$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.mft File: D-jKZIcKPWORHI0tZRuinKztDso.mft (raw, json) Hash identifier: ru2EW26Rp0zHQRomW4LZsJvsVDFEUxoAzLCDfkRag0c= Subject key identifier: 4F:DB:97:49:52:07:73:4B:19:FD:A5:8C:66:AD:4A:B5:32:B9:72:7E Authority key identifier: 0F:E8:CA:64:87:0A:3D:63:91:1C:8D:2D:65:1B:A2:9C:AC:ED:0E:CA Certificate issuer: /CN=A91B428B/serialNumber=0FE8CA64870A3D63911C8D2D651BA29CACED0ECA Certificate serial: 0ABF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-jKZIcKPWORHI0tZRuinKztDso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.mft Manifest number: 0AB6 Signing time: Tue 06 Oct 2026 19:36:48 +0000 Manifest this update: Tue 06 Oct 2026 19:36:48 +0000 Manifest next update: Tue 13 Oct 2026 19:36:48 +0000 Files and hashes: 1: D-jKZIcKPWORHI0tZRuinKztDso.crl (hash: DXDTyVV9+IqqrBuerfxKwREJG6FPo78YW5D5q61SbZM=) 2: 319DF660847811EA8EE07E81C4F9AE02.roa (hash: ERhX+neEQpWaGHgDx788YR3fYNG7D/j2H84jmEv5law=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.crl rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-jKZIcKPWORHI0tZRuinKztDso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 19:36:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2751 (0xabf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B428B, serialNumber=0FE8CA64870A3D63911C8D2D651BA29CACED0ECA Validity Not Before: Oct 6 19:36:48 2026 GMT Not After : Oct 13 19:36:48 2026 GMT Subject: CN=6ac54dd0-150f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a7:43:fb:1a:7c:7c:2a:62:72:cf:ad:61:5a: 92:e1:2a:36:34:2e:24:30:eb:e3:0c:47:bd:fe:e0: 35:32:39:7a:49:54:c0:08:39:09:52:49:a0:38:89: 37:79:39:03:76:5d:f1:3d:7f:36:34:a6:16:ce:8f: 80:75:65:9b:e4:dc:28:b4:f1:d8:78:25:7c:43:a1: 09:00:71:b1:b3:11:77:76:ad:0f:39:47:88:fd:df: b3:eb:9b:0e:ef:5b:0a:d7:70:cf:bf:b0:cf:74:9d: 46:1c:0c:45:76:30:85:76:75:51:36:bc:dd:c9:3c: f3:89:22:73:c4:e3:46:66:02:f2:bd:b3:20:f1:77: 55:d0:ca:68:51:b2:57:79:a9:a6:bf:3f:a8:8c:f9: f9:93:74:31:f9:d4:91:90:1e:88:c8:de:b7:fd:c3: 1f:18:f4:fb:fe:5f:59:b9:16:78:d5:65:62:b9:a1: 2e:50:bd:b6:ed:f4:14:c1:e6:fe:c7:e2:1e:ef:72: 85:3f:86:91:5b:cd:c1:a8:18:43:96:d3:4f:76:2b: a9:d9:3e:e9:6b:98:4e:07:ef:17:2a:83:cb:fa:3c: 3d:bc:f5:4e:b6:11:78:4b:6b:b0:57:5c:d4:7f:d1: 9d:34:49:cb:97:35:36:20:af:0c:ad:94:85:8e:3a: b7:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:DB:97:49:52:07:73:4B:19:FD:A5:8C:66:AD:4A:B5:32:B9:72:7E X509v3 Authority Key Identifier: keyid:0F:E8:CA:64:87:0A:3D:63:91:1C:8D:2D:65:1B:A2:9C:AC:ED:0E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-jKZIcKPWORHI0tZRuinKztDso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:8b:10:3e:0f:c3:39:af:5d:a4:e8:9e:04:ba:cc:4a:b8:52: 66:20:f4:d0:7e:db:32:0e:ca:d6:58:ca:ae:22:fd:cb:9c:80: f0:b0:4c:5a:53:af:81:fb:f5:b2:cb:a5:51:73:98:52:ec:04: 8f:4c:db:e6:1a:82:9f:b8:c8:a1:6b:37:14:58:44:20:06:94: 5e:1e:4b:8a:41:ca:36:38:f5:c2:f2:78:ee:a4:6f:f2:ad:cc: 90:f7:6f:4a:7a:02:11:77:fb:1c:b1:c4:ed:e0:bc:21:de:1b: 01:5c:29:1a:f7:99:db:1b:31:27:05:5c:57:c1:d6:a7:83:3e: 0f:11:a1:09:ef:f0:b9:fe:49:31:67:71:77:19:80:e7:75:8c: f0:61:26:c1:51:a3:29:93:03:ab:fb:e5:88:f1:e3:2a:5a:ec: 69:94:b1:fe:fb:31:24:b8:85:bd:60:d5:d4:c2:93:99:c9:80: 28:72:7d:80:0c:bf:92:bc:4f:47:fb:88:dc:33:b3:88:96:1c: 28:71:a9:b8:3e:e2:ac:18:46:14:33:a5:00:d0:82:a0:db:77: 29:b4:a4:b3:40:7a:de:3d:fa:58:01:4c:6e:78:dd:8e:a1:17: 0d:c5:be:cc:b4:31:c9:7e:86:95:7c:dc:46:fe:8b:5e:b9:08: 6a:4d:cf:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCr8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQyOEIxMTAvBgNVBAUTKDBGRThDQTY0ODcwQTNENjM5MTFDOEQyRDY1MUJBMjlD QUNFRDBFQ0EwHhcNMjYxMDA2MTkzNjQ4WhcNMjYxMDEzMTkzNjQ4WjAYMRYwFAYD VQQDEw02YWM1NGRkMC0xNTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyadD+xp8fCpics+tYVqS4So2NC4kMOvjDEe9/uA1Mjl6SVTACDkJUkmgOIk3 eTkDdl3xPX82NKYWzo+AdWWb5NwotPHYeCV8Q6EJAHGxsxF3dq0POUeI/d+z65sO 71sK13DPv7DPdJ1GHAxFdjCFdnVRNrzdyTzziSJzxONGZgLyvbMg8XdV0MpoUbJX eammvz+ojPn5k3Qx+dSRkB6IyN63/cMfGPT7/l9ZuRZ41WViuaEuUL227fQUweb+ x+Ie73KFP4aRW83BqBhDltNPdiup2T7pa5hOB+8XKoPL+jw9vPVOthF4S2uwV1zU f9GdNEnLlzU2IK8MrZSFjjq3nwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE/bl0lS B3NLGf2ljGatSrUyuXJ+MB8GA1UdIwQYMBaAFA/oymSHCj1jkRyNLWUbopys7Q7K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDI4Qi8zQTBCNkMwQzg0 NzcxMUVBQjNCNDM2ODBDNEY5QUUwMi9ELWpLWkljS1BXT1JISTB0WlJ1aW5LenRE c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0QtaktaSWNLUFdPUkhJMHRaUnVpbkt6dERzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDI4Qi8zQTBCNkMwQzg0NzcxMUVBQjNCNDM2ODBDNEY5QUUwMi9ELWpLWkljS1BX T1JISTB0WlJ1aW5LenREc28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAH4sQPg/DOa9dpOieBLrMSrhSZiD00H7bMg7K1ljKriL9y5yA8LBMWlOvgfv1 ssulUXOYUuwEj0zb5hqCn7jIoWs3FFhEIAaUXh5LikHKNjj1wvJ47qRv8q3MkPdv SnoCEXf7HLHE7eC8Id4bAVwpGveZ2xsxJwVcV8HWp4M+DxGhCe/wuf5JMWdxdxmA 53WM8GEmwVGjKZMDq/vliPHjKlrsaZSx/vsxJLiFvWDV1MKTmcmAKHJ9gAy/krxP R/uI3DOziJYcKHGpuD7irBhGFDOlANCCoNt3KbSks0B63j36WAFMbnjdjqEXDcW+ zLQxyX6GlXzcRv6LXrkIak3PSw== -----END CERTIFICATE-----Generated at Thu Oct 8 07:21:00 2026 by rpki-client