$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/jqW5VjInwuWNQ4vBe6giUHVCRDs.mft File: jqW5VjInwuWNQ4vBe6giUHVCRDs.mft (raw, json) Hash identifier: zkcAfV9/XK8BMOeq2Wyk++NL8gyvu2dCfPTTZQEWW1M= Subject key identifier: 95:83:57:C3:E0:DE:0F:29:AB:23:14:11:29:B2:A9:BE:78:08:95:32 Authority key identifier: 8E:A5:B9:56:32:27:C2:E5:8D:43:8B:C1:7B:A8:22:50:75:42:44:3B Certificate issuer: /CN=A91B0DE0/serialNumber=8EA5B9563227C2E58D438BC17BA822507542443B Certificate serial: 0199 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jqW5VjInwuWNQ4vBe6giUHVCRDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/jqW5VjInwuWNQ4vBe6giUHVCRDs.mft Manifest number: 0190 Signing time: Mon 19 Oct 2026 05:04:17 +0000 Manifest this update: Mon 19 Oct 2026 05:04:17 +0000 Manifest next update: Mon 26 Oct 2026 05:04:17 +0000 Files and hashes: 1: jqW5VjInwuWNQ4vBe6giUHVCRDs.crl (hash: I8NhlvuOhkdG3aP69I+8/RaksolGQDbOQxCI1IhMcfE=) 2: E569D6DA6A8511EF9DB1CD4DC4F9AE02.roa (hash: NqE9i46L1vG7UOkedUiFkp1Yy9rxKpf9fmQ7FVuJqeY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/jqW5VjInwuWNQ4vBe6giUHVCRDs.crl rsync://rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/jqW5VjInwuWNQ4vBe6giUHVCRDs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jqW5VjInwuWNQ4vBe6giUHVCRDs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 05:04:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 409 (0x199) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0DE0, serialNumber=8EA5B9563227C2E58D438BC17BA822507542443B Validity Not Before: Oct 19 05:04:17 2026 GMT Not After : Oct 26 05:04:17 2026 GMT Subject: CN=6ad5a4d1-4ff5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:18:70:ab:d9:87:6e:4f:d6:eb:bf:bf:73:ac: 7c:ad:b2:a2:ea:d2:58:f6:f5:49:ad:87:b2:83:7d: d2:5f:7b:58:46:06:37:e1:91:e6:1a:f6:96:d5:ba: 05:0f:7a:84:e6:fb:d9:21:77:83:14:81:07:66:7e: 17:a9:ac:42:bb:a7:08:64:75:fe:04:f7:d8:4a:b2: 4a:e2:52:16:63:48:7d:bc:20:71:bd:d8:3b:5f:d9: 1b:76:cd:35:0c:68:39:8f:16:67:d3:48:0d:52:94: b8:b6:48:fb:67:ec:bd:ad:f2:21:89:ef:c6:4f:1a: c0:7c:b3:a3:06:aa:71:3d:dd:5a:13:16:89:75:84: 6d:9c:df:fd:cb:ed:fd:c6:bc:1f:15:ce:57:5a:d8: 0c:f7:5f:2a:85:f3:71:2c:34:30:a2:9f:6c:2e:c6: c9:27:61:19:96:f4:81:99:33:8c:4c:5a:9e:f1:ee: a3:f0:73:2c:a8:16:21:ba:cb:83:c1:51:23:be:d3: 51:50:6f:17:ef:3b:72:71:59:d9:5e:60:c4:c1:94: da:4e:ea:9e:c1:e6:c8:e2:3e:22:78:4c:50:a8:af: d7:ee:4f:7e:38:ca:24:b0:cb:bf:84:c7:03:91:db: 7f:f9:dd:1c:3a:a5:33:34:45:63:a2:d8:56:c2:4d: 89:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:83:57:C3:E0:DE:0F:29:AB:23:14:11:29:B2:A9:BE:78:08:95:32 X509v3 Authority Key Identifier: