$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft File: 7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft (raw, json) Hash identifier: hLeRSBhBbwRUBrzpAXcQzs1mIdUhoX6rA1hP6Xy5RQg= Subject key identifier: E1:70:6E:C7:69:87:27:4B:7A:7A:A6:84:59:74:8F:66:C1:E9:E3:9E Authority key identifier: ED:9B:0E:60:85:A2:5D:F2:67:49:FF:27:58:1A:4E:8B:C7:C1:86:CC Certificate issuer: /CN=A91A02D8/serialNumber=ED9B0E6085A25DF26749FF27581A4E8BC7C186CC Certificate serial: 01D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft Manifest number: 01C3 Signing time: Tue 27 Oct 2026 04:07:07 +0000 Manifest this update: Tue 27 Oct 2026 04:07:06 +0000 Manifest next update: Tue 03 Nov 2026 04:07:06 +0000 Files and hashes: 1: 7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl (hash: pMj/IOf7cg5FCfpMeNvKjcC3DXdAP6ep+pD+Q21dgac=) 2: lftbn7yCHANlK0gPOIe05I1gJrY.asa (hash: Kr5K0dbQ4/chaUCtF5xae8OauETToeSzfFlUJvJqheY=) 3: 2C7C9DD2258E11F0B42E1529C4F9AE02.roa (hash: Xhmndf5ojRbPlnBHYgYgyJ2fjmYQp+txk1dvG9nv9jQ=) 4: 86F9CBCC2AB711EF996EC819C4F9AE02.roa (hash: pdK2+bFIXT9bXK2PREvdd0iUpjsO8yecUrGAwJUdC0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 04:07:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 467 (0x1d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A02D8, serialNumber=ED9B0E6085A25DF26749FF27581A4E8BC7C186CC Validity Not Before: Oct 27 04:07:06 2026 GMT Not After : Nov 3 04:07:06 2026 GMT Subject: CN=6ae0236b-f69c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c5:f6:ff:08:45:86:89:50:50:a1:e2:18:2d: b2:41:cf:84:c8:3b:e4:d7:4b:c2:07:4e:03:ed:a3: 41:5a:b6:ba:24:c9:80:88:36:db:59:2c:f7:14:f8: 78:2f:e4:81:23:14:cb:ab:24:04:97:9f:6d:e6:ec: 72:30:93:f8:ac:56:ac:66:d8:2e:85:0b:ad:fc:4f: 8f:66:b4:24:4f:b8:6b:95:60:25:9f:9a:db:72:3d: 19:b1:cd:b4:9d:23:b9:39:3b:47:c1:76:30:70:08: cf:8b:2c:cb:cd:1b:a5:b1:73:0c:bb:ae:04:93:4c: 93:f6:49:59:a1:9f:f3:f6:5f:40:2b:6d:58:8a:6f: 95:fb:55:74:e3:23:32:68:0f:f5:d6:41:9e:b5:79: 6e:01:f2:6c:aa:07:5b:db:63:89:26:08:3a:20:ae: 8f:5d:f0:e6:b2:66:09:78:2a:aa:1a:57:11:10:e6: 82:e5:87:30:39:c1:78:d6:20:9e:48:a6:f2:43:d9: 1d:04:d9:7c:84:86:8f:dc:bd:f6:83:85:9d:84:70: a4:95:b7:65:54:62:10:7e:a9:2a:67:12:0a:34:be: 90:41:82:9b:1d:0b:b8:da:e7:3e:84:89:17:b4:1f: 5e:31:8d:d0:b0:9e:43:a1:60:a6:63:a3:e2:02:08: d8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:70:6E:C7:69:87:27:4B:7A:7A:A6:84:59:74:8F:66:C1:E9:E3:9E X509v3 Authority Key Identifier: keyid:ED:9B:0E:60:85:A2:5D:F2:67:49:FF:27:58:1A:4E:8B:C7:C1:86:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:15:b9:17:17:55:dc:9f:7f:d8:bb:d0:6d:02:eb:d4:ba:26: 25:27:ef:25:e0:dd:ba:b0:b6:43:2a:dc:30:37:0b:dd:76:a3: 42:d3:de:04:6d:7e:e9:ba:1d:e1:bb:f0:99:41:b5:88:43:86: 1b:fd:dc:8f:77:4e:b9:fe:2c:7b:2a:f7:2b:9c:63:4f:4f:f2: 80:83:a3:51:96:28:43:d8:66:84:fa:85:20:71:b7:12:4f:8d: 2a:b9:22:de:86:6d:67:19:58:9d:a8:e1:36:60:c1:50:ee:59: f8:3e:ab:83:f6:4a:27:b2:7e:53:cb:b8:26:37:ae:d2:63:56: 32:b8:c6:91:fc:9c:fe:92:fb:a4:21:fe:6e:e9:3b:b9:c3:72: 81:1c:e5:41:da:7b:2a:9c:83:b9:90:05:f6:7a:c2:d2:e8:9b: ee:72:44:be:b0:e7:cb:05:c2:dc:31:0d:5b:db:e3:76:5b:9f: b0:0a:c9:02:f2:c9:30:23:ad:79:af:6b:1b:3e:f5:db:9d:ed: a2:0f:57:50:aa:46:87:6b:e4:46:c3:f4:54:40:37:06:7e:0f: fa:5f:e3:fb:6c:22:d1:f4:f9:06:c3:df:cd:4b:84:cf:6d:d3: c3:8a:39:29:23:1a:0a:17:5e:fc:12:41:13:57:40:3b:9e:11: e6:c4:50:27 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTAyRDgxMTAvBgNVBAUTKEVEOUIwRTYwODVBMjVERjI2NzQ5RkYyNzU4MUE0RThC QzdDMTg2Q0MwHhcNMjYxMDI3MDQwNzA2WhcNMjYxMTAzMDQwNzA2WjAYMRYwFAYD VQQDEw02YWUwMjM2Yi1mNjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv8X2/whFholQUKHiGC2yQc+EyDvk10vCB04D7aNBWra6JMmAiDbbWSz3FPh4 L+SBIxTLqyQEl59t5uxyMJP4rFasZtguhQut/E+PZrQkT7hrlWAln5rbcj0Zsc20 nSO5OTtHwXYwcAjPiyzLzRulsXMMu64Ek0yT9klZoZ/z9l9AK21Yim+V+1V04yMy aA/11kGetXluAfJsqgdb22OJJgg6IK6PXfDmsmYJeCqqGlcREOaC5YcwOcF41iCe SKbyQ9kdBNl8hIaP3L32g4WdhHCklbdlVGIQfqkqZxIKNL6QQYKbHQu42uc+hIkX tB9eMY3QsJ5DoWCmY6PiAgjYVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOFwbsdp hydLenqmhFl0j2bB6eOeMB8GA1UdIwQYMBaAFO2bDmCFol3yZ0n/J1gaTovHwYbM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDJEOC9FMDkyNDhFQTJB QjYxMUVGQjMzOUZEODFDNEY5QUUwMi83WnNPWUlXaVhmSm5TZjhuV0JwT2k4ZkJo c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdac09ZSVdpWGZKblNmOG5XQnBPaThmQmhzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDJEOC9FMDkyNDhFQTJBQjYxMUVGQjMzOUZEODFDNEY5QUUwMi83WnNPWUlXaVhm Sm5TZjhuV0JwT2k4ZkJoc3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhBW5FxdV3J9/2LvQbQLr1LomJSfvJeDdurC2QyrcMDcL3XajQtPeBG1+6bod 4bvwmUG1iEOGG/3cj3dOuf4seyr3K5xjT0/ygIOjUZYoQ9hmhPqFIHG3Ek+NKrki 3oZtZxlYnajhNmDBUO5Z+D6rg/ZKJ7J+U8u4Jjeu0mNWMrjGkfyc/pL7pCH+buk7 ucNygRzlQdp7KpyDuZAF9nrC0uib7nJEvrDnywXC3DENW9vjdlufsArJAvLJMCOt ea9rGz71253tog9XUKpGh2vkRsP0VEA3Bn4P+l/j+2wi0fT5BsPfzUuEz23Tw4o5 KSMaChde/BJBE1dAO54R5sRQJw== -----END CERTIFICATE-----Generated at Wed Oct 28 18:15:49 2026 by rpki-client