$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.mft File: poP2ckwCoT8tOc8vIVAL4AOA3eM.mft (raw, json) Hash identifier: ZYCAp2T4AwU6OqeXFFdx5HwYtz8myOElEYT0ymeDNAg= Subject key identifier: E7:00:85:90:E7:CB:CB:B5:4E:61:50:22:27:39:68:CF:CF:A9:03:87 Authority key identifier: A6:83:F6:72:4C:02:A1:3F:2D:39:CF:2F:21:50:0B:E0:03:80:DD:E3 Certificate issuer: /CN=A91A8D22/serialNumber=A683F6724C02A13F2D39CF2F21500BE00380DDE3 Certificate serial: 360F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poP2ckwCoT8tOc8vIVAL4AOA3eM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.mft Manifest number: 35CA Signing time: Sat 24 Oct 2026 14:42:56 +0000 Manifest this update: Sat 24 Oct 2026 14:42:55 +0000 Manifest next update: Sat 31 Oct 2026 14:42:55 +0000 Files and hashes: 1: poP2ckwCoT8tOc8vIVAL4AOA3eM.crl (hash: UfDfmnginDJoXSJAiLDJ6CtWi1UWtiFQrirUgQ3CBfg=) 2: 42DAE250C8C711F08A7B6740C4F9AE02.roa (hash: RvDR+CwV5r8nXBYVtiJ4seGZbUdvtwvjuoEWjfxE9n4=) 3: A90BA98C74D011F19600C7755BA30FBC.roa (hash: 5g7W5ahRCXrfAoDmqnCGQYfrzLhobtl8/QoaS07b9B4=) 4: 97F461E0C8CB11F0BFB08139C4F9AE02.roa (hash: DG9csTjYXt2owT4jULXXaVRko/sw17eGl0Moy3hQJ9M=) 5: LorfDG7HkTieLpomVUqpyUsTD-w.asa (hash: KalywPiG5nOw7aGOXUh/Ul3kueH7iE7ZzzLS/P/1r5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.crl rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poP2ckwCoT8tOc8vIVAL4AOA3eM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 14:42:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13839 (0x360f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8D22, serialNumber=A683F6724C02A13F2D39CF2F21500BE00380DDE3 Validity Not Before: Oct 24 14:42:55 2026 GMT Not After : Oct 31 14:42:55 2026 GMT Subject: CN=6adcc3f0-6e1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:fc:c0:c3:3d:bf:63:00:f2:7a:21:e9:9e:0a: 3f:ab:f6:0d:04:43:5e:b9:a4:2a:e8:34:66:e4:4c: 17:c8:55:9d:e1:fe:25:2e:93:e0:12:24:66:f9:aa: ad:55:a6:e9:64:25:06:a7:5e:99:81:4b:a7:78:26: 84:50:84:97:9e:a9:ae:99:f4:42:6d:86:e1:75:30: 54:31:f2:a5:0d:16:21:07:70:69:95:45:1f:ee:8d: 4a:90:8d:5e:14:dc:2d:7d:84:0b:94:28:53:b3:a7: 05:46:c4:c7:6e:c1:58:00:34:61:31:3d:93:15:36: 33:db:ab:24:1d:e3:78:09:2c:bd:45:11:c5:61:30: 5d:0e:a9:1b:7c:62:4e:4e:7f:d5:53:a1:3f:12:fb: f4:3e:f9:97:fd:63:79:f4:f2:80:57:13:57:8a:64: ad:21:d8:60:f2:c9:98:b4:bc:3b:19:f4:a4:a8:64: 21:fd:05:13:70:ff:91:30:5e:a4:d8:bd:af:1b:cd: 7b:92:4f:8e:f4:36:8e:da:93:a6:59:37:89:f5:e9: a8:20:18:97:9e:80:4e:b2:d2:62:8f:18:0c:b9:c5: 87:df:1c:4c:ee:e2:e1:47:b2:2a:5c:69:fa:c1:c3: a8:93:ba:17:82:bf:9a:0e:65:9e:fa:d3:54:2a:5b: be:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:00:85:90:E7:CB:CB:B5:4E:61:50:22:27:39:68:CF:CF:A9:03:87 