$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B49D2/23FDA4AE697011F1AE32D1EB7B47A888/hKiqOolLETYwXceZBvulQzS1PeA.mft File: hKiqOolLETYwXceZBvulQzS1PeA.mft (raw, json) Hash identifier: w62OtveJnaTnph+YB5jQjX07sZGlymyVxWaP6N9gYBA= Subject key identifier: 89:DC:0F:4A:B4:E9:80:10:CD:62:50:9A:E0:AE:12:06:92:49:BC:2C Authority key identifier: 84:A8:AA:3A:89:4B:11:36:30:5D:C7:99:06:FB:A5:43:34:B5:3D:E0 Certificate issuer: /CN=A91B49D2/serialNumber=84A8AA3A894B1136305DC79906FBA54334B53DE0 Certificate serial: 52 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hKiqOolLETYwXceZBvulQzS1PeA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B49D2/23FDA4AE697011F1AE32D1EB7B47A888/hKiqOolLETYwXceZBvulQzS1PeA.mft Manifest number: 4C Signing time: Tue 27 Oct 2026 08:43:31 +0000 Manifest this update: Tue 27 Oct 2026 08:43:31 +0000 Manifest next update: Tue 03 Nov 2026 08:43:31 +0000 Files and hashes: 1: hKiqOolLETYwXceZBvulQzS1PeA.crl (hash: HDLL8zGe0fgbfPdrsScIQiji/fsoBUxymeiEuKzTrAs=) 2: 88CC215E697911F18B9BC60E7E47A888.roa (hash: ZJ5dzhsP3HtO0QNcM+fPHZydGHIu6gVwDmbbHaJoxLc=) 3: 1BEB68B66B8511F1A487D0D76547A888.roa (hash: GmeisJuhWQiDJx9dEkp8ML1jJ+SLX+9g6qVw8wX/9nU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B49D2/23FDA4AE697011F1AE32D1EB7B47A888/hKiqOolLETYwXceZBvulQzS1PeA.crl rsync://rpki.apnic.net/member_repository/A91B49D2/23FDA4AE697011F1AE32D1EB7B47A888/hKiqOolLETYwXceZBvulQzS1PeA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hKiqOolLETYwXceZBvulQzS1PeA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 08:43:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B49D2, serialNumber=84A8AA3A894B1136305DC79906FBA54334B53DE0 Validity Not Before: Oct 27 08:43:31 2026 GMT Not After : Nov 3 08:43:31 2026 GMT Subject: CN=6ae06433-1075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:61:b0:d5:b0:18:09:1f:f2:e0:3f:5d:22:2a: b3:36:58:3c:f8:e0:4b:e3:5a:78:3b:a1:52:1b:f6: 30:98:4b:14:1b:2c:38:9f:18:44:26:d5:0b:5b:9d: 77:4a:39:e2:fa:26:83:b6:16:6a:05:e8:6e:07:ea: 01:1f:f1:4c:58:0b:e8:8e:fc:f6:d8:f6:1d:db:21: f2:ed:cf:5d:90:ce:58:61:93:6c:6c:d8:e5:f7:ab: af:8a:1e:03:2f:de:1a:56:b6:ba:c1:28:09:ae:8d: 0c:53:66:2a:3d:72:55:e0:38:e5:6a:df:0b:d3:1d: 9d:1d:23:68:c1:ec:f8:b5:6b:be:6c:f7:f3:27:0f: 84:22:be:e4:c8:cc:a7:7d:d4:f4:32:e2:94:d8:97: b6:26:ff:de:0e:7d:d0:0f:d2:d2:cc:ea:8f:c1:c6: 04:c2:93:e3:40:1a:69:8f:2c:5c:7d:6b:b7:5b:5f: c7:09:e2:56:a8:fa:3d:05:87:65:5e:ed:3b:3c:93: bc:9a:14:f3:b2:4b:9a:f7:21:b1:bc:77:b4:82:3f: ef:a0:b5:92:ee:5a:75:11:d5:85:f4:c0:81:4f:3c: 72:5a:6c:fb:66:87:1a:cc:c0:7d:9b:3a:71:4b:a0: 5b:04:8e:e4:1c:53:27:d9:72:b7:0f:f3:35:d4:11: af:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:DC:0F:4A:B4:E9:80:10:CD:62:50:9A:E0:AE:12:06:92:49:BC:2C X509v3 Authority Key Identifier: keyid:84:A8:AA:3A:89:4B:11:36:30:5D:C7:99:06:FB:A5:43:34:B5:3D:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B49D2/23FDA4AE697011F1AE32D1EB7B47A888/hKiqOolLETYwXceZBvulQzS1PeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hKiqOolLETYwXceZBvulQzS1PeA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49D2/23FDA4AE697011F1AE32D1EB7B47A888/hKiqOolLETYwXceZBvulQzS1PeA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:39:4f:f5:3f:64:6d:f0:97:c0:4a:f7:53:ed:c0:47:9d:38: a6:2d:65:38:48:04:8f:d8:85:a5:0f:53:a7:d4:33:31:c0:cc: b1:d3:8a:e7:d4:89:82:e2:93:7f:e1:34:38:41:d0:0f:cc:f0: 0d:68:46:d1:a1:1a:31:2a:9f:b3:54:0f:ae:0f:19:87:74:e4: 9c:61:26:8d:61:a0:99:97:cd:ce:a0:19:18:b2:e2:20:7a:0c: 16:a4:29:24:d0:61:c8:3e:ee:d8:f9:c8:00:76:e9:90:e4:8a: 4c:69:6c:ea:56:e5:e5:c0:2a:56:9e:16:a9:dc:76:07:49:af: 84:9d:c4:3a:ad:d0:e6:00:40:98:0d:69:69:52:d4:18:71:7b: a5:02:9d:46:19:55:7b:2c:b9:0a:41:df:33:34:7c:c7:e6:ea: 2f:58:49:4a:65:e7:a6:a2:a8:2c:f9:05:4a:0c:c7:5e:8d:14: db:0d:c5:c4:a3:cc:9e:d3:80:ea:af:ae:91:9e:af:0e:f2:db: 91:62:2a:b2:da:d1:37:e1:f8:86:ca:e1:17:49:f0:4d:b3:e3: a9:7e:8c:4d:b9:d7:71:93:58:ae:08:fa:64:8c:2f:2a:04:c9: ae:8e:b5:ec:3b:f7:35:63:62:59:47:55:13:49:8d:38:cc:e1: 92:36:d7:dc -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NDlEMjExMC8GA1UEBRMoODRBOEFBM0E4OTRCMTEzNjMwNURDNzk5MDZGQkE1NDMz NEI1M0RFMDAeFw0yNjEwMjcwODQzMzFaFw0yNjExMDMwODQzMzFaMBgxFjAUBgNV BAMTDTZhZTA2NDMzLTEwNzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCUYbDVsBgJH/LgP10iKrM2WDz44EvjWng7oVIb9jCYSxQbLDifGEQm1QtbnXdK OeL6JoO2FmoF6G4H6gEf8UxYC+iO/PbY9h3bIfLtz12Qzlhhk2xs2OX3q6+KHgMv 3hpWtrrBKAmujQxTZio9clXgOOVq3wvTHZ0dI2jB7Pi1a75s9/MnD4QivuTIzKd9 1PQy4pTYl7Ym/94OfdAP0tLM6o/BxgTCk+NAGmmPLFx9a7dbX8cJ4lao+j0Fh2Ve 7Ts8k7yaFPOyS5r3IbG8d7SCP++gtZLuWnUR1YX0wIFPPHJabPtmhxrMwH2bOnFL oFsEjuQcUyfZcrcP8zXUEa8hAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUidwPSrTp gBDNYlCa4K4SBpJJvCwwHwYDVR0jBBgwFoAUhKiqOolLETYwXceZBvulQzS1PeAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0OUQyLzIzRkRBNEFFNjk3 MDExRjFBRTMyRDFFQjdCNDdBODg4L2hLaXFPb2xMRVRZd1hjZVpCdnVsUXpTMVBl QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaEtpcU9vbExFVFl3WGNlWkJ2dWxRelMxUGVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0 OUQyLzIzRkRBNEFFNjk3MDExRjFBRTMyRDFFQjdCNDdBODg4L2hLaXFPb2xMRVRZ d1hjZVpCdnVsUXpTMVBlQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAFOU/1P2Rt8JfASvdT7cBHnTimLWU4SASP2IWlD1On1DMxwMyx04rn1ImC4pN/ 4TQ4QdAPzPANaEbRoRoxKp+zVA+uDxmHdOScYSaNYaCZl83OoBkYsuIgegwWpCkk 0GHIPu7Y+cgAdumQ5IpMaWzqVuXlwCpWnhap3HYHSa+EncQ6rdDmAECYDWlpUtQY cXulAp1GGVV7LLkKQd8zNHzH5uovWElKZeemoqgs+QVKDMdejRTbDcXEo8ye04Dq r66Rnq8O8tuRYiqy2tE34fiGyuEXSfBNs+OpfoxNuddxk1iuCPpkjC8qBMmujrXs O/c1Y2JZR1UTSY04zOGSNtfc -----END CERTIFICATE-----Generated at Wed Oct 28 07:22:29 2026 by rpki-client