$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft File: _CT1OQdHh-zqsAwkJgbCvWiBmg0.mft (raw, json) Hash identifier: DmigFimzvYmFGOr40GT96g7b7hkRRWOqz19aiVntVTg= Subject key identifier: AF:30:A9:52:39:A6:66:C3:30:61:D9:D0:90:C9:46:48:40:4D:EB:70 Authority key identifier: FC:24:F5:39:07:47:87:EC:EA:B0:0C:24:26:06:C2:BD:68:81:9A:0D Certificate issuer: /CN=A91A9CBB/serialNumber=FC24F539074787ECEAB00C242606C2BD68819A0D Certificate serial: 0130 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft Manifest number: 0128 Signing time: Tue 27 Oct 2026 06:05:36 +0000 Manifest this update: Tue 27 Oct 2026 06:05:36 +0000 Manifest next update: Tue 03 Nov 2026 06:05:36 +0000 Files and hashes: 1: _CT1OQdHh-zqsAwkJgbCvWiBmg0.crl (hash: vAYrxfNp4zIq4KcW+Un1a3F4HVVM1WAeTBDJhebsqY4=) 2: 1C1628BE2D9E11F1B1FA5F5A88EE528E.roa (hash: AdqbKoLvsHyKD6HghcgCeYloGvI0ehL1LADbVK02jZo=) 3: 1DA281C82D9E11F1B1FA5F5A88EE528E.roa (hash: gMJWlgng2lgevvc5aZJ8BLiTHzTn0UTcScrCCSp3b7g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.crl rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 06:05:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 304 (0x130) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9CBB, serialNumber=FC24F539074787ECEAB00C242606C2BD68819A0D Validity Not Before: Oct 27 06:05:36 2026 GMT Not After : Nov 3 06:05:36 2026 GMT Subject: CN=6ae03f30-fbc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:53:5e:f8:bf:20:6d:b3:cc:3b:fc:19:e4:4d: 74:e4:29:6a:05:07:54:1d:fe:1b:dc:b0:15:67:04: df:c6:c7:b2:4e:8a:b1:d3:46:9b:7d:bf:6f:97:79: c8:56:9c:93:30:91:2c:d2:fb:6a:41:08:97:82:cb: 22:cb:c7:ab:50:30:67:39:38:c9:2d:01:50:74:b3: 53:91:bd:4f:31:96:0e:ce:ee:cd:6b:ea:ff:1b:a4: a9:40:bb:79:27:59:7a:3e:73:f0:22:91:6d:6d:4b: af:d9:35:3d:e7:f9:de:05:d4:98:3f:01:fc:cb:65: e4:28:27:bc:69:ce:7e:2a:1a:ee:80:ce:c8:ad:f9: fa:70:69:ed:49:bb:d0:2f:77:f6:e9:d2:3e:c5:9e: 71:25:1f:cd:cb:c7:1e:fc:b0:58:d0:5d:99:4e:07: 37:8e:e5:37:b0:f5:68:1e:a5:f5:93:d5:ba:df:67: 5e:b4:5f:e1:16:a9:ab:b9:00:52:c1:89:9f:e5:0f: 42:3f:89:06:36:b0:41:df:bd:01:cc:03:c8:01:6d: 39:81:b8:ab:a6:2b:e9:a8:8e:e6:66:36:6c:9e:e6: fa:2f:08:13:06:ec:39:07:e1:20:24:6f:5b:54:4f: 66:6c:a7:e4:ac:2a:1b:fa:ca:d3:ec:5f:a4:18:f1: d9:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:30:A9:52:39:A6:66:C3:30:61:D9:D0:90:C9:46:48:40:4D:EB:70 X509v3 Authority Key Identifier: keyid:FC:24:F5:39:07:47:87:EC:EA:B0:0C:24:26:06:C2:BD:68:81:9A:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:a4:70:09:a1:ec:a4:1f:69:d7:af:14:89:42:71:b7:5f:ee: 09:b5:15:45:1b:32:97:9b:a7:5d:dc:5d:b8:ff:ec:29:e5:0a: c5:a4:d5:3d:cd:82:f6:f4:f1:6e:b4:5e:b4:27:dc:b7:7c:b9: bc:48:44:d4:d3:61:d3:29:76:b5:26:df:ab:39:a8:00:a1:63: 06:93:47:1d:2e:70:de:29:d7:bc:97:4d:e7:6c:e3:1f:c7:28: 26:97:53:a1:09:15:9c:3a:05:30:dd:12:c1:e8:94:d7:c4:5b: 13:1c:39:a2:a1:53:2f:16:87:48:16:7e:20:b3:b6:bc:2f:26: 56:ff:1d:69:0d:6b:82:97:3b:1c:ea:f5:6d:a2:88:e6:25:7c: 11:35:45:fe:7f:15:74:b8:c0:d7:43:c1:34:69:f5:1c:32:52: d2:cb:da:59:ce:4d:c3:ad:e1:bb:fb:00:c6:66:71:83:4a:4b: d1:07:d8:7d:de:0e:43:1e:c7:4f:61:58:d7:97:0f:9d:16:3d: 13:46:df:17:20:08:25:6c:55:d7:0c:cb:4b:70:36:e8:c9:75: 77:61:8b:07:37:d4:af:5c:18:7f:e2:78:c8:be:e2:ef:23:07: 70:14:3f:b5:59:e6:d7:5b:c3:9f:e1:e8:58:8a:44:32:26:79: c4:79:8f:b9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlDQkIxMTAvBgNVBAUTKEZDMjRGNTM5MDc0Nzg3RUNFQUIwMEMyNDI2MDZDMkJE Njg4MTlBMEQwHhcNMjYxMDI3MDYwNTM2WhcNMjYxMTAzMDYwNTM2WjAYMRYwFAYD VQQDEw02YWUwM2YzMC1mYmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFNe+L8gbbPMO/wZ5E105ClqBQdUHf4b3LAVZwTfxseyToqx00abfb9vl3nI VpyTMJEs0vtqQQiXgssiy8erUDBnOTjJLQFQdLNTkb1PMZYOzu7Na+r/G6SpQLt5 J1l6PnPwIpFtbUuv2TU95/neBdSYPwH8y2XkKCe8ac5+KhrugM7Irfn6cGntSbvQ L3f26dI+xZ5xJR/Ny8ce/LBY0F2ZTgc3juU3sPVoHqX1k9W632detF/hFqmruQBS wYmf5Q9CP4kGNrBB370BzAPIAW05gbirpivpqI7mZjZsnub6LwgTBuw5B+EgJG9b VE9mbKfkrCob+srT7F+kGPHZ2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK8wqVI5 pmbDMGHZ0JDJRkhATetwMB8GA1UdIwQYMBaAFPwk9TkHR4fs6rAMJCYGwr1ogZoN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUNCQi9ENTNCRDE0NjE1 QjExMUYwQTI3NzRBMDlDNEY5QUUwMi9fQ1QxT1FkSGgtenFzQXdrSmdiQ3ZXaUJt ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19DVDFPUWRIaC16cXNBd2tKZ2JDdldpQm1nMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUNCQi9ENTNCRDE0NjE1QjExMUYwQTI3NzRBMDlDNEY5QUUwMi9fQ1QxT1FkSGgt enFzQXdrSmdiQ3ZXaUJtZzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOaRwCaHspB9p168UiUJxt1/uCbUVRRsyl5unXdxduP/sKeUKxaTVPc2C9vTx brRetCfct3y5vEhE1NNh0yl2tSbfqzmoAKFjBpNHHS5w3inXvJdN52zjH8coJpdT oQkVnDoFMN0SweiU18RbExw5oqFTLxaHSBZ+ILO2vC8mVv8daQ1rgpc7HOr1baKI 5iV8ETVF/n8VdLjA10PBNGn1HDJS0svaWc5Nw63hu/sAxmZxg0pL0QfYfd4OQx7H T2FY15cPnRY9E0bfFyAIJWxV1wzLS3A26Ml1d2GLBzfUr1wYf+J4yL7i7yMHcBQ/ tVnm11vDn+HoWIpEMiZ5xHmPuQ== -----END CERTIFICATE-----Generated at Tue Oct 27 09:25:03 2026 by rpki-client