$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft File: b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft (raw, json) Hash identifier: wC1P5tZHivqhfBGyDyei2WuZTTQRJfz4ZMmfgonGZtQ= Subject key identifier: 44:F7:C3:4C:AA:22:4D:C0:46:48:4A:88:D8:F1:5C:47:CA:46:14:7A Authority key identifier: 6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8 Certificate issuer: /CN=A91A54FE/serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8 Certificate serial: 020A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft Manifest number: 01F1 Signing time: Tue 27 Oct 2026 03:47:23 +0000 Manifest this update: Tue 27 Oct 2026 03:47:22 +0000 Manifest next update: Tue 03 Nov 2026 03:47:22 +0000 Files and hashes: 1: b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl (hash: aTdnh2Hl4D9uWExKM58KuBrUlQ0mxlErlF6nCT9BMTE=) 2: jbcxZ2bniZxvaYuBOSUH9TEGhoA.asa (hash: k5OVKw8bCjoLNCC9gTvzXXMFTxZXbMMuxLug51w1bbw=) 3: 3F5C47A0531411F0B5969F4DC4F9AE02.roa (hash: 5ZhWi40cwTm+16cr2zLqWoivb7ML/fDRAm1Hc0nhbKM=) 4: 4034878C531411F0B5969F4DC4F9AE02.roa (hash: ASSeDHssqVl8cZ4Esb8BMEdnFofDHR30D5GNUNH0EGI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 03:47:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 522 (0x20a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A54FE, serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8 Validity Not Before: Oct 27 03:47:22 2026 GMT Not After : Nov 3 03:47:22 2026 GMT Subject: CN=6ae01ecb-0599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1e:20:b2:79:5b:fb:26:c5:c5:5e:be:8c:0b: 3a:1d:24:62:d3:f3:1f:bd:ba:6b:06:bf:61:83:56: 18:62:a6:54:5b:97:5b:bc:43:6c:57:e6:f1:37:04: 10:91:97:05:1a:f5:0b:e4:10:37:83:5e:71:73:1a: 0a:63:d8:f3:13:a6:3e:0a:e3:e7:61:85:76:87:ba: b6:60:13:d3:12:6c:29:63:3a:76:81:cc:76:d7:2e: 40:36:d2:8a:ac:23:75:57:c6:f3:1e:13:24:b1:a4: cb:bd:b4:f5:7a:d5:aa:f3:88:04:22:76:4c:95:6d: 81:63:da:2b:58:be:58:8a:c0:2f:1a:55:34:d1:40: 7f:58:e5:d7:d1:5b:4a:0f:85:8c:8a:2e:21:17:b6: 8b:26:bc:49:f9:03:32:7b:58:7f:74:62:b7:58:d1: 93:19:87:d0:50:6b:18:98:9a:df:bc:de:6a:15:8d: 19:a8:7b:a5:c3:49:53:c1:9a:3d:a1:64:ca:4c:86: 7e:af:e6:77:dc:57:c3:86:69:27:3f:50:77:a7:30: 81:a1:2f:5d:d8:d2:a7:6f:b4:91:11:15:a2:bf:b7: 1f:bf:30:4b:95:d1:b1:f1:67:f8:83:14:a7:44:9b: 1a:5f:d5:2f:ba:3f:bf:02:5f:85:2a:07:c1:f7:4f: 8a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:F7:C3:4C:AA:22:4D:C0:46:48:4A:88:D8:F1:5C:47:CA:46:14:7A X509v3 Authority Key