$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft File: U4XhOhtYRftEzutr7Y3rTomvOCk.mft (raw, json) Hash identifier: VLags0yBixo7CLaduzmOGZMadFEYMHAqrvRgBvgMIrg= Subject key identifier: 5C:31:4D:48:B0:27:7D:40:C6:0C:A1:BB:D0:C2:31:A6:04:B7:B6:17 Authority key identifier: 53:85:E1:3A:1B:58:45:FB:44:CE:EB:6B:ED:8D:EB:4E:89:AF:38:29 Certificate issuer: /CN=A91ACFEB/serialNumber=5385E13A1B5845FB44CEEB6BED8DEB4E89AF3829 Certificate serial: 0A8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft Manifest number: 0A79 Signing time: Mon 26 Oct 2026 19:36:42 +0000 Manifest this update: Mon 26 Oct 2026 19:36:42 +0000 Manifest next update: Mon 02 Nov 2026 19:36:42 +0000 Files and hashes: 1: U4XhOhtYRftEzutr7Y3rTomvOCk.crl (hash: U+sLls4GUEsJI0pem+SSxht2LYPgWV+vAY/UDXBV0pA=) 2: 3636BCD2937011EA8A795583C4F9AE02.roa (hash: pxNuh5srbtMxxnoUXoogGH47f0VhHR+2FLeTjpcucQE=) 3: 35831FCE937011EA8A795583C4F9AE02.roa (hash: KU74ZbX8QctQD6oWhNP2ZPDiRV7nlnVfxskUU58FW+U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.crl rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 19:36:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2703 (0xa8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACFEB, serialNumber=5385E13A1B5845FB44CEEB6BED8DEB4E89AF3829 Validity Not Before: Oct 26 19:36:42 2026 GMT Not After : Nov 2 19:36:42 2026 GMT Subject: CN=6adfabca-fba1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:74:ff:a1:52:c1:14:cb:eb:4c:9c:bd:e2:16: 28:9e:a1:56:f1:32:1f:49:10:63:a2:3f:74:6c:9a: f9:38:40:3c:eb:69:78:9c:6a:8c:69:94:ab:00:f4: 16:15:c3:b0:b5:54:53:c7:b0:de:61:44:28:48:73: f9:1c:d1:a0:eb:09:4e:f7:4c:52:ec:66:73:de:90: 28:b0:49:d8:7f:bc:0c:3d:f9:4a:a7:b8:6c:a8:8d: c1:7b:23:65:35:0b:e6:41:d9:aa:18:8d:71:7d:97: ff:95:21:e7:a1:eb:9f:ab:8e:39:0d:ab:21:f0:cd: dc:a0:2b:22:2d:87:1f:31:97:dc:18:c4:04:13:1f: ab:3f:84:0f:13:d3:c8:c1:f5:dd:3a:7b:14:76:7f: 44:21:12:bd:62:d5:84:49:91:ae:00:92:e1:84:1b: be:8b:5a:86:ee:32:a3:5e:97:de:80:5f:43:74:de: 43:fd:5c:b3:68:e8:e2:de:49:e0:c0:43:25:90:ba: f0:da:86:74:63:c6:2b:71:30:b8:02:ed:88:f2:c0: 6a:cc:37:a1:a3:8f:9b:93:ac:fa:db:37:5f:d8:c1: b9:2f:bb:e5:eb:22:3a:8d:23:c3:39:a3:65:94:c2: 9b:da:ae:bc:96:1e:af:77:a3:f3:8e:86:25:7b:74: ae:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:31:4D:48:B0:27:7D:40:C6:0C:A1:BB:D0:C2:31:A6:04:B7:B6:17 X509v3 Authority Key Identifier: keyid:53:85:E1:3A:1B:58:45:FB:44:CE:EB:6B:ED:8D:EB:4E:89:AF:38:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:7a:87:52:03:e9:1c:71:89:aa:0e:e1:79:3b:57:1b:5b:3e: fb:da:c2:9d:2f:6b:fc:43:84:99:7d:86:e9:a7:b5:d2:8d:47: fe:05:e4:84:99:f7:f2:5a:fe:3f:57:dc:28:a2:cd:2f:4d:a8: d0:c4:78:7d:67:f7:dd:ec:ca:78:61:be:d7:1d:75:97:08:85: dd:6c:2a:2f:98:27:01:b1:6f:5e:95:12:be:1d:1f:e2:ee:e7: 80:d9:e7:04:e3:8e:73:cd:ea:0e:f2:a5:45:93:7b:00:50:38: 81:0f:71:9a:18:8d:13:ad:a7:91:27:bb:3a:99:d1:76:b2:aa: 82:26:ed:ff:46:9d:31:36:2b:6e:63:35:aa:b3:17:76:89:eb: 65:f1:62:ef:59:a6:7e:27:c6:f4:7d:be:9a:0c:d1:fd:6a:75: d1:41:72:cd:f1:29:5b:38:17:d0:1d:97:66:b3:4c:9c:db:22: ef:ae:fd:fc:84:ee:82:d4:8a:5f:a8:a2:e5:4e:9b:25:19:b4: 05:2c:16:89:63:0b:d0:77:63:9c:86:f6:09:e2:6d:7d:2f:9f: e1:b8:3a:3c:ac:e3:88:1d:61:22:74:46:16:ba:eb:fd:87:8c: 2b:98:e2:08:d0:48:0b:18:57:31:f0:c4:c3:b8:6b:51:f8:41: 1f:e0:1b:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNGRUIxMTAvBgNVBAUTKDUzODVFMTNBMUI1ODQ1RkI0NENFRUI2QkVEOERFQjRF ODlBRjM4MjkwHhcNMjYxMDI2MTkzNjQyWhcNMjYxMTAyMTkzNjQyWjAYMRYwFAYD VQQDEw02YWRmYWJjYS1mYmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3nT/oVLBFMvrTJy94hYonqFW8TIfSRBjoj90bJr5OEA862l4nGqMaZSrAPQW FcOwtVRTx7DeYUQoSHP5HNGg6wlO90xS7GZz3pAosEnYf7wMPflKp7hsqI3BeyNl NQvmQdmqGI1xfZf/lSHnoeufq445Dash8M3coCsiLYcfMZfcGMQEEx+rP4QPE9PI wfXdOnsUdn9EIRK9YtWESZGuAJLhhBu+i1qG7jKjXpfegF9DdN5D/VyzaOji3kng wEMlkLrw2oZ0Y8YrcTC4Au2I8sBqzDeho4+bk6z62zdf2MG5L7vl6yI6jSPDOaNl lMKb2q68lh6vd6PzjoYle3SuQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFwxTUiw J31Axgyhu9DCMaYEt7YXMB8GA1UdIwQYMBaAFFOF4TobWEX7RM7ra+2N606Jrzgp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0ZFQi9DQjJDMzNFNjkz NkUxMUVBQTVFNTZCN0VDNEY5QUUwMi9VNFhoT2h0WVJmdEV6dXRyN1kzclRvbXZP Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U0WGhPaHRZUmZ0RXp1dHI3WTNyVG9tdk9Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0ZFQi9DQjJDMzNFNjkzNkUxMUVBQTVFNTZCN0VDNEY5QUUwMi9VNFhoT2h0WVJm dEV6dXRyN1kzclRvbXZPQ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUHqHUgPpHHGJqg7heTtXG1s++9rCnS9r/EOEmX2G6ae10o1H/gXkhJn38lr+ P1fcKKLNL02o0MR4fWf33ezKeGG+1x11lwiF3WwqL5gnAbFvXpUSvh0f4u7ngNnn BOOOc83qDvKlRZN7AFA4gQ9xmhiNE62nkSe7OpnRdrKqgibt/0adMTYrbmM1qrMX donrZfFi71mmfifG9H2+mgzR/Wp10UFyzfEpWzgX0B2XZrNMnNsi7679/ITugtSK X6ii5U6bJRm0BSwWiWML0HdjnIb2CeJtfS+f4bg6PKzjiB1hInRGFrrr/YeMK5ji CNBICxhXMfDEw7hrUfhBH+AbJQ== -----END CERTIFICATE-----Generated at Tue Oct 27 12:52:35 2026 by rpki-client