$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.mft File: ldQuwvRot-OPlYyPupMYARfcJuA.mft (raw, json) Hash identifier: zr3O8frwUIVTnrIkoEIrUNKeNZkyxUMwKpkoafywirI= Subject key identifier: CF:89:77:7A:38:C7:EC:A5:B0:C7:EF:CA:E6:E2:0D:17:79:B0:01:4B Authority key identifier: 95:D4:2E:C2:F4:68:B7:E3:8F:95:8C:8F:BA:93:18:01:17:DC:26:E0 Certificate issuer: /CN=A91A7F6A/serialNumber=95D42EC2F468B7E38F958C8FBA93180117DC26E0 Certificate serial: 014A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldQuwvRot-OPlYyPupMYARfcJuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.mft Manifest number: 013A Signing time: Tue 27 Oct 2026 06:00:59 +0000 Manifest this update: Tue 27 Oct 2026 06:00:58 +0000 Manifest next update: Tue 03 Nov 2026 06:00:58 +0000 Files and hashes: 1: ldQuwvRot-OPlYyPupMYARfcJuA.crl (hash: RAIyfxTeF9WbbE+SpczVNsWkoZ9ID9jpDU0kyRoarI4=) 2: 5448D8AC4DCA11F18462840CB2833773.roa (hash: j8iatOZvVQg41rHjPtQGn8/eNVWR8JQ4DuhiAOfavec=) 3: 794B993A4DCC11F1A3B35A8FB3833773.roa (hash: EXcXAWkPRKy2b0v846Dwu0vaIsA4gr6bY0tTEvdv/RI=) 4: B3849A9A359311F09B54926FC4F9AE02.roa (hash: 5TjucLw3rqG1PVaTMa1TZO4hKoccTXSUW0WPJZfPVSg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.crl rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldQuwvRot-OPlYyPupMYARfcJuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 330 (0x14a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7F6A, serialNumber=95D42EC2F468B7E38F958C8FBA93180117DC26E0 Validity Not Before: Oct 27 06:00:58 2026 GMT Not After : Nov 3 06:00:58 2026 GMT Subject: CN=6ae03e1b-8af2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:aa:90:52:91:c8:64:29:96:3a:fc:06:4d:45: 03:22:78:58:66:c4:6c:43:8c:fb:62:a9:ed:c7:f2: 49:a3:f4:27:60:0f:dc:c9:a7:34:47:29:cc:57:71: 13:04:59:86:1e:de:58:ee:9e:e5:c1:4c:44:48:2b: de:d2:d5:9f:97:57:22:8e:31:4c:68:9c:99:27:85: 82:b6:cd:7e:29:5e:6a:fd:14:9f:b7:81:7c:3c:46: 3e:a8:2c:62:f6:88:fa:8e:bd:b3:b4:dd:37:49:92: 2c:1e:b7:4c:8c:fe:dd:3b:cb:c2:7d:fa:df:11:00: e0:34:c4:c0:cc:f2:f3:fd:a4:1c:37:6c:6e:3b:ce: 11:1a:b7:2b:20:ea:7a:9f:13:78:db:79:b5:00:b0: fc:bc:7a:b2:08:0f:78:34:84:ca:5c:61:60:f7:87: 2f:6e:18:f4:71:e6:1e:cb:aa:6c:99:84:ff:9a:2d: 83:f7:78:79:5b:8d:b4:5b:9d:7b:bc:20:89:43:95: f9:c3:7d:ce:8c:02:b9:44:71:ef:96:46:e7:36:1a: d1:4a:8e:d6:0e:cb:53:41:ab:d9:09:19:8b:f4:ac: 3f:36:bd:c2:d6:72:6a:ad:72:32:e6:df:15:5d:c0: 95:21:b5:97:1d:47:c4:f2:34:c4:07:98:c6:93:b8: 50:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:89:77:7A:38:C7:EC:A5:B0:C7:EF:CA:E6:E2:0D:17:79:B0:01:4B X509v3 Authority Key Identifier: keyid:95:D4:2E:C2:F4:68:B7:E3:8F:95:8C:8F:BA:93:18:01:17:DC:26:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldQuwvRot-OPlYyPupMYARfcJuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:c1:33:14:82:85:84:bb:c4:2b:bf:14:b0:5f:4c:ea:2c:32: 95:63:1e:f0:16:ab:1b:67:e4:99:f7:89:d3:a8:0d:80:25:c3: ec:76:79:f8:a6:40:4e:d5:c3:4f:23:e2:03:69:4d:49:36:0d: 17:52:76:18:36:6e:d1:4a:b7:d2:22:4a:b4:ce:28:e3:b1:6a: 12:9e:02:5a:7a:53:30:37:34:47:e1:07:ff:db:f6:bb:4c:9a: d4:4b:2a:af:68:6d:d6:74:0f:19:7a:7c:06:69:ab:1b:23:7c: 62:2f:4b:31:9e:96:78:b6:8c:2e:1e:51:eb:78:9d:11:bf:35: 1b:87:f3:30:5f:fc:0d:28:b6:b0:04:b8:7c:80:3f:8a:84:51: 34:11:93:a2:9d:94:38:96:77:0a:30:09:72:01:43:b2:d3:bf: e9:68:51:3e:0a:30:a4:8e:53:a6:11:36:e1:f7:f4:0f:6b:00: a2:a9:1d:4f:1b:99:fb:d6:ba:c3:25:db:26:45:a1:8b:9d:4d: bf:91:9c:3b:2e:ca:6d:40:3e:a2:7f:ec:3f:e0:ad:55:e4:f6: 63:71:18:28:29:09:c9:5f:b2:9f:e9:00:5b:90:af:14:c7:92: e0:b1:47:f1:89:f7:b0:95:62:ec:0a:da:b7:92:ce:9a:2e:1b: 1f:02:13:68 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdGNkExMTAvBgNVBAUTKDk1RDQyRUMyRjQ2OEI3RTM4Rjk1OEM4RkJBOTMxODAx MTdEQzI2RTAwHhcNMjYxMDI3MDYwMDU4WhcNMjYxMTAzMDYwMDU4WjAYMRYwFAYD VQQDEw02YWUwM2UxYi04YWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1qqQUpHIZCmWOvwGTUUDInhYZsRsQ4z7Yqntx/JJo/QnYA/cyac0RynMV3ET BFmGHt5Y7p7lwUxESCve0tWfl1cijjFMaJyZJ4WCts1+KV5q/RSft4F8PEY+qCxi 9oj6jr2ztN03SZIsHrdMjP7dO8vCffrfEQDgNMTAzPLz/aQcN2xuO84RGrcrIOp6 nxN423m1ALD8vHqyCA94NITKXGFg94cvbhj0ceYey6psmYT/mi2D93h5W420W517 vCCJQ5X5w33OjAK5RHHvlkbnNhrRSo7WDstTQavZCRmL9Kw/Nr3C1nJqrXIy5t8V XcCVIbWXHUfE8jTEB5jGk7hQnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM+Jd3o4 x+ylsMfvyubiDRd5sAFLMB8GA1UdIwQYMBaAFJXULsL0aLfjj5WMj7qTGAEX3Cbg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0Y2QS83QTUyOTg3NjBB RjAxMUYwODUzMUQ0M0NDNEY5QUUwMi9sZFF1d3ZSb3QtT1BsWXlQdXBNWUFSZmNK dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xkUXV3dlJvdC1PUGxZeVB1cE1ZQVJmY0p1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0Y2QS83QTUyOTg3NjBBRjAxMUYwODUzMUQ0M0NDNEY5QUUwMi9sZFF1d3ZSb3Qt T1BsWXlQdXBNWUFSZmNKdUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGMEzFIKFhLvEK78UsF9M6iwylWMe8BarG2fkmfeJ06gNgCXD7HZ5+KZATtXD TyPiA2lNSTYNF1J2GDZu0Uq30iJKtM4o47FqEp4CWnpTMDc0R+EH/9v2u0ya1Esq r2ht1nQPGXp8BmmrGyN8Yi9LMZ6WeLaMLh5R63idEb81G4fzMF/8DSi2sAS4fIA/ ioRRNBGTop2UOJZ3CjAJcgFDstO/6WhRPgowpI5TphE24ff0D2sAoqkdTxuZ+9a6 wyXbJkWhi51Nv5GcOy7KbUA+on/sP+CtVeT2Y3EYKCkJyV+yn+kAW5CvFMeS4LFH 8Yn3sJVi7Arat5LOmi4bHwITaA== -----END CERTIFICATE-----Generated at Wed Oct 28 00:46:10 2026 by rpki-client