$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft File: fSkuhkI7U8Czc7eZZYghkTSp5hA.mft (raw, json) Hash identifier: yNl7WeDvGxbKiz9NYdqP6t/X1f170tJqN9WUwmfS8cw= Subject key identifier: 2B:8D:D8:FF:E7:C3:68:10:81:6C:A8:AF:87:1F:59:3A:4B:C7:B4:57 Authority key identifier: 7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10 Certificate issuer: /CN=A91A3430/serialNumber=7D292E86423B53C0B373B7996588219134A9E610 Certificate serial: 0DF2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft Manifest number: 0DE5 Signing time: Mon 26 Oct 2026 17:52:33 +0000 Manifest this update: Mon 26 Oct 2026 17:52:33 +0000 Manifest next update: Mon 02 Nov 2026 17:52:33 +0000 Files and hashes: 1: fSkuhkI7U8Czc7eZZYghkTSp5hA.crl (hash: y6mBnE7/yJCEhZyiKUyCmQcvzCvrRK070ACIBvdb3OY=) 2: 7B3163F0072A11EA9E314D4CC4F9AE02.roa (hash: hr+BwUVMGjaR63JX30qV8dhB24Yz2YmxfxAIkQhUhZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 17:52:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3570 (0xdf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3430, serialNumber=7D292E86423B53C0B373B7996588219134A9E610 Validity Not Before: Oct 26 17:52:33 2026 GMT Not After : Nov 2 17:52:33 2026 GMT Subject: CN=6adf9361-f0a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:60:c2:8e:32:e3:62:ad:4b:9a:ad:c7:8e:90: 31:55:d0:84:57:97:f8:4c:69:0b:7e:12:05:ae:58: a7:e4:b0:59:3e:01:c8:df:1c:1a:c9:d4:b2:19:76: 4c:5a:f3:1e:e8:f3:90:89:f7:12:72:17:0f:6d:9e: af:0f:e0:42:72:20:43:c9:47:28:0a:4d:26:d2:7a: 5e:cd:77:5c:41:30:d8:04:2f:f6:d5:62:fa:93:51: f0:7b:4e:e3:e5:ff:79:f1:b8:b0:eb:78:9e:cf:9f: 77:67:86:92:0d:2a:93:da:08:ad:b8:b2:7c:f7:c9: 7d:74:43:3e:f6:b8:2d:a3:ac:c1:57:d9:29:04:fb: 84:57:be:51:4c:d0:10:2d:29:f5:11:24:1a:7c:89: 42:72:da:2e:30:8a:3e:ed:c2:bc:e7:e7:06:e5:1f: 44:ac:ae:3a:01:8b:cd:56:44:8e:34:7b:6c:21:f0: 1d:74:ef:20:f0:6c:bc:30:9c:47:6b:0d:73:b9:2c: cf:1a:ea:e0:c6:ef:08:e2:19:86:00:94:44:83:77: 18:8c:d6:5f:f5:66:a8:ff:22:c5:41:3c:08:a2:bd: b1:41:ea:af:66:63:3e:ec:dd:fd:e6:2e:d9:c5:34: 72:41:ea:c6:34:7a:91:d9:6c:df:44:c5:3f:cb:82: 3a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:8D:D8:FF:E7:C3:68:10:81:6C:A8:AF:87:1F:59:3A:4B:C7:B4:57 X509v3 Authority Key Identifier: keyid:7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:a0:d8:9c:43:4c:7d:eb:fb:2e:a0:4b:a2:37:11:4e:b3:08: 