$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft File: cS61otcGnxjunGXzsBMnGtvx9UA.mft (raw, json) Hash identifier: IF6A9dZZOlia9vzo1GMwaGyV92v5FfdpAfaIrfzY77Q= Subject key identifier: CE:6E:2C:09:99:10:3F:AF:A1:75:BB:3B:97:2C:B3:FA:8E:B9:DD:B5 Authority key identifier: 71:2E:B5:A2:D7:06:9F:18:EE:9C:65:F3:B0:13:27:1A:DB:F1:F5:40 Certificate issuer: /CN=A91A8A52/serialNumber=712EB5A2D7069F18EE9C65F3B013271ADBF1F540 Certificate serial: 02FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft Manifest number: 02E9 Signing time: Sun 01 Nov 2026 01:58:21 +0000 Manifest this update: Sun 01 Nov 2026 01:58:21 +0000 Manifest next update: Sun 08 Nov 2026 01:58:21 +0000 Files and hashes: 1: cS61otcGnxjunGXzsBMnGtvx9UA.crl (hash: oFnsoVuE8doSocaOlowvuEQZ9S2JLOPil81nfxio/js=) 2: 680147B486F311F1B8F66003A7EE528E.roa (hash: vd6Z39KPLKcomn09hEZQiUw+JqJNW7KhM+nNsWSg93s=) 3: 655B85F0225B11EFADDE6F63C4F9AE02.roa (hash: P6xx3LV0yIZz7Bt3wASwzM1QkFL56uH39jrYrM1xsJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.crl rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Nov 2026 01:58:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 764 (0x2fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8A52, serialNumber=712EB5A2D7069F18EE9C65F3B013271ADBF1F540 Validity Not Before: Nov 1 01:58:21 2026 GMT Not After : Nov 8 01:58:21 2026 GMT Subject: CN=6ae69cbd-b2f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e0:43:b3:d6:30:b8:c1:d1:c1:e0:29:6b:e4: ff:35:06:d6:da:e1:f6:cf:6d:bf:fd:2d:05:d3:1b: 9b:32:68:50:ff:ca:ac:ad:f6:a7:d2:3c:21:79:fd: ba:2f:19:12:97:f0:25:08:19:67:da:9c:7f:f3:f7: d5:fd:cc:1e:79:79:e8:b4:6a:51:b0:92:50:55:d6: 34:c5:da:e1:75:8d:38:7d:20:71:28:ab:ec:ef:1f: 36:c9:75:e7:99:04:a6:fd:9c:35:37:9e:70:44:e8: 7c:30:70:64:8c:95:b5:96:b1:be:5b:7d:8a:b5:81: a9:54:c8:88:b3:9e:78:f0:7e:20:0b:ee:5c:4a:0e: a4:cc:82:31:bd:2a:71:96:79:8c:b9:49:20:80:12: 24:ed:89:4c:be:a4:92:c6:2f:d8:9e:9a:bb:be:69: 02:b1:80:62:2b:93:5e:31:b2:96:c3:3b:7b:0c:c9: 94:30:a5:11:37:b7:3c:75:5e:12:7d:47:90:44:3e: b8:23:e9:58:32:b5:85:89:44:59:f9:31:6f:2c:fa: af:ac:78:b0:85:0d:9f:9c:41:70:09:99:54:a9:67: a5:81:57:03:8b:49:7e:6f:40:b0:7b:a1:a7:96:c9: 05:96:b5:0a:6f:bc:3a:cd:1d:4b:a2:d9:df:c3:3f: 9b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:6E:2C:09:99:10:3F:AF:A1:75:BB:3B:97:2C:B3:FA:8E:B9:DD:B5 X509v3 Authority Key Identifier: