$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft File: eFfRGlHcrpwuCIahDOBvVfW4QwA.mft (raw, json) Hash identifier: Hj5eJQTdx+004oo+QT0Ve7bgyejeJC3cyQC2NJe5IMg= Subject key identifier: 2D:23:17:A1:22:B1:39:3C:86:0D:5B:6C:75:4A:16:51:A5:D2:6E:7C Authority key identifier: 78:57:D1:1A:51:DC:AE:9C:2E:08:86:A1:0C:E0:6F:55:F5:B8:43:00 Certificate issuer: /CN=A91A5D8A/serialNumber=7857D11A51DCAE9C2E0886A10CE06F55F5B84300 Certificate serial: 06BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft Manifest number: 06AE Signing time: Tue 06 Oct 2026 22:33:46 +0000 Manifest this update: Tue 06 Oct 2026 22:33:46 +0000 Manifest next update: Tue 13 Oct 2026 22:33:46 +0000 Files and hashes: 1: eFfRGlHcrpwuCIahDOBvVfW4QwA.crl (hash: cYadIqgR2cmGWFjvjDoe0OyO9sQSlWutz3cq3k/ob1E=) 2: 8183B0FACAF111EBA40AF15BC4F9AE02.roa (hash: Zg+eHPdVNDM4QI8KEgw81Og4McuXzxsHfkNcln3oKOk=) 3: 324C60ACDD2211F0BB0B52AC636F56BC.roa (hash: DeEQGurqm7eSpSsYzXwNaAtssPLf2RiuTFIL21AIcCE=) 4: 18981398329B11EDB9F09862C4F9AE02.roa (hash: BIoQ+elASRB2TiBp78lt2ETWeyKSdC3Iplvz/Xmhi9o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.crl rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 22:33:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1727 (0x6bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5D8A, serialNumber=7857D11A51DCAE9C2E0886A10CE06F55F5B84300 Validity Not Before: Oct 6 22:33:46 2026 GMT Not After : Oct 13 22:33:46 2026 GMT Subject: CN=6ac5774a-d000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1b:b8:20:d1:a0:bb:11:d0:b5:71:8d:6a:b3: 40:e6:b2:ac:55:d3:cd:6a:9f:6d:5a:04:6c:ae:17: 1b:94:53:81:cb:07:a6:1d:de:32:66:33:5f:4a:dd: 4f:07:dc:41:b0:27:1b:fd:2f:f8:c2:6f:4f:b7:6f: 65:1e:45:eb:41:8a:ca:ef:31:d5:b0:8f:13:6a:2b: 6d:a6:a3:a7:45:13:6b:9b:30:10:2f:ae:9f:fa:8a: ff:2e:ba:4e:da:ff:e3:4c:0a:e4:15:83:95:7a:f2: ba:d1:7c:b1:4f:54:87:da:03:9d:cb:bc:d4:2a:03: 7a:7c:63:3c:cc:84:b7:70:7d:71:21:a2:e7:0b:aa: 12:02:11:89:3f:7b:a6:db:6f:d1:f4:b4:bb:b6:b2: 5d:2c:ba:d2:fb:a6:b4:ea:38:dc:a5:2d:37:a6:27: 77:e6:7e:71:d1:c7:52:3c:bc:13:f5:03:91:c4:d1: 95:29:2e:75:0a:50:86:ac:1f:f1:28:86:bb:8c:16: 9d:90:00:ce:2f:ce:d3:fe:66:e9:7e:0e:d0:c6:f5: 49:de:63:c8:e0:af:f9:90:69:29:df:f6:93:40:56: 93:b5:5d:09:fb:cc:ca:66:e6:9d:e5:e0:f8:b3:9e: 00:75:00:aa:c5:f5:f5:8e:45:be:17:4a:76:ec:52: f1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:23:17:A1:22:B1:39:3C:86:0D:5B:6C:75:4A:16:51:A5:D2:6E:7C X509v3 Authority Key Identifier: