$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft File: c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft (raw, json) Hash identifier: 12Xmn4r/zexz/rrwjglkXi2seJ5sAe6BzhQqkLfNfdU= Subject key identifier: 91:BF:27:49:04:91:8B:F1:41:1D:10:1B:6D:4D:2A:19:B1:83:A7:E8 Authority key identifier: 73:B5:61:DF:3A:58:97:6F:7F:AD:99:7A:9B:A8:DE:5F:67:6D:CF:B2 Certificate issuer: /CN=A91B2492/serialNumber=73B561DF3A58976F7FAD997A9BA8DE5F676DCFB2 Certificate serial: 0C40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft Manifest number: 0C33 Signing time: Mon 26 Oct 2026 18:46:59 +0000 Manifest this update: Mon 26 Oct 2026 18:46:58 +0000 Manifest next update: Mon 02 Nov 2026 18:46:58 +0000 Files and hashes: 1: c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl (hash: 7fa2MclUn3vQL1JMsj7eUPgpEYZokWPhXa98ynvUOoI=) 2: C8436A008D7B11EDB7EB7F37C4F9AE02.roa (hash: oSu7opmD3HBYoBwJbIsmMaGXMM1R4NMeIhfp2irZM0Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 18:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3136 (0xc40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2492, serialNumber=73B561DF3A58976F7FAD997A9BA8DE5F676DCFB2 Validity Not Before: Oct 26 18:46:58 2026 GMT Not After : Nov 2 18:46:58 2026 GMT Subject: CN=6adfa023-e665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b6:76:0a:10:85:0a:ff:42:28:2e:11:0a:ff: fd:7e:5d:c7:a2:5b:20:22:d0:30:7e:03:8d:71:4f: 03:c0:28:f9:6f:ee:48:04:6a:02:29:04:ee:5b:d3: c6:41:71:a5:9a:89:b1:02:55:7d:26:ce:27:44:a5: 67:7f:52:c6:bd:6f:a9:20:52:be:3f:48:1c:c0:70: d3:e3:6a:6e:ed:80:17:2e:c8:cc:97:0f:f8:30:9f: 42:fd:30:d2:0f:34:95:ca:23:30:02:53:4e:62:b8: 7c:07:09:1e:74:f1:4c:ce:07:14:f4:0b:66:1e:a4: 3f:1c:48:ca:46:7d:2d:8a:c6:6c:02:b5:07:8a:8f: df:83:5c:aa:59:5f:12:43:03:55:9d:67:77:1a:ea: ff:dd:05:4c:c0:35:10:ca:b2:71:8f:83:80:9b:7c: bf:0a:dd:4e:5d:56:47:0b:5b:03:ac:6c:00:eb:8f: a0:35:66:94:4f:74:10:9f:8c:ad:5a:b8:84:31:03: 64:ae:89:21:29:99:ca:93:e8:4a:65:1c:81:9e:fa: 34:87:64:71:3d:af:08:28:51:35:28:80:72:22:ce: 0b:43:38:4f:ea:1c:92:58:6c:d5:79:fa:42:3b:9d: ba:ac:73:ec:2b:fc:08:a0:cb:2b:56:f9:39:30:19: 83:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:BF:27:49:04:91:8B:F1:41:1D:10:1B:6D:4D:2A:19:B1:83:A7:E8 X509v3 Authority Key Identifier: keyid:73:B5:61:DF:3A:58:97:6F:7F:AD:99:7A:9B:A8:DE:5F:67:6D:CF:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:1a:2a:0b:36:c4:14:bc:0a:34:56:8d:13:74:02:40:58:71: 