$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.mft File: httX5pD30wkpOii6fFX7ivN9Xb0.mft (raw, json) Hash identifier: wuY9pisC6ZtchiMK95xmAHgL8SzFlLSa8nDl8ElzIyg= Subject key identifier: 10:C4:00:0F:AC:43:E9:FC:02:59:69:E8:DD:DA:49:AF:E8:31:1D:18 Authority key identifier: 86:DB:57:E6:90:F7:D3:09:29:3A:28:BA:7C:55:FB:8A:F3:7D:5D:BD Certificate issuer: /CN=A91A560A/serialNumber=86DB57E690F7D309293A28BA7C55FB8AF37D5DBD Certificate serial: 390D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/httX5pD30wkpOii6fFX7ivN9Xb0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.mft Manifest number: 37DE Signing time: Wed 21 Oct 2026 14:09:23 +0000 Manifest this update: Wed 21 Oct 2026 14:09:22 +0000 Manifest next update: Wed 28 Oct 2026 14:09:22 +0000 Files and hashes: 1: httX5pD30wkpOii6fFX7ivN9Xb0.crl (hash: qmO13864k/HKzXIm4Mg7Ic2v72K3QwV2JL8BIOmYO58=) 2: F24EEED208C011F19DFF611F213D8C67.roa (hash: t0GzTImHkT8vCoN1czTbfQHL3uux2ST1I9om9FaS/RE=) 3: 15B06ACE01B211F1A8498BCA6C6F56BC.roa (hash: E5m51G+fZEQtkgSZouRPixEEEOpioqbWesNFrLhFSo4=) 4: A3A79DD6923811F1800CA6646F11F970.roa (hash: CGeTdWzPDuXrpXWY1AE5XTdHNSmSKpn3zB+WJOXmkhM=) 5: 0F0E88A6192F11F183D9B1FC303D8C67.roa (hash: BU+UPd1lv9xQsHx7Mx43o9RAgapDbN7ba5OCHOlgE94=) 6: FD4EDA74CD5811F1AE5557201B66CEF9.roa (hash: OEZ0E5zADjxV/GxWR1zjSambtCrYL/veLDb+ETjFY1U=) 7: 317DA71E8B0811F1AFBFDAB07011F970.roa (hash: +L2oo7I2NyWXR7Gmxsy+W4+QlgF/xiRL96eRRBz2uDo=) 8: 803E1FB4844611F18199E4686DA30FBC.roa (hash: bsrpNtxKw03lK22MF+i7ZQ9wr/WL40DdomttxRKyUuw=) 9: 3B8DEC18F67C11EFA12FD55AC4F9AE02.roa (hash: oOBcoVuJpPgn5ByEJPJQ2DYmHtprtdSc5gSjorkGddw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.crl rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/httX5pD30wkpOii6fFX7ivN9Xb0.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 04:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14605 (0x390d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=86DB57E690F7D309293A28BA7C55FB8AF37D5DBD Validity Not Before: Oct 21 14:09:22 2026 GMT Not After : Oct 28 14:09:22 2026 GMT Subject: CN=6ad8c793-a17c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:94:66:1d:b4:89:2b:4d:4a:ea:c9:83:17:6d: 4c:e7:20:87:19:e3:37:7d:a3:ed:80:61:59:7a:fd: 4e:bd:8c:02:ab:13:e4:2e:0e:13:d3:40:b5:be:3b: b5:42:50:74:71:7a:3f:ca:69:29:bb:ab:33:9d:59: 8e:5a:06:ad:c2:22:c5:ae:d9:04:02:ae:38:aa:cc: a6:32:c3:fd:70:e6:f4:49:69:2d:01:1a:26:11:6c: 7f:fe:c3:ed:11:7a:f1:3c:44:d8:c9:d3:2c:a7:39: 96:8f:18:e2:43:46:b4:d8:fe:cc:67:74:6d:1e:b6: 75:cb:05:7c:e6:85:1e:30:da:4d:45:a2:e3:77:86: 50:01:47:e5:37:07:0e:55:d0:a4:a0:cb:0e:61:1a: 9f:34:5a:34:44:d6:52:4a:83:8e:89:38:b1:b7:17: ab:18:e9:75:bb:48:14:82:a7:0c:ff:88:45:48:11: 63:bb:26:db:22:0e:4c:c4:73:7d:f1:13:0b:3d:aa: bf:e4:72:9b:b8:1d:d7:60:b0:b4:80:88:bd:dd:cd: 82:9e:fb:b8:be:b9:05:78:ea:41:00:d5:0a:62:4c: 