$ rpki-client -vvvf rpki.apnic.net/member_repository/A91947D3/A15B9654C2F311F1A39776635411F970/PU_DfzRgnJrF-N-IJNqbMyW_DWs.mft File: PU_DfzRgnJrF-N-IJNqbMyW_DWs.mft (raw, json) Hash identifier: I7Wxhc86s/VKTiRR85dEjxnkkc1Q2KmkPCWVnhDiF10= Subject key identifier: 57:FE:F8:92:F7:2C:08:01:94:45:79:3A:06:07:BC:52:CF:C2:6B:7E Authority key identifier: 3D:4F:C3:7F:34:60:9C:9A:C5:F8:DF:88:24:DA:9B:33:25:BF:0D:6B Certificate issuer: /CN=A91947D3/serialNumber=3D4FC37F34609C9AC5F8DF8824DA9B3325BF0D6B Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PU_DfzRgnJrF-N-IJNqbMyW_DWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91947D3/A15B9654C2F311F1A39776635411F970/PU_DfzRgnJrF-N-IJNqbMyW_DWs.mft Manifest number: 11 Signing time: Sun 25 Oct 2026 09:34:00 +0000 Manifest this update: Sun 25 Oct 2026 09:34:00 +0000 Manifest next update: Sun 01 Nov 2026 09:34:00 +0000 Files and hashes: 1: PU_DfzRgnJrF-N-IJNqbMyW_DWs.crl (hash: QGft64BYWke1QOlJ4iAZ2I791ba5a0I6372mbeffpb4=) 2: 5B3A99C4C30011F1AAB76E045811F970.roa (hash: EWeu7Mhpq23d73QkGwC8gFcJvBUMXRJDugrR0ws0fWk=) 3: 43A8E0C6CE8211F1B307E5A9F665CEF9.roa (hash: HiKzMBc+Ju2ZPy1mKbgjoB1/LCXSUvBgT0UhY3wLwa8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91947D3/A15B9654C2F311F1A39776635411F970/PU_DfzRgnJrF-N-IJNqbMyW_DWs.crl rsync://rpki.apnic.net/member_repository/A91947D3/A15B9654C2F311F1A39776635411F970/PU_DfzRgnJrF-N-IJNqbMyW_DWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PU_DfzRgnJrF-N-IJNqbMyW_DWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 09:33:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91947D3, serialNumber=3D4FC37F34609C9AC5F8DF8824DA9B3325BF0D6B Validity Not Before: Oct 25 09:34:00 2026 GMT Not After : Nov 1 09:34:00 2026 GMT Subject: CN=6addcd08-b406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2f:d0:24:00:50:bf:0d:a6:dc:db:a9:f1:4f: 26:4c:fc:88:b2:f4:2c:e6:57:b7:41:4f:6b:70:a0: 24:98:3d:cc:de:74:e7:74:09:6e:6d:39:15:a4:85: 59:8b:d7:fd:75:43:98:30:7d:ae:58:e0:8a:9d:5b: e7:1e:c5:7c:c4:71:c5:98:51:27:92:5f:b1:fa:e5: df:0c:82:45:f6:22:77:5f:94:d2:60:4d:f1:e0:59: 5c:23:7b:84:c2:f9:b9:13:eb:e9:4e:f6:41:db:67: 72:5b:1c:77:18:49:f1:e7:cf:90:db:b9:9c:9d:5d: 52:65:a1:98:ca:32:c3:73:e9:d6:a6:c7:bf:28:33: 6a:a1:5f:bb:0e:93:3c:f2:dd:69:40:09:85:99:fc: 90:02:98:3e:23:c9:03:6d:d0:d8:0a:c4:c4:f6:ff: cb:e2:e1:da:0a:bd:2e:26:d9:f9:d7:f6:0b:d0:2e: 0a:b8:d9:37:5a:44:d3:73:a9:43:dd:34:bd:fe:c4: a2:0e:83:c3:0a:9f:65:a5:dc:08:4d:79:a2:c4:8f: 38:9e:11:c0:8b:5e:5c:77:4b:ae:44:71:12:32:70: 59:11:34:a3:45:69:7c:46:3e:ee:bd:78:ef:af:f9: 90:42:14:8a:59:4f:c6:1b:26:22:7d:c8:e7:5c:e7: 07:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:FE:F8:92:F7:2C:08:01:94:45:79:3A:06:07:BC:52:CF:C2:6B:7E X509v3 Authority Key Identifier: keyid:3D:4F:C3:7F:34:60:9C:9A:C5:F8:DF:88:24:DA:9B:33:25:BF:0D:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91947D3/A15B9654C2F311F1A39776635411F970/PU_DfzRgnJrF-N-IJNqbMyW_DWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PU_DfzRgnJrF-N-IJNqbMyW_DWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91947D3/A15B9654C2F311F1A39776635411F970/PU_DfzRgnJrF-N-IJNqbMyW_DWs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:0d:3f:41:bc:e0:70:7d:64:77:14:72:32:da:ce:ae:1c:ff: 66:82:25:5d:e1:96:6b:ab:82:b5:e0:04:c3:f2:ad:fa:df:20: 15:04:22:8c:c0:c5:69:4f:b6:2d:a4:90:45:6a:12:f8:25:45: 79:b8:c5:2c:15:69:b9:2f:25:62:22:27:3d:5c:23:e5:15:69: 3f:47:b2:14:f5:2b:4b:3c:01:cc:10:4b:f9:98:7c:87:55:48: c1:fb:c1:58:57:30:ca:f0:e1:d4:b1:54:74:5f:11:55:6a:65: 32:8b:69:9d:35:32:e8:43:80:76:02:43:23:69:2b:12:dc:61: 01:b3:7f:ec:65:8e:09:b0:d8:d6:e2:4e:29:8f:6a:f0:e7:4a: db:dc:25:be:6e:85:d6:12:47:ad:4b:16:fd:91:2f:c9:8a:35: b8:5e:3d:a5:05:bb:2a:a5:f9:a6:bc:63:39:b3:f0:01:63:86: 23:1d:07:7a:3b:18:98:9b:4b:f8:64:21:85:5b:49:4d:b2:ce: 73:5c:5d:a1:5a:09:83:01:98:6a:5f:7c:57:68:9b:2f:5d:2b: ad:53:e2:c1:d9:45:0e:b1:50:c0:aa:4d:14:ed:73:b8:b0:21: 6d:7d:36:d0:54:a0:26:76:7b:9d:0c:ab:c0:3e:d0:5e:a9:f0: e1:72:8d:70 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NDdEMzExMC8GA1UEBRMoM0Q0RkMzN0YzNDYwOUM5QUM1RjhERjg4MjREQTlCMzMy NUJGMEQ2QjAeFw0yNjEwMjUwOTM0MDBaFw0yNjExMDEwOTM0MDBaMBgxFjAUBgNV BAMTDTZhZGRjZDA4LWI0MDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7L9AkAFC/Dabc26nxTyZM/Iiy9CzmV7dBT2twoCSYPczedOd0CW5tORWkhVmL 1/11Q5gwfa5Y4IqdW+cexXzEccWYUSeSX7H65d8MgkX2IndflNJgTfHgWVwje4TC +bkT6+lO9kHbZ3JbHHcYSfHnz5DbuZydXVJloZjKMsNz6damx78oM2qhX7sOkzzy 3WlACYWZ/JACmD4jyQNt0NgKxMT2/8vi4doKvS4m2fnX9gvQLgq42TdaRNNzqUPd NL3+xKIOg8MKn2Wl3AhNeaLEjzieEcCLXlx3S65EcRIycFkRNKNFaXxGPu69eO+v +ZBCFIpZT8YbJiJ9yOdc5wdRAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUV/74kvcs CAGURXk6Bge8Us/Ca34wHwYDVR0jBBgwFoAUPU/DfzRgnJrF+N+IJNqbMyW/DWsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0N0QzL0ExNUI5NjU0QzJG MzExRjFBMzk3NzY2MzU0MTFGOTcwL1BVX0RmelJnbkpyRi1OLUlKTnFiTXlXX0RX cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUFVfRGZ6UmduSnJGLU4tSUpOcWJNeVdfRFdzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0 N0QzL0ExNUI5NjU0QzJGMzExRjFBMzk3NzY2MzU0MTFGOTcwL1BVX0RmelJnbkpy Ri1OLUlKTnFiTXlXX0RXcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB4DT9BvOBwfWR3FHIy2s6uHP9mgiVd4ZZrq4K14ATD8q363yAVBCKMwMVpT7Yt pJBFahL4JUV5uMUsFWm5LyViIic9XCPlFWk/R7IU9StLPAHMEEv5mHyHVUjB+8FY VzDK8OHUsVR0XxFVamUyi2mdNTLoQ4B2AkMjaSsS3GEBs3/sZY4JsNjW4k4pj2rw 50rb3CW+boXWEketSxb9kS/JijW4Xj2lBbsqpfmmvGM5s/ABY4YjHQd6OxiYm0v4 ZCGFW0lNss5zXF2hWgmDAZhqX3xXaJsvXSutU+LB2UUOsVDAqk0U7XO4sCFtfTbQ VKAmdnudDKvAPtBeqfDhco1w -----END CERTIFICATE-----Generated at Mon Oct 26 21:16:08 2026 by rpki-client