$ rpki-client -vvvf rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft File: cQovxyPTd706pfsnGkrolOV6dFQ.mft (raw, json) Hash identifier: 9OiGIoA/lTpr+kMAhPtUGi+WIYWbgD+yYwgtg6uYx34= Subject key identifier: 2C:2A:D7:A7:31:B6:22:AD:7F:55:55:80:78:F1:2A:B7:C8:E3:A1:03 Authority key identifier: 71:0A:2F:C7:23:D3:77:BD:3A:A5:FB:27:1A:4A:E8:94:E5:7A:74:54 Certificate issuer: /CN=A91976E2/serialNumber=710A2FC723D377BD3AA5FB271A4AE894E57A7454 Certificate serial: 0488 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft Manifest number: 047A Signing time: Wed 21 Oct 2026 00:12:40 +0000 Manifest this update: Wed 21 Oct 2026 00:12:40 +0000 Manifest next update: Wed 28 Oct 2026 00:12:40 +0000 Files and hashes: 1: cQovxyPTd706pfsnGkrolOV6dFQ.crl (hash: FJfEewOBI5sn06AAR4mK/utH9KAic5PBuU6MhcHR7zg=) 2: ADDCA5F4BA2911F0B6E66A71C4F9AE02.roa (hash: YHAl4wyL5lBLADe3tYGJfQq5g48eFSMbVbWuT+BMPaQ=) 3: 61138FD0708111F1AFA81DDF7CA30FBC.roa (hash: UXuyg07q384x+vqE80NFlYLxxP2h+t2gXIe3OeSv7hI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.crl rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 00:12:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1160 (0x488) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91976E2, serialNumber=710A2FC723D377BD3AA5FB271A4AE894E57A7454 Validity Not Before: Oct 21 00:12:40 2026 GMT Not After : Oct 28 00:12:40 2026 GMT Subject: CN=6ad80378-f644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fe:47:82:24:d8:77:a2:84:7a:59:f8:20:c8: 40:75:24:6d:6c:69:ce:f9:59:50:13:08:17:d9:72: 08:19:1c:b2:ec:29:8b:13:b3:8c:95:df:72:c9:1c: 54:d9:23:8f:12:f0:ac:2e:64:40:b2:b8:fe:ea:94: 58:20:88:81:8e:61:e8:d8:65:93:50:ac:0e:54:6a: f7:6e:13:c6:0e:12:47:79:da:13:85:d8:25:d4:91: 0d:44:a3:18:dc:55:75:aa:96:56:dc:af:77:8c:f1: 1a:71:5d:58:8e:00:f7:cf:36:41:d2:59:f1:bc:f0: 57:c0:c0:6a:e5:db:22:fb:c6:f5:1f:de:39:3b:f3: d8:e8:4c:c4:87:a9:98:e5:69:f0:c6:cf:3c:65:c6: 08:4d:cb:8a:ff:3f:4b:52:e9:95:70:d6:cf:88:4a: f3:ae:bc:a7:ab:51:71:4b:c6:94:1e:99:bb:40:2b: 6f:dd:dc:19:30:31:f7:62:54:39:e7:12:57:f3:6e: b8:53:10:d8:52:1a:1b:84:af:72:5b:d6:a1:90:85: 38:50:bb:68:9d:64:0c:85:f8:f4:c9:f3:a8:d2:06: 2b:f2:24:9e:1e:b1:30:65:7e:07:0a:eb:cd:e1:85: 15:1c:8d:01:9d:30:3e:8f:2f:49:dc:f8:b5:68:34: bb:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:2A:D7:A7:31:B6:22:AD:7F:55:55:80:78:F1:2A:B7:C8:E3:A1:03 X509v3 Authority Key Identifier: