$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.mft File: 7CrwdA_XiZ3l2hLUEnpd_PpuY94.mft (raw, json) Hash identifier: BJhtKKZrdU206adCj3m8lgP/1Bn0l9GfNozPYKU3m/4= Subject key identifier: 38:BB:7A:6F:3E:69:B5:4B:73:CB:A5:F7:3C:B2:66:EA:2C:2F:34:23 Authority key identifier: EC:2A:F0:74:0F:D7:89:9D:E5:DA:12:D4:12:7A:5D:FC:FA:6E:63:DE Certificate issuer: /CN=A91A3AD9/serialNumber=EC2AF0740FD7899DE5DA12D4127A5DFCFA6E63DE Certificate serial: 99 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7CrwdA_XiZ3l2hLUEnpd_PpuY94.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.mft Manifest number: 93 Signing time: Wed 21 Oct 2026 08:07:47 +0000 Manifest this update: Wed 21 Oct 2026 08:07:46 +0000 Manifest next update: Wed 28 Oct 2026 08:07:46 +0000 Files and hashes: 1: 7CrwdA_XiZ3l2hLUEnpd_PpuY94.crl (hash: bcFpf/8d8qDg4+ZR6aOxXBd6VLoV+RV8dCdX2ygYgkg=) 2: CCCD5D78F98011F0A50135134F6F56BC.roa (hash: 1M2DD/iZFFo8+gHRyKlwxw6SxZSzmI1dVyv8AHl5J7g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.crl rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7CrwdA_XiZ3l2hLUEnpd_PpuY94.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 02:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3AD9, serialNumber=EC2AF0740FD7899DE5DA12D4127A5DFCFA6E63DE Validity Not Before: Oct 21 08:07:46 2026 GMT Not After : Oct 28 08:07:46 2026 GMT Subject: CN=6ad872d3-3d35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b9:40:44:c1:f7:09:51:03:bc:80:ce:c6:af: 52:b3:c3:dc:31:73:4e:af:46:68:76:a8:38:7a:d4: 73:05:0b:c0:cc:dc:78:dd:70:39:01:10:e1:8d:2e: da:09:22:75:4a:24:45:c5:c5:43:e5:be:3c:7b:3a: 86:00:f6:75:f7:c3:78:05:ce:9f:60:36:31:10:54: 69:07:02:33:6a:3d:9a:68:e6:3f:a0:8a:90:10:f3: 73:9a:1e:58:bd:21:89:03:87:89:fb:e1:77:e3:72: 33:ce:26:aa:79:94:83:5d:66:c4:0d:92:a4:89:aa: c0:b3:a1:7f:30:77:dc:16:07:b8:69:52:64:cb:43: ba:6d:73:10:89:0a:a4:31:fb:92:3a:66:d1:4f:51: a9:f3:50:ef:2a:07:56:99:58:4a:97:45:c7:e2:18: 1c:3d:a9:12:a7:af:fc:7e:48:71:f9:8d:c2:fd:14: 9d:d0:76:ab:7f:44:e3:9b:3c:56:3e:43:b3:f8:75: 8e:be:93:94:ea:c9:49:98:33:8a:7f:b6:c6:bc:e3: f8:14:99:44:01:e2:6a:a7:45:2f:4e:da:2b:f0:e5: 2d:e4:48:27:f2:4c:18:f1:bc:09:41:26:ce:8d:63: 1e:ff:2f:79:8a:fc:93:7c:f1:8e:40:f8:59:f2:fc: 0a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:BB:7A:6F:3E:69:B5:4B:73:CB:A5:F7:3C:B2:66:EA:2C:2F:34:23 X509v3 Authority Key Identifier: keyid:EC:2A:F0:74:0F:D7:89:9D:E5:DA:12:D4:12:7A:5D:FC:FA:6E:63:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7CrwdA_XiZ3l2hLUEnpd_PpuY94.