$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft File: J3U8_U6dmOtMNus3e6tt4vkua-g.mft (raw, json) Hash identifier: 1IgqTbQINlJNgX+pBQYY8VWGNDb8K2H+TwTXNg3pES0= Subject key identifier: B7:39:D6:77:0A:ED:CD:FF:A8:9F:C0:E3:EE:EF:77:B2:7F:DE:DF:EA Authority key identifier: 27:75:3C:FD:4E:9D:98:EB:4C:36:EB:37:7B:AB:6D:E2:F9:2E:6B:E8 Certificate issuer: /CN=A91A8AF1/serialNumber=27753CFD4E9D98EB4C36EB377BAB6DE2F92E6BE8 Certificate serial: 10B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft Manifest number: 10A8 Signing time: Sat 24 Oct 2026 17:19:02 +0000 Manifest this update: Sat 24 Oct 2026 17:19:02 +0000 Manifest next update: Sat 31 Oct 2026 17:19:02 +0000 Files and hashes: 1: J3U8_U6dmOtMNus3e6tt4vkua-g.crl (hash: xDqnOD8bGgrOPL7kkFMAIxZ7+hWLAaMPBh2XT8iEWQg=) 2: C5FC427C5C1911E997A2ED42C4F9AE02.roa (hash: mAMFCymV+W4LEtMakMM1vSbqGuT68ZW9rXh0UsnE1f4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.crl rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 17:19:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4275 (0x10b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8AF1, serialNumber=27753CFD4E9D98EB4C36EB377BAB6DE2F92E6BE8 Validity Not Before: Oct 24 17:19:02 2026 GMT Not After : Oct 31 17:19:02 2026 GMT Subject: CN=6adce886-78c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b3:45:c8:9d:32:80:99:7e:98:95:91:13:65: e1:aa:3b:eb:27:ff:44:b3:5d:da:02:69:32:b4:67: e4:e1:ac:c2:43:77:d2:89:56:f6:f5:52:c5:b0:21: 7b:63:59:68:9f:30:bc:c0:53:ca:cc:33:09:58:e0: 1b:48:3c:4d:39:01:d1:d6:7c:27:92:7e:4c:5f:89: e8:e9:1b:32:ea:ec:a1:be:10:b9:ca:a2:50:24:75: 1c:a9:59:a2:ca:a8:a7:a5:a0:65:0e:c9:31:2c:17: 83:c9:a1:76:c9:55:f8:3c:44:ea:6e:f4:fe:1b:b9: 86:d5:bf:a0:dd:1f:85:bf:07:e5:e2:81:4a:5c:84: 28:09:ac:32:a5:d6:ca:23:41:aa:36:a9:3b:05:da: 0f:cf:75:28:c0:cb:ae:8d:b5:18:16:2b:59:b0:7e: 1e:be:2c:11:dd:0a:14:a4:c1:a9:fd:01:27:d4:92: 4d:e0:f8:fb:a1:a8:9c:fd:fe:38:a4:e5:09:f3:92: 7f:45:0d:90:67:0c:90:b4:e8:b3:05:5b:ee:b4:35: d3:00:6f:84:aa:01:67:d1:95:44:eb:2d:04:19:1a: e3:08:fb:a7:2b:da:2c:a0:4c:34:80:ba:6e:96:ca: 28:68:26:7b:1d:b6:01:3f:c1:f0:cf:91:12:41:20: 6f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:39:D6:77:0A:ED:CD:FF:A8:9F:C0:E3:EE:EF:77:B2:7F:DE:DF:EA X509v3 Authority Key Identifier: keyid:27:75:3C:FD:4E:9D:98:EB:4C:36:EB:37:7B:AB:6D:E2:F9:2E:6B:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:51:f9:fb:1c:57:77:e6:92:af:93:fd:99:05:59:ab:03:e4: 