keyid:8E:A5:B9:56:32:27:C2:E5:8D:43:8B:C1:7B:A8:22:50:75:42:44:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/jqW5VjInwuWNQ4vBe6giUHVCRDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jqW5VjInwuWNQ4vBe6giUHVCRDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/jqW5VjInwuWNQ4vBe6giUHVCRDs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:e5:9b:c6:50:6b:b0:0f:47:34:e6:0b:39:e1:cc:ed:d7:77: 37:60:04:bf:76:15:b9:30:52:cb:1c:ab:96:7b:9a:ae:39:de: b5:1f:69:7c:07:a5:9b:35:81:de:f2:bc:1d:23:2c:dc:d3:1c: 82:01:45:f1:a8:65:96:d2:74:b5:91:d1:11:14:4a:de:56:34: d3:25:ec:0e:c1:65:f5:fa:b0:cd:1d:e6:3a:70:8a:1f:17:80: b4:7e:c8:b7:b9:d5:7e:ad:2e:2c:47:4a:98:56:af:b1:22:fd: c2:d7:0b:e4:ba:aa:e5:bd:b1:c5:2b:87:74:c1:80:3f:6f:8f: 3a:a4:ce:67:ee:26:ce:45:ec:41:54:f5:06:2e:58:2e:c9:9e: 59:be:05:df:95:fa:2f:d5:fc:f0:b1:f3:dc:8d:5c:50:f9:13: c6:d1:4e:c4:99:7a:1c:b8:59:40:a2:06:4c:ea:49:ac:7f:4c: 84:65:82:8f:35:5c:5f:87:06:e8:58:96:95:30:7c:c1:dd:39: cf:c9:50:4d:3d:29:e8:22:69:7a:99:d8:de:d8:af:10:c3:b5: e1:b2:5a:bd:2e:c3:84:57:46:c3:8d:32:d1:40:38:a7:96:15: 09:07:aa:e2:c6:fb:96:f3:19:81:7a:2f:ad:fb:22:30:4f:74: 35:1b:4d:64 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBERTAxMTAvBgNVBAUTKDhFQTVCOTU2MzIyN0MyRTU4RDQzOEJDMTdCQTgyMjUw NzU0MjQ0M0IwHhcNMjYxMDE5MDUwNDE3WhcNMjYxMDI2MDUwNDE3WjAYMRYwFAYD VQQDEw02YWQ1YTRkMS00ZmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxxhwq9mHbk/W67+/c6x8rbKi6tJY9vVJrYeyg33SX3tYRgY34ZHmGvaW1boF D3qE5vvZIXeDFIEHZn4XqaxCu6cIZHX+BPfYSrJK4lIWY0h9vCBxvdg7X9kbds01 DGg5jxZn00gNUpS4tkj7Z+y9rfIhie/GTxrAfLOjBqpxPd1aExaJdYRtnN/9y+39 xrwfFc5XWtgM918qhfNxLDQwop9sLsbJJ2EZlvSBmTOMTFqe8e6j8HMsqBYhusuD wVEjvtNRUG8X7ztycVnZXmDEwZTaTuqewebI4j4ieExQqK/X7k9+OMoksMu/hMcD kdt/+d0cOqUzNEVjothWwk2JwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJWDV8Pg 3g8pqyMUESmyqb54CJUyMB8GA1UdIwQYMBaAFI6luVYyJ8LljUOLwXuoIlB1QkQ7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMERFMC83MDQwQThFODZB ODUxMUVGQjE1NjgxNDdDNEY5QUUwMi9qcVc1VmpJbnd1V05RNHZCZTZnaVVIVkNS RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2pxVzVWaklud3VXTlE0dkJlNmdpVUhWQ1JEcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MERFMC83MDQwQThFODZBODUxMUVGQjE1NjgxNDdDNEY5QUUwMi9qcVc1VmpJbnd1 V05RNHZCZTZnaVVIVkNSRHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFOWbxlBrsA9HNOYLOeHM7dd3N2AEv3YVuTBSyxyrlnuarjnetR9pfAelmzWB 3vK8HSMs3NMcggFF8ahlltJ0tZHRERRK3lY00yXsDsFl9fqwzR3mOnCKHxeAtH7I t7nVfq0uLEdKmFavsSL9wtcL5Lqq5b2xxSuHdMGAP2+POqTOZ+4mzkXsQVT1Bi5Y LsmeWb4F35X6L9X88LHz3I1cUPkTxtFOxJl6HLhZQKIGTOpJrH9MhGWCjzVcX4cG 6FiWlTB8wd05z8lQTT0p6CJpepnY3tivEMO14bJavS7DhFdGw40y0UA4p5YVCQeq 4sb7lvMZgXovrfsiME90NRtNZA== -----END CERTIFICATE-----Generated at Tue Oct 20 22:17:56 2026 by rpki-client