$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.mft File: RITQfaaNUwUM3PaxPAwFReZFfOU.mft (raw, json) Hash identifier: IzI4qW63vlOZ/I+8q50tjNXzhlcoh4HEEjfrsmNJhk0= Subject key identifier: 74:66:87:3C:EA:33:E4:FA:85:7A:A8:81:16:E5:0D:04:43:B6:6E:25 Authority key identifier: 44:84:D0:7D:A6:8D:53:05:0C:DC:F6:B1:3C:0C:05:45:E6:45:7C:E5 Certificate issuer: /CN=A91B5CEA/serialNumber=4484D07DA68D53050CDCF6B13C0C0545E6457CE5 Certificate serial: 02EC Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RITQfaaNUwUM3PaxPAwFReZFfOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.mft Manifest number: 02E5 Signing time: Wed 21 Oct 2026 01:28:01 +0000 Manifest this update: Wed 21 Oct 2026 01:28:00 +0000 Manifest