10:d2:5e:e1:d3:57:fe:88:16:65:26:61:07:a5:3f:1c:ef:cc: d2:58:62:ad:a8:b0:19:cd:26:38:ca:aa:dd:8f:78:6b:1d:2a: e4:ce:3d:83:ec:2e:7d:ca:1f:79:0f:b2:2c:51:63:30:5d:57: 98:05:34:d0:d0:1e:d8:5b:2f:d5:0e:ba:3f:d4:d7:6b:e7:8c: 22:2a:60:09:83:f1:cb:6f:6f:52:11:5b:26:ed:4e:7e:70:70: a4:d6:01:78:65:04:3f:33:e8:66:d7:bd:30:5c:91:66:6c:0f: ac:af:66:60:dd:02:f7:14:69:70:ce:0f:b5:92:34:ab:04:7e: 3a:d3:e8:9f:3b:8f:98:de:0b:61:f3:41:af:1a:ea:19:c8:d1: fe:1a:88:d5:62:d2:e9:2f:32:56:16:b2:77:ee:6a:ed:7f:0a: 38:d2:ba:b3:20:8f:bc:24:11:eb:ff:44:0a:d0:25:e2:30:4c: b9:e7:d0:6d:10:d8:72:1c:ee:22:37:ff:d5:ca:fc:e0:ec:f4: c2:f1:b0:82:74:5f:1f:73:15:84:f8:2e:a4:ec:1e:7c:b7:0e: d9:4c:96:de:da:f2:35:e1:d2:c0:0f:07:9a:bb:9d:e7:e3:fa: 65:1c:6a:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICELMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThBRjExMTAvBgNVBAUTKDI3NzUzQ0ZENEU5RDk4RUI0QzM2RUIzNzdCQUI2REUy RjkyRTZCRTgwHhcNMjYxMDI0MTcxOTAyWhcNMjYxMDMxMTcxOTAyWjAYMRYwFAYD VQQDEw02YWRjZTg4Ni03OGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqLNFyJ0ygJl+mJWRE2XhqjvrJ/9Es13aAmkytGfk4azCQ3fSiVb29VLFsCF7 Y1lonzC8wFPKzDMJWOAbSDxNOQHR1nwnkn5MX4no6Rsy6uyhvhC5yqJQJHUcqVmi yqinpaBlDskxLBeDyaF2yVX4PETqbvT+G7mG1b+g3R+Fvwfl4oFKXIQoCawypdbK I0GqNqk7BdoPz3UowMuujbUYFitZsH4eviwR3QoUpMGp/QEn1JJN4Pj7oaic/f44 pOUJ85J/RQ2QZwyQtOizBVvutDXTAG+EqgFn0ZVE6y0EGRrjCPunK9osoEw0gLpu lsooaCZ7HbYBP8Hwz5ESQSBvMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLc51ncK 7c3/qJ/A4+7vd7J/3t/qMB8GA1UdIwQYMBaAFCd1PP1OnZjrTDbrN3urbeL5Lmvo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEFGMS9DQTFBMDNDMjVD MTgxMUU5QjMwNzQzNDFDNEY5QUUwMi9KM1U4X1U2ZG1PdE1OdXMzZTZ0dDR2a3Vh LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ozVThfVTZkbU90TU51czNlNnR0NHZrdWEtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEFGMS9DQTFBMDNDMjVDMTgxMUU5QjMwNzQzNDFDNEY5QUUwMi9KM1U4X1U2ZG1P dE1OdXMzZTZ0dDR2a3VhLWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqVH5+xxXd+aSr5P9mQVZqwPkENJe4dNX/ogWZSZhB6U/HO/M0lhiraiwGc0m OMqq3Y94ax0q5M49g+wufcofeQ+yLFFjMF1XmAU00NAe2Fsv1Q66P9TXa+eMIipg CYPxy29vUhFbJu1OfnBwpNYBeGUEPzPoZte9MFyRZmwPrK9mYN0C9xRpcM4PtZI0 qwR+OtPonzuPmN4LYfNBrxrqGcjR/hqI1WLS6S8yVhayd+5q7X8KONK6syCPvCQR 6/9ECtAl4jBMuefQbRDYchzuIjf/1cr84Oz0wvGwgnRfH3MVhPgupOwefLcO2UyW 3tryNeHSwA8Hmrud5+P6ZRxqAA== -----END CERTIFICATE-----Generated at Mon Oct 26 02:28:50 2026 by rpki-client