keyid:71:0A:2F:C7:23:D3:77:BD:3A:A5:FB:27:1A:4A:E8:94:E5:7A:74:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:e9:73:12:be:8f:65:63:80:40:05:fb:8f:5b:e1:e9:12:93: c1:b3:fa:50:3c:cc:d1:91:59:01:06:f5:96:ae:0c:f7:90:de: 30:ef:5c:ba:e1:21:46:6c:75:78:0f:0a:cc:b8:ae:57:68:13: 16:98:46:2f:41:e4:6a:3f:e0:8d:86:b8:3f:60:9d:7b:76:7b: 91:ba:77:2c:91:16:81:ef:e8:48:0c:a2:67:3f:41:55:6c:28: 61:79:d2:13:2a:78:cf:76:96:8c:38:18:20:c1:25:9b:73:78: 6d:f3:c4:ec:05:4a:d7:09:e7:a4:38:d7:57:40:8f:1e:ad:d4: 48:23:01:d4:6a:5e:62:42:12:e5:c1:6f:88:08:ce:56:f1:9d: ad:7e:30:38:f0:e8:d3:94:8b:b2:e0:b2:9b:6f:c5:af:70:80: ac:a9:0b:d6:fc:68:5d:96:8c:72:c9:41:72:7a:5c:28:a9:85: 28:34:34:bf:63:1d:4c:b2:dc:0d:17:f6:b0:7a:3a:37:35:6d: d7:65:39:02:8c:b9:c5:ff:1c:b0:3c:14:e3:db:56:44:87:95: f6:9a:94:73:04:47:39:98:d8:15:f9:16:da:86:2b:55:ac:29: ee:4b:b1:36:8c:3e:95:fb:ff:6b:3a:52:74:ad:ab:ce:62:17: 7a:4e:8c:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc2RTIxMTAvBgNVBAUTKDcxMEEyRkM3MjNEMzc3QkQzQUE1RkIyNzFBNEFFODk0 RTU3QTc0NTQwHhcNMjYxMDIxMDAxMjQwWhcNMjYxMDI4MDAxMjQwWjAYMRYwFAYD VQQDEw02YWQ4MDM3OC1mNjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/5HgiTYd6KEeln4IMhAdSRtbGnO+VlQEwgX2XIIGRyy7CmLE7OMld9yyRxU 2SOPEvCsLmRAsrj+6pRYIIiBjmHo2GWTUKwOVGr3bhPGDhJHedoThdgl1JENRKMY 3FV1qpZW3K93jPEacV1YjgD3zzZB0lnxvPBXwMBq5dsi+8b1H945O/PY6EzEh6mY 5Wnwxs88ZcYITcuK/z9LUumVcNbPiErzrrynq1FxS8aUHpm7QCtv3dwZMDH3YlQ5 5xJX8264UxDYUhobhK9yW9ahkIU4ULtonWQMhfj0yfOo0gYr8iSeHrEwZX4HCuvN 4YUVHI0BnTA+jy9J3Pi1aDS7OwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCwq16cx tiKtf1VVgHjxKrfI46EDMB8GA1UdIwQYMBaAFHEKL8cj03e9OqX7JxpK6JTlenRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzZFMi80N0M0NEFEOEFF ODkxMUVDOEE4RDMzNjhDNEY5QUUwMi9jUW92eHlQVGQ3MDZwZnNuR2tyb2xPVjZk RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NRb3Z4eVBUZDcwNnBmc25Ha3JvbE9WNmRGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzZFMi80N0M0NEFEOEFFODkxMUVDOEE4RDMzNjhDNEY5QUUwMi9jUW92eHlQVGQ3 MDZwZnNuR2tyb2xPVjZkRlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIelzEr6PZWOAQAX7j1vh6RKTwbP6UDzM0ZFZAQb1lq4M95DeMO9cuuEhRmx1 eA8KzLiuV2gTFphGL0Hkaj/gjYa4P2Cde3Z7kbp3LJEWge/oSAyiZz9BVWwoYXnS Eyp4z3aWjDgYIMElm3N4bfPE7AVK1wnnpDjXV0CPHq3USCMB1GpeYkIS5cFviAjO VvGdrX4wOPDo05SLsuCym2/Fr3CArKkL1vxoXZaMcslBcnpcKKmFKDQ0v2MdTLLc DRf2sHo6NzVt12U5Aoy5xf8csDwU49tWRIeV9pqUcwRHOZjYFfkW2oYrVawp7kux Now+lfv/azpSdK2rzmIXek6MmA== -----END CERTIFICATE-----Generated at Wed Oct 21 21:17:25 2026 by rpki-client