$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.mft File: hRAOWh-65f4aZcvxVzQTCo5UG7I.mft (raw, json) Hash identifier: 3jFWWIc5FL60gR5W2RFyP0/PD530cxSfiMPU9G6JZhU= Subject key identifier: CE:13:BE:08:5D:42:EE:66:F2:0D:B7:22:E3:26:E4:7B:6B:88:AE:C3 Authority key identifier: 85:10:0E:5A:1F:BA:E5:FE:1A:65:CB:F1:57:34:13:0A:8E:54:1B:B2 Certificate issuer: /CN=A91B3087/serialNumber=85100E5A1FBAE5FE1A65CBF15734130A8E541BB2 Certificate serial: FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRAOWh-65f4aZcvxVzQTCo5UG7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.mft Manifest number: E9 Signing time: Tue 27 Oct 2026 06:55:36 +0000 Manifest this update: Tue 27 Oct 2026 06:55:35 +0000 Manifest next update: Tue 03 Nov 2026 06:55:35 +0000 Files and hashes: 1: hRAOWh-65f4aZcvxVzQTCo5UG7I.crl (hash: Z+cBaFHb3kvqg0lk3Dp2Dz5i6qb17KZxdYCY+VXx1q8=) 2: 33C6FEEAC70211F186E087D25611F970.roa (hash: zAnjqWiBbAkIRoKtvXg3c1MkKetO8NiHr5vsv+d/4qw=) 3: B7BCBAE8C2C311F19B33583F8AEE528E.roa (hash: 0xqHf7DG05f9ZM0jdlcDxB4WU7nG4rwM9DBJ+EzioMk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.crl rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRAOWh-65f4aZcvxVzQTCo5UG7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 06:55:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 253 (0xfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3087, serialNumber=85100E5A1FBAE5FE1A65CBF15734130A8E541BB2 Validity Not Before: Oct 27 06:55:35 2026 GMT Not After : Nov 3 06:55:35 2026 GMT Subject: CN=6ae04ae8-96ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:88:5e:4a:e7:17:72:f7:0e:d6:08:bc:ff:82: 17:b3:5d:84:0c:5d:25:f0:e9:01:ae:77:f3:98:ea: 4e:c2:16:4f:f5:bd:97:a1:55:7f:bb:e3:4d:c3:91: 1f:92:ea:0d:cb:e3:b6:28:74:f4:3c:c6:27:db:ea: 55:f4:29:f3:1a:53:a1:41:9c:8f:3b:fb:8f:c3:e6: 2e:73:70:d7:a7:9c:c3:2e:55:f5:c0:b8:d7:19:20: 0a:32:4b:7d:6a:e1:33:7a:c0:8e:68:f5:21:d1:5b: b2:98:50:09:88:09:99:26:29:29:ad:df:aa:d9:59: c1:09:61:59:a1:83:32:90:1e:27:40:f3:40:f0:7e: 5d:35:78:d0:03:4b:33:0e:a6:df:0c:12:18:b3:46: ae:65:24:d4:2e:ea:76:25:50:5e:f4:31:93:4d:04: 2d:50:a3:ee:8e:2a:a3:b3:6a:1c:31:ec:a0:7e:c1: d6:4f:89:20:c1:61:bb:c2:35:ad:fe:bc:3d:20:5b: 2b:20:fc:46:bb:d8:b9:8a:72:32:e9:13:82:98:d6: 9a:ee:b0:99:b5:ed:70:93:4a:ab:7e:31:ca:f6:0f: 91:ce:95:0e:b9:12:70:d7:dd:e1:fe:21:77:de:6e: 9d:80:b3:0c:ef:15:6d:db:72:ca:13:52:de:e4:a1: c8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:13:BE:08:5D:42:EE:66:F2:0D:B7:22:E3:26:E4:7B:6B:88:AE:C3 X509v3 Authority Key Identifier: