$ rpki-client -vvvf rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft File: s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft (raw, json) Hash identifier: 7XTuwJzrITxacDMiQGZ4gjVo43UWudnjG+R58dtLiFg= Subject key identifier: FF:65:FC:0A:AE:32:05:56:3A:82:D8:43:BB:F0:EB:72:CC:18:37:99 Authority key identifier: B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25 Certificate issuer: /CN=A91964B3/serialNumber=B39866A99D1CD9F4E7E8F53C88AD14DA89A18625 Certificate serial: 38C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft Manifest number: 373D Signing time: Mon 26 Oct 2026 14:25:23 +0000 Manifest this update: Mon 26 Oct 2026 14:25:22 +0000 Manifest next update: Mon 02 Nov 2026 14:25:22 +0000 Files and hashes: 1: s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl (hash: sLhPiHS27Elog0U44DkYljYsRbdHLD71vRp65+zEYnU=) 2: 71D60BC2F6BA11EB865C4246C4F9AE02.roa (hash: KFI2tWHfw3kppvCKmuDyoJI/TXZwNEgYE/dBKADg924=) 3: B0EB27B470B811E9B32F6726C4F9AE02.roa (hash: z4MfCyr+jDttoP5VW5Vb0l643tPHIibVvGJ7ZyGfs8M=) 4: 26A143C291EB11EF8A024083C4F9AE02.roa (hash: qOuOZrrZglkih59X/Pjz7efqStftFhfdFn50wlzJXt4=) 5: B36EA83C70B111E98CFFF710C4F9AE02.roa (hash: 2nquH/Th3aV+FpaTguBv+jy8p2aXbOfhDSjXTwmNigg=) 6: B6704306C9F111F08975B813C4F9AE02.roa (hash: PBb5EKTyRWu5AVabDSxk04qN0YkGzL7f3+XVA7xRGbU=) 7: 160B219870BA11E99E0F6D2DC4F9AE02.roa (hash: 6MJI5nd76wUg6mIJiXKwgcaYmVbyO2X4VHI5tQqt2gM=) 8: 305A13D6C9F211F0ABA27932C4F9AE02.roa (hash: xd0XU3MwBsJzIvcMP9hCVQQXD6SJrZoGCMn4+QSTmCY=) 9: 18F4FD76918111EC93DCA42AC4F9AE02.roa (hash: aZB+rnqYjRl4Uc+17dt2ByemLhQ+5bYKCdCl9y70GQM=) 10: 9AF37E96D71B11EA9532F30CC4F9AE02.roa (hash: 548W6O4jy2t4m978fP7/vkFNV7StaszXL5cUkqOrlsQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 14:25:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14528 (0x38c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91964B3, serialNumber=B39866A99D1CD9F4E7E8F53C88AD14DA89A18625 Validity Not Before: Oct 26 14:25:22 2026 GMT Not After : Nov 2 14:25:22 2026 GMT Subject: CN=6adf62d3-e96c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ce:9a:ed:ef:42:9c:d3:35:4d:54:21:43:1e: 35:25:71:ef:dc:82:b0:6d:fd:05:1a:d1:49:55:9a: da:37:a5:a5:4f:f3:a0:4f:c8:d4:b5:b3:69:2c:ab: c2:32:4f:45:6e:ac:b6:a2:61:97:14:c7:57:2c:18: 5e:02:70:2c:5c:34:cb:b5:59:8f:18:46:73:47:6c: 4c:cc:e4:e0:2a:7a:34:fe:e0:dd:7f:d9:2e:4a:e4: 21:dc:fc:f6:16:cd:f8:82:fe:33:19:53:0e:c0:aa: a3:0a:2c:2b:75:d8:d1:c0:7b:32:e1:9b:a1:ef:95: 7d:04:50:a9:16:76:2d:b4:1f:d2:d2:53:db:b9:af: 96:e7:08:59:82:ea:51:cd:3c:41:32:f3:30:a5:bd: b8:22:7e:ed:02:0c:01:f8:24:d5:d4:1d:8e:36:1a: ab:8c:2a:75:ee:6d:2b:0b:99:39:d0:85:2b:0f:7a: 72:a6:2d:9d:ad:0a:b7:8c:d5:71:24:7c:00:f9:64: cf:e1:ad:b0:14:9d:35:1a:23:ef:0e:64:46:f7:59: