$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft File: _JvUY9Aun9Lfw8Oa5M1asyJljCo.mft (raw, json) Hash identifier: /VRjC84tknJo8cdeIOdbI3yvETx3xs8To+12wtPab5s= Subject key identifier: CA:18:6C:ED:EA:E4:67:F7:48:ED:AB:B8:AB:2C:5E:5E:E7:2B:F5:7F Authority key identifier: FC:9B:D4:63:D0:2E:9F:D2:DF:C3:C3:9A:E4:CD:5A:B3:22:65:8C:2A Certificate issuer: /CN=A91AB6EB/serialNumber=FC9BD463D02E9FD2DFC3C39AE4CD5AB322658C2A Certificate serial: 0BEA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft Manifest number: 0B29 Signing time: Sat 31 Oct 2026 19:51:53 +0000 Manifest this update: Sat 31 Oct 2026 19:51:52 +0000 Manifest next update: Sat 07 Nov 2026 19:51:52 +0000 Files and hashes: 1: _JvUY9Aun9Lfw8Oa5M1asyJljCo.crl (hash: Ph0tjtjfmF8oC5SD2lUo+aZCybToqa1IqNQf8+kzAdw=) 2: 23A38F44D74C11EF9514995EC4F9AE02.roa (hash: YlPGKsDv7idOkXKbw0yX7xAS3MzGrLN5MJqNWuwPTSk=) 3: 22E7F194D74C11EF9514995EC4F9AE02.roa (hash: KEYXaiiBWJFHMcfHnLqrqVdSkVFoqO7wRbUVLg149Lc=) 4: 1517BF2ED77711EF8E6D7517C4F9AE02.roa (hash: Ux1l+IgfbwyG+tZBBceLnM6t2MUyOqaW+9GorRGnVbc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.crl rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Nov 2026 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3050 (0xbea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB6EB, serialNumber=FC9BD463D02E9FD2DFC3C39AE4CD5AB322658C2A Validity Not Before: Oct 31 19:51:52 2026 GMT Not After : Nov 7 19:51:52 2026 GMT Subject: CN=6ae646d9-4f5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5c:0b:5f:4b:46:67:ff:da:68:b7:a3:3a:58: 5a:63:36:28:3e:d0:9f:f8:dd:f9:33:03:ed:8d:5e: 30:b0:a6:4e:d7:5c:59:96:a8:82:dd:c4:da:70:a5: fa:57:de:b6:b8:fb:95:7c:6e:2e:85:55:77:e5:96: bc:c7:d6:8a:61:be:93:7a:f5:e9:66:67:2d:e5:b9: 61:b2:e1:2e:a2:7e:ac:4b:ea:d9:2a:07:d0:5f:3e: e0:50:12:60:f1:2a:dd:a8:eb:5e:0c:97:49:53:14: 8b:9f:ef:81:1f:af:25:d1:5b:da:ea:75:b6:cb:0b: a4:ee:4d:3c:fc:a5:7c:f6:aa:e7:c7:01:91:2e:33: 2f:68:9e:bf:31:5d:d8:42:3a:12:c4:3f:05:5f:b0: 42:78:d7:e8:a4:60:4e:25:d3:1f:e7:3e:65:42:c8: 03:6d:02:86:66:53:8e:13:42:60:93:2f:03:ce:38: be:6b:d8:2c:d9:a9:f1:2c:dd:17:b9:b2:52:28:9e: d9:99:34:0e:6d:32:eb:32:a1:cc:1a:99:41:c1:a7: 92:4f:0d:ab:31:9b:df:0a:b7:5c:05:e0:30:a6:2a: 0e:15:de:ed:79:ff:08:53:44:71:f8:cc:de:c8:1c: 4d:13:6c:7d:6d:8f:38:67:fd:30:cc:6c:fc:ea:00: 27:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:18:6C:ED:EA:E4:67:F7:48:ED:AB:B8:AB:2C:5E:5E:E7:2B:F5:7F X509v3 Authority Key Identifier: keyid:FC:9B:D4:63:D0:2E:9F:D2:DF:C3:C3:9A:E4:CD:5A:B3:22:65:8C:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:91:d4:31:43:05:42:5d:cc:f7:3c:9c:b1:d7:04:59:3d:93: dc:0d:af:76:d4:d7:82:f9:d5:c4:32:c5:dc:bd:c7:86:a5:e0: f2:f3:a1:16:0f:69:73:43:2f:81:4b:58:6e:10:00:5a:76:d6: 7f:8a:6e:ca:0a:ee:14:a2:8f:66:10:3d:2c:25:6c:0a:cb:ff: 37:e3:01:52:5c:97:c1:41:cf:12:d1:d2:3b:18:54:b0:f9:1d: c4:9f:7e:ce:c3:3f:74:4f:ec:15:ec:69:cd:8c:2a:07:d7:96: b3:22:15:5b:70:6b:61:d1:12:5c:86:30:0a:dd:dd:86:30:5c: a0:3a:8e:0c:e1:b9:41:00:e7:da:f3:80:cd:d7:38:09:16:62: 97:43:4e:90:40:30:de:18:ef:c0:d9:b1:13:e4:40:cd:35:4d: 5c:7b:d0:d9:5a:93:46:2d:6f:08:66:f5:87:30:1e:7f:e8:2f: 33:be:e4:23:41:0f:7f:2f:72:cd:fd:7d:72:98:95:61:b5:f1: d7:39:45:75:e8:95:d2:f6:ff:ad:9b:b2:60:77:de:ee:93:0f: d4:18:d2:35:02:03:c1:7f:df:91:4c:83:6f:87:96:7d:f3:97: e0:b3:c8:02:fb:1a:9d:5c:30:0d:e1:52:f1:78:ba:84:d3:02: b6:56:82:5d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC+owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI2RUIxMTAvBgNVBAUTKEZDOUJENDYzRDAyRTlGRDJERkMzQzM5QUU0Q0Q1QUIz MjI2NThDMkEwHhcNMjYxMDMxMTk1MTUyWhcNMjYxMTA3MTk1MTUyWjAYMRYwFAYD VQQDEw02YWU2NDZkOS00ZjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvlwLX0tGZ//aaLejOlhaYzYoPtCf+N35MwPtjV4wsKZO11xZlqiC3cTacKX6 V962uPuVfG4uhVV35Za8x9aKYb6TevXpZmct5blhsuEuon6sS+rZKgfQXz7gUBJg 8SrdqOteDJdJUxSLn++BH68l0Vva6nW2ywuk7k08/KV89qrnxwGRLjMvaJ6/MV3Y QjoSxD8FX7BCeNfopGBOJdMf5z5lQsgDbQKGZlOOE0Jgky8Dzji+a9gs2anxLN0X ubJSKJ7ZmTQObTLrMqHMGplBwaeSTw2rMZvfCrdcBeAwpioOFd7tef8IU0Rx+Mze yBxNE2x9bY84Z/0wzGz86gAn6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMoYbO3q 5Gf3SO2ruKssXl7nK/V/MB8GA1UdIwQYMBaAFPyb1GPQLp/S38PDmuTNWrMiZYwq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjZFQi8wMTM5MUIwMDhF MkIxMUVBQkY4NkRBNENDNEY5QUUwMi9fSnZVWTlBdW45TGZ3OE9hNU0xYXN5Smxq Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19KdlVZOUF1bjlMZnc4T2E1TTFhc3lKbGpDby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjZFQi8wMTM5MUIwMDhFMkIxMUVBQkY4NkRBNENDNEY5QUUwMi9fSnZVWTlBdW45 TGZ3OE9hNU0xYXN5SmxqQ28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeZHUMUMFQl3M9zycsdcEWT2T3A2vdtTXgvnVxDLF3L3HhqXg8vOhFg9pc0Mv gUtYbhAAWnbWf4puygruFKKPZhA9LCVsCsv/N+MBUlyXwUHPEtHSOxhUsPkdxJ9+ zsM/dE/sFexpzYwqB9eWsyIVW3BrYdESXIYwCt3dhjBcoDqODOG5QQDn2vOAzdc4 CRZil0NOkEAw3hjvwNmxE+RAzTVNXHvQ2VqTRi1vCGb1hzAef+gvM77kI0EPfy9y zf19cpiVYbXx1zlFdeiV0vb/rZuyYHfe7pMP1BjSNQIDwX/fkUyDb4eWffOX4LPI AvsanVwwDeFS8Xi6hNMCtlaCXQ== -----END CERTIFICATE-----Generated at Sun Nov 1 08:35:56 2026 by rpki-client