$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft File: dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft (raw, json) Hash identifier: Ih15qXbQ7y8/ha6kvnjKvhNTRMpmnleVWzkUVD51s/Y= Subject key identifier: F6:C5:79:76:45:C7:5A:93:87:39:E4:72:50:4A:FD:A2:8A:EF:B0:AF Authority key identifier: 76:4B:B8:47:8B:FF:8C:C8:BF:F1:4E:8F:B6:AA:DC:28:ED:5E:48:64 Certificate issuer: /CN=A91B19F8/serialNumber=764BB8478BFF8CC8BFF14E8FB6AADC28ED5E4864 Certificate serial: 02B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dku4R4v_jMi_8U6PtqrcKO1eSGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft Manifest number: 02AF Signing time: Tue 03 Nov 2026 02:08:27 +0000 Manifest this update: Tue 03 Nov 2026 02:08:26 +0000 Manifest next update: Tue 10 Nov 2026 02:08:26 +0000 Files and hashes: 1: dku4R4v_jMi_8U6PtqrcKO1eSGQ.crl (hash: b66bbqhn8kkKzqGN/hEUoTPZYimtxFO2QTxPgOL1n24=) 2: 5E5DF206BCA411EDBD39730EC4F9AE02.roa (hash: 0Ijz+UY/qG59jnxM6F9e8jT0AK5gXL4f9XftWto6NZg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.crl rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dku4R4v_jMi_8U6PtqrcKO1eSGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 02:08:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 694 (0x2b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B19F8, serialNumber=764BB8478BFF8CC8BFF14E8FB6AADC28ED5E4864 Validity Not Before: Nov 3 02:08:26 2026 GMT Not After : Nov 10 02:08:26 2026 GMT Subject: CN=6ae9421b-135d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:d6:e3:06:47:91:d3:90:46:14:bd:83:1c:54: a9:da:a0:79:d7:66:9d:d3:d4:94:40:c8:b1:09:24: d9:95:23:4c:25:5d:0a:88:fd:db:bf:11:6a:25:cd: 0c:8c:c3:00:fa:e2:33:e1:23:45:b6:32:90:ba:b5: 0d:b5:48:90:af:60:03:0a:76:4a:05:1b:df:4b:a8: 6d:a0:1f:9c:a3:b0:73:01:ad:d2:68:cc:e6:6e:6f: 50:31:cd:c7:82:04:15:61:e2:f6:d7:a4:ce:76:3b: 95:c6:0b:eb:74:36:2f:51:31:b1:6e:c1:ee:61:f3: 00:c4:50:9e:13:a2:1a:15:bd:cc:82:6b:8d:6f:9d: 78:8c:a4:51:15:28:56:b3:64:de:56:fc:4a:f5:67: b7:f1:bc:16:01:38:8d:f2:3a:0f:dd:6a:47:53:70: 38:00:43:36:59:5c:5e:53:27:f8:60:79:3b:92:39: b0:ed:b5:ad:3e:ae:6b:5c:c1:a3:5b:a5:5f:d8:06: 2b:a1:56:c3:dd:8e:b8:c0:f4:3f:08:fa:e8:6b:8f: 12:b0:36:4e:36:29:29:72:aa:eb:1a:eb:29:f1:17: c0:f5:a0:f7:08:76:c7:95:88:b1:29:ad:19:95:4e: 53:ef:b3:fa:90:66:f3:6e:3b:8b:dd:a2:89:84:53: 90:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:C5:79:76:45:C7:5A:93:87:39:E4:72:50:4A:FD:A2:8A:EF:B0:AF X509v3 Authority Key Identifier: keyid:76:4B:B8:47:8B:FF:8C:C8:BF:F1:4E:8F:B6:AA:DC:28:ED:5E:48:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dku4R4v_jMi_8U6PtqrcKO1eSGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:7d:54:63:70:2f:80:64:05:8b:d5:fb:f7:ec:df:c0:f8:31: f8:28:e2:83:9f:c8:ee:49:77:94:9c:e7:45:eb:9e:ac:fd:08: 2d:88:bd:8c:77:da:c2:66:d0:a4:4b:f6:37:f3:45:37:0f:26: b4:09:5d:3b:93:78:a3:d7:46:47:dc:f6:f2:0f:6b:eb:83:0a: f4:41:b4:af:5c:9b:b7:88:ad:78:31:dc:b4:8d:20:14:c9:c0: 16:c0:68:0b:a4:9d:7d:6b:78:cf:db:46:0d:35:94:3e:9b:4d: d9:50:b2:d6:ea:14:5d:e5:8f:c1:2e:12:dc:05:e8:9d:3b:3a: 03:d1:7e:62:3d:6b:26:51:73:ab:76:3a:cf:b7:a6:5a:d1:e5: d9:43:ae:37:e3:8b:4e:3e:46:09:00:b4:6f:a6:18:17:ff:fe: 4b:b1:01:60:15:5f:b4:fa:05:a4:4f:95:7d:59:4b:ba:65:01: d0:99:e3:58:85:f8:9f:d1:99:c5:b9:ce:81:f1:04:83:57:6d: 9f:bc:82:07:7f:57:d0:0b:20:e7:f7:d9:7f:0f:9f:4b:a8:27: 85:49:0b:6c:e2:75:fb:44:1b:62:2d:37:1d:21:7b:cf:68:96: e4:72:41:c6:b7:c2:96:ee:8c:ac:a6:a6:c0:da:bf:86:6f:b0: aa:d4:70:1f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE5RjgxMTAvBgNVBAUTKDc2NEJCODQ3OEJGRjhDQzhCRkYxNEU4RkI2QUFEQzI4 RUQ1RTQ4NjQwHhcNMjYxMTAzMDIwODI2WhcNMjYxMTEwMDIwODI2WjAYMRYwFAYD VQQDEw02YWU5NDIxYi0xMzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8tbjBkeR05BGFL2DHFSp2qB512ad09SUQMixCSTZlSNMJV0KiP3bvxFqJc0M jMMA+uIz4SNFtjKQurUNtUiQr2ADCnZKBRvfS6htoB+co7BzAa3SaMzmbm9QMc3H ggQVYeL216TOdjuVxgvrdDYvUTGxbsHuYfMAxFCeE6IaFb3MgmuNb514jKRRFShW s2TeVvxK9We38bwWATiN8joP3WpHU3A4AEM2WVxeUyf4YHk7kjmw7bWtPq5rXMGj W6Vf2AYroVbD3Y64wPQ/CProa48SsDZONikpcqrrGusp8RfA9aD3CHbHlYixKa0Z lU5T77P6kGbzbjuL3aKJhFOQAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPbFeXZF x1qThznkclBK/aKK77CvMB8GA1UdIwQYMBaAFHZLuEeL/4zIv/FOj7aq3CjtXkhk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTlGOC9DQUU2QjRDRUJD QTExMUVEQTM3MDc4MERDNEY5QUUwMi9ka3U0UjR2X2pNaV84VTZQdHFyY0tPMWVT R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RrdTRSNHZfak1pXzhVNlB0cXJjS08xZVNHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTlGOC9DQUU2QjRDRUJDQTExMUVEQTM3MDc4MERDNEY5QUUwMi9ka3U0UjR2X2pN aV84VTZQdHFyY0tPMWVTR1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAb31UY3AvgGQFi9X79+zfwPgx+Cjig5/I7kl3lJznReuerP0ILYi9jHfawmbQ pEv2N/NFNw8mtAldO5N4o9dGR9z28g9r64MK9EG0r1ybt4iteDHctI0gFMnAFsBo C6SdfWt4z9tGDTWUPptN2VCy1uoUXeWPwS4S3AXonTs6A9F+Yj1rJlFzq3Y6z7em WtHl2UOuN+OLTj5GCQC0b6YYF//+S7EBYBVftPoFpE+VfVlLumUB0JnjWIX4n9GZ xbnOgfEEg1dtn7yCB39X0Asg5/fZfw+fS6gnhUkLbOJ1+0QbYi03HSF7z2iW5HJB xrfClu6MrKamwNq/hm+wqtRwHw== -----END CERTIFICATE-----Generated at Tue Nov 3 07:42:21 2026 by rpki-client