7d:47:4d:41:6f:1e:31:69:08:6d:06:77:31:1a:88:db:8e:c9: b2:00:59:95:95:25:28:2f:7e:75:86:06:f8:24:86:06:a3:ae: ad:fb:ce:f3:64:49:e7:1e:08:2c:58:6f:1b:fc:59:79:f0:75: 91:6e:29:e2:75:f6:d3:e9:47:55:a0:72:b4:a9:db:8b:cb:f7: 17:c7:b0:7a:9b:49:99:a0:01:15:75:65:7f:09:46:65:ec:e3: f8:09:00:e2:70:36:11:52:54:5e:d8:c2:1b:4d:0f:30:38:e6: 24:38:72:3c:47:4b:6e:ef:89:39:75:79:10:96:04:65:cc:fa: 8c:67:93:97:c6:db:92:3b:80:15:1b:be:ab:ec:a1:c3:1f:a9: ba:7f:fd:dd:06:7c:1d:b4:89:9f:cc:0a:6d:a6:8c:a3:be:23: 04:e9:ff:f9:40:f3:1c:9f:9e:0e:ce:5e:17:1b:29:c1:cc:c4: 86:d6:1b:13:69:ab:36:de:6b:0f:a0:d0:35:c9:4b:c5:cd:37: 8a:c6:41:ac:e5:79:61:6c:14:56:ca:9b:d2:47:d2:21:05:52: 93:7f:f0:02:08:86:e7:f1:36:69:45:5c:43:f4:0e:1b:bf:33: 25:a8:4c:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI0OTIxMTAvBgNVBAUTKDczQjU2MURGM0E1ODk3NkY3RkFEOTk3QTlCQThERTVG Njc2RENGQjIwHhcNMjYxMDI2MTg0NjU4WhcNMjYxMTAyMTg0NjU4WjAYMRYwFAYD VQQDEw02YWRmYTAyMy1lNjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7Z2ChCFCv9CKC4RCv/9fl3HolsgItAwfgONcU8DwCj5b+5IBGoCKQTuW9PG QXGlmomxAlV9Js4nRKVnf1LGvW+pIFK+P0gcwHDT42pu7YAXLsjMlw/4MJ9C/TDS DzSVyiMwAlNOYrh8BwkedPFMzgcU9AtmHqQ/HEjKRn0tisZsArUHio/fg1yqWV8S QwNVnWd3Gur/3QVMwDUQyrJxj4OAm3y/Ct1OXVZHC1sDrGwA64+gNWaUT3QQn4yt WriEMQNkrokhKZnKk+hKZRyBnvo0h2RxPa8IKFE1KIByIs4LQzhP6hySWGzVefpC O526rHPsK/wIoMsrVvk5MBmDwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJG/J0kE kYvxQR0QG21NKhmxg6foMB8GA1UdIwQYMBaAFHO1Yd86WJdvf62Zepuo3l9nbc+y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjQ5Mi9EQUQ1MTBENDND QjUxMUVBQjgyQ0NDNkNDNEY5QUUwMi9jN1ZoM3pwWWwyOV9yWmw2bTZqZVgyZHR6 N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3VmgzenBZbDI5X3JabDZtNmplWDJkdHo3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjQ5Mi9EQUQ1MTBENDNDQjUxMUVBQjgyQ0NDNkNDNEY5QUUwMi9jN1ZoM3pwWWwy OV9yWmw2bTZqZVgyZHR6N0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgxoqCzbEFLwKNFaNE3QCQFhxfUdNQW8eMWkIbQZ3MRqI247JsgBZlZUlKC9+ dYYG+CSGBqOurfvO82RJ5x4ILFhvG/xZefB1kW4p4nX20+lHVaBytKnbi8v3F8ew eptJmaABFXVlfwlGZezj+AkA4nA2EVJUXtjCG00PMDjmJDhyPEdLbu+JOXV5EJYE Zcz6jGeTl8bbkjuAFRu+q+yhwx+pun/93QZ8HbSJn8wKbaaMo74jBOn/+UDzHJ+e Ds5eFxspwczEhtYbE2mrNt5rD6DQNclLxc03isZBrOV5YWwUVsqb0kfSIQVSk3/w AgiG5/E2aUVcQ/QOG78zJahMGw== -----END CERTIFICATE-----Generated at Wed Oct 28 16:33:36 2026 by rpki-client