$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft File: l1u5QYJWgUoFLa9U9woa3FNv35s.mft (raw, json) Hash identifier: 2sgolPePxj+oH1FrXHD9nlv4atqmJ2IbyPayVH0ZVcM= Subject key identifier: 18:78:C7:DB:A6:64:7B:3F:0C:C8:4E:A2:53:5B:DD:26:9C:D1:68:C3 Authority key identifier: 97:5B:B9:41:82:56:81:4A:05:2D:AF:54:F7:0A:1A:DC:53:6F:DF:9B Certificate issuer: /CN=A91A7842/serialNumber=975BB9418256814A052DAF54F70A1ADC536FDF9B Certificate serial: 04D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft Manifest number: 04CA Signing time: Sat 24 Oct 2026 23:46:49 +0000 Manifest this update: Sat 24 Oct 2026 23:46:49 +0000 Manifest next update: Sat 31 Oct 2026 23:46:49 +0000 Files and hashes: 1: l1u5QYJWgUoFLa9U9woa3FNv35s.crl (hash: tbDgGgVoYQkB+i0JX9iKOgaZCeCI32KjoIHiMSX94KI=) 2: 622B3AEAD91411EF9940471AC4F9AE02.roa (hash: cr8+DaXhHVaKphmcAd7tV537ArwtZQMiy53lf3sRJ+Y=) 3: 38DF2BD687FC11F1B0916B103C11F970.roa (hash: ip1X2/FTCxaSzI+j0d1dDsTrjfqFA/qkApNONDzS/MA=) 4: 615BA1B8D91411EF9940471AC4F9AE02.roa (hash: nbdgFqrvKPwj7OTKa8WeiCsPcy8PIB9YyhQhRJZGshM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.crl rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 23:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1240 (0x4d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7842, serialNumber=975BB9418256814A052DAF54F70A1ADC536FDF9B Validity Not Before: Oct 24 23:46:49 2026 GMT Not After : Oct 31 23:46:49 2026 GMT Subject: CN=6add4369-c231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:90:1d:bd:47:46:7c:4c:b1:2f:d3:0c:7c:05: 29:21:fd:a9:c4:ec:90:8b:41:5d:cd:ef:41:35:f6: e9:88:0f:0c:42:b3:78:6c:01:b6:f2:72:b3:1a:9e: 47:89:38:1b:00:e2:a8:d4:c0:3c:7e:23:7f:8b:40: db:4a:b0:06:d6:db:dd:e6:d8:e5:54:f0:c7:ca:05: 7a:a0:bf:a5:6c:f1:43:d2:a2:49:40:eb:bc:f1:ce: 64:4e:26:3d:dc:50:0b:04:eb:78:e6:d8:ce:e5:f3: 86:3f:d3:0b:9b:a4:f4:39:1d:9c:67:c1:d6:96:1f: 08:ff:0d:bd:61:55:9c:3d:1b:66:88:f2:a2:47:51: 2d:66:9e:ed:bb:60:2b:72:53:8e:84:9a:e5:c7:aa: 79:34:ff:62:b7:e9:bb:5e:b5:ff:56:e2:c4:eb:c4: 6a:81:c5:69:e6:24:2d:c0:89:4a:be:94:e8:a2:2b: 7d:8e:6c:89:bd:de:70:33:41:35:69:4f:51:83:b7: cc:59:f3:e3:34:f5:e1:e2:35:14:f8:73:5f:34:8e: e3:38:8c:a0:25:54:e6:98:99:71:91:42:64:ef:99: 8c:b2:5e:28:91:83:d5:71:a9:43:85:f8:5d:67:af: 44:b7:06:c2:6c:6a:1e:fb:f9:43:07:80:2c:3a:1b: 7c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:78:C7:DB:A6:64:7B:3F:0C:C8:4E:A2:53:5B:DD:26:9C:D1:68:C3 X509v3 Authority Key Identifier: