$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AE7C5/330749461B5011F1BD5AD0E8243D8C67/33H2KoYwGsbTrKQJgyzDqdmcmhE.mft File: 33H2KoYwGsbTrKQJgyzDqdmcmhE.mft (raw, json) Hash identifier: EcPbcb8FT4YXpU693Q4ASiBHe4FJg1yAzYjC9yUgJFw= Subject key identifier: 17:D2:8E:69:40:AD:63:4B:52:8B:CD:DD:1A:8E:96:E1:75:37:4E:47 Authority key identifier: DF:71:F6:2A:86:30:1A:C6:D3:AC:A4:09:83:2C:C3:A9:D9:9C:9A:11 Certificate issuer: /CN=A91AE7C5/serialNumber=DF71F62A86301AC6D3ACA409832CC3A9D99C9A11 Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/33H2KoYwGsbTrKQJgyzDqdmcmhE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE7C5/330749461B5011F1BD5AD0E8243D8C67/33H2KoYwGsbTrKQJgyzDqdmcmhE.mft Manifest number: 79 Signing time: Wed 21 Oct 2026 08:25:47 +0000 Manifest this update: Wed 21 Oct 2026 08:25:46 +0000 Manifest next update: Wed 28 Oct 2026 08:25:46 +0000 Files and hashes: 1: 33H2KoYwGsbTrKQJgyzDqdmcmhE.crl (hash: BEU1pO4aiAwkp22v1TGk9txU657RT96ezOs6SYseI54=) 2: 08A46B6A1B5111F18293DF0B253D8C67.roa (hash: M0me32VWIkqnuz7MBUnSl/7bq5vUN601Gcov3G32K2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE7C5/330749461B5011F1BD5AD0E8243D8C67/33H2KoYwGsbTrKQJgyzDqdmcmhE.crl rsync://rpki.apnic.net/member_repository/A91AE7C5/330749461B5011F1BD5AD0E8243D8C67/33H2KoYwGsbTrKQJgyzDqdmcmhE.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/33H2KoYwGsbTrKQJgyzDqdmcmhE.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 04:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE7C5, serialNumber=DF71F62A86301AC6D3ACA409832CC3A9D99C9A11 Validity Not Before: Oct 21 08:25:46 2026 GMT Not After : Oct 28 08:25:46 2026 GMT Subject: CN=6ad8770a-258f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:56:63:1a:d8:87:09:70:c6:75:29:d5:f5:2a: e5:b5:e9:e3:64:7b:23:56:6f:59:c7:1f:4b:c0:1e: e8:bd:df:5a:64:67:c4:38:ec:3e:d7:06:89:c3:69: 52:29:71:cd:55:02:25:cc:d4:80:8c:7f:4a:42:91: 53:5b:8e:31:b4:dc:f8:9d:03:0b:08:12:1b:c9:db: 1a:c1:61:54:01:1d:08:6a:b7:1c:ba:e8:bd:ca:b9: ed:dd:f9:4c:76:eb:8e:dd:9a:e5:0d:1e:80:6e:55: f8:b1:c6:2a:21:37:0a:cd:80:db:c3:2f:be:ef:8a: 03:56:7d:10:6c:80:e9:c1:b8:8f:60:c9:f7:7f:92: e6:ea:5a:ef:69:89:89:23:58:f9:dd:0d:3e:f2:84: 7c:db:bb:e2:c5:bc:53:4a:2c:e0:b1:63:16:25:9f: fe:80:66:b7:6f:fe:29:9c:e0:41:28:c9:6f:1a:9c: 69:a5:4a:05:a7:21:bc:36:dc:6c:52:ab:46:8a:69: b1:ee:90:1e:f6:d7:d9:9e:42:80:cf:06:ba:24:54: 00:fb:6b:28:ea:1c:78:a7:7f:50:55:57:75:51:e6: 7a:8d:e0:78:79:e3:14:38:12:12:3a:1f:0e:8f:1f: f6:52:13:94:24:9f:77:35:98:78:0c:1b:89:62:ff: 28:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:D2:8E:69:40:AD:63:4B:52:8B:CD:DD:1A:8E:96:E1:75:37:4E:47 X509v3 Authority Key Identifier: keyid:DF:71:F6:2A:86:30:1A:C6:D3:AC:A4:09:83:2C:C3:A9:D9:9C:9A:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE7C5/330749461B5011F1BD5AD0E8243D8C67/33H2KoYwGsbTrKQJgyzDqdmcmhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/33H2KoYwGsbTrKQJgyzDqdmcmhE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE7C5/330749461B5011F1BD5AD0E8243D8C67/33H2KoYwGsbTrKQJgyzDqdmcmhE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:ec:b0:1e:b3:c9:1a:4e:ce:14:b3:d1:4b:b5:0e:bd:a6:97: 30:80:85:95:52:ab:a0:00:ac:f4:70:ff:d5:df:95:64:b9:38: 0e:4d:81:8c:cc:e5:07:f1:95:f6:f5:08:e7:fe:c0:1f:1d:4b: 4c:65:2e:51:2a:b3:46:a7:1e:50:47:1c:3c:a7:5c:ca:5b:66: dd:6f:d4:ac:4a:b1:cc:1e:86:1e:65:8d:ca:c4:38:ea:10:c9: 33:30:53:d3:1d:e7:74:e4:73:03:d9:f4:2b:0b:13:22:f5:54: bb:c0:7f:97:f6:5b:20:b8:d3:b6:82:ad:a9:5a:bc:2b:78:d9: d4:9d:74:76:b7:8f:5a:b2:b3:ae:85:79:ec:97:53:fa:fe:8e: 83:c9:f8:27:55:c1:c7:fe:7d:ce:b1:a9:66:4e:e7:2d:f4:c3: e9:8b:3b:a6:14:1a:0a:eb:75:c2:5e:ed:55:04:c6:35:2a:92: b8:e6:e9:fa:25:66:fb:2d:6a:f8:09:01:0f:e1:40:d6:1b:65: 95:84:92:97:23:58:5a:0d:51:ac:bf:0f:46:fd:1d:30:f0:85: 10:c7:3e:7e:94:96:70:33:ef:82:f0:89:b9:cd:21:6e:e3:e9: b4:69:6c:ed:42:08:85:3b:70:ef:d9:b6:01:92:d7:c7:8b:ee: c8:91:92:7d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RTdDNTExMC8GA1UEBRMoREY3MUY2MkE4NjMwMUFDNkQzQUNBNDA5ODMyQ0MzQTlE OTlDOUExMTAeFw0yNjEwMjEwODI1NDZaFw0yNjEwMjgwODI1NDZaMBgxFjAUBgNV BAMTDTZhZDg3NzBhLTI1OGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8VmMa2IcJcMZ1KdX1KuW16eNkeyNWb1nHH0vAHui931pkZ8Q47D7XBonDaVIp cc1VAiXM1ICMf0pCkVNbjjG03PidAwsIEhvJ2xrBYVQBHQhqtxy66L3Kue3d+Ux2 647dmuUNHoBuVfixxiohNwrNgNvDL77vigNWfRBsgOnBuI9gyfd/kubqWu9piYkj WPndDT7yhHzbu+LFvFNKLOCxYxYln/6AZrdv/imc4EEoyW8anGmlSgWnIbw23GxS q0aKabHukB7219meQoDPBrokVAD7ayjqHHinf1BVV3VR5nqN4Hh54xQ4EhI6Hw6P H/ZSE5Qkn3c1mHgMG4li/yjBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUF9KOaUCt Y0tSi83dGo6W4XU3TkcwHwYDVR0jBBgwFoAU33H2KoYwGsbTrKQJgyzDqdmcmhEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFFN0M1LzMzMDc0OTQ2MUI1 MDExRjFCRDVBRDBFODI0M0Q4QzY3LzMzSDJLb1l3R3NiVHJLUUpneXpEcWRtY21o RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvMzNIMktvWXdHc2JUcktRSmd5ekRxZG1jbWhFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFF N0M1LzMzMDc0OTQ2MUI1MDExRjFCRDVBRDBFODI0M0Q4QzY3LzMzSDJLb1l3R3Ni VHJLUUpneXpEcWRtY21oRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBD7LAes8kaTs4Us9FLtQ69ppcwgIWVUqugAKz0cP/V35VkuTgOTYGMzOUH8ZX2 9Qjn/sAfHUtMZS5RKrNGpx5QRxw8p1zKW2bdb9SsSrHMHoYeZY3KxDjqEMkzMFPT Hed05HMD2fQrCxMi9VS7wH+X9lsguNO2gq2pWrwreNnUnXR2t49asrOuhXnsl1P6 /o6DyfgnVcHH/n3OsalmTuct9MPpizumFBoK63XCXu1VBMY1KpK45un6JWb7LWr4 CQEP4UDWG2WVhJKXI1haDVGsvw9G/R0w8IUQxz5+lJZwM++C8Im5zSFu4+m0aWzt QgiFO3Dv2bYBktfHi+7IkZJ9 -----END CERTIFICATE-----Generated at Thu Oct 22 12:26:18 2026 by rpki-client