$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft File: DxfzfbyUhNluGgq8eKT5ys1e2oo.mft (raw, json) Hash identifier: cD/QMZiEU+kcNo7frVPdGVD9/NM5HlPKg/h0yHsymYs= Subject key identifier: E0:DD:85:90:B9:1A:6E:54:CA:E9:4D:26:CA:5A:82:C5:19:45:CC:B0 Authority key identifier: 0F:17:F3:7D:BC:94:84:D9:6E:1A:0A:BC:78:A4:F9:CA:CD:5E:DA:8A Certificate issuer: /CN=A91B036A/serialNumber=0F17F37DBC9484D96E1A0ABC78A4F9CACD5EDA8A Certificate serial: 023F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft Manifest number: 021A Signing time: Wed 07 Oct 2026 03:53:13 +0000 Manifest this update: Wed 07 Oct 2026 03:53:12 +0000 Manifest next update: Wed 14 Oct 2026 03:53:12 +0000 Files and hashes: 1: DxfzfbyUhNluGgq8eKT5ys1e2oo.crl (hash: AhRjmd4QB8HDa/o6fpzSEUeKQiozyeZgPNqG2gvtqqU=) 2: B060FCD00E4311F1AA27A3801A3D8C67.roa (hash: /jHwnGcod93mkftOIXxHTA503k6CU3aAb5UZbSQZX9A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.crl rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 03:53:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 575 (0x23f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B036A, serialNumber=0F17F37DBC9484D96E1A0ABC78A4F9CACD5EDA8A Validity Not Before: Oct 7 03:53:12 2026 GMT Not After : Oct 14 03:53:12 2026 GMT Subject: CN=6ac5c229-67ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:87:84:df:2d:1e:95:ab:10:b6:39:2f:2d:2e: eb:56:f5:ea:d5:7b:fb:7f:e0:46:72:a1:1d:f7:2d: 53:61:7b:ea:29:c1:f2:70:90:36:1b:4d:a3:90:60: d6:a4:5f:cc:6a:58:17:01:e9:4b:9f:ef:33:0d:4f: 1d:12:ed:e5:11:49:54:a6:06:06:eb:8f:9d:d7:7b: b3:28:37:ab:01:19:54:98:09:cd:31:39:19:b3:ee: 4b:3c:76:f8:74:6d:7a:90:17:bc:22:7a:75:63:10: 46:6c:1f:7e:d8:75:21:90:68:0b:06:e5:c2:75:29: 3f:26:64:c2:02:2c:82:91:b6:f0:98:8a:00:46:95: ee:61:ac:89:8f:69:21:62:27:e0:21:81:7d:00:7c: 2b:2b:20:b7:71:09:49:df:34:c0:10:e8:be:ac:7a: 8a:c1:05:62:df:a7:74:5d:95:66:20:71:96:c3:b2: e3:e1:55:bd:50:dd:b2:18:02:63:09:a6:33:1f:44: 40:56:9f:be:90:c5:23:d9:08:84:6f:7f:ff:5e:62: f6:ae:0d:06:52:96:28:4a:97:5e:0f:89:d5:dd:5d: 7c:56:46:7f:88:2c:7d:38:04:f4:aa:ea:30:00:71: 61:36:d3:1a:1c:6b:b8:ad:0f:8f:6f:bc:d2:b0:40: 8d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:DD:85:90:B9:1A:6E:54:CA:E9:4D:26:CA:5A:82:C5:19:45:CC:B0 X509v3 Authority Key Identifier: keyid:0F:17:F3:7D:BC:94:84:D9:6E:1A:0A:BC:78:A4:F9:CA:CD:5E:DA:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:c9:2b:55:24:f8:d0:9b:14:73:38:48:f6:a0:2e:9d:af:76: e7:b6:a5:14:f7:9b:08:31:87:92:44:cc:89:da:fe:83:94:09: 5a:ff:6c:4d:d7:32:1e:5f:ff:65:77:63:ad:0f:81:3c:b1:f3: 6d:2b:72:86:99:ce:0e:4f:c6:8f:cd:d4:b0:d3:f8:d1:47:a6: 9a:d3:b3:4a:87:a3:d0:98:b6:d7:35:e7:3f:9f:a4:75:77:4d: de:9d:9d:21:c1:5c:6e:f4:1b:ac:25:1e:5c:05:17:f9:e1:9b: 6a:d8:2c:b0:cd:a1:3e:7a:b7:44:f4:4b:09:e4:cd:29:b7:5c: 47:ec:ab:74:b4:7f:1d:be:1a:d5:54:b8:8a:d8:1e:16:9f:6a: a5:b9:60:61:3b:02:45:d2:7a:1b:3d:4e:90:88:1a:03:b1:55: 9f:4d:e7:b6:e2:1d:ad:37:31:1f:cc:58:65:4f:cc:58:df:04: 8f:93:00:c9:ef:c8:ad:60:d5:8e:0e:8d:60:ec:44:a3:2d:b8: 06:8d:70:14:d7:3f:bc:4b:47:e4:7f:ef:ca:5b:0e:47:b1:8c: 23:98:b8:46:23:9f:a5:d7:a3:f2:c5:32:ad:26:65:21:f6:1b: b3:90:8b:11:dc:6f:87:07:56:b2:9c:d4:78:48:3f:81:ea:55: 80:36:3a:b5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAzNkExMTAvBgNVBAUTKDBGMTdGMzdEQkM5NDg0RDk2RTFBMEFCQzc4QTRGOUNB Q0Q1RURBOEEwHhcNMjYxMDA3MDM1MzEyWhcNMjYxMDE0MDM1MzEyWjAYMRYwFAYD VQQDEw02YWM1YzIyOS02N2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo4eE3y0elasQtjkvLS7rVvXq1Xv7f+BGcqEd9y1TYXvqKcHycJA2G02jkGDW pF/MalgXAelLn+8zDU8dEu3lEUlUpgYG64+d13uzKDerARlUmAnNMTkZs+5LPHb4 dG16kBe8Inp1YxBGbB9+2HUhkGgLBuXCdSk/JmTCAiyCkbbwmIoARpXuYayJj2kh YifgIYF9AHwrKyC3cQlJ3zTAEOi+rHqKwQVi36d0XZVmIHGWw7Lj4VW9UN2yGAJj CaYzH0RAVp++kMUj2QiEb3//XmL2rg0GUpYoSpdeD4nV3V18VkZ/iCx9OAT0quow AHFhNtMaHGu4rQ+Pb7zSsECN5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFODdhZC5 Gm5UyulNJspagsUZRcywMB8GA1UdIwQYMBaAFA8X8328lITZbhoKvHik+crNXtqK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDM2QS9CQkMyRjc3NkQx RjExMUVFODYwNTFBNjFDNEY5QUUwMi9EeGZ6ZmJ5VWhObHVHZ3E4ZUtUNXlzMWUy b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R4ZnpmYnlVaE5sdUdncThlS1Q1eXMxZTJvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDM2QS9CQkMyRjc3NkQxRjExMUVFODYwNTFBNjFDNEY5QUUwMi9EeGZ6ZmJ5VWhO bHVHZ3E4ZUtUNXlzMWUyb28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg8krVST40JsUczhI9qAuna9257alFPebCDGHkkTMidr+g5QJWv9sTdcyHl// ZXdjrQ+BPLHzbStyhpnODk/Gj83UsNP40UemmtOzSoej0Ji21zXnP5+kdXdN3p2d IcFcbvQbrCUeXAUX+eGbatgssM2hPnq3RPRLCeTNKbdcR+yrdLR/Hb4a1VS4itge Fp9qpblgYTsCRdJ6Gz1OkIgaA7FVn03ntuIdrTcxH8xYZU/MWN8Ej5MAye/IrWDV jg6NYOxEoy24Bo1wFNc/vEtH5H/vylsOR7GMI5i4RiOfpdej8sUyrSZlIfYbs5CL EdxvhwdWspzUeEg/gepVgDY6tQ== -----END CERTIFICATE-----Generated at Thu Oct 8 10:59:28 2026 by rpki-client