keyid:97:5B:B9:41:82:56:81:4A:05:2D:AF:54:F7:0A:1A:DC:53:6F:DF:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:22:37:05:70:68:78:f4:e9:e6:20:8a:63:59:ad:6a:10:0a: 92:d4:61:78:dc:52:fe:bf:b9:5d:f3:dc:e8:54:41:4a:38:44: 5d:ba:e9:62:7a:37:4a:8f:a5:60:b1:22:11:5d:06:61:4e:81: 35:95:6f:c8:ef:78:d0:7a:08:ed:9a:97:22:9a:ec:a9:0d:e5: 83:e7:05:54:7a:1a:30:20:40:24:29:80:f7:9b:47:8d:89:67: 77:1a:57:7a:73:a2:67:aa:08:56:ca:a2:eb:a7:ad:75:69:5d: 7d:ff:02:79:64:8a:30:1f:19:4b:2d:80:87:b9:f9:29:84:78: 85:0f:ab:ce:c3:54:c3:97:97:69:5d:ca:41:bd:67:ff:f6:ab: a4:8d:ba:1a:ac:0f:5c:77:89:2a:91:44:03:27:be:83:1e:66: ea:d4:4a:2f:54:de:6b:12:f6:b5:21:5e:f0:89:41:8a:33:0c: 63:88:2d:43:b4:f0:a0:98:04:eb:e3:24:5a:e8:87:5c:f4:b8: f3:f2:b7:3d:5a:bd:01:16:ee:c4:75:38:74:17:5c:d9:0a:48: 51:96:67:17:88:4e:8c:cc:41:21:55:46:13:ff:99:f8:5c:cf: 8d:33:52:e3:63:a2:3f:21:3e:69:e3:cc:96:c9:f4:f2:7a:ff: 1b:ca:61:67 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc4NDIxMTAvBgNVBAUTKDk3NUJCOTQxODI1NjgxNEEwNTJEQUY1NEY3MEExQURD NTM2RkRGOUIwHhcNMjYxMDI0MjM0NjQ5WhcNMjYxMDMxMjM0NjQ5WjAYMRYwFAYD VQQDEw02YWRkNDM2OS1jMjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ZAdvUdGfEyxL9MMfAUpIf2pxOyQi0Fdze9BNfbpiA8MQrN4bAG28nKzGp5H iTgbAOKo1MA8fiN/i0DbSrAG1tvd5tjlVPDHygV6oL+lbPFD0qJJQOu88c5kTiY9 3FALBOt45tjO5fOGP9MLm6T0OR2cZ8HWlh8I/w29YVWcPRtmiPKiR1EtZp7tu2Ar clOOhJrlx6p5NP9it+m7XrX/VuLE68RqgcVp5iQtwIlKvpTooit9jmyJvd5wM0E1 aU9Rg7fMWfPjNPXh4jUU+HNfNI7jOIygJVTmmJlxkUJk75mMsl4okYPVcalDhfhd Z69EtwbCbGoe+/lDB4AsOht8MQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBh4x9um ZHs/DMhOolNb3Sac0WjDMB8GA1UdIwQYMBaAFJdbuUGCVoFKBS2vVPcKGtxTb9+b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzg0Mi83NkE4QzZCQThF NjUxMUVDQTZFRUVCNzBDNEY5QUUwMi9sMXU1UVlKV2dVb0ZMYTlVOXdvYTNGTnYz NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wxdTVRWUpXZ1VvRkxhOVU5d29hM0ZOdjM1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Nzg0Mi83NkE4QzZCQThFNjUxMUVDQTZFRUVCNzBDNEY5QUUwMi9sMXU1UVlKV2dV b0ZMYTlVOXdvYTNGTnYzNXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPyI3BXBoePTp5iCKY1mtahAKktRheNxS/r+5XfPc6FRBSjhEXbrpYno3So+l YLEiEV0GYU6BNZVvyO940HoI7ZqXIprsqQ3lg+cFVHoaMCBAJCmA95tHjYlndxpX enOiZ6oIVsqi66etdWldff8CeWSKMB8ZSy2Ah7n5KYR4hQ+rzsNUw5eXaV3KQb1n //arpI26GqwPXHeJKpFEAye+gx5m6tRKL1TeaxL2tSFe8IlBijMMY4gtQ7TwoJgE 6+MkWuiHXPS48/K3PVq9ARbuxHU4dBdc2QpIUZZnF4hOjMxBIVVGE/+Z+FzPjTNS 42OiPyE+aePMlsn08nr/G8phZw== -----END CERTIFICATE-----Generated at Mon Oct 26 14:45:51 2026 by rpki-client