91:26:85:56:22:e7:63:38:b5:36:1b:e8:d4:38:5c: f5:86:f9:5a:30:87:62:b5:57:a5:d5:08:ca:ce:f7: 9c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:C4:00:0F:AC:43:E9:FC:02:59:69:E8:DD:DA:49:AF:E8:31:1D:18 X509v3 Authority Key Identifier: keyid:86:DB:57:E6:90:F7:D3:09:29:3A:28:BA:7C:55:FB:8A:F3:7D:5D:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/httX5pD30wkpOii6fFX7ivN9Xb0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:f9:d6:29:c6:36:54:ed:24:a1:fc:39:e6:90:f4:81:ca:2e: 58:6e:8b:f9:13:ae:3e:db:a8:75:91:90:34:a4:26:9d:bb:e6: 62:ae:f0:cc:d2:70:d0:4a:d0:e9:b7:80:1b:6d:1c:35:de:01: 42:96:8b:eb:b1:d9:20:8d:be:90:39:a6:91:04:2f:c2:05:5b: c4:00:ba:c6:23:e9:84:07:8a:f5:b1:94:05:b2:f0:41:81:22: 0e:27:33:01:13:ec:86:d5:16:6c:12:5a:ce:3f:62:66:f0:81: 80:e6:ae:d3:c7:8e:00:de:83:19:ec:21:42:38:70:d8:d9:06: ca:0d:7a:e5:09:3f:fc:b1:da:01:6a:47:5b:ef:fd:a0:32:2d: b3:dc:67:e4:e0:74:66:6e:53:07:4e:0f:08:05:cc:c3:7e:8e: 00:7c:58:fe:aa:04:95:ad:a4:26:28:e3:3f:30:cb:59:72:4c: 20:d7:0d:0c:ec:d2:02:58:ed:f3:34:01:e4:23:e6:4f:22:13: 02:45:6f:bb:7d:08:51:b9:d6:ef:f1:7c:b9:7f:61:13:a0:b8: 4b:c7:ac:2d:59:d4:a5:d6:34:d3:dd:05:74:53:68:8a:0e:ac: c9:dd:34:ea:8a:74:ac:c2:39:0f:24:c2:18:ab:da:00:86:d2: 7b:c6:1b:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICOQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDg2REI1N0U2OTBGN0QzMDkyOTNBMjhCQTdDNTVGQjhB RjM3RDVEQkQwHhcNMjYxMDIxMTQwOTIyWhcNMjYxMDI4MTQwOTIyWjAYMRYwFAYD VQQDEw02YWQ4Yzc5My1hMTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5RmHbSJK01K6smDF21M5yCHGeM3faPtgGFZev1OvYwCqxPkLg4T00C1vju1 QlB0cXo/ymkpu6sznVmOWgatwiLFrtkEAq44qsymMsP9cOb0SWktARomEWx//sPt EXrxPETYydMspzmWjxjiQ0a02P7MZ3RtHrZ1ywV85oUeMNpNRaLjd4ZQAUflNwcO VdCkoMsOYRqfNFo0RNZSSoOOiTixtxerGOl1u0gUgqcM/4hFSBFjuybbIg5MxHN9 8RMLPaq/5HKbuB3XYLC0gIi93c2Cnvu4vrkFeOpBANUKYkyRJoVWIudjOLU2G+jU OFz1hvlaMIditVel1QjKzvecqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBDEAA+s Q+n8Allp6N3aSa/oMR0YMB8GA1UdIwQYMBaAFIbbV+aQ99MJKToounxV+4rzfV29 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9COTk1M0RCQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9odHRYNXBEMzB3a3BPaWk2ZkZYN2l2TjlY YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2h0dFg1cEQzMHdrcE9paTZmRlg3aXZOOVhiMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTYwQS9COTk1M0RCQTFEOEExMUUyQTM4N0QwRTQwOEIwMkNEMi9odHRYNXBEMzB3 a3BPaWk2ZkZYN2l2TjlYYjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyPnWKcY2VO0kofw55pD0gcouWG6L+ROuPtuodZGQNKQmnbvmYq7wzNJw0ErQ 6beAG20cNd4BQpaL67HZII2+kDmmkQQvwgVbxAC6xiPphAeK9bGUBbLwQYEiDicz ARPshtUWbBJazj9iZvCBgOau08eOAN6DGewhQjhw2NkGyg165Qk//LHaAWpHW+/9 oDIts9xn5OB0Zm5TB04PCAXMw36OAHxY/qoEla2kJijjPzDLWXJMINcNDOzSAljt 8zQB5CPmTyITAkVvu30IUbnW7/F8uX9hE6C4S8esLVnUpdY0090FdFNoig6syd00 6op0rMI5DyTCGKvaAIbSe8Ybyw== -----END CERTIFICATE-----Generated at Thu Oct 22 03:19:35 2026 by rpki-client