$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft File: mraG48KZqn5EVUk0lbRrpadECZ0.mft (raw, json) Hash identifier: 1LF3z8VITnTUp4Ukr8kdjw3Ztefn5QEyhk1dUEa1HM4= Subject key identifier: 74:D0:24:73:5E:12:DD:C0:5E:EC:9F:83:CC:AA:98:C8:15:84:75:00 Authority key identifier: 9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D Certificate issuer: /CN=A91A6D8B/serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D Certificate serial: 0249 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft Manifest number: 023D Signing time: Wed 21 Oct 2026 03:04:41 +0000 Manifest this update: Wed 21 Oct 2026 03:04:41 +0000 Manifest next update: Wed 28 Oct 2026 03:04:41 +0000 Files and hashes: 1: mraG48KZqn5EVUk0lbRrpadECZ0.crl (hash: nGUygtdMxBgzFNhOtE77PmG9QWwUtABYTQJCrOwPOsk=) 2: D633730A5AD711EF8665FF81C4F9AE02.roa (hash: Wccg8kNGUBCLT/sRVkDKLDrzp/1nNs6rKjY6plM3zMI=) 3: D6A69CF45AD711EF8665FF81C4F9AE02.roa (hash: 2rJz07ou4vSpX5JnrTMQgxdJR1a87eEGMUNp0szeRmA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 03:04:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 585 (0x249) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6D8B, serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D Validity Not Before: Oct 21 03:04:41 2026 GMT Not After : Oct 28 03:04:41 2026 GMT Subject: CN=6ad82bc9-2970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:98:32:d4:fe:c6:70:5d:e9:ce:93:86:17:5d: 8d:60:00:ce:b2:3c:b9:aa:eb:59:e6:c3:3c:25:03: cd:8d:8a:9c:f4:1c:4f:90:57:fc:88:20:39:f7:12: 54:2e:11:d6:8d:56:bd:05:c1:33:58:c4:9b:db:a6: dc:7f:7e:52:e2:68:38:45:b0:71:2e:a8:76:ee:ac: 28:f8:db:07:0d:32:9c:68:07:37:a9:e8:0a:48:77: 9a:77:63:0c:cf:aa:fb:49:29:f9:16:c1:57:b3:5f: 6c:ec:28:fd:21:6f:62:af:cc:e2:f5:a8:2e:e4:0d: 80:36:07:90:c7:85:20:f3:4a:2b:0f:c4:ff:53:cd: f0:84:03:17:54:ce:98:32:f6:88:9a:0f:f3:73:3e: 7e:cd:1b:dc:d5:83:06:17:50:9a:d3:4d:38:d7:ff: 25:11:4e:a6:fe:32:d4:6a:b2:06:f6:23:f4:8e:1c: 2f:1c:f0:df:41:51:96:06:a2:ad:39:3b:72:c7:95: 81:a4:43:58:2f:e1:0a:82:45:39:f4:fe:d1:d9:2e: 43:2d:3a:63:e0:e6:a6:a8:5a:20:af:77:9a:dd:03: 65:76:a8:b0:ca:bb:c3:e0:85:a7:14:5c:83:ee:d9: b3:c9:34:00:56:16:04:ad:2a:29:1b:cb:09:cf:a2: 29:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:D0:24:73:5E:12:DD:C0:5E:EC:9F:83:CC:AA:98:C8:15:84:75:00 X509v3 Authority Key Identifier: keyid:9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:4e:83:0d:34:f2:35:fe:fb:22:ed:65:b7:fe:c8:7d:73:98: 