$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7C68/423986F6972111EDA2E02251C4F9AE02/D2JqMmTW_szL_rLZmx2_iv_sOzQ.mft File: D2JqMmTW_szL_rLZmx2_iv_sOzQ.mft (raw, json) Hash identifier: yVnvAZntTXbvSynNNQss5CWer22YjRD7CrLE6s99MAU= Subject key identifier: 68:0C:58:56:0A:74:0C:4F:19:BD:65:B5:F9:51:5E:B9:D9:A1:C3:B5 Authority key identifier: 0F:62:6A:32:64:D6:FE:CC:CB:FE:B2:D9:9B:1D:BF:8A:FF:EC:3B:34 Certificate issuer: /CN=A91A7C68/serialNumber=0F626A3264D6FECCCBFEB2D99B1DBF8AFFEC3B34 Certificate serial: 02D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D2JqMmTW_szL_rLZmx2_iv_sOzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7C68/423986F6972111EDA2E02251C4F9AE02/D2JqMmTW_szL_rLZmx2_iv_sOzQ.mft Manifest number: 02C5 Signing time: Wed 07 Oct 2026 01:48:42 +0000 Manifest this update: Wed 07 Oct 2026 01:48:42 +0000 Manifest next update: Wed 14 Oct 2026 01:48:42 +0000 Files and hashes: 1: D2JqMmTW_szL_rLZmx2_iv_sOzQ.crl (hash: QC/G40cBX3OFNyYkhBDXcw8iBhGHOOOIziXeKrLROgQ=) 2: BC72661A972911ED8CBCA476C4F9AE02.roa (hash: ijHVWHANYsNS9d5u+2L0OG/TAcPXhYDdTjzMH7Olj0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7C68/423986F6972111EDA2E02251C4F9AE02/D2JqMmTW_szL_rLZmx2_iv_sOzQ.crl rsync://rpki.apnic.net/member_repository/A91A7C68/423986F6972111EDA2E02251C4F9AE02/D2JqMmTW_szL_rLZmx2_iv_sOzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D2JqMmTW_szL_rLZmx2_iv_sOzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 01:48:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 724 (0x2d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7C68, serialNumber=0F626A3264D6FECCCBFEB2D99B1DBF8AFFEC3B34 Validity Not Before: Oct 7 01:48:42 2026 GMT Not After : Oct 14 01:48:42 2026 GMT Subject: CN=6ac5a4fa-f3e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b3:32:ae:13:d4:bc:98:9e:31:a8:a7:40:f7: 71:11:7d:ea:fe:ab:d6:b5:3e:28:5a:b6:23:51:0b: 3b:b5:68:99:13:d1:b7:9f:4f:1a:f1:54:e3:44:54: ca:26:16:63:db:0e:1e:1b:36:72:6e:7c:67:b0:ce: e3:74:5a:c6:ce:c7:a6:3f:d5:5d:8d:ae:64:fd:e6: d9:61:49:d3:db:fb:4b:cd:9d:fb:6b:fd:13:5c:da: 17:5e:e4:c8:1f:ea:10:cc:84:cc:87:ec:d8:3d:3f: 47:61:6d:78:2f:26:0e:7d:f7:5c:54:03:4c:15:06: c7:00:bd:5c:6f:d2:fa:fd:5d:e7:3e:80:35:2a:ba: 28:59:a7:66:bf:6d:81:b4:ea:c5:ec:9c:c2:3e:de: f0:df:66:cf:d2:2f:cf:b5:f6:98:7f:e4:81:9f:5a: 16:ca:31:29:21:01:eb:da:d5:32:b9:32:01:88:44: 83:62:a3:42:13:78:ee:07:26:27:59:58:82:54:f9: 57:fe:df:f6:ae:bf:1a:93:d3:b3:91:a5:7c:f6:59: d3:c7:05:15:ba:44:41:02:20:e7:a6:27:12:bd:3e: 37:08:d0:55:06:9c:15:8b:20:54:f3:dc:dd:81:5e: 77:ca:b4:d7:c6:f8:73:ce:d5:8e:37:1b:ae:7f:9b: c9:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:0C:58:56:0A:74:0C:4F:19:BD:65:B5:F9:51:5E:B9:D9:A1:C3:B5 X509v3 Authority Key Identifier: keyid:0F:62:6A:32:64:D6:FE:CC:CB:FE:B2:D9:9B:1D:BF:8A:FF:EC:3B:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7C68/423986F6972111EDA2E02251C4F9AE02/D2JqMmTW_szL_rLZmx2_iv_sOzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D2JqMmTW_szL_rLZmx2_iv_sOzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7C68/423986F6972111EDA2E02251C4F9AE02/D2JqMmTW_szL_rLZmx2_iv_sOzQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:0c:b3:8f:04:7c:a7:bb:23:26:e1:88:c9:ca:84:2e:cf:f8: bd:2f:87:51:bb:de:38:4a:ef:8a:4a:a1:63:11:3f:ee:7d:94: f4:0c:e1:41:27:4b:7e:c2:cd:12:8c:8c:80:04:85:94:57:21: 6f:ad:b8:0d:e3:30:ec:a1:e3:0b:d8:21:88:05:e7:94:97:0a: 90:82:fc:49:41:51:aa:4a:d8:a3:5b:ae:17:db:4d:d4:49:8a: 9d:1c:da:80:99:63:e1:e8:3a:3e:ad:48:94:96:43:b3:82:49: 86:5c:24:3f:3c:60:de:d6:c3:08:9c:8b:e3:85:20:c2:db:c0: 06:88:67:94:81:49:b7:52:a2:12:56:4d:2a:9f:7b:7e:36:5e: 66:f2:9c:52:ef:89:17:0b:0b:3b:2f:c0:2d:09:8a:ae:6a:69: 69:78:95:29:ea:c4:51:a6:8f:c4:38:71:04:b3:c6:09:8f:42: 3a:f0:41:ed:e6:08:fd:d8:21:53:db:e4:d9:25:de:04:47:f9: 0a:be:15:85:34:ad:18:8b:17:5c:1d:9d:5b:bd:50:68:14:39: 2b:93:a4:e7:a5:f9:ee:dc:c1:ee:08:46:1e:56:4e:14:d1:b5: f7:4a:04:76:79:a2:43:47:73:8a:e8:bd:d7:5e:85:82:3e:a9: e5:1b:5c:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAtQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdDNjgxMTAvBgNVBAUTKDBGNjI2QTMyNjRENkZFQ0NDQkZFQjJEOTlCMURCRjhB RkZFQzNCMzQwHhcNMjYxMDA3MDE0ODQyWhcNMjYxMDE0MDE0ODQyWjAYMRYwFAYD VQQDEw02YWM1YTRmYS1mM2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA17MyrhPUvJieMainQPdxEX3q/qvWtT4oWrYjUQs7tWiZE9G3n08a8VTjRFTK JhZj2w4eGzZybnxnsM7jdFrGzsemP9Vdja5k/ebZYUnT2/tLzZ37a/0TXNoXXuTI H+oQzITMh+zYPT9HYW14LyYOffdcVANMFQbHAL1cb9L6/V3nPoA1KrooWadmv22B tOrF7JzCPt7w32bP0i/PtfaYf+SBn1oWyjEpIQHr2tUyuTIBiESDYqNCE3juByYn WViCVPlX/t/2rr8ak9OzkaV89lnTxwUVukRBAiDnpicSvT43CNBVBpwViyBU89zd gV53yrTXxvhzztWONxuuf5vJTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGgMWFYK dAxPGb1ltflRXrnZocO1MB8GA1UdIwQYMBaAFA9iajJk1v7My/6y2Zsdv4r/7Ds0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0M2OC80MjM5ODZGNjk3 MjExMUVEQTJFMDIyNTFDNEY5QUUwMi9EMkpxTW1UV19zekxfckxabXgyX2l2X3NP elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0QySnFNbVRXX3N6TF9yTFpteDJfaXZfc096US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0M2OC80MjM5ODZGNjk3MjExMUVEQTJFMDIyNTFDNEY5QUUwMi9EMkpxTW1UV19z ekxfckxabXgyX2l2X3NPelEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMQyzjwR8p7sjJuGIycqELs/4vS+HUbveOErvikqhYxE/7n2U9AzhQSdLfsLN EoyMgASFlFchb624DeMw7KHjC9ghiAXnlJcKkIL8SUFRqkrYo1uuF9tN1EmKnRza gJlj4eg6Pq1IlJZDs4JJhlwkPzxg3tbDCJyL44UgwtvABohnlIFJt1KiElZNKp97 fjZeZvKcUu+JFwsLOy/ALQmKrmppaXiVKerEUaaPxDhxBLPGCY9COvBB7eYI/dgh U9vk2SXeBEf5Cr4VhTStGIsXXB2dW71QaBQ5K5Ok56X57tzB7ghGHlZOFNG190oE dnmiQ0dziui9116Fgj6p5Rtcvg== -----END CERTIFICATE-----Generated at Thu Oct 8 15:28:41 2026 by rpki-client