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:5a:ea:fd:87:ce:1a:5f:6b:3b:f9:46:c4:c5:ef:43:80:30: 86:e7:c1:48:61:08:bd:3c:b7:d5:c1:42:e0:42:bf:19:d8:91: 46:2f:e6:4c:1d:9f:ff:60:f5:2d:0d:a5:82:29:40:81:72:85: b1:35:13:dd:7a:19:37:25:60:0e:98:e1:19:85:3d:8b:aa:75: 99:e0:19:29:13:6a:02:41:ad:1a:06:af:47:d2:4c:e9:24:79: 3a:b6:35:1c:c8:40:4b:78:5f:63:82:38:75:ff:47:4a:69:b3: 2e:7d:5e:f9:25:f6:98:55:dd:29:51:ab:27:10:92:44:21:d4: 9b:de:76:d9:34:83:a2:3b:37:6a:0e:4e:f3:b7:f2:16:ed:57: 9a:d0:11:a9:ac:a4:ca:59:76:41:aa:5b:e7:b3:19:b0:24:db: 4c:bd:49:79:cf:b3:c8:68:82:0c:95:26:96:8e:5d:e6:4b:c2: 16:54:6d:cb:87:4f:c3:bc:b4:e7:72:04:3c:32:f9:38:1d:16: 64:57:4d:62:ab:69:40:f8:17:3c:40:37:04:02:74:c3:1d:3c: c6:3c:f4:46:b3:0d:09:ba:e0:80:8c:a4:fa:43:35:e2:a2:3a: 07:f2:c1:e5:ef:f0:20:81:89:dd:ae:60:8f:32:11:20:5c:28: b5:32:19:14 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNBRDkxMTAvBgNVBAUTKEVDMkFGMDc0MEZENzg5OURFNURBMTJENDEyN0E1REZD RkE2RTYzREUwHhcNMjYxMDIxMDgwNzQ2WhcNMjYxMDI4MDgwNzQ2WjAYMRYwFAYD VQQDEw02YWQ4NzJkMy0zZDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApLlARMH3CVEDvIDOxq9Ss8PcMXNOr0Zodqg4etRzBQvAzNx43XA5ARDhjS7a CSJ1SiRFxcVD5b48ezqGAPZ198N4Bc6fYDYxEFRpBwIzaj2aaOY/oIqQEPNzmh5Y vSGJA4eJ++F343IzziaqeZSDXWbEDZKkiarAs6F/MHfcFge4aVJky0O6bXMQiQqk MfuSOmbRT1Gp81DvKgdWmVhKl0XH4hgcPakSp6/8fkhx+Y3C/RSd0Harf0TjmzxW PkOz+HWOvpOU6slJmDOKf7bGvOP4FJlEAeJqp0UvTtor8OUt5Egn8kwY8bwJQSbO jWMe/y95ivyTfPGOQPhZ8vwKbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDi7em8+ abVLc8ul9zyyZuosLzQjMB8GA1UdIwQYMBaAFOwq8HQP14md5doS1BJ6Xfz6bmPe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0FEOS85MTUwREE0QUY5 ODAxMUYwODdEQTk5MDg0RjZGNTZCQy83Q3J3ZEFfWGlaM2wyaExVRW5wZF9QcHVZ OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzdDcndkQV9YaVozbDJoTFVFbnBkX1BwdVk5NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0FEOS85MTUwREE0QUY5ODAxMUYwODdEQTk5MDg0RjZGNTZCQy83Q3J3ZEFfWGla M2wyaExVRW5wZF9QcHVZOTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAVrq/YfOGl9rO/lGxMXvQ4AwhufBSGEIvTy31cFC4EK/GdiRRi/mTB2f/2D1 LQ2lgilAgXKFsTUT3XoZNyVgDpjhGYU9i6p1meAZKRNqAkGtGgavR9JM6SR5OrY1 HMhAS3hfY4I4df9HSmmzLn1e+SX2mFXdKVGrJxCSRCHUm9522TSDojs3ag5O87fy Fu1XmtARqaykyll2Qapb57MZsCTbTL1Jec+zyGiCDJUmlo5d5kvCFlRty4dPw7y0 53IEPDL5OB0WZFdNYqtpQPgXPEA3BAJ0wx08xjz0RrMNCbrggIyk+kM14qI6B/LB 5e/wIIGJ3a5gjzIRIFwotTIZFA== -----END CERTIFICATE-----Generated at Wed Oct 21 16:23:58 2026 by rpki-client