$ rpki-client -vvvf rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft File: 0eKZ-egsk3yysqaQYegXNB-FCPU.mft (raw, json) Hash identifier: kIJEm+hPXkAsk7nwkkk6GwnyfNtpevqFizuLeSiSa0U= Subject key identifier: 64:91:DD:8F:A8:02:11:FB:F1:0C:95:D2:25:AB:0B:1B:FD:7F:E2:AB Authority key identifier: D1:E2:99:F9:E8:2C:93:7C:B2:B2:A6:90:61:E8:17:34:1F:85:08:F5 Certificate issuer: /CN=A91886CC/serialNumber=D1E299F9E82C937CB2B2A69061E817341F8508F5 Certificate serial: 0297 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft Manifest number: 028D Signing time: Mon 05 Oct 2026 02:08:59 +0000 Manifest this update: Mon 05 Oct 2026 02:08:58 +0000 Manifest next update: Mon 12 Oct 2026 02:08:58 +0000 Files and hashes: 1: 0eKZ-egsk3yysqaQYegXNB-FCPU.crl (hash: FVROXr/P2RQuS5tdL+fWW8+FEFFTj2W+hZ6CBJOGmpk=) 2: AD9C1DEE9E2311F0A35D7D1FC4F9AE02.roa (hash: Tnjt2fGEhLyDlPP5wmN279sZk46aIOs3pcrgnxrQla0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.crl rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 02:08:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 663 (0x297) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91886CC, serialNumber=D1E299F9E82C937CB2B2A69061E817341F8508F5 Validity Not Before: Oct 5 02:08:58 2026 GMT Not After : Oct 12 02:08:58 2026 GMT Subject: CN=6ac306ba-a4ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:87:aa:0c:eb:05:60:81:27:b3:8a:44:8e:f2: b4:60:54:2b:a9:cc:b1:f1:18:3a:69:17:47:d7:b8: 21:cb:c3:dd:4f:d0:11:4b:00:73:be:aa:8c:ca:69: 79:44:1f:44:02:8d:3a:e6:80:5a:a0:3b:f3:6e:da: 5d:93:d2:26:0e:aa:16:80:52:fa:ba:cd:bf:da:f8: d3:42:0c:93:99:46:f0:35:ea:79:00:46:1b:8d:fc: ea:4c:cb:be:81:d7:80:79:f1:65:e7:a2:3a:b5:54: e5:00:84:f7:b1:d3:c2:06:bb:68:43:52:be:b1:5e: 5c:60:25:5d:86:8a:71:c8:3e:39:06:e8:02:fc:0a: 79:67:be:5c:f9:2c:e3:18:9c:a3:a2:14:99:e3:5f: 28:c8:d2:1e:46:2a:1d:94:b2:28:8c:56:89:a3:0d: 61:d8:48:96:61:07:da:1b:5b:ba:38:89:d9:5c:a4: 1d:79:35:32:78:1c:68:7e:f0:7d:56:bf:e2:a6:7f: 72:24:9c:d2:f8:9f:de:15:02:f6:3e:44:2f:7d:09: 07:5b:b2:aa:32:9c:b7:62:52:f6:2e:d0:78:10:78: d7:03:4d:3e:83:15:f9:b3:9b:07:02:c9:54:04:22: ef:f3:3f:ce:f2:65:05:a6:33:ab:d2:59:75:0e:a3: 37:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:91:DD:8F:A8:02:11:FB:F1:0C:95:D2:25:AB:0B:1B:FD:7F:E2:AB X509v3 Authority Key Identifier: keyid:D1:E2:99:F9:E8:2C:93:7C:B2:B2:A6:90:61:E8:17:34:1F:85:08:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:e1:ae:e1:35:c5:0e:07:92:05:7a:e1:81:da:2c:c5:fc:0a: 