X509v3 Authority Key Identifier: keyid:A6:83:F6:72:4C:02:A1:3F:2D:39:CF:2F:21:50:0B:E0:03:80:DD:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poP2ckwCoT8tOc8vIVAL4AOA3eM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:81:08:01:d3:9c:c3:db:63:72:d1:3e:0e:dc:95:6b:66:0e: cb:cf:8f:2f:09:ce:d7:e8:c5:63:93:37:d6:99:aa:45:a3:8e: fc:f0:fd:dc:9f:b3:ac:b5:84:37:5c:0c:d0:2d:1f:d6:3f:49: 8e:5c:03:d6:c8:8c:84:06:0c:e1:50:b4:72:08:df:9d:38:5b: 09:74:51:b7:ff:3d:76:0d:4e:b6:60:6f:17:61:51:ae:3c:ff: 4a:b4:0b:44:bd:02:82:2f:82:e7:7f:81:51:8b:c7:c1:5e:21: ee:71:46:ea:08:ce:66:cf:85:ff:7e:40:c8:67:07:bf:33:4f: 19:97:c0:14:73:f7:65:f2:30:f0:0d:a5:ab:ac:30:2c:a4:df: 87:7c:36:5f:97:6c:6a:fd:07:c6:11:94:8a:3d:1d:1c:d0:7c: 00:09:c5:14:a8:37:29:22:bc:4f:10:d6:8b:81:8f:65:8f:8e: 7a:8d:93:f9:2e:55:b5:67:59:0e:e3:73:41:d8:37:a6:c2:56: 62:71:26:30:68:e8:7d:39:61:93:e2:98:7a:3a:07:65:89:4e: 33:c5:e3:84:26:6d:e5:46:a6:d1:52:c0:11:1b:ca:b3:a6:bb: 54:46:c4:d0:d7:d7:30:69:3d:b4:67:09:5f:6b:fe:9f:f3:1d: 61:b1:85:7b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThEMjIxMTAvBgNVBAUTKEE2ODNGNjcyNEMwMkExM0YyRDM5Q0YyRjIxNTAwQkUw MDM4MERERTMwHhcNMjYxMDI0MTQ0MjU1WhcNMjYxMDMxMTQ0MjU1WjAYMRYwFAYD VQQDEw02YWRjYzNmMC02ZTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlPzAwz2/YwDyeiHpngo/q/YNBENeuaQq6DRm5EwXyFWd4f4lLpPgEiRm+aqt VabpZCUGp16ZgUuneCaEUISXnqmumfRCbYbhdTBUMfKlDRYhB3BplUUf7o1KkI1e FNwtfYQLlChTs6cFRsTHbsFYADRhMT2TFTYz26skHeN4CSy9RRHFYTBdDqkbfGJO Tn/VU6E/Evv0PvmX/WN59PKAVxNXimStIdhg8smYtLw7GfSkqGQh/QUTcP+RMF6k 2L2vG817kk+O9DaO2pOmWTeJ9emoIBiXnoBOstJijxgMucWH3xxM7uLhR7IqXGn6 wcOok7oXgr+aDmWe+tNUKlu+oQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOcAhZDn y8u1TmFQIic5aM/PqQOHMB8GA1UdIwQYMBaAFKaD9nJMAqE/LTnPLyFQC+ADgN3j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEQyMi8yNTI2OTc5ODFE OTIxMUUyQjYxOENBRjQwOEIwMkNEMi9wb1AyY2t3Q29UOHRPYzh2SVZBTDRBT0Ez ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BvUDJja3dDb1Q4dE9jOHZJVkFMNEFPQTNlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEQyMi8yNTI2OTc5ODFEOTIxMUUyQjYxOENBRjQwOEIwMkNEMi9wb1AyY2t3Q29U OHRPYzh2SVZBTDRBT0EzZU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm4EIAdOcw9tjctE+DtyVa2YOy8+PLwnO1+jFY5M31pmqRaOO/PD93J+zrLWE N1wM0C0f1j9JjlwD1siMhAYM4VC0cgjfnThbCXRRt/89dg1OtmBvF2FRrjz/SrQL RL0Cgi+C53+BUYvHwV4h7nFG6gjOZs+F/35AyGcHvzNPGZfAFHP3ZfIw8A2lq6ww LKTfh3w2X5dsav0HxhGUij0dHNB8AAnFFKg3KSK8TxDWi4GPZY+Oeo2T+S5VtWdZ DuNzQdg3psJWYnEmMGjofTlhk+KYejoHZYlOM8XjhCZt5Uam0VLAERvKs6a7VEbE 0NfXMGk9tGcJX2v+n/MdYbGFew== -----END CERTIFICATE-----Generated at Sat Oct 24 20:43:06 2026 by rpki-client