17:15:7b:51:4e:83:b7:7a:0f:a8:81:0c:31:94:1e:56:43:fc: fb:8a:b8:11:67:20:ab:3c:16:bc:3f:8c:a9:d1:22:ac:29:e7: d7:ff:a0:51:17:90:a3:c0:61:0a:da:27:12:46:ad:07:2d:76: 80:d8:3a:b2:d5:72:4a:1e:c1:fa:d3:f1:ca:ed:ea:24:4f:fe: 39:11:64:b1:89:d3:2d:6a:47:23:a3:8c:66:d2:5a:c8:c8:24: 75:fd:10:2c:8c:77:24:51:a5:3f:86:fc:66:d9:36:26:dd:e1: 51:42:c2:55:1b:6f:c4:46:6b:c6:1e:38:d0:5b:39:b7:d8:ab: 42:1b:10:39:14:7e:b8:a6:58:f8:f5:d9:4d:56:78:8a:58:5c: 83:6b:47:32:0f:90:0b:b6:0e:50:7d:90:48:7e:17:ed:c2:51: 2e:14:e2:50:5d:e7:b8:ac:74:f4:5d:93:5d:0e:24:65:98:f7: 86:02:c8:5b:8c:a7:5e:cf:59:4b:82:20:8b:8f:8b:2e:03:c2: ff:83:c2:a7:78:d1:0e:ab:cc:fa:2f:02:a5:33:0b:1c:27:66: 99:ec:58:0f:eb:8d:b0:d9:3e:18:f8:3d:9f:07:d8:8e:3d:ee: 82:88:d4:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZEOEIxMTAvBgNVBAUTKDlBQjY4NkUzQzI5OUFBN0U0NDU1NDkzNDk1QjQ2QkE1 QTc0NDA5OUQwHhcNMjYxMDIxMDMwNDQxWhcNMjYxMDI4MDMwNDQxWjAYMRYwFAYD VQQDEw02YWQ4MmJjOS0yOTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZgy1P7GcF3pzpOGF12NYADOsjy5qutZ5sM8JQPNjYqc9BxPkFf8iCA59xJU LhHWjVa9BcEzWMSb26bcf35S4mg4RbBxLqh27qwo+NsHDTKcaAc3qegKSHead2MM z6r7SSn5FsFXs19s7Cj9IW9ir8zi9agu5A2ANgeQx4Ug80orD8T/U83whAMXVM6Y MvaImg/zcz5+zRvc1YMGF1Ca00041/8lEU6m/jLUarIG9iP0jhwvHPDfQVGWBqKt OTtyx5WBpENYL+EKgkU59P7R2S5DLTpj4OamqFogr3ea3QNldqiwyrvD4IWnFFyD 7tmzyTQAVhYErSopG8sJz6IpEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHTQJHNe Et3AXuyfg8yqmMgVhHUAMB8GA1UdIwQYMBaAFJq2huPCmap+RFVJNJW0a6WnRAmd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkQ4Qi9CMkYyMzVCMjY3 MjAxMUVFQTE0NkMyMkRDNEY5QUUwMi9tcmFHNDhLWnFuNUVWVWswbGJScnBhZEVD WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21yYUc0OEtacW41RVZVazBsYlJycGFkRUNaMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkQ4Qi9CMkYyMzVCMjY3MjAxMUVFQTE0NkMyMkRDNEY5QUUwMi9tcmFHNDhLWnFu NUVWVWswbGJScnBhZEVDWjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZE6DDTTyNf77Iu1lt/7IfXOYFxV7UU6Dt3oPqIEMMZQeVkP8+4q4EWcgqzwW vD+MqdEirCnn1/+gUReQo8BhCtonEkatBy12gNg6stVySh7B+tPxyu3qJE/+ORFk sYnTLWpHI6OMZtJayMgkdf0QLIx3JFGlP4b8Ztk2Jt3hUULCVRtvxEZrxh440Fs5 t9irQhsQORR+uKZY+PXZTVZ4ilhcg2tHMg+QC7YOUH2QSH4X7cJRLhTiUF3nuKx0 9F2TXQ4kZZj3hgLIW4ynXs9ZS4Igi4+LLgPC/4PCp3jRDqvM+i8CpTMLHCdmmexY D+uNsNk+GPg9nwfYjj3ugojUgQ== -----END CERTIFICATE-----Generated at Thu Oct 22 08:19:04 2026 by rpki-client