d8:99:9d:b5:fd:10:7f:13:76:89:07:38:d8:00:03: 25:88:96:2f:ee:42:cc:d9:be:42:60:ee:41:d8:1d: 72:53:2f:5a:3c:78:0b:df:df:19:7d:ab:67:43:be: b5:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:65:FC:0A:AE:32:05:56:3A:82:D8:43:BB:F0:EB:72:CC:18:37:99 X509v3 Authority Key Identifier: keyid:B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:84:88:18:71:60:0d:b7:58:c0:bd:9f:bd:b8:2d:29:ee:54: 81:99:07:af:a8:3b:96:98:2f:1b:ab:f0:ca:32:89:90:fa:58: ea:c6:23:c4:38:b1:48:9f:79:f6:ab:10:c9:71:82:96:69:4d: 2e:5a:92:55:30:03:fc:01:05:64:09:30:17:48:dc:47:c7:c0: 41:2f:f5:3c:d8:73:e8:a8:f9:10:dc:45:ca:59:15:4c:ff:b0: 93:78:a3:be:0e:72:83:a7:53:1f:74:29:01:f8:4b:5c:8f:62: ae:8b:aa:fa:e7:c1:f4:74:77:a6:1c:46:20:6e:20:3d:a0:d0: 39:df:e5:64:18:99:ac:48:4b:69:79:cb:2e:86:4f:d9:49:4f: 3b:d4:d8:a0:dd:eb:5c:4a:67:61:b6:1e:71:fe:14:c8:cf:f2: 57:94:e7:99:39:31:a2:85:95:15:c0:e3:01:5f:cb:34:7f:b7: e6:16:8b:12:4f:bc:af:b4:5a:66:0e:fe:84:4f:62:eb:d6:ee: 47:87:01:b1:64:fb:66:3c:0e:b1:86:d3:07:7f:ea:1e:64:9e: 4e:bf:1e:68:33:33:41:73:68:6a:bc:ae:df:d9:ce:b6:18:29: 5e:a2:ce:82:b1:18:cf:80:9d:4b:c4:f1:e1:77:82:d9:e9:da: 9e:a6:0f:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICOMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY0QjMxMTAvBgNVBAUTKEIzOTg2NkE5OUQxQ0Q5RjRFN0U4RjUzQzg4QUQxNERB ODlBMTg2MjUwHhcNMjYxMDI2MTQyNTIyWhcNMjYxMTAyMTQyNTIyWjAYMRYwFAYD VQQDEw02YWRmNjJkMy1lOTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoM6a7e9CnNM1TVQhQx41JXHv3IKwbf0FGtFJVZraN6WlT/OgT8jUtbNpLKvC Mk9Fbqy2omGXFMdXLBheAnAsXDTLtVmPGEZzR2xMzOTgKno0/uDdf9kuSuQh3Pz2 Fs34gv4zGVMOwKqjCiwrddjRwHsy4Zuh75V9BFCpFnYttB/S0lPbua+W5whZgupR zTxBMvMwpb24In7tAgwB+CTV1B2ONhqrjCp17m0rC5k50IUrD3pypi2drQq3jNVx JHwA+WTP4a2wFJ01GiPvDmRG91nYmZ21/RB/E3aJBzjYAAMliJYv7kLM2b5CYO5B 2B1yUy9aPHgL398ZfatnQ761DwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP9l/Aqu MgVWOoLYQ7vw63LMGDeZMB8GA1UdIwQYMBaAFLOYZqmdHNn05+j1PIitFNqJoYYl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjRCMy9FNjU4NTExMjFE ODQxMUUyQTFCQTMwREIwOEIwMkNEMi9zNWhtcVowYzJmVG42UFU4aUswVTJvbWho aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M1aG1xWjBjMmZUbjZQVThpSzBVMm9taGhpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NjRCMy9FNjU4NTExMjFEODQxMUUyQTFCQTMwREIwOEIwMkNEMi9zNWhtcVowYzJm VG42UFU4aUswVTJvbWhoaVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEoSIGHFgDbdYwL2fvbgtKe5UgZkHr6g7lpgvG6vwyjKJkPpY6sYjxDixSJ95 9qsQyXGClmlNLlqSVTAD/AEFZAkwF0jcR8fAQS/1PNhz6Kj5ENxFylkVTP+wk3ij vg5yg6dTH3QpAfhLXI9irouq+ufB9HR3phxGIG4gPaDQOd/lZBiZrEhLaXnLLoZP 2UlPO9TYoN3rXEpnYbYecf4UyM/yV5TnmTkxooWVFcDjAV/LNH+35haLEk+8r7Ra Zg7+hE9i69buR4cBsWT7ZjwOsYbTB3/qHmSeTr8eaDMzQXNoaryu39nOthgpXqLO grEYz4CdS8Tx4XeC2enanqYPoQ== -----END CERTIFICATE-----Generated at Wed Oct 28 06:21:35 2026 by rpki-client