97:42:8f:bb:aa:5f:0d:35:2e:3c:8f:82:e2:ad:be:eb:86:97: ef:b4:89:bf:51:02:b1:b9:9a:fb:23:61:d5:15:be:6b:b9:9f: 12:2e:26:f4:11:2b:43:fd:57:8f:cc:bb:72:6f:4b:dc:25:2c: 1f:15:59:9d:50:0b:58:59:61:39:69:f6:0e:5c:86:98:e1:31: 01:46:3f:fc:a1:12:92:7f:90:95:1f:25:00:f5:49:dd:20:a4: 53:74:17:fc:28:eb:8d:2f:30:d8:d0:b4:2c:06:23:31:a9:50: b9:b9:68:ff:69:5f:7f:12:a9:c5:57:71:94:a8:7a:82:dd:e6: b3:64:4b:06:e8:0d:f5:6a:c6:a0:8b:5f:73:75:6b:d4:94:d7: 0c:94:73:9c:2b:fc:93:b5:82:8b:b0:59:84:cc:d5:65:da:33: 01:0b:f5:39:fa:65:35:6b:76:4b:8f:cd:eb:24:ef:8d:7f:74: 37:2f:e0:50:5d:21:89:13:73:70:82:9c:19:c5:95:f7:ef:96: 7f:64:d0:a6:37:0f:7e:c8:11:f8:fa:ca:57:2c:82:07:d7:54: c0:98:12:0a:ae:76:7b:25:c9:ee:82:4d:90:cf:1d:4f:36:5a: 1a:81:14:61 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg2Q0MxMTAvBgNVBAUTKEQxRTI5OUY5RTgyQzkzN0NCMkIyQTY5MDYxRTgxNzM0 MUY4NTA4RjUwHhcNMjYxMDA1MDIwODU4WhcNMjYxMDEyMDIwODU4WjAYMRYwFAYD VQQDEw02YWMzMDZiYS1hNGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0YeqDOsFYIEns4pEjvK0YFQrqcyx8Rg6aRdH17ghy8PdT9ARSwBzvqqMyml5 RB9EAo065oBaoDvzbtpdk9ImDqoWgFL6us2/2vjTQgyTmUbwNep5AEYbjfzqTMu+ gdeAefFl56I6tVTlAIT3sdPCBrtoQ1K+sV5cYCVdhopxyD45BugC/Ap5Z75c+Szj GJyjohSZ418oyNIeRiodlLIojFaJow1h2EiWYQfaG1u6OInZXKQdeTUyeBxofvB9 Vr/ipn9yJJzS+J/eFQL2PkQvfQkHW7KqMpy3YlL2LtB4EHjXA00+gxX5s5sHAslU BCLv8z/O8mUFpjOr0ll1DqM32wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGSR3Y+o AhH78QyV0iWrCxv9f+KrMB8GA1UdIwQYMBaAFNHimfnoLJN8srKmkGHoFzQfhQj1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODZDQy80RUE2QzYxOEU4 QkQxMUVEOEI4OTI1MjJDNEY5QUUwMi8wZUtaLWVnc2szeXlzcWFRWWVnWE5CLUZD UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBlS1otZWdzazN5eXNxYVFZZWdYTkItRkNQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODZDQy80RUE2QzYxOEU4QkQxMUVEOEI4OTI1MjJDNEY5QUUwMi8wZUtaLWVnc2sz eXlzcWFRWWVnWE5CLUZDUFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASuGu4TXFDgeSBXrhgdosxfwKl0KPu6pfDTUuPI+C4q2+64aX77SJv1ECsbma +yNh1RW+a7mfEi4m9BErQ/1Xj8y7cm9L3CUsHxVZnVALWFlhOWn2DlyGmOExAUY/ /KESkn+QlR8lAPVJ3SCkU3QX/CjrjS8w2NC0LAYjMalQublo/2lffxKpxVdxlKh6 gt3ms2RLBugN9WrGoItfc3Vr1JTXDJRznCv8k7WCi7BZhMzVZdozAQv1OfplNWt2 S4/N6yTvjX90Ny/gUF0hiRNzcIKcGcWV9++Wf2TQpjcPfsgR+PrKVyyCB9dUwJgS Cq52eyXJ7oJNkM8dTzZaGoEUYQ== -----END CERTIFICATE-----Generated at Tue Oct 6 23:09:29 2026 by rpki-client