$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft File: J23PPyNBrcfQvEbzY0T3FWANmlg.mft (raw, json) Hash identifier: w4GnuTG5SfNwFiFyGfS7W12EK2h2IbCsintAIgGefB0= Subject key identifier: C1:DA:DE:03:F3:B4:DA:F6:FC:48:22:9E:8F:D9:F4:83:46:33:FE:BA Authority key identifier: 27:6D:CF:3F:23:41:AD:C7:D0:BC:46:F3:63:44:F7:15:60:0D:9A:58 Certificate issuer: /CN=A91A04B9/serialNumber=276DCF3F2341ADC7D0BC46F36344F715600D9A58 Certificate serial: 0158 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft Manifest number: 0150 Signing time: Thu 29 Oct 2026 05:57:06 +0000 Manifest this update: Thu 29 Oct 2026 05:57:06 +0000 Manifest next update: Thu 05 Nov 2026 05:57:06 +0000 Files and hashes: 1: J23PPyNBrcfQvEbzY0T3FWANmlg.crl (hash: VoGp55gHA9H/Yigf6jrIyYbdeobBu6zTJXayE/6z3SY=) 2: 197A8B3CD23611EF9EA7495DC4F9AE02.roa (hash: LydSAbFEgXunoPXmnpZMts641lpnMB3u48Fdl0a+zxc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.crl rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 05:57:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 344 (0x158) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A04B9, serialNumber=276DCF3F2341ADC7D0BC46F36344F715600D9A58 Validity Not Before: Oct 29 05:57:06 2026 GMT Not After : Nov 5 05:57:06 2026 GMT Subject: CN=6ae2e032-0377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1d:83:67:ac:9e:db:73:a2:53:eb:92:04:a7: 55:51:e8:3a:a7:01:ed:08:33:5d:21:9f:0c:41:b6: f6:d5:40:ad:17:a1:7a:e9:8e:e9:a9:14:7b:7f:53: c9:2b:bf:c0:ef:3a:66:e5:e8:54:2a:c0:3a:6b:43: 14:44:56:09:90:6c:6d:af:99:70:5c:18:4b:14:c2: 88:9c:f8:4e:20:e8:af:f5:ff:15:eb:e9:18:21:f0: 73:39:1c:62:d4:b2:a2:0c:74:8d:b8:f7:ee:46:0a: 60:00:85:f8:d7:f5:d4:75:7e:a2:c6:e5:c8:61:a7: 36:66:73:29:78:96:2d:76:63:be:5a:ea:a2:75:56: a6:ae:99:2f:77:78:7a:5e:33:90:f1:34:64:5b:32: 71:6f:b1:1f:b7:2c:4d:1e:80:bc:6f:11:d3:b2:57: 63:a7:cf:12:93:e2:f7:5f:26:20:83:cb:0f:03:b4: 26:23:95:cc:da:98:85:14:5e:61:b4:aa:ca:df:eb: af:a2:e9:67:f8:95:08:53:0b:fb:e7:39:f3:1b:59: 83:58:e5:c9:06:cd:5c:2a:72:ad:1b:f0:f0:6e:ca: bb:2e:bf:6a:f1:a8:b9:76:92:0c:c9:fe:b5:c6:fe: 55:cb:9a:47:b0:78:d0:02:86:44:b4:68:45:3e:40: 5f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:DA:DE:03:F3:B4:DA:F6:FC:48:22:9E:8F:D9:F4:83:46:33:FE:BA X509v3 Authority Key Identifier: keyid:27:6D:CF:3F:23:41:AD:C7:D0:BC:46:F3:63:44:F7:15:60:0D:9A:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:37:1b:1b:c6:b3:f1:6b:5f:b9:8d:f3:e0:0a:e8:e7:c9:ef: b7:69:1a:85:c0:54:8e:8a:1c:1f:ae:ea:3d:cb:d3:dd:d5:e3: a8:a5:0c:b0:43:0f:37:cf:43:fc:17:0a:e4:5d:a5:2e:a9:7a: 2d:e0:01:ab:87:28:57:33:50:b7:58:5d:43:d2:5d:d9:f1:ba: a7:40:0e:a4:7a:f5:18:14:a7:ff:a2:0f:1a:41:d6:49:9e:66: 98:10:31:11:ac:ec:e6:95:91:7a:3b:c5:d2:b1:fb:6c:a6:95: 97:8b:ac:d2:c9:0d:3d:d0:0e:a7:26:65:6a:21:50:3b:05:16: 22:2f:4c:0b:d1:b7:74:c5:56:4e:14:15:7d:c4:d8:36:09:e3: dc:5b:76:98:a6:f8:40:5f:99:a2:9d:87:56:dc:de:48:1e:cf: ea:67:71:d8:33:bc:15:30:cf:c6:f3:fb:b0:26:27:90:50:23: 69:c3:df:66:3f:91:b4:99:7e:df:e8:18:e4:a0:3c:24:2a:56: e7:c9:a6:53:38:aa:7f:0f:e4:c3:1d:df:e8:7f:e0:1d:1b:b9: 78:6e:f1:63:44:56:aa:a1:49:1a:c3:ce:ac:44:8d:92:30:f1: c8:1d:6e:69:28:fb:83:03:a8:81:5e:62:26:a7:21:74:0b:73: 28:86:6f:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA0QjkxMTAvBgNVBAUTKDI3NkRDRjNGMjM0MUFEQzdEMEJDNDZGMzYzNDRGNzE1 NjAwRDlBNTgwHhcNMjYxMDI5MDU1NzA2WhcNMjYxMTA1MDU1NzA2WjAYMRYwFAYD VQQDEw02YWUyZTAzMi0wMzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyR2DZ6ye23OiU+uSBKdVUeg6pwHtCDNdIZ8MQbb21UCtF6F66Y7pqRR7f1PJ K7/A7zpm5ehUKsA6a0MURFYJkGxtr5lwXBhLFMKInPhOIOiv9f8V6+kYIfBzORxi 1LKiDHSNuPfuRgpgAIX41/XUdX6ixuXIYac2ZnMpeJYtdmO+WuqidVamrpkvd3h6 XjOQ8TRkWzJxb7EftyxNHoC8bxHTsldjp88Sk+L3XyYgg8sPA7QmI5XM2piFFF5h tKrK3+uvouln+JUIUwv75znzG1mDWOXJBs1cKnKtG/Dwbsq7Lr9q8ai5dpIMyf61 xv5Vy5pHsHjQAoZEtGhFPkBfbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMHa3gPz tNr2/Egino/Z9INGM/66MB8GA1UdIwQYMBaAFCdtzz8jQa3H0LxG82NE9xVgDZpY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDRCOS9DRTg0MDU2OEQy MzUxMUVGOEZFMjlDNUNDNEY5QUUwMi9KMjNQUHlOQnJjZlF2RWJ6WTBUM0ZXQU5t bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0oyM1BQeU5CcmNmUXZFYnpZMFQzRldBTm1sZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDRCOS9DRTg0MDU2OEQyMzUxMUVGOEZFMjlDNUNDNEY5QUUwMi9KMjNQUHlOQnJj ZlF2RWJ6WTBUM0ZXQU5tbGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVzcbG8az8WtfuY3z4Aro58nvt2kahcBUjoocH67qPcvT3dXjqKUMsEMPN89D /BcK5F2lLql6LeABq4coVzNQt1hdQ9Jd2fG6p0AOpHr1GBSn/6IPGkHWSZ5mmBAx Eazs5pWRejvF0rH7bKaVl4us0skNPdAOpyZlaiFQOwUWIi9MC9G3dMVWThQVfcTY Ngnj3Ft2mKb4QF+Zop2HVtzeSB7P6mdx2DO8FTDPxvP7sCYnkFAjacPfZj+RtJl+ 3+gY5KA8JCpW58mmUziqfw/kwx3f6H/gHRu5eG7xY0RWqqFJGsPOrESNkjDxyB1u aSj7gwOogV5iJqchdAtzKIZv8g== -----END CERTIFICATE-----Generated at Thu Oct 29 13:52:32 2026 by rpki-client