Identifier: keyid:6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:77:44:42:94:0a:5f:40:99:17:ef:e2:8f:1f:f4:13:e1:1c: b8:f4:ce:89:6a:e2:2c:07:bd:00:17:0f:62:5d:85:94:08:7d: be:53:20:19:8f:e4:ad:03:4a:84:3a:ab:6d:4a:d5:5c:ad:25: db:d4:48:a7:15:dd:fc:8c:51:30:fa:45:00:89:66:5c:7a:8f: 91:5a:55:54:cc:99:c6:b2:f9:fd:10:e4:70:85:af:ff:6b:83: dc:3e:cc:32:02:18:16:89:00:b8:b3:ad:ae:c5:7b:11:16:73: bc:e4:ba:b7:c2:b7:40:1e:2e:45:1d:a8:df:4a:2f:42:8d:5f: c3:4d:64:7e:5e:20:0a:b5:d3:dc:1a:a2:f1:6f:e3:83:f5:1a: e3:08:01:f8:0a:7b:8e:13:dc:b8:1e:ac:ae:80:86:e7:cc:90: 83:52:15:e2:bd:01:97:02:7c:f6:0d:5e:5b:43:86:17:45:11: 2c:9c:b3:9c:43:a2:9e:c7:4d:30:b9:be:85:a5:a6:4f:cd:19: 08:37:c2:ea:ef:4e:56:f0:2a:a7:e5:70:4d:0f:41:30:c2:55: 1a:22:2e:be:02:39:2e:b6:0d:68:3b:48:39:8f:6d:41:4e:e4: cb:17:7c:67:bb:82:2f:04:3d:6f:8a:5c:eb:9e:22:f7:c3:83: 75:32:da:b9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU0RkUxMTAvBgNVBAUTKDZGQzcwOTA2RkJBNkY0NTM5NDUyMDkxOTMyQzQ1RkZB NEQ4NTcyQjgwHhcNMjYxMDI3MDM0NzIyWhcNMjYxMTAzMDM0NzIyWjAYMRYwFAYD VQQDEw02YWUwMWVjYi0wNTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwh4gsnlb+ybFxV6+jAs6HSRi0/MfvbprBr9hg1YYYqZUW5dbvENsV+bxNwQQ kZcFGvUL5BA3g15xcxoKY9jzE6Y+CuPnYYV2h7q2YBPTEmwpYzp2gcx21y5ANtKK rCN1V8bzHhMksaTLvbT1etWq84gEInZMlW2BY9orWL5YisAvGlU00UB/WOXX0VtK D4WMii4hF7aLJrxJ+QMye1h/dGK3WNGTGYfQUGsYmJrfvN5qFY0ZqHulw0lTwZo9 oWTKTIZ+r+Z33FfDhmknP1B3pzCBoS9d2NKnb7SRERWiv7cfvzBLldGx8Wf4gxSn RJsaX9Uvuj+/Al+FKgfB90+KdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFET3w0yq Ik3ARkhKiNjxXEfKRhR6MB8GA1UdIwQYMBaAFG/HCQb7pvRTlFIJGTLEX/pNhXK4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTRGRS9ENjExN0RGNkY2 RTkxMUVFQURCRkZCNTJDNEY5QUUwMi9iOGNKQnZ1bTlGT1VVZ2taTXNSZi1rMkZj cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I4Y0pCdnVtOUZPVVVna1pNc1JmLWsyRmNyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTRGRS9ENjExN0RGNkY2RTkxMUVFQURCRkZCNTJDNEY5QUUwMi9iOGNKQnZ1bTlG T1VVZ2taTXNSZi1rMkZjcmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACndEQpQKX0CZF+/ijx/0E+EcuPTOiWriLAe9ABcPYl2FlAh9vlMgGY/krQNK hDqrbUrVXK0l29RIpxXd/IxRMPpFAIlmXHqPkVpVVMyZxrL5/RDkcIWv/2uD3D7M MgIYFokAuLOtrsV7ERZzvOS6t8K3QB4uRR2o30ovQo1fw01kfl4gCrXT3Bqi8W/j g/Ua4wgB+Ap7jhPcuB6sroCG58yQg1IV4r0BlwJ89g1eW0OGF0URLJyznEOinsdN MLm+haWmT80ZCDfC6u9OVvAqp+VwTQ9BMMJVGiIuvgI5LrYNaDtIOY9tQU7kyxd8 Z7uCLwQ9b4pc654i98ODdTLauQ== -----END CERTIFICATE-----Generated at Tue Oct 27 23:04:35 2026 by rpki-client