keyid:78:57:D1:1A:51:DC:AE:9C:2E:08:86:A1:0C:E0:6F:55:F5:B8:43:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:2e:70:44:16:c4:83:24:00:0d:d4:ea:c7:18:34:53:14:3e: 2c:4a:18:93:e9:e8:da:79:07:99:66:8c:3f:1b:07:00:48:84: 44:07:05:1a:8d:b4:5c:e9:c2:d9:93:24:fe:30:0e:e7:28:55: 1a:4c:d9:41:7e:69:b1:3e:64:92:20:a8:3e:be:66:5e:69:36: 21:e3:d2:d8:34:c5:4b:f8:fa:3a:36:91:ff:c6:3d:52:12:61: e1:f8:4f:b9:69:89:8c:dc:9e:dc:00:d3:a5:5b:2a:15:11:11: fe:8d:dc:49:ac:c0:90:31:1f:bc:d0:e0:0b:51:2c:1f:6a:e7: 78:76:0c:2a:b5:51:f3:e9:fd:31:fd:bc:f1:74:8b:c6:82:66: 67:92:32:d2:ae:64:dd:60:18:b2:da:1b:b6:b0:ca:ac:cc:6f: 5b:b5:3e:7f:5c:ea:cb:95:ce:91:46:1d:67:d6:46:c1:3a:51: 5e:3d:c9:45:31:b1:a9:a5:b5:e5:7a:d7:09:18:60:68:87:26: ff:56:24:cb:65:75:05:5e:4f:45:8b:f7:7a:dc:72:8c:0c:2c: 54:7b:71:5a:7a:0f:e0:1e:34:25:9a:86:fb:78:96:6d:3e:ba: 39:99:92:bf:2f:fb:96:1b:fc:3f:d6:e4:4c:c6:fb:11:3f:bc: 9e:1d:07:fc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBr8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVEOEExMTAvBgNVBAUTKDc4NTdEMTFBNTFEQ0FFOUMyRTA4ODZBMTBDRTA2RjU1 RjVCODQzMDAwHhcNMjYxMDA2MjIzMzQ2WhcNMjYxMDEzMjIzMzQ2WjAYMRYwFAYD VQQDEw02YWM1Nzc0YS1kMDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsRu4INGguxHQtXGNarNA5rKsVdPNap9tWgRsrhcblFOBywemHd4yZjNfSt1P B9xBsCcb/S/4wm9Pt29lHkXrQYrK7zHVsI8TaittpqOnRRNrmzAQL66f+or/LrpO 2v/jTArkFYOVevK60XyxT1SH2gOdy7zUKgN6fGM8zIS3cH1xIaLnC6oSAhGJP3um 22/R9LS7trJdLLrS+6a06jjcpS03pid35n5x0cdSPLwT9QORxNGVKS51ClCGrB/x KIa7jBadkADOL87T/mbpfg7QxvVJ3mPI4K/5kGkp3/aTQFaTtV0J+8zKZuad5eD4 s54AdQCqxfX1jkW+F0p27FLxgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC0jF6Ei sTk8hg1bbHVKFlGl0m58MB8GA1UdIwQYMBaAFHhX0RpR3K6cLgiGoQzgb1X1uEMA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUQ4QS9CQTJGMUI5QUNB RUUxMUVCQTJGQkQwNTZDNEY5QUUwMi9lRmZSR2xIY3Jwd3VDSWFoRE9CdlZmVzRR d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VGZlJHbEhjcnB3dUNJYWhET0J2VmZXNFF3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUQ4QS9CQTJGMUI5QUNBRUUxMUVCQTJGQkQwNTZDNEY5QUUwMi9lRmZSR2xIY3Jw d3VDSWFoRE9CdlZmVzRRd0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVC5wRBbEgyQADdTqxxg0UxQ+LEoYk+no2nkHmWaMPxsHAEiERAcFGo20XOnC 2ZMk/jAO5yhVGkzZQX5psT5kkiCoPr5mXmk2IePS2DTFS/j6OjaR/8Y9UhJh4fhP uWmJjNye3ADTpVsqFRER/o3cSazAkDEfvNDgC1EsH2rneHYMKrVR8+n9Mf288XSL xoJmZ5Iy0q5k3WAYstobtrDKrMxvW7U+f1zqy5XOkUYdZ9ZGwTpRXj3JRTGxqaW1 5XrXCRhgaIcm/1Yky2V1BV5PRYv3etxyjAwsVHtxWnoP4B40JZqG+3iWbT66OZmS vy/7lhv8P9bkTMb7ET+8nh0H/A== -----END CERTIFICATE-----Generated at Fri Oct 9 01:02:20 2026 by rpki-client