41:42:be:c7:56:9b:a0:54:f5:c4:60:b3:bd:03:bb:99:3f:e2: f5:71:1f:36:39:c7:4f:82:7f:59:4d:3f:ef:c9:8f:7f:36:48: 14:bf:f4:cc:51:2b:62:ae:34:0e:02:d1:3b:4d:f9:d5:d1:b6: bd:e2:c0:5a:2c:00:0d:b4:10:c6:e6:83:17:5d:c0:1c:ee:d0: a4:04:e9:ad:ac:3e:f1:41:06:aa:fe:f6:f2:f0:72:da:cf:69: 57:71:78:9c:18:87:92:c0:d8:32:1d:36:a2:dc:c3:76:c7:d1: 89:d4:bd:ae:9f:c1:43:5d:ff:38:5d:91:40:75:bc:29:b4:61: 02:71:d2:e9:e5:0e:c2:fc:50:2b:07:54:ab:99:30:89:f4:98: db:04:40:eb:cd:d2:4e:8e:21:e9:ea:34:06:00:f9:52:7d:da: 6b:a7:fd:f7:04:41:87:0a:05:14:20:0d:3c:c9:21:80:88:ba: b7:81:e7:30:c0:71:b1:71:94:7b:97:6a:c8:a8:02:21:6a:1e: c3:32:be:1d:78:3d:7c:9d:ee:e5:fd:3f:c2:c2:49:48:df:18: ef:a1:dc:1a:72:87:a7:cf:b3:6f:c1:72:8c:35:75:4e:14:72: cb:c6:e2:96 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM0MzAxMTAvBgNVBAUTKDdEMjkyRTg2NDIzQjUzQzBCMzczQjc5OTY1ODgyMTkx MzRBOUU2MTAwHhcNMjYxMDI2MTc1MjMzWhcNMjYxMTAyMTc1MjMzWjAYMRYwFAYD VQQDEw02YWRmOTM2MS1mMGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGDCjjLjYq1Lmq3HjpAxVdCEV5f4TGkLfhIFrlin5LBZPgHI3xwaydSyGXZM WvMe6POQifcSchcPbZ6vD+BCciBDyUcoCk0m0npezXdcQTDYBC/21WL6k1Hwe07j 5f958biw63iez593Z4aSDSqT2gituLJ898l9dEM+9rgto6zBV9kpBPuEV75RTNAQ LSn1ESQafIlCctouMIo+7cK85+cG5R9ErK46AYvNVkSONHtsIfAddO8g8Gy8MJxH aw1zuSzPGurgxu8I4hmGAJREg3cYjNZf9Wao/yLFQTwIor2xQeqvZmM+7N395i7Z xTRyQerGNHqR2WzfRMU/y4I6HQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCuN2P/n w2gQgWyor4cfWTpLx7RXMB8GA1UdIwQYMBaAFH0pLoZCO1PAs3O3mWWIIZE0qeYQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzQzMC84NkFDODlEMEU4 N0IxMUU5QTFFRDVCNDdDNEY5QUUwMi9mU2t1aGtJN1U4Q3pjN2VaWllnaGtUU3A1 aEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZTa3Voa0k3VThDemM3ZVpaWWdoa1RTcDVoQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzQzMC84NkFDODlEMEU4N0IxMUU5QTFFRDVCNDdDNEY5QUUwMi9mU2t1aGtJN1U4 Q3pjN2VaWllnaGtUU3A1aEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeKDYnENMfev7LqBLojcRTrMIQUK+x1aboFT1xGCzvQO7mT/i9XEfNjnHT4J/ WU0/78mPfzZIFL/0zFErYq40DgLRO0351dG2veLAWiwADbQQxuaDF13AHO7QpATp raw+8UEGqv728vBy2s9pV3F4nBiHksDYMh02otzDdsfRidS9rp/BQ13/OF2RQHW8 KbRhAnHS6eUOwvxQKwdUq5kwifSY2wRA683STo4h6eo0BgD5Un3aa6f99wRBhwoF FCANPMkhgIi6t4HnMMBxsXGUe5dqyKgCIWoewzK+HXg9fJ3u5f0/wsJJSN8Y76Hc GnKHp8+zb8FyjDV1ThRyy8bilg== -----END CERTIFICATE-----Generated at Tue Oct 27 04:51:49 2026 by rpki-client