$ rpki-client -vvvf rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft File: 8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft (raw, json) Hash identifier: maWPvsXsUAfZt2wGMNdyPpfKBa54EkzaBcyXWB+gAHc= Subject key identifier: C9:E9:75:69:A2:21:1E:98:13:3F:B3:C1:36:CD:0D:03:E2:A2:9D:90 Authority key identifier: F1:28:95:79:21:17:E9:07:03:A0:02:0F:4F:35:98:31:DB:2F:93:7A Certificate issuer: /CN=A91709F5/serialNumber=F12895792117E90703A0020F4F359831DB2F937A Certificate serial: 014D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8SiVeSEX6QcDoAIPTzWYMdsvk3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft Manifest number: 0148 Signing time: Thu 29 Oct 2026 06:03:14 +0000 Manifest this update: Thu 29 Oct 2026 06:03:14 +0000 Manifest next update: Thu 05 Nov 2026 06:03:14 +0000 Files and hashes: 1: 8SiVeSEX6QcDoAIPTzWYMdsvk3o.crl (hash: HCVY2olFZk7BSm29QQcT3nIv+7t05zoyXkDvJ7lxkkM=) 2: A42925E8DFDA11EFB5E94125C4F9AE02.roa (hash: OFV7TAeYTwMYk3v0VLj9doRdmglLiVsQ3XZ6eBJ4Cug=) 3: 57356FFE9C8911F195E754C85411F970.roa (hash: iL6MIo27bsfkvnUNjGGVu5qt/lmrrJMdfM5dFIA4pwA=) 4: 06EBCBDE9C8811F1A918E08B5411F970.roa (hash: gH9uwAxPYcJXVioCTcBeU7x4aSFAnH8dyB82k/ZhDLc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.crl rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8SiVeSEX6QcDoAIPTzWYMdsvk3o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 06:03:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 333 (0x14d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91709F5, serialNumber=F12895792117E90703A0020F4F359831DB2F937A Validity Not Before: Oct 29 06:03:14 2026 GMT Not After : Nov 5 06:03:14 2026 GMT Subject: CN=6ae2e1a2-c974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d3:4e:4c:59:39:47:46:a8:a8:cd:07:11:93: 6b:f6:5e:3b:e8:7d:c3:45:53:91:b4:29:27:23:89: 4b:87:ee:0d:69:8c:02:ad:49:34:ed:5d:96:73:ff: bc:14:53:68:37:75:10:5a:2a:9e:cc:c0:e4:04:db: 90:e8:6f:d2:e0:db:50:80:4d:76:6c:6c:12:59:c0: c4:32:7b:ab:8e:39:71:ca:19:b9:df:ec:d5:51:43: 25:ca:d2:d2:28:7a:ed:b2:f0:aa:4e:7a:74:21:81: 02:63:15:ea:fb:bd:7d:27:7e:dc:6a:af:22:81:22: c3:76:72:d7:5e:cb:3d:89:68:15:30:e7:9f:46:3e: e5:9f:a8:48:3b:5d:cb:43:aa:85:a9:5e:dd:84:ed: 98:fd:6f:8d:a7:a5:c6:00:0b:77:ba:d4:05:ae:55: 6f:ac:80:d1:88:da:31:9a:a4:ab:f9:a9:73:71:48: a1:76:0e:90:59:9f:90:ca:ba:c3:f5:60:10:16:d2: 5f:d7:a3:b5:1a:8a:c6:23:e0:f7:f9:da:6c:db:c8: bb:81:74:2c:94:b2:d6:8c:5a:16:03:5d:fd:27:2d: c2:be:e2:91:78:0d:28:2c:95:8b:57:6e:09:c9:6b: ea:e4:84:73:b3:f8:f8:08:7d:0c:0b:6e:08:6f:7c: 1c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:E9:75:69:A2:21:1E:98:13:3F:B3:C1:36:CD:0D:03:E2:A2:9D:90 