$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft File: 23LIuvHa9pOYGFLuAyIwMF7ICRA.mft (raw, json) Hash identifier: iV2Ccgj+5wXn8HXI8ylqYHYOVvac9lBest8bjeLjwUI= Subject key identifier: 80:31:3F:47:64:BF:FD:A1:3C:6E:C0:26:EA:CA:BE:F7:E8:11:65:D5 Authority key identifier: DB:72:C8:BA:F1:DA:F6:93:98:18:52:EE:03:22:30:30:5E:C8:09:10 Certificate issuer: /CN=A91B289C/serialNumber=DB72C8BAF1DAF693981852EE032230305EC80910 Certificate serial: 09A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft Manifest number: 099D Signing time: Tue 20 Oct 2026 20:05:27 +0000 Manifest this update: Tue 20 Oct 2026 20:05:26 +0000 Manifest next update: Tue 27 Oct 2026 20:05:26 +0000 Files and hashes: 1: 23LIuvHa9pOYGFLuAyIwMF7ICRA.crl (hash: bY14e2I6MgHMAgu4Tasgm+xQdLzHPNZB87xgDbvwr2w=) 2: E6F3687CBCE711EAACD6466CC4F9AE02.roa (hash: /BHXZw097Vnx6svspg9H0QFXzJ+pPqoQmyYjSxe8qDA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.crl rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 20:05:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2471 (0x9a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B289C, serialNumber=DB72C8BAF1DAF693981852EE032230305EC80910 Validity Not Before: Oct 20 20:05:26 2026 GMT Not After : Oct 27 20:05:26 2026 GMT Subject: CN=6ad7c987-624e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:70:d9:2a:2e:ae:4b:0b:68:e7:39:ab:2c:14: 2a:fc:de:0e:92:a9:01:ae:74:f5:8f:17:70:bd:a1: 73:24:4c:02:6d:18:37:ef:f1:80:ed:ba:4e:49:d5: 08:24:91:56:f8:fc:5d:ff:c8:b5:d9:82:a8:3b:9e: e0:af:c5:b9:1d:e3:30:9a:1b:b2:a4:27:5a:24:20: 85:92:e2:93:72:bc:41:82:70:8d:d9:53:dc:e0:2e: c0:f0:60:ec:64:7b:97:d2:ea:4e:e3:bd:26:5c:4b: 3e:00:bb:33:4c:c2:db:61:b4:8c:a8:00:44:5e:4d: 1d:4a:be:a8:e6:af:b5:8d:c2:a5:9b:b4:f4:74:df: 2f:d5:94:49:b3:29:d9:5f:3a:92:10:86:ed:22:32: ce:08:2c:3b:09:c0:5b:03:b7:71:93:0a:99:d9:74: b1:8c:b3:41:1c:0c:22:e0:01:aa:48:bd:c9:ec:f9: 7c:37:7e:26:15:3f:b0:45:f9:9b:f0:d5:02:17:2d: 92:38:5c:ba:73:ce:68:dc:d6:99:d0:dc:b3:9c:72: b6:e6:3f:28:4e:91:1c:ca:61:b0:88:2f:f0:00:85: 64:ad:ab:9a:74:60:4c:c4:f0:57:80:0a:41:92:3a: 6f:38:79:06:f0:f4:99:76:af:6b:cd:bc:4c:0b:a5: 98:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:31:3F:47:64:BF:FD:A1:3C:6E:C0:26:EA:CA:BE:F7:E8:11:65:D5 X509v3 Authority Key Identifier: keyid:DB:72:C8:BA:F1:DA:F6:93:98:18:52:EE:03:22:30:30:5E:C8:09:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:2b:06:60:15:a4:88:ad:5b:df:d6:2e:ca:71:ca:0b:f8:b4: 5c:c3:4b:06:e1:38:91:ad:02:67:51:40:c8:c5:1d:5a:cc:9c: 04:4d:bd:f2:b4:9b:01:23:8e:9d:87:d7:34:55:e7:21:7c:b5: f1:1e:41:c8:65:c7:a7:1e:9c:7e:d7:1f:35:0f:d7:7b:cf:5d: dd:66:27:37:ee:5f:9b:ed:e1:93:21:cf:32:75:4b:5f:25:62: 1f:f6:56:d4:84:29:d4:39:d0:70:c0:e4:1b:81:ab:6f:53:5b: 3b:f1:33:74:eb:dc:33:00:5b:c6:14:f4:2a:a0:9d:fe:28:80: 64:b0:65:8b:23:6a:55:fc:41:97:49:d8:e3:ae:e6:67:b4:c9: ad:c4:da:84:53:d7:50:99:aa:2e:72:d6:80:4a:b3:e6:4c:d1: 3c:79:dd:11:67:93:4d:c2:3f:55:17:6b:04:d3:0c:3f:a2:ab: fe:38:5a:c8:90:bc:7f:2c:ff:0d:43:79:88:dc:bd:ba:d1:ca: 91:8b:4e:77:62:42:06:e8:fa:31:1f:ab:22:8f:a3:56:f4:98: 15:7b:7a:f3:46:78:c4:bd:b4:75:c8:1c:6b:1f:11:b0:5d:fa: 6f:54:01:06:f3:f4:d6:a4:54:2b:5c:2b:0c:0e:1a:03:2c:72: f9:8a:61:5e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI4OUMxMTAvBgNVBAUTKERCNzJDOEJBRjFEQUY2OTM5ODE4NTJFRTAzMjIzMDMw NUVDODA5MTAwHhcNMjYxMDIwMjAwNTI2WhcNMjYxMDI3MjAwNTI2WjAYMRYwFAYD VQQDEw02YWQ3Yzk4Ny02MjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjHDZKi6uSwto5zmrLBQq/N4OkqkBrnT1jxdwvaFzJEwCbRg37/GA7bpOSdUI JJFW+Pxd/8i12YKoO57gr8W5HeMwmhuypCdaJCCFkuKTcrxBgnCN2VPc4C7A8GDs ZHuX0upO470mXEs+ALszTMLbYbSMqABEXk0dSr6o5q+1jcKlm7T0dN8v1ZRJsynZ XzqSEIbtIjLOCCw7CcBbA7dxkwqZ2XSxjLNBHAwi4AGqSL3J7Pl8N34mFT+wRfmb 8NUCFy2SOFy6c85o3NaZ0NyznHK25j8oTpEcymGwiC/wAIVkrauadGBMxPBXgApB kjpvOHkG8PSZdq9rzbxMC6WY7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIAxP0dk v/2hPG7AJurKvvfoEWXVMB8GA1UdIwQYMBaAFNtyyLrx2vaTmBhS7gMiMDBeyAkQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjg5Qy8zQUIxRTJEQ0JD RTcxMUVBQkU5NzJDNkNDNEY5QUUwMi8yM0xJdXZIYTlwT1lHRkx1QXlJd01GN0lD UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzIzTEl1dkhhOXBPWUdGTHVBeUl3TUY3SUNSQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Mjg5Qy8zQUIxRTJEQ0JDRTcxMUVBQkU5NzJDNkNDNEY5QUUwMi8yM0xJdXZIYTlw T1lHRkx1QXlJd01GN0lDUkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARSsGYBWkiK1b39YuynHKC/i0XMNLBuE4ka0CZ1FAyMUdWsycBE298rSbASOO nYfXNFXnIXy18R5ByGXHpx6cftcfNQ/Xe89d3WYnN+5fm+3hkyHPMnVLXyViH/ZW 1IQp1DnQcMDkG4Grb1NbO/EzdOvcMwBbxhT0KqCd/iiAZLBliyNqVfxBl0nY467m Z7TJrcTahFPXUJmqLnLWgEqz5kzRPHndEWeTTcI/VRdrBNMMP6Kr/jhayJC8fyz/ DUN5iNy9utHKkYtOd2JCBuj6MR+rIo+jVvSYFXt680Z4xL20dcgcax8RsF36b1QB BvP01qRUK1wrDA4aAyxy+YphXg== -----END CERTIFICATE-----Generated at Wed Oct 21 21:18:38 2026 by rpki-client