61:65: 10:4d:02:6e:33:ca:eb:4b:c6:74:4d:92:89:4a:e9: a5:d6:9e:21:e6:13:a2:fd:52:ae:2c:bf:3e:6c:56: f0:d9:89:2e:da:76:a5:ab:52:f9:44:a2:23:ac:f1: ea:00:45:80:ac:17:09:29:9b:b8:d2:1d:e2:7d:f6: dc:19:fa:69:0c:0a:63:ac:c7:53:52:9a:ef:8e:cc: 03:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:B0:10:74:E5:F8:31:0F:90:06:2D:72:28:4A:AD:0B:87:D9:A9:B2 X509v3 Authority Key Identifier: keyid:02:AE:84:F6:11:B7:E8:2F:D7:D6:FF:8F:45:2D:87:25:EF:48:90:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:c4:cb:23:5e:20:90:e1:64:c3:8d:3d:a6:9a:03:0e:3d:d7: 5e:93:ef:12:09:6c:0a:b2:b7:7e:cf:66:36:4f:6e:79:5d:c2: c4:ed:d7:b1:ed:fc:5a:2b:59:4d:8c:40:ed:1b:47:96:ee:d5: 85:9d:16:fc:52:de:a4:44:bf:e4:fc:f1:d1:6b:5b:46:02:a5: 47:19:9b:16:cf:e3:47:27:a2:ea:ef:29:4f:34:de:c3:12:ca: 17:7c:35:3d:02:58:bc:9a:76:ac:17:a0:9e:fc:23:f4:2c:02: d5:e2:6d:36:e0:d5:dc:84:3f:cb:02:58:61:fc:6b:c8:c2:3d: b7:1f:72:65:d6:68:84:c5:dd:ad:f2:1a:ab:4e:22:8a:aa:79: 9c:4b:53:8f:ba:4b:d4:36:d2:f0:0c:17:d8:35:86:60:c0:91: 7a:d6:52:fa:71:95:64:f2:9d:ec:44:5a:7c:fb:0a:7c:10:61: d4:1b:06:f1:6e:a3:91:14:28:08:cd:32:78:6d:74:cc:97:cb: 97:2c:5d:ba:fb:ac:05:48:ed:3c:8f:1c:ad:49:91:57:02:3b: 69:14:90:89:e3:b0:9e:a1:6c:08:9e:b1:20:b3:fc:11:b2:0f: da:70:f8:fa:b2:69:a0:18:78:29:16:e6:99:8a:04:f0:77:86: 73:58:ed:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQyQTAxMTAvBgNVBAUTKDAyQUU4NEY2MTFCN0U4MkZEN0Q2RkY4RjQ1MkQ4NzI1 RUY0ODkwODgwHhcNMjYxMDA4MTgwMzM2WhcNMjYxMDE1MTgwMzM2WjAYMRYwFAYD VQQDEw02YWM3ZGFmOC0xZWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1c2yq+gAl2pruGsAYKpRUeSHhaiQ/ZGKoqPvMp6SJd/4C29t4k8VWu3dxlNP XxMguukVl5OIDyPbCUseYHNubk4nn4NNo6zNSQt0THyxusudfvhaTMbfFIK7jqRD 2fBYRU01PoNLuFr+e8kAKxH38CuTmYiUgXCDUmoX7d/8i+RUVjERU0TwdjrOrCfR ySRsLPBHpT7v9O0mNX5KsaAvPpBDaVqA6n6vOmnCjVf8lF6kYWUQTQJuM8rrS8Z0 TZKJSuml1p4h5hOi/VKuLL8+bFbw2Yku2nalq1L5RKIjrPHqAEWArBcJKZu40h3i ffbcGfppDApjrMdTUprvjswDgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOawEHTl +DEPkAYtcihKrQuH2amyMB8GA1UdIwQYMBaAFAKuhPYRt+gv19b/j0UthyXvSJCI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDJBMC9DQTdEMTE2MkY2 NzYxMUU5OTBCQUEyMjJDNEY5QUUwMi9BcTZFOWhHMzZDX1gxdi1QUlMySEplOUlr SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FxNkU5aEczNkNfWDF2LVBSUzJISmU5SWtJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDJBMC9DQTdEMTE2MkY2NzYxMUU5OTBCQUEyMjJDNEY5QUUwMi9BcTZFOWhHMzZD X1gxdi1QUlMySEplOUlrSWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVcTLI14gkOFkw409ppoDDj3XXpPvEglsCrK3fs9mNk9ueV3CxO3Xse38WitZ TYxA7RtHlu7VhZ0W/FLepES/5Pzx0WtbRgKlRxmbFs/jRyei6u8pTzTewxLKF3w1 PQJYvJp2rBegnvwj9CwC1eJtNuDV3IQ/ywJYYfxryMI9tx9yZdZohMXdrfIaq04i iqp5nEtTj7pL1DbS8AwX2DWGYMCRetZS+nGVZPKd7ERafPsKfBBh1BsG8W6jkRQo CM0yeG10zJfLlyxduvusBUjtPI8crUmRVwI7aRSQieOwnqFsCJ6xILP8EbIP2nD4 +rJpoBh4KRbmmYoE8HeGc1jt6g== -----END CERTIFICATE-----Generated at Sat Oct 10 15:39:24 2026 by rpki-client