$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/PDiOKfqhof7qOJefIG9GaK2oyJ4.mft File: PDiOKfqhof7qOJefIG9GaK2oyJ4.mft (raw, json) Hash identifier: TyC7fMYQDhFkor+uOv5AJFcoeBTniXCKWfdUecYfhj8= Subject key identifier: D3:6B:21:49:6F:7D:C0:1B:0F:31:CF:70:8C:4D:01:1C:A3:27:4C:A0 Authority key identifier: 3C:38:8E:29:FA:A1:A1:FE:EA:38:97:9F:20:6F:46:68:AD:A8:C8:9E Certificate issuer: /CN=A91A4B9D/serialNumber=3C388E29FAA1A1FEEA38979F206F4668ADA8C89E Certificate serial: 6F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDiOKfqhof7qOJefIG9GaK2oyJ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/PDiOKfqhof7qOJefIG9GaK2oyJ4.mft Manifest number: 6D Signing time: Sat 24 Oct 2026 14:59:02 +0000 Manifest this update: Sat 24 Oct 2026 14:59:02 +0000 Manifest next update: Sat 31 Oct 2026 14:59:02 +0000 Files and hashes: 1: PDiOKfqhof7qOJefIG9GaK2oyJ4.crl (hash: eSAeiJdbJCO0kLBioY11cythAUZnZIzeflyftjPTITM=) 2: 1ECF684E387B11F1BDE8C228B8833773.roa (hash: wpIG5Mf53y4bmJfHAaok3Ne4FnPip0P/QZYb5ljnS2k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/PDiOKfqhof7qOJefIG9GaK2oyJ4.crl rsync://rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/PDiOKfqhof7qOJefIG9GaK2oyJ4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDiOKfqhof7qOJefIG9GaK2oyJ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111 (0x6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4B9D, serialNumber=3C388E29FAA1A1FEEA38979F206F4668ADA8C89E Validity Not Before: Oct 24 14:59:02 2026 GMT Not After : Oct 31 14:59:02 2026 GMT Subject: CN=6adcc7b6-0fc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:98:67:bc:1f:3b:3d:53:34:e7:a9:df:93:37: e9:b9:4c:a3:24:0d:ac:80:12:c3:75:86:20:1e:17: 0b:bb:5b:6f:c0:42:8b:89:50:76:53:b8:bf:f3:81: 8f:5b:45:5b:68:76:30:68:1c:e5:a3:de:e8:4a:59: 38:e6:cb:a6:92:81:a6:b6:3c:58:19:1f:2b:3a:87: be:e6:58:d0:bf:1c:65:eb:00:07:8c:21:29:5e:5e: cb:1f:ea:09:b6:c4:d1:6f:70:96:4b:2e:df:3f:27: 71:b1:e1:a5:ab:be:38:22:7c:b6:a7:22:5f:fb:82: e2:8a:ee:b2:48:42:f8:79:66:71:bf:50:b7:ef:48: 4f:b0:62:c9:c8:0e:b5:c4:87:01:47:f1:c2:38:ac: 26:69:51:5a:08:7f:b2:3c:7c:fa:d7:8d:5f:0b:a4: 7e:b2:b7:c6:e6:f2:08:6e:cf:6c:61:e0:b0:2a:c7: cb:b1:32:0a:ac:11:f1:50:8e:9b:a2:c4:45:44:fa: 62:40:ad:62:3e:a7:be:cf:42:f3:47:e5:d2:76:61: 27:35:40:db:8e:87:70:b4:d5:3d:03:94:28:ee:49: 2e:33:4b:5b:17:00:94:bb:cc:52:04:5c:28:95:35: 90:9a:2c:35:15:63:fe:d5:4b:28:1b:e2:f9:a1:40: 1e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:6B:21:49:6F:7D:C0:1B:0F:31:CF:70:8C:4D:01:1C:A3:27:4C:A0 X509v3 Authority Key Identifier: keyid:3C:38:8E:29:FA:A1:A1:FE:EA:38:97:9F:20:6F:46:68:AD:A8:C8:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/PDiOKfqhof7qOJefIG9GaK2oyJ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDiOKfqhof7qOJefIG9GaK2oyJ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/PDiOKfqhof7qOJefIG9GaK2oyJ4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:95:e5:e2:93:0b:7c:d9:4d:c1:6e:06:30:71:cd:6b:b9:2c: e0:17:09:a8:9f:95:05:b3:46:1b:fa:56:3e:3b:47:14:32:11: b4:11:b7:e4:30:4b:54:bc:50:0f:47:02:ed:be:d2:4e:0b:6e: a8:5f:c7:d7:9b:12:ac:91:40:37:1b:77:cc:1d:42:52:1e:17: 1e:f9:f6:4e:a6:63:25:43:ec:fe:dd:ae:5d:e6:f5:93:b5:64: 56:e6:5f:89:28:0a:6a:b9:b1:35:e0:9c:eb:5e:e9:a1:27:fc: 28:92:81:17:7c:04:8d:24:bb:0e:db:66:ad:76:43:b6:4e:03: 0c:42:fb:25:1b:ea:80:21:73:12:55:c4:9f:c4:92:9f:3f:df: c2:dd:65:69:1a:89:f6:68:82:01:e8:55:65:e6:8c:0d:cd:87: f2:8b:9a:5f:24:d1:71:57:27:e8:9a:7b:8b:43:73:91:f4:3e: d9:b9:88:dd:6e:0a:77:13:41:79:5a:ed:20:e8:90:56:55:54: f6:a7:7c:a6:60:3c:43:dc:b0:08:d0:d6:72:6b:4f:f1:e3:bd: 8c:63:5c:74:cf:2c:fc:a0:2d:b2:40:e6:2e:db:90:8b:5a:63: b2:8e:45:80:0a:e7:cf:22:cd:8e:7d:8f:ea:1a:15:96:a6:4d: f3:1d:cd:c5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBbzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NEI5RDExMC8GA1UEBRMoM0MzODhFMjlGQUExQTFGRUVBMzg5NzlGMjA2RjQ2NjhB REE4Qzg5RTAeFw0yNjEwMjQxNDU5MDJaFw0yNjEwMzExNDU5MDJaMBgxFjAUBgNV BAMTDTZhZGNjN2I2LTBmYzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZmGe8Hzs9UzTnqd+TN+m5TKMkDayAEsN1hiAeFwu7W2/AQouJUHZTuL/zgY9b RVtodjBoHOWj3uhKWTjmy6aSgaa2PFgZHys6h77mWNC/HGXrAAeMISleXssf6gm2 xNFvcJZLLt8/J3Gx4aWrvjgifLanIl/7guKK7rJIQvh5ZnG/ULfvSE+wYsnIDrXE hwFH8cI4rCZpUVoIf7I8fPrXjV8LpH6yt8bm8ghuz2xh4LAqx8uxMgqsEfFQjpui xEVE+mJArWI+p77PQvNH5dJ2YSc1QNuOh3C01T0DlCjuSS4zS1sXAJS7zFIEXCiV NZCaLDUVY/7VSygb4vmhQB6dAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU02shSW99 wBsPMc9wjE0BHKMnTKAwHwYDVR0jBBgwFoAUPDiOKfqhof7qOJefIG9GaK2oyJ4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0QjlELzRDRjNCMzcwMkQx MjExRjFCRkM0NzhGNTk4RUU1MjhFL1BEaU9LZnFob2Y3cU9KZWZJRzlHYUsyb3lK NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUERpT0tmcWhvZjdxT0plZklHOUdhSzJveUo0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0 QjlELzRDRjNCMzcwMkQxMjExRjFCRkM0NzhGNTk4RUU1MjhFL1BEaU9LZnFob2Y3 cU9KZWZJRzlHYUsyb3lKNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQApleXikwt82U3BbgYwcc1ruSzgFwmon5UFs0Yb+lY+O0cUMhG0EbfkMEtUvFAP RwLtvtJOC26oX8fXmxKskUA3G3fMHUJSHhce+fZOpmMlQ+z+3a5d5vWTtWRW5l+J KApqubE14JzrXumhJ/wokoEXfASNJLsO22atdkO2TgMMQvslG+qAIXMSVcSfxJKf P9/C3WVpGon2aIIB6FVl5owNzYfyi5pfJNFxVyfomnuLQ3OR9D7ZuYjdbgp3E0F5 Wu0g6JBWVVT2p3ymYDxD3LAI0NZya0/x472MY1x0zyz8oC2yQOYu25CLWmOyjkWA CufPIs2OfY/qGhWWpk3zHc3F -----END CERTIFICATE-----Generated at Sat Oct 24 20:44:07 2026 by rpki-client