X509v3 Authority Key Identifier: keyid:F1:28:95:79:21:17:E9:07:03:A0:02:0F:4F:35:98:31:DB:2F:93:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8SiVeSEX6QcDoAIPTzWYMdsvk3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:83:06:59:b2:88:be:bf:bd:6a:c6:f0:6b:4a:f2:a0:ce:27: 78:32:83:11:77:54:32:92:43:57:52:f5:8a:a6:58:cc:43:62: e3:b6:6c:9c:31:2d:6b:86:d0:1b:65:d7:0b:fb:30:60:c1:be: 81:4e:6b:99:94:38:6f:63:11:31:09:c4:cd:4e:b9:e9:2c:c9: 0c:9c:fa:6c:e5:b2:26:55:9b:a9:f2:1b:c2:90:f1:7c:71:19: c3:7a:3b:39:7d:8f:61:13:a5:e5:18:a8:14:ba:9c:ca:78:24: 78:98:3b:ea:7f:ab:12:82:e3:fc:84:0a:62:77:6d:65:2f:6a: c3:26:c0:ab:26:e8:30:ed:7a:bd:2c:f3:db:d1:3a:45:e2:db: f5:5b:53:14:5f:6a:89:2d:ab:eb:c5:00:e9:86:aa:be:7f:c8: 51:8c:44:4f:af:7b:a2:a6:9a:27:f2:55:39:2b:40:9f:c8:dd: 2f:2e:16:5c:db:4d:28:df:bd:a5:56:1b:90:37:65:66:39:9a: 8f:e2:ec:d7:b7:ef:93:df:30:51:da:5e:70:56:cf:16:5b:50: 2c:0d:a8:45:1d:57:1e:9f:1c:00:8b:70:86:8a:e0:f1:af:2d: a6:75:a7:2a:00:f7:7b:43:3d:68:88:58:58:5e:a0:bc:b6:01: 27:90:f0:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5RjUxMTAvBgNVBAUTKEYxMjg5NTc5MjExN0U5MDcwM0EwMDIwRjRGMzU5ODMx REIyRjkzN0EwHhcNMjYxMDI5MDYwMzE0WhcNMjYxMTA1MDYwMzE0WjAYMRYwFAYD VQQDEw02YWUyZTFhMi1jOTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNNOTFk5R0aoqM0HEZNr9l476H3DRVORtCknI4lLh+4NaYwCrUk07V2Wc/+8 FFNoN3UQWiqezMDkBNuQ6G/S4NtQgE12bGwSWcDEMnurjjlxyhm53+zVUUMlytLS KHrtsvCqTnp0IYECYxXq+719J37caq8igSLDdnLXXss9iWgVMOefRj7ln6hIO13L Q6qFqV7dhO2Y/W+Np6XGAAt3utQFrlVvrIDRiNoxmqSr+alzcUihdg6QWZ+QyrrD 9WAQFtJf16O1GorGI+D3+dps28i7gXQslLLWjFoWA139Jy3CvuKReA0oLJWLV24J yWvq5IRzs/j4CH0MC24Ib3wcFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMnpdWmi IR6YEz+zwTbNDQPiop2QMB8GA1UdIwQYMBaAFPEolXkhF+kHA6ACD081mDHbL5N6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDlGNS8zMjgzRTdENERG REExMUVGOEI0Nzg2MjRDNEY5QUUwMi84U2lWZVNFWDZRY0RvQUlQVHpXWU1kc3Zr M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhTaVZlU0VYNlFjRG9BSVBUeldZTWRzdmszby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDlGNS8zMjgzRTdENERGREExMUVGOEI0Nzg2MjRDNEY5QUUwMi84U2lWZVNFWDZR Y0RvQUlQVHpXWU1kc3ZrM28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATIMGWbKIvr+9asbwa0ryoM4neDKDEXdUMpJDV1L1iqZYzENi47ZsnDEta4bQ G2XXC/swYMG+gU5rmZQ4b2MRMQnEzU656SzJDJz6bOWyJlWbqfIbwpDxfHEZw3o7 OX2PYROl5RioFLqcyngkeJg76n+rEoLj/IQKYndtZS9qwybAqyboMO16vSzz29E6 ReLb9VtTFF9qiS2r68UA6Yaqvn/IUYxET697oqaaJ/JVOStAn8jdLy4WXNtNKN+9 pVYbkDdlZjmaj+Ls17fvk98wUdpecFbPFltQLA2oRR1XHp8cAItwhorg8a8tpnWn KgD3e0M9aIhYWF6gvLYBJ5Dwgw== -----END CERTIFICATE-----Generated at Thu Oct 29 18:10:42 2026 by rpki-client