keyid:71:2E:B5:A2:D7:06:9F:18:EE:9C:65:F3:B0:13:27:1A:DB:F1:F5:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:48:c5:fe:51:43:aa:ed:13:1c:be:11:2a:1a:18:e4:da:54: 76:5f:32:55:c1:ae:ee:b5:f3:4b:3d:7a:c6:b3:8e:a0:25:b5: 35:5d:26:8d:8c:89:ca:08:b8:4d:a1:39:5f:2f:19:4b:68:85: 55:19:8e:17:47:ca:b5:a1:15:53:5d:c2:81:7a:49:80:e8:c7: 1e:c9:66:f6:d8:54:63:b9:dd:f5:cc:bb:ec:d4:b4:bb:fb:4b: ac:6a:66:24:d6:2a:b8:26:a9:1c:25:d6:46:e4:06:b1:b4:b1: 80:5e:19:25:ac:e1:2c:2b:82:35:6e:44:ca:20:b1:dc:ac:7f: fc:29:b8:25:ce:bc:f2:7d:af:f2:4d:bb:52:aa:53:7c:94:ec: 66:a9:12:4c:0e:9c:ee:13:c5:2e:4f:2b:0a:04:10:a1:37:4b: 3a:40:10:5f:4f:62:66:16:5a:85:70:4a:19:9b:96:ad:0f:a2: 83:b5:26:ad:b9:a9:36:79:ed:2a:c4:42:1d:f2:0a:64:29:15: 30:f2:36:d0:9a:60:04:db:c5:0a:7b:48:81:6e:9f:ae:e1:b9: 12:35:8f:72:6d:c0:bc:36:65:59:09:57:d4:51:8c:e7:3d:95: 2b:f6:b5:0f:94:69:3b:6b:fb:64:58:64:3d:5f:61:dc:f9:b5: 5c:cb:e5:08 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThBNTIxMTAvBgNVBAUTKDcxMkVCNUEyRDcwNjlGMThFRTlDNjVGM0IwMTMyNzFB REJGMUY1NDAwHhcNMjYxMTAxMDE1ODIxWhcNMjYxMTA4MDE1ODIxWjAYMRYwFAYD VQQDEw02YWU2OWNiZC1iMmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAruBDs9YwuMHRweApa+T/NQbW2uH2z22//S0F0xubMmhQ/8qsrfan0jwhef26 LxkSl/AlCBln2px/8/fV/cweeXnotGpRsJJQVdY0xdrhdY04fSBxKKvs7x82yXXn mQSm/Zw1N55wROh8MHBkjJW1lrG+W32KtYGpVMiIs5548H4gC+5cSg6kzIIxvSpx lnmMuUkggBIk7YlMvqSSxi/Ynpq7vmkCsYBiK5NeMbKWwzt7DMmUMKURN7c8dV4S fUeQRD64I+lYMrWFiURZ+TFvLPqvrHiwhQ2fnEFwCZlUqWelgVcDi0l+b0Cwe6Gn lskFlrUKb7w6zR1Lotnfwz+bGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM5uLAmZ ED+voXW7O5css/qOud21MB8GA1UdIwQYMBaAFHEutaLXBp8Y7pxl87ATJxrb8fVA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEE1Mi9GQjdFNEJERTcw QjUxMUVEOTNGMEREMTZDNEY5QUUwMi9jUzYxb3RjR254anVuR1h6c0JNbkd0dng5 VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NTNjFvdGNHbnhqdW5HWHpzQk1uR3R2eDlVQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEE1Mi9GQjdFNEJERTcwQjUxMUVEOTNGMEREMTZDNEY5QUUwMi9jUzYxb3RjR254 anVuR1h6c0JNbkd0dng5VUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeUjF/lFDqu0THL4RKhoY5NpUdl8yVcGu7rXzSz16xrOOoCW1NV0mjYyJygi4 TaE5Xy8ZS2iFVRmOF0fKtaEVU13CgXpJgOjHHslm9thUY7nd9cy77NS0u/tLrGpm JNYquCapHCXWRuQGsbSxgF4ZJazhLCuCNW5EyiCx3Kx//Cm4Jc688n2v8k27UqpT fJTsZqkSTA6c7hPFLk8rCgQQoTdLOkAQX09iZhZahXBKGZuWrQ+ig7UmrbmpNnnt KsRCHfIKZCkVMPI20JpgBNvFCntIgW6fruG5EjWPcm3AvDZlWQlX1FGM5z2VK/a1 D5RpO2v7ZFhkPV9h3Pm1XMvlCA== -----END CERTIFICATE-----Generated at Mon Nov 2 06:59:32 2026 by rpki-client