$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft File: De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft (raw, json) Hash identifier: x7WPDBId2hg4c5Iod35e3Kcxdn2G0PxHBzMZGI4YuVs= Subject key identifier: 09:55:20:54:CB:9C:AB:41:E8:4A:C8:1F:6D:25:A8:8E:12:E2:56:8E Authority key identifier: 0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61 Certificate issuer: /CN=A91B1FA8/serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561 Certificate serial: 144D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft Manifest number: 1432 Signing time: Thu 22 Oct 2026 16:56:28 +0000 Manifest this update: Thu 22 Oct 2026 16:56:27 +0000 Manifest next update: Thu 29 Oct 2026 16:56:27 +0000 Files and hashes: 1: De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl (hash: tKOv5YBotopx5Xx+ilxvWPAFFhy+RZrW0/fYYElz5cU=) 2: B8B7B5BA64BE11EBA96DF40DC4F9AE02.roa (hash: BWEm8D7sFlvcEVtQhqLjMN5S3jhBuXaJAzjBNUqp7Bk=) 3: 7677A43AF8C511EBA498E771C4F9AE02.roa (hash: M2Is52Wa86uDs+DSqcpShPrDtjRDZ0zOUga6AJANsq8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 16:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5197 (0x144d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1FA8, serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561 Validity Not Before: Oct 22 16:56:27 2026 GMT Not After : Oct 29 16:56:27 2026 GMT Subject: CN=6ada403c-e13d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:03:ed:d6:79:d2:0a:a6:65:25:cf:7c:54:2d: 05:c7:60:7c:a0:fb:a6:dd:22:c4:4c:1a:82:c0:09: 0a:e0:5c:60:4f:02:b8:3b:29:b4:9d:6e:66:e3:88: 96:f9:e1:44:3e:ea:80:90:2f:72:63:17:70:eb:cd: 55:a8:57:43:6a:57:64:e5:1e:fc:c3:51:25:f9:8b: 23:cd:2f:3d:fc:71:51:98:5d:75:16:5f:63:39:72: 82:d0:e2:90:a5:c3:f6:66:16:0a:59:ee:25:7b:e1: e8:cb:12:73:48:31:ff:65:67:72:74:d7:c8:ce:3b: a1:e6:b1:98:4f:5d:07:12:b4:48:28:52:03:06:3b: dc:44:9a:44:52:04:7b:8e:b1:76:f8:1b:28:fc:e3: f9:79:c3:5b:8e:3c:f6:16:fa:a9:91:3f:bb:dc:a0: 4b:c5:f2:41:88:39:59:b9:c7:ac:7a:81:4a:09:3b: 9f:f4:b3:e1:22:75:48:85:a0:57:a7:ed:8a:25:f9: 52:19:4a:41:ac:70:a6:a4:e5:72:89:53:d4:67:8c: 18:3a:d6:d8:21:bf:d3:0f:70:42:08:4e:1a:d1:7d: d5:c9:54:cf:fd:48:b4:12:cb:bf:64:c1:77:1a:ee: 6a:d8:b3:3c:6a:db:6d:a9:85:71:5a:99:34:48:a0: ba:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:55:20:54:CB:9C:AB:41:E8:4A:C8:1F:6D:25:A8:8E:12:E2:56:8E X509v3 Authority Key Identifier: keyid:0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:3a:81:86:0f:c7:de:9e:73:52:ab:25:ea:83:23:af:37:a0: 32:07:2c:73:d6:8b:8a:c2:6b:65:14:df:a5:33:ba:33:57:83: b6:f6:5f:86:15:ce:29:6c:3f:82:b0:b1:f3:c8:ac:27:c9:80: 28:63:1d:db:42:c5:d6:38:34:17:1c:50:fc:6e:9d:4c:18:78: 45:0f:f6:c0:92:82:d7:59:6e:61:5e:f6:fa:80:89:e4:a9:81: b2:1e:1c:a3:9f:21:7e:85:c1:2e:a5:70:d7:f8:e3:ee:19:da: 5a:d4:94:25:e5:2c:28:aa:8a:16:16:ce:55:44:e5:c0:f4:73: 06:46:bb:30:97:ae:f9:66:67:e6:15:ee:bc:7d:39:a6:16:fe: ab:69:3a:b5:00:c6:9d:1f:cd:a8:2c:5e:6a:de:b7:99:4c:86: 38:22:44:a8:54:91:90:4c:44:e6:73:b7:42:ee:ac:c5:85:d7: 3d:38:58:49:f0:f3:9c:b4:c2:80:23:3e:4d:d1:20:68:6f:55: 08:14:a5:f9:3a:46:0e:0d:dd:dd:1c:07:29:c6:7c:48:93:30: 0b:2e:7c:66:ff:38:f1:b2:fe:4e:e7:d7:1a:e5:42:75:9e:27: 85:b7:2c:b2:33:eb:37:40:eb:93:5a:06:f7:86:38:ac:ab:6c: 1e:fc:06:3d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFE0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFGQTgxMTAvBgNVBAUTKDBERUVFRDEzNjIxNDNDMzYyRjI0Rjk3QzY3QzhFNEVD RTJDN0E1NjEwHhcNMjYxMDIyMTY1NjI3WhcNMjYxMDI5MTY1NjI3WjAYMRYwFAYD VQQDEw02YWRhNDAzYy1lMTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5QPt1nnSCqZlJc98VC0Fx2B8oPum3SLETBqCwAkK4FxgTwK4Oym0nW5m44iW +eFEPuqAkC9yYxdw681VqFdDaldk5R78w1El+YsjzS89/HFRmF11Fl9jOXKC0OKQ pcP2ZhYKWe4le+HoyxJzSDH/ZWdydNfIzjuh5rGYT10HErRIKFIDBjvcRJpEUgR7 jrF2+Bso/OP5ecNbjjz2FvqpkT+73KBLxfJBiDlZuceseoFKCTuf9LPhInVIhaBX p+2KJflSGUpBrHCmpOVyiVPUZ4wYOtbYIb/TD3BCCE4a0X3VyVTP/Ui0Esu/ZMF3 Gu5q2LM8atttqYVxWpk0SKC64QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAlVIFTL nKtB6ErIH20lqI4S4laOMB8GA1UdIwQYMBaAFA3u7RNiFDw2LyT5fGfI5Ozix6Vh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUZBOC9ERjQ3MDkwMkFG RDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9EZTd0RTJJVVBEWXZKUGw4WjhqazdPTEhw V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0RlN3RFMklVUERZdkpQbDhaOGprN09MSHBXRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUZBOC9ERjQ3MDkwMkFGRDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9EZTd0RTJJVVBE WXZKUGw4WjhqazdPTEhwV0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMzqBhg/H3p5zUqsl6oMjrzegMgcsc9aLisJrZRTfpTO6M1eDtvZfhhXOKWw/ grCx88isJ8mAKGMd20LF1jg0FxxQ/G6dTBh4RQ/2wJKC11luYV72+oCJ5KmBsh4c o58hfoXBLqVw1/jj7hnaWtSUJeUsKKqKFhbOVUTlwPRzBka7MJeu+WZn5hXuvH05 phb+q2k6tQDGnR/NqCxeat63mUyGOCJEqFSRkExE5nO3Qu6sxYXXPThYSfDznLTC gCM+TdEgaG9VCBSl+TpGDg3d3RwHKcZ8SJMwCy58Zv848bL+TufXGuVCdZ4nhbcs sjPrN0Drk1oG94Y4rKtsHvwGPQ== -----END CERTIFICATE-----Generated at Sat Oct 24 13:32:13 2026 by rpki-client