$ rpki-client -vvvf rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft File: AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft (raw, json) Hash identifier: NkGFtzX6Ec5ZXugxAH6y79IewFL3NSvN/FlTzIHzU2s= Subject key identifier: 57:FC:12:2A:2F:ED:A5:74:12:1E:71:8A:60:9A:AD:AC:FF:D3:8D:2E Authority key identifier: 01:F1:ED:08:CD:E2:71:36:F3:97:D0:73:4A:F2:A3:5E:5D:52:7D:D4 Certificate issuer: /CN=A91788FF/serialNumber=01F1ED08CDE27136F397D0734AF2A35E5D527DD4 Certificate serial: 01AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfHtCM3icTbzl9BzSvKjXl1SfdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft Manifest number: 01A3 Signing time: Mon 05 Oct 2026 04:36:31 +0000 Manifest this update: Mon 05 Oct 2026 04:36:31 +0000 Manifest next update: Mon 12 Oct 2026 04:36:31 +0000 Files and hashes: 1: AfHtCM3icTbzl9BzSvKjXl1SfdQ.crl (hash: B64aq/X0MdRX558UnakLRgG2jvpTMTCHtZaHuNELvHc=) 2: 726BD5E645CF11EF854E2262C4F9AE02.roa (hash: YmYTcwhgDvKWuwVdE5g0+SEXv17ijbphmsKcmV8ZajM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.crl rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfHtCM3icTbzl9BzSvKjXl1SfdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 04:36:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 426 (0x1aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91788FF, serialNumber=01F1ED08CDE27136F397D0734AF2A35E5D527DD4 Validity Not Before: Oct 5 04:36:31 2026 GMT Not After : Oct 12 04:36:31 2026 GMT Subject: CN=6ac3294f-e7ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9f:a0:aa:9b:3b:ed:5b:9e:b3:64:22:f3:df: 87:6c:cd:bf:4f:54:74:51:77:4e:bd:c3:a1:d5:59: 8b:95:0d:e3:6e:9e:68:b0:a9:75:25:e6:c0:3d:ce: 59:d8:cb:5a:a4:72:31:92:a6:2f:f1:9d:17:f2:e1: 67:7e:31:d8:09:92:d0:40:83:d1:73:b5:16:ec:d9: 17:6d:98:3b:66:03:e4:94:e9:ac:ca:ec:83:11:e5: f5:16:4f:40:bd:e1:6d:92:73:ad:79:84:f3:ef:13: cb:d3:80:2c:6a:e9:df:5e:85:2c:02:78:76:52:c5: 4a:0f:96:0d:54:f5:6a:85:43:cb:60:1f:20:b3:c9: cc:17:b0:34:f3:af:0d:78:29:45:94:f1:37:64:a2: 83:79:cd:58:e7:78:52:f4:b2:36:d9:17:9b:d6:a6: 41:79:de:5b:f7:74:7f:83:05:f7:c2:e8:bc:61:bf: e2:53:92:3f:fc:c9:d5:61:2b:c8:08:39:23:fe:82: db:bb:ff:ac:76:8a:34:40:3e:72:6c:47:9c:ee:6c: ce:12:f2:a3:75:82:90:c2:27:d1:a5:b7:79:7c:9d: 52:22:6e:15:de:cc:6e:95:76:2c:ab:9e:0b:7c:a9: 63:88:cd:16:5b:e8:34:47:03:e1:60:3c:2e:84:b2: d6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:FC:12:2A:2F:ED:A5:74:12:1E:71:8A:60:9A:AD:AC:FF:D3:8D:2E X509v3 Authority Key Identifier: