$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft File: u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft (raw, json) Hash identifier: SSUmMcDgOv8cz71aXCODe2wUFwD99lEqz2HD7xWyps4= Subject key identifier: 1E:11:DE:E2:B3:2C:1D:CF:A7:A7:E3:F2:7F:BC:5C:06:9A:5F:AD:2A Authority key identifier: BB:EC:21:0E:75:29:FD:39:7F:13:38:FF:AC:1D:DD:78:3C:0F:AA:32 Certificate issuer: /CN=A91A2265/serialNumber=BBEC210E7529FD397F1338FFAC1DDD783C0FAA32 Certificate serial: 025C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft Manifest number: 024B Signing time: Tue 27 Oct 2026 02:35:25 +0000 Manifest this update: Tue 27 Oct 2026 02:35:24 +0000 Manifest next update: Tue 03 Nov 2026 02:35:24 +0000 Files and hashes: 1: u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl (hash: 7jnIvRihn+jZGhvCGJD0Af6pXtgzjy2wwVxefhX30pg=) 2: FD57EA90508511EEBA4C0E2BC4F9AE02.roa (hash: vDdvCJ7Ilkj6j3EyUUG3A6VDOaQ9973VRteQFzrr2bg=) 3: 9F5C80A8F3EB11EFBAF62455C4F9AE02.roa (hash: INjKAtHT4YuZWArnvT5bdAmB2cAd6K4hrQ+j15TPHmw=) 4: FCD162AE508511EEBA4C0E2BC4F9AE02.roa (hash: wkL9CF0tWviJGwpOeaIeOvLdz67meR8gKKt1qekLsxc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 02:35:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 604 (0x25c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2265, serialNumber=BBEC210E7529FD397F1338FFAC1DDD783C0FAA32 Validity Not Before: Oct 27 02:35:24 2026 GMT Not After : Nov 3 02:35:24 2026 GMT Subject: CN=6ae00ded-e89e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d7:af:4c:e5:23:02:55:5e:47:20:25:c9:b9: e2:fe:83:a5:2a:89:4d:9a:33:53:a1:fa:ef:ad:45: e4:79:9b:72:d0:0e:e0:7b:62:ff:1f:22:d1:c5:01: 86:44:3d:0d:08:35:48:9a:e4:46:00:72:3f:9e:96: 91:3c:f4:09:e3:4e:a4:6f:fc:55:a2:9a:07:62:0d: 1b:08:99:d5:5a:af:d1:75:79:bc:9f:93:64:63:66: f4:20:3b:ac:a0:7a:99:7f:53:c9:fd:ce:84:f9:1a: 86:7b:a2:56:6b:a7:83:a8:26:18:2f:c7:6b:28:51: b2:83:46:72:c2:28:ab:77:a3:38:94:f4:5a:38:49: 83:27:09:be:df:4a:41:ee:b2:28:88:75:d9:2c:26: 50:d1:8f:17:7f:9c:25:0a:c0:bd:ea:b3:0e:01:a8: 1c:71:51:07:e6:12:1c:5d:de:05:52:84:22:28:66: c2:6a:f4:57:7d:69:dc:92:95:72:4a:d8:36:96:bb: 05:98:a3:50:e4:84:9d:43:c7:d7:ff:99:a2:63:37: 75:04:d9:90:c2:78:fc:4a:18:99:71:25:ba:d7:1d: 06:25:11:ca:f4:9a:73:bd:46:76:3c:60:65:21:41: 09:61:3c:c1:79:37:ee:d0:9b:43:cb:62:5a:b3:29: 1d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:11:DE:E2:B3:2C:1D:CF:A7:A7:E3:F2:7F:BC:5C:06:9A:5F:AD:2A X509v3 Authority Key Identifier: keyid:BB:EC:21:0E:75:29:FD:39:7F:13:38:FF:AC:1D:DD:78:3C:0F:AA:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:46:1d:be:cb:09:c7:84:d8:04:7c:b4:e1:82:da:1f:5a:43: 4b:1b:d8:fb:4b:4a:06:d3:49:79:8c:ef:5d:7a:c7:46:1a:ab: b6:ed:47:78:53:28:21:27:e0:aa:a1:07:f5:00:07:f7:08:03: 6d:d3:82:61:0b:eb:c5:a5:2c:d9:f2:e1:1a:14:ab:46:4d:ec: bb:9f:27:c9:81:61:8b:ce:b9:f9:93:92:ee:ac:1e:08:b5:58: 46:a1:4a:85:d3:3d:59:ce:b8:a9:03:6d:f8:42:f1:35:76:f3: 62:42:d6:f9:74:e8:57:06:aa:5a:0b:6f:ba:7b:e7:d0:81:2a: 8d:6d:d4:af:0b:88:51:64:67:19:0b:f7:f8:47:4a:9c:d2:93: da:df:fe:d0:05:0d:eb:82:78:48:21:68:b0:5d:ab:a5:73:43: a3:0e:67:9c:e6:c9:b7:e7:bf:f6:08:e6:e6:f3:45:f8:ea:e1: 8a:8f:04:c7:35:ae:de:10:a1:eb:da:02:fd:fb:98:57:b8:a0: 3d:82:9a:15:07:34:66:a8:23:59:f5:77:9f:88:17:f4:14:7b: cf:11:b1:aa:de:a9:1e:15:42:3a:72:79:e9:66:49:ca:79:45: 28:92:ba:5a:7b:c9:aa:ae:84:9e:c6:ed:0e:81:2e:b9:75:b6: 1b:af:1c:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTIyNjUxMTAvBgNVBAUTKEJCRUMyMTBFNzUyOUZEMzk3RjEzMzhGRkFDMURERDc4 M0MwRkFBMzIwHhcNMjYxMDI3MDIzNTI0WhcNMjYxMTAzMDIzNTI0WjAYMRYwFAYD VQQDEw02YWUwMGRlZC1lODllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt9evTOUjAlVeRyAlybni/oOlKolNmjNTofrvrUXkeZty0A7ge2L/HyLRxQGG RD0NCDVImuRGAHI/npaRPPQJ406kb/xVopoHYg0bCJnVWq/RdXm8n5NkY2b0IDus oHqZf1PJ/c6E+RqGe6JWa6eDqCYYL8drKFGyg0Zywiird6M4lPRaOEmDJwm+30pB 7rIoiHXZLCZQ0Y8Xf5wlCsC96rMOAagccVEH5hIcXd4FUoQiKGbCavRXfWnckpVy Stg2lrsFmKNQ5ISdQ8fX/5miYzd1BNmQwnj8ShiZcSW61x0GJRHK9JpzvUZ2PGBl IUEJYTzBeTfu0JtDy2JasykdnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB4R3uKz LB3Pp6fj8n+8XAaaX60qMB8GA1UdIwQYMBaAFLvsIQ51Kf05fxM4/6wd3Xg8D6oy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjI2NS85QTY2QUFERTUw ODUxMUVFQkEzRUZDMTFDNEY5QUUwMi91LXdoRG5VcF9UbF9FempfckIzZGVEd1Bx akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Utd2hEblVwX1RsX0V6al9yQjNkZUR3UHFqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjI2NS85QTY2QUFERTUwODUxMUVFQkEzRUZDMTFDNEY5QUUwMi91LXdoRG5VcF9U bF9FempfckIzZGVEd1BxakkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPkYdvssJx4TYBHy04YLaH1pDSxvY+0tKBtNJeYzvXXrHRhqrtu1HeFMoISfg qqEH9QAH9wgDbdOCYQvrxaUs2fLhGhSrRk3su58nyYFhi865+ZOS7qweCLVYRqFK hdM9Wc64qQNt+ELxNXbzYkLW+XToVwaqWgtvunvn0IEqjW3UrwuIUWRnGQv3+EdK nNKT2t/+0AUN64J4SCFosF2rpXNDow5nnObJt+e/9gjm5vNF+Orhio8ExzWu3hCh 69oC/fuYV7igPYKaFQc0ZqgjWfV3n4gX9BR7zxGxqt6pHhVCOnJ56WZJynlFKJK6 WnvJqq6EnsbtDoEuuXW2G68c0w== -----END CERTIFICATE-----Generated at Tue Oct 27 22:35:41 2026 by rpki-client