$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/pKVwtST2YpG2kJvyMTPV24NQQe0.mft File: pKVwtST2YpG2kJvyMTPV24NQQe0.mft (raw, json) Hash identifier: cUbS2lnHThXdMSp9vo7ZSytnIc81Wy+R+RGOUFkCEXc= Subject key identifier: CD:45:D4:79:DC:31:0F:75:A8:65:BA:21:D5:B7:B7:36:D5:2B:E8:D7 Authority key identifier: A4:A5:70:B5:24:F6:62:91:B6:90:9B:F2:31:33:D5:DB:83:50:41:ED Certificate issuer: /CN=A91A6C1A/serialNumber=A4A570B524F66291B6909BF23133D5DB835041ED Certificate serial: 47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pKVwtST2YpG2kJvyMTPV24NQQe0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/pKVwtST2YpG2kJvyMTPV24NQQe0.mft Manifest number: 40 Signing time: Sat 03 Oct 2026 09:17:53 +0000 Manifest this update: Sat 03 Oct 2026 09:17:53 +0000 Manifest next update: Sat 10 Oct 2026 09:17:53 +0000 Files and hashes: 1: pKVwtST2YpG2kJvyMTPV24NQQe0.crl (hash: UNgtTZn0Et/0M4ODBUB45f9wYQRWYc5yC3G8Hwcc1Co=) 2: 8B417B6064AA11F19AE9C6D58F47A888.roa (hash: VxBq9ev4olTZHWXFb/0pr2uIN1FLk3ZIw2Udkr1ORSM=) 3: 694EC58664AE11F189DF701D9347A888.roa (hash: Mz6Te07lf/TFttYs/5xZ/WVJKDZVoMpf6rbwNPc0WGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/pKVwtST2YpG2kJvyMTPV24NQQe0.crl rsync://rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/pKVwtST2YpG2kJvyMTPV24NQQe0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pKVwtST2YpG2kJvyMTPV24NQQe0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 09:17:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6C1A, serialNumber=A4A570B524F66291B6909BF23133D5DB835041ED Validity Not Before: Oct 3 09:17:53 2026 GMT Not After : Oct 10 09:17:53 2026 GMT Subject: CN=6ac0c841-93b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:46:35:13:b9:97:45:f2:ba:c3:0f:d1:69:fd: d3:85:98:37:72:b2:6f:d4:da:93:4f:70:1c:36:75: 81:96:82:b8:f2:b7:4f:d4:9c:a4:3c:e0:65:55:cf: c6:f4:67:17:ee:a0:18:b6:23:d6:22:c6:64:6e:3e: 13:14:5a:69:4a:54:cf:c4:09:7f:c9:58:85:b5:d1: f6:01:3a:34:c0:50:45:4e:5b:e1:a8:99:75:e7:17: 0e:98:8f:11:5a:0c:d0:b9:4a:11:be:52:4a:27:ad: 5a:9a:a3:07:91:38:e5:a3:1d:92:15:96:a7:c4:82: 70:2f:5a:98:7b:78:12:63:40:9d:12:36:45:82:4e: 59:9b:47:ec:14:84:59:50:da:d5:3d:5c:38:63:e7: 75:e3:6f:0b:63:59:c1:96:e5:76:23:4a:f4:3d:a9: bd:95:be:84:4e:19:57:3b:dc:6b:62:60:71:4e:11: 51:24:b4:29:92:dc:16:4f:f3:7c:95:2f:58:37:4e: 23:9a:67:69:6b:69:a1:68:f7:64:fe:9f:de:1e:2c: f8:44:60:a2:01:52:67:c1:be:8d:27:7e:64:0b:c2: 62:90:fb:79:42:ce:99:79:df:34:ad:49:a5:41:98: 7a:3c:a5:0c:57:2e:9a:39:79:1b:a4:5e:40:09:45: 68:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:45:D4:79:DC:31:0F:75:A8:65:BA:21:D5:B7:B7:36:D5:2B:E8:D7 X509v3 Authority Key Identifier: keyid:A4:A5:70:B5:24:F6:62:91:B6:90:9B:F2:31:33:D5:DB:83:50:41:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/pKVwtST2YpG2kJvyMTPV24NQQe0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pKVwtST2YpG2kJvyMTPV24NQQe0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/pKVwtST2YpG2kJvyMTPV24NQQe0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:be:15:8a:6f:10:66:0e:3f:db:5e:bf:26:15:0b:2b:86:91: 29:6f:12:14:56:a6:5e:4f:00:8f:4d:26:21:98:36:ed:8f:da: 44:5a:e1:54:f3:b1:e5:5a:2f:7a:9f:a5:ef:e5:e5:23:1b:10: bf:7e:7c:a4:a8:e3:f5:d7:56:7b:b7:28:ff:25:98:b1:e1:4b: e2:4b:82:db:70:b2:24:37:00:54:b4:84:b3:cf:08:f5:de:9d: e0:34:fb:dd:e4:5a:7a:2a:1a:b3:18:c6:4c:fc:84:a6:46:d7: f8:71:e3:76:69:ff:91:59:b0:c0:f3:05:2e:8c:21:94:0b:a0: 02:25:56:57:2c:ff:63:8a:74:6f:d0:3d:d5:ba:a8:5a:1d:87: 45:bc:a5:ec:43:ba:ea:6e:50:e4:09:7f:54:3c:8c:5d:cd:d7: 0a:5c:81:a6:f4:c1:67:fb:7f:c4:44:8c:9e:05:31:ee:12:8b: 24:c8:0d:8c:dd:c3:6d:34:b9:cf:ba:f3:8d:df:ab:a0:ff:7c: a1:e2:e2:4d:95:5d:01:21:f7:51:52:37:1a:4f:d1:6f:e5:4f: e0:b2:02:4a:d5:d4:18:ff:35:7c:c2:6b:a1:72:36:93:25:63: 37:40:5c:f8:a1:de:a1:cf:36:ad:a5:27:25:5e:6e:d3:21:04: b1:d9:df:a3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NkMxQTExMC8GA1UEBRMoQTRBNTcwQjUyNEY2NjI5MUI2OTA5QkYyMzEzM0Q1REI4 MzUwNDFFRDAeFw0yNjEwMDMwOTE3NTNaFw0yNjEwMTAwOTE3NTNaMBgxFjAUBgNV BAMTDTZhYzBjODQxLTkzYjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7RjUTuZdF8rrDD9Fp/dOFmDdysm/U2pNPcBw2dYGWgrjyt0/UnKQ84GVVz8b0 ZxfuoBi2I9YixmRuPhMUWmlKVM/ECX/JWIW10fYBOjTAUEVOW+GomXXnFw6YjxFa DNC5ShG+UkonrVqaoweROOWjHZIVlqfEgnAvWph7eBJjQJ0SNkWCTlmbR+wUhFlQ 2tU9XDhj53XjbwtjWcGW5XYjSvQ9qb2VvoROGVc73GtiYHFOEVEktCmS3BZP83yV L1g3TiOaZ2lraaFo92T+n94eLPhEYKIBUmfBvo0nfmQLwmKQ+3lCzpl53zStSaVB mHo8pQxXLpo5eRukXkAJRWiXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUzUXUedwx D3WoZboh1be3NtUr6NcwHwYDVR0jBBgwFoAUpKVwtST2YpG2kJvyMTPV24NQQe0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2QzFBL0UxMkM0Q0E0NjRB OTExRjFCNjVGNTZCMjhGNDdBODg4L3BLVnd0U1QyWXBHMmtKdnlNVFBWMjROUVFl MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcEtWd3RTVDJZcEcya0p2eU1UUFYyNE5RUWUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2 QzFBL0UxMkM0Q0E0NjRBOTExRjFCNjVGNTZCMjhGNDdBODg4L3BLVnd0U1QyWXBH MmtKdnlNVFBWMjROUVFlMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB4vhWKbxBmDj/bXr8mFQsrhpEpbxIUVqZeTwCPTSYhmDbtj9pEWuFU87HlWi96 n6Xv5eUjGxC/fnykqOP111Z7tyj/JZix4UviS4LbcLIkNwBUtISzzwj13p3gNPvd 5Fp6KhqzGMZM/ISmRtf4ceN2af+RWbDA8wUujCGUC6ACJVZXLP9jinRv0D3Vuqha HYdFvKXsQ7rqblDkCX9UPIxdzdcKXIGm9MFn+3/ERIyeBTHuEoskyA2M3cNtNLnP uvON36ug/3yh4uJNlV0BIfdRUjcaT9Fv5U/gsgJK1dQY/zV8wmuhcjaTJWM3QFz4 od6hzzatpSclXm7TIQSx2d+j -----END CERTIFICATE-----Generated at Sun Oct 4 08:32:21 2026 by rpki-client