keyid:01:F1:ED:08:CD:E2:71:36:F3:97:D0:73:4A:F2:A3:5E:5D:52:7D:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfHtCM3icTbzl9BzSvKjXl1SfdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:ca:b8:88:da:fe:ab:e0:76:50:77:78:69:f3:59:21:62:39: 1a:f2:f8:13:dd:1d:76:ab:22:b7:3c:c4:ee:c3:b7:51:1c:bd: 54:fa:54:52:35:62:12:80:bf:06:98:18:27:9f:eb:77:85:85: 72:59:2f:f2:d5:49:ec:57:44:26:09:d6:fa:71:8b:2a:de:5c: 89:3f:86:86:71:f7:10:dc:6b:27:0b:43:7b:48:98:ab:37:61: cb:cb:fe:b2:8c:2c:3b:ab:9d:26:5d:cc:da:e9:21:1a:54:c0: f1:46:5e:2d:37:d7:97:6b:03:04:36:20:6d:90:3c:07:67:cb: d1:97:b7:10:ed:04:1c:00:8b:8f:88:f7:07:60:5e:ad:b2:b5: bb:be:0b:29:22:de:d9:98:be:ce:eb:02:5e:6b:43:a7:d9:ed: 38:c4:4e:6a:cc:ce:1f:3f:02:cd:7a:98:ff:dd:72:29:99:20: 7d:39:2b:88:3e:cf:78:77:4b:e6:a7:6e:e6:e5:22:98:77:23: 80:2e:a0:3a:6f:12:d0:f8:68:af:a1:3c:60:9b:7e:3f:bb:93: da:6b:fc:7b:4f:83:a9:7e:cd:26:7d:dc:9e:7d:13:7f:e1:80: 9f:fd:2d:30:79:42:89:fe:ee:25:39:eb:6c:ae:a7:3f:f7:22: c6:4d:99:6d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzg4RkYxMTAvBgNVBAUTKDAxRjFFRDA4Q0RFMjcxMzZGMzk3RDA3MzRBRjJBMzVF NUQ1MjdERDQwHhcNMjYxMDA1MDQzNjMxWhcNMjYxMDEyMDQzNjMxWjAYMRYwFAYD VQQDEw02YWMzMjk0Zi1lN2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxJ+gqps77Vues2Qi89+HbM2/T1R0UXdOvcOh1VmLlQ3jbp5osKl1JebAPc5Z 2MtapHIxkqYv8Z0X8uFnfjHYCZLQQIPRc7UW7NkXbZg7ZgPklOmsyuyDEeX1Fk9A veFtknOteYTz7xPL04AsaunfXoUsAnh2UsVKD5YNVPVqhUPLYB8gs8nMF7A0868N eClFlPE3ZKKDec1Y53hS9LI22Reb1qZBed5b93R/gwX3wui8Yb/iU5I//MnVYSvI CDkj/oLbu/+sdoo0QD5ybEec7mzOEvKjdYKQwifRpbd5fJ1SIm4V3sxulXYsq54L fKljiM0WW+g0RwPhYDwuhLLWdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFf8Eiov 7aV0Eh5ximCaraz/040uMB8GA1UdIwQYMBaAFAHx7QjN4nE285fQc0ryo15dUn3U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODhGRi9CREVCMjk3NDQ1 Q0QxMUVGOEU4MjY0NEVDNEY5QUUwMi9BZkh0Q00zaWNUYnpsOUJ6U3ZLalhsMVNm ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FmSHRDTTNpY1Riemw5QnpTdktqWGwxU2ZkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODhGRi9CREVCMjk3NDQ1Q0QxMUVGOEU4MjY0NEVDNEY5QUUwMi9BZkh0Q00zaWNU YnpsOUJ6U3ZLalhsMVNmZFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmMq4iNr+q+B2UHd4afNZIWI5GvL4E90ddqsitzzE7sO3URy9VPpUUjViEoC/ BpgYJ5/rd4WFclkv8tVJ7FdEJgnW+nGLKt5ciT+GhnH3ENxrJwtDe0iYqzdhy8v+ sowsO6udJl3M2ukhGlTA8UZeLTfXl2sDBDYgbZA8B2fL0Ze3EO0EHACLj4j3B2Be rbK1u74LKSLe2Zi+zusCXmtDp9ntOMROaszOHz8CzXqY/91yKZkgfTkriD7PeHdL 5qdu5uUimHcjgC6gOm8S0Phor6E8YJt+P7uT2mv8e0+DqX7NJn3cnn0Tf+GAn/0t MHlCif7uJTnrbK6nP/cixk2ZbQ== -----END CERTIFICATE-----Generated at Tue Oct 6 19:30:49 2026 by rpki-client