$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.mft File: 7w5JMvxot1LjQokiqT5mq-MfNDE.mft (raw, json) Hash identifier: ty21kIkCMMwnXWSv/klHUKqaRPZaN4ewE/Nm2/lShII= Subject key identifier: 43:F9:79:42:0B:3C:B8:67:E4:90:CB:B9:42:86:7D:CE:48:45:6F:C7 Authority key identifier: EF:0E:49:32:FC:68:B7:52:E3:42:89:22:A9:3E:66:AB:E3:1F:34:31 Certificate issuer: /CN=A91B4B33/serialNumber=EF0E4932FC68B752E3428922A93E66ABE31F3431 Certificate serial: 01C4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7w5JMvxot1LjQokiqT5mq-MfNDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.mft Manifest number: 01BE Signing time: Mon 19 Oct 2026 04:27:55 +0000 Manifest this update: Mon 19 Oct 2026 04:27:54 +0000 Manifest next update: Mon 26 Oct 2026 04:27:54 +0000 Files and hashes: 1: 7w5JMvxot1LjQokiqT5mq-MfNDE.crl (hash: 4c3nOPu+XdnX5XCQkj+X7qG6zIY7bs+p5X3UQydM+28=) 2: 80741B04221F11EF92A42E1AC4F9AE02.roa (hash: XvV3KrQU+/AFsqX/bmWV7hZZ/sXJVuTdbUfgIHDhAFY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.crl rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7w5JMvxot1LjQokiqT5mq-MfNDE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 04:27:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 452 (0x1c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4B33, serialNumber=EF0E4932FC68B752E3428922A93E66ABE31F3431 Validity Not Before: Oct 19 04:27:54 2026 GMT Not After : Oct 26 04:27:54 2026 GMT Subject: CN=6ad59c4a-5b40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d9:27:bd:e7:59:ee:8e:4d:02:93:e1:d8:88: 8b:dc:59:c4:2c:5a:ff:f5:90:2f:60:59:21:fe:d3: c4:b3:44:e8:20:11:59:36:68:eb:b7:6b:89:4b:16: a4:dd:9f:8f:90:be:85:d9:24:16:03:6b:d9:de:a2: 80:f0:64:ad:23:0d:55:71:a9:9a:5e:48:04:2f:43: cd:11:03:29:7f:68:a6:e1:3f:46:5b:db:35:13:63: c8:9d:df:18:d0:58:96:20:bb:49:f6:8f:9c:1f:af: 9c:0f:3a:ab:81:66:27:47:91:8b:65:32:08:1e:94: 98:8c:38:82:a6:f1:b2:97:24:0e:34:16:e6:b9:e1: 8d:dd:08:21:c1:64:30:b5:61:db:13:a3:88:63:41: ec:1a:3e:1d:e2:fb:8f:a4:e5:87:2a:00:11:2f:b2: 7e:7e:2b:03:74:c7:ca:7c:6e:b8:44:23:cd:d4:da: 5e:a6:8a:f0:e9:3d:18:01:26:11:38:df:d9:3d:45: 41:c1:99:c8:86:b2:87:4a:e0:b2:be:4c:92:42:35: cd:bf:5b:13:45:c5:65:e3:07:48:bd:7f:3d:be:b2: 58:7b:b7:71:e7:1b:e8:a7:f5:9d:03:13:9d:d1:21: c9:6c:1e:f0:d0:52:3c:b1:3e:9b:cd:5a:59:4e:f7: 77:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:F9:79:42:0B:3C:B8:67:E4:90:CB:B9:42:86:7D:CE:48:45:6F:C7 X509v3 Authority Key Identifier: keyid:EF:0E:49:32:FC:68:B7:52:E3:42:89:22:A9:3E:66:AB:E3:1F:34:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7w5JMvxot1LjQokiqT5mq-MfNDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:cb:80:a9:df:ad:63:00:47:12:43:de:1d:1d:0e:41:fc:27: 05:01:b9:2e:da:ac:aa:9b:ed:7d:79:39:77:8d:5e:4b:e6:40: ef:68:37:f3:12:d5:73:94:e2:ab:ca:ac:30:8d:d0:04:58:8e: 3b:35:68:f1:d7:8b:b3:b2:d3:8f:07:f6:d9:d6:4c:98:83:f7: af:74:e8:0e:a7:5c:96:88:de:d8:52:fa:14:5e:3b:66:0f:61: eb:fc:e5:ae:98:16:09:2e:fd:63:67:72:6a:05:44:42:72:ad: 28:df:07:27:fb:79:0e:2c:2a:2c:a4:29:80:2d:d3:ae:1c:1a: d6:00:0d:5c:ea:0e:d3:53:03:51:6d:f1:51:a7:75:03:85:a3: 80:eb:0b:dc:59:2b:fe:46:03:3c:60:04:07:f5:3c:97:a4:56: d0:98:13:6d:31:ca:0b:96:f1:c4:67:cc:ad:37:e7:4b:c5:1b: 9d:a2:52:c4:36:72:d5:89:e3:b7:85:b7:53:3b:01:67:ab:ad: ae:fa:8f:7e:39:a5:eb:61:2d:40:75:ce:78:94:2b:e9:72:ea: 77:60:ec:7f:ae:ba:a0:85:52:0e:e1:84:74:9f:b3:53:59:35: a2:55:7f:ae:67:40:98:9e:23:d9:4b:fc:f6:23:61:43:41:56: 41:0a:01:e3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRCMzMxMTAvBgNVBAUTKEVGMEU0OTMyRkM2OEI3NTJFMzQyODkyMkE5M0U2NkFC RTMxRjM0MzEwHhcNMjYxMDE5MDQyNzU0WhcNMjYxMDI2MDQyNzU0WjAYMRYwFAYD VQQDEw02YWQ1OWM0YS01YjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvtknvedZ7o5NApPh2IiL3FnELFr/9ZAvYFkh/tPEs0ToIBFZNmjrt2uJSxak 3Z+PkL6F2SQWA2vZ3qKA8GStIw1VcamaXkgEL0PNEQMpf2im4T9GW9s1E2PInd8Y 0FiWILtJ9o+cH6+cDzqrgWYnR5GLZTIIHpSYjDiCpvGylyQONBbmueGN3QghwWQw tWHbE6OIY0HsGj4d4vuPpOWHKgARL7J+fisDdMfKfG64RCPN1Npeporw6T0YASYR ON/ZPUVBwZnIhrKHSuCyvkySQjXNv1sTRcVl4wdIvX89vrJYe7dx5xvop/WdAxOd 0SHJbB7w0FI8sT6bzVpZTvd3FwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEP5eUIL PLhn5JDLuUKGfc5IRW/HMB8GA1UdIwQYMBaAFO8OSTL8aLdS40KJIqk+ZqvjHzQx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEIzMy8xQUNFN0QwNDIy MUUxMUVGOTM0NEEzMDlDNEY5QUUwMi83dzVKTXZ4b3QxTGpRb2tpcVQ1bXEtTWZO REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzd3NUpNdnhvdDFMalFva2lxVDVtcS1NZk5ERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEIzMy8xQUNFN0QwNDIyMUUxMUVGOTM0NEEzMDlDNEY5QUUwMi83dzVKTXZ4b3Qx TGpRb2tpcVQ1bXEtTWZOREUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAacuAqd+tYwBHEkPeHR0OQfwnBQG5LtqsqpvtfXk5d41eS+ZA72g38xLVc5Ti q8qsMI3QBFiOOzVo8deLs7LTjwf22dZMmIP3r3ToDqdcloje2FL6FF47Zg9h6/zl rpgWCS79Y2dyagVEQnKtKN8HJ/t5DiwqLKQpgC3Trhwa1gANXOoO01MDUW3xUad1 A4WjgOsL3Fkr/kYDPGAEB/U8l6RW0JgTbTHKC5bxxGfMrTfnS8UbnaJSxDZy1Ynj t4W3UzsBZ6utrvqPfjml62EtQHXOeJQr6XLqd2Dsf666oIVSDuGEdJ+zU1k1olV/ rmdAmJ4j2Uv89iNhQ0FWQQoB4w== -----END CERTIFICATE-----Generated at Mon Oct 19 20:59:18 2026 by rpki-client