$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.mft File: toNIsZBwY8BERWnOsijqUkbQLxk.mft (raw, json) Hash identifier: 4odbeQAS/AYZ+SS4r/peKXMtz+WPpKIXhrbdCj5xtVg= Subject key identifier: CD:1A:2B:37:14:C5:AA:9F:EA:E6:70:0B:6C:4C:A7:7D:A2:AE:0C:8D Authority key identifier: B6:83:48:B1:90:70:63:C0:44:45:69:CE:B2:28:EA:52:46:D0:2F:19 Certificate issuer: /CN=A91B3CB5/serialNumber=B68348B1907063C0444569CEB228EA5246D02F19 Certificate serial: B0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/toNIsZBwY8BERWnOsijqUkbQLxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.mft Manifest number: AD Signing time: Tue 06 Oct 2026 18:14:35 +0000 Manifest this update: Tue 06 Oct 2026 18:14:34 +0000 Manifest next update: Tue 13 Oct 2026 18:14:34 +0000 Files and hashes: 1: toNIsZBwY8BERWnOsijqUkbQLxk.crl (hash: VaUJiZ4L3LRmYHG28PBBn7tkl/olC2gSF9NfbXrcgl4=) 2: 3AF6CDE4CE7E11F0BDD3E452C4F9AE02.roa (hash: 0wi2dknpR06NzdVHMhDQvzTD3ZFfo6Ir3jbrCyXBQX4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.crl rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/toNIsZBwY8BERWnOsijqUkbQLxk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 18:14:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 176 (0xb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3CB5, serialNumber=B68348B1907063C0444569CEB228EA5246D02F19 Validity Not Before: Oct 6 18:14:34 2026 GMT Not After : Oct 13 18:14:34 2026 GMT Subject: CN=6ac53a8b-e79e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c2:d7:51:7c:f1:23:7c:d9:75:bb:41:f5:1e: cb:d4:07:6b:05:59:1a:4d:7b:b1:e8:d2:d8:0b:6f: 39:36:6f:1c:2f:b3:e5:96:5f:c5:d1:4c:ca:d7:47: e1:28:ee:1b:5c:07:37:84:80:bf:15:bf:3a:70:a2: 4a:6a:28:bf:b7:d2:dd:31:52:52:9a:6e:19:94:04: f7:2a:2c:c9:14:32:d4:21:1f:27:57:e8:96:b1:0f: da:b3:77:d8:08:63:05:1c:1b:b7:bf:c2:ca:c8:f8: f6:17:d3:ef:07:91:65:7c:ef:2f:bf:8a:46:5f:6b: 89:78:76:72:4b:b3:c4:be:54:20:e2:23:21:94:a2: 9e:1b:72:09:bf:dc:62:75:44:57:cb:e2:11:90:03: 2b:d8:a6:c2:b6:cd:b2:a7:bf:4e:ab:f7:31:a5:97: ec:cc:d4:36:57:6c:a4:40:75:7e:64:53:29:c4:21: 98:0f:53:46:1a:88:22:be:e2:8d:6f:a8:4e:7f:83: d3:52:52:77:95:2f:9a:bb:55:99:94:9e:91:5e:31: 47:24:2c:9a:e3:31:dc:4b:1f:c3:97:bf:2d:4d:bc: 51:9b:75:34:7b:1c:c3:1b:39:ce:0e:d0:a3:f3:ee: d4:44:dc:87:a2:c8:c8:8c:ff:9e:20:6b:bb:f3:7e: 82:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:1A:2B:37:14:C5:AA:9F:EA:E6:70:0B:6C:4C:A7:7D:A2:AE:0C:8D X509v3 Authority Key Identifier: keyid:B6:83:48:B1:90:70:63:C0:44:45:69:CE:B2:28:EA:52:46:D0:2F:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/toNIsZBwY8BERWnOsijqUkbQLxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:b7:68:85:0b:9f:80:ca:12:be:4e:b8:6a:af:a5:af:91:1c: bc:81:9e:1a:ed:a4:ad:72:d9:0e:b3:12:b7:48:31:02:8a:fa: ce:10:09:36:47:fa:b3:5f:41:02:8c:a0:ae:58:7d:59:67:0a: e4:cc:e6:97:b5:fe:a6:c4:8d:03:10:a2:dd:c1:55:ae:d2:a8: cf:36:c0:03:d5:6e:f0:7a:b9:cb:2e:ca:ff:c3:5b:6f:f7:72: 3e:db:10:09:8b:22:53:37:d8:c1:64:b9:91:0f:e4:78:00:31: 9c:2f:ba:f8:23:1d:79:fe:84:95:1e:14:55:73:40:5c:ae:5c: 2d:e1:78:2b:8b:58:43:39:fb:98:0b:c0:d4:a1:dd:6c:e9:14: 8b:9c:d4:fa:64:92:bf:22:c8:28:b6:05:85:7d:89:cd:9e:0c: 1c:1c:1f:01:b5:7a:fc:7d:07:01:ef:c0:61:22:73:26:43:4f: 81:4e:4d:0c:0c:d9:c3:d2:ee:0e:e2:b4:4f:8a:55:79:5a:01: 98:6d:94:8f:c3:04:d5:6a:79:86:4c:ca:30:5a:a9:3b:1e:77: da:f2:9b:45:64:81:d5:a4:b0:4d:04:11:6a:c5:43:c7:3c:9f: e0:5d:5b:88:ed:5b:d2:5d:53:21:ec:dd:3f:e3:26:07:69:46: 0c:8f:cb:5c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNDQjUxMTAvBgNVBAUTKEI2ODM0OEIxOTA3MDYzQzA0NDQ1NjlDRUIyMjhFQTUy NDZEMDJGMTkwHhcNMjYxMDA2MTgxNDM0WhcNMjYxMDEzMTgxNDM0WjAYMRYwFAYD VQQDEw02YWM1M2E4Yi1lNzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAycLXUXzxI3zZdbtB9R7L1AdrBVkaTXux6NLYC285Nm8cL7Plll/F0UzK10fh KO4bXAc3hIC/Fb86cKJKaii/t9LdMVJSmm4ZlAT3KizJFDLUIR8nV+iWsQ/as3fY CGMFHBu3v8LKyPj2F9PvB5FlfO8vv4pGX2uJeHZyS7PEvlQg4iMhlKKeG3IJv9xi dURXy+IRkAMr2KbCts2yp79Oq/cxpZfszNQ2V2ykQHV+ZFMpxCGYD1NGGogivuKN b6hOf4PTUlJ3lS+au1WZlJ6RXjFHJCya4zHcSx/Dl78tTbxRm3U0exzDGznODtCj 8+7URNyHosjIjP+eIGu7836C6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM0aKzcU xaqf6uZwC2xMp32irgyNMB8GA1UdIwQYMBaAFLaDSLGQcGPAREVpzrIo6lJG0C8Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0NCNS9FRDIyNTUzMkM0 MzQxMUYwQTgyN0E1N0RDNEY5QUUwMi90b05Jc1pCd1k4QkVSV25Pc2lqcVVrYlFM eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RvTklzWkJ3WThCRVJXbk9zaWpxVWtiUUx4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0NCNS9FRDIyNTUzMkM0MzQxMUYwQTgyN0E1N0RDNEY5QUUwMi90b05Jc1pCd1k4 QkVSV25Pc2lqcVVrYlFMeGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAq7dohQufgMoSvk64aq+lr5EcvIGeGu2krXLZDrMSt0gxAor6zhAJNkf6s19B Aoygrlh9WWcK5Mzml7X+psSNAxCi3cFVrtKozzbAA9Vu8Hq5yy7K/8Nbb/dyPtsQ CYsiUzfYwWS5kQ/keAAxnC+6+CMdef6ElR4UVXNAXK5cLeF4K4tYQzn7mAvA1KHd bOkUi5zU+mSSvyLIKLYFhX2JzZ4MHBwfAbV6/H0HAe/AYSJzJkNPgU5NDAzZw9Lu DuK0T4pVeVoBmG2Uj8ME1Wp5hkzKMFqpOx532vKbRWSB1aSwTQQRasVDxzyf4F1b iO1b0l1TIezdP+MmB2lGDI/LXA== -----END CERTIFICATE-----Generated at Thu Oct 8 12:03:22 2026 by rpki-client