keyid:85:10:0E:5A:1F:BA:E5:FE:1A:65:CB:F1:57:34:13:0A:8E:54:1B:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRAOWh-65f4aZcvxVzQTCo5UG7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:dd:09:ac:f8:fd:2e:82:54:f0:2d:36:6d:16:b2:e5:44:0b: 30:17:36:37:3d:39:1c:e4:0b:bf:f6:64:06:fe:b2:ba:70:4c: 13:30:20:32:cf:26:2c:64:3b:47:d4:4d:15:b3:02:cd:bb:6e: a6:05:81:23:12:32:57:ff:10:41:ae:3b:bb:5c:98:42:15:b8: 14:6c:7c:75:96:18:dd:90:57:bd:7a:15:7e:bc:dd:e2:31:46: 05:9c:61:74:e8:90:bf:69:d9:75:9a:17:02:5d:2c:fb:1e:81: d4:05:63:24:6f:8b:2e:67:9a:38:f7:2a:3a:fa:2c:e3:b3:f8: 82:8f:ff:32:b6:0a:9b:f5:7e:4a:d5:42:0f:13:e2:38:e8:70: 49:7c:02:93:9a:c8:65:5e:c4:d3:47:c3:1b:57:9a:4f:32:36: 6b:1d:e3:51:41:fe:29:66:c1:4f:f3:06:df:90:c4:41:d5:59: 00:40:7c:9f:f8:24:de:3d:c2:32:57:e8:ad:8b:a1:74:5b:e2: d3:05:d6:bb:be:bd:c9:ae:b9:a7:f1:6f:eb:16:80:e7:24:48: 7a:b3:e4:c2:3d:4f:49:41:3e:6c:ef:05:61:c6:22:ad:e1:52: 6a:2c:13:a4:f7:72:e1:d1:47:dc:32:d7:7b:d1:97:27:aa:64: 09:b8:7f:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjMwODcxMTAvBgNVBAUTKDg1MTAwRTVBMUZCQUU1RkUxQTY1Q0JGMTU3MzQxMzBB OEU1NDFCQjIwHhcNMjYxMDI3MDY1NTM1WhcNMjYxMTAzMDY1NTM1WjAYMRYwFAYD VQQDEw02YWUwNGFlOC05NmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYheSucXcvcO1gi8/4IXs12EDF0l8OkBrnfzmOpOwhZP9b2XoVV/u+NNw5Ef kuoNy+O2KHT0PMYn2+pV9CnzGlOhQZyPO/uPw+Yuc3DXp5zDLlX1wLjXGSAKMkt9 auEzesCOaPUh0VuymFAJiAmZJikprd+q2VnBCWFZoYMykB4nQPNA8H5dNXjQA0sz DqbfDBIYs0auZSTULup2JVBe9DGTTQQtUKPujiqjs2ocMeygfsHWT4kgwWG7wjWt /rw9IFsrIPxGu9i5inIy6ROCmNaa7rCZte1wk0qrfjHK9g+RzpUOuRJw193h/iF3 3m6dgLMM7xVt23LKE1Le5KHI4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM4Tvghd Qu5m8g23IuMm5HtriK7DMB8GA1UdIwQYMBaAFIUQDlofuuX+GmXL8Vc0EwqOVBuy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzA4Ny80ODg4MzEzMjhF QUExMUYwQjgzNTI5NDlDNEY5QUUwMi9oUkFPV2gtNjVmNGFaY3Z4VnpRVENvNVVH N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hSQU9XaC02NWY0YVpjdnhWelFUQ281VUc3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzA4Ny80ODg4MzEzMjhFQUExMUYwQjgzNTI5NDlDNEY5QUUwMi9oUkFPV2gtNjVm NGFaY3Z4VnpRVENvNVVHN0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAp90JrPj9LoJU8C02bRay5UQLMBc2Nz05HOQLv/ZkBv6yunBMEzAgMs8mLGQ7 R9RNFbMCzbtupgWBIxIyV/8QQa47u1yYQhW4FGx8dZYY3ZBXvXoVfrzd4jFGBZxh dOiQv2nZdZoXAl0s+x6B1AVjJG+LLmeaOPcqOvos47P4go//MrYKm/V+StVCDxPi OOhwSXwCk5rIZV7E00fDG1eaTzI2ax3jUUH+KWbBT/MG35DEQdVZAEB8n/gk3j3C MlforYuhdFvi0wXWu769ya65p/Fv6xaA5yRIerPkwj1PSUE+bO8FYcYireFSaiwT pPdy4dFH3DLXe9GXJ6pkCbh/9g== -----END CERTIFICATE-----Generated at Tue Oct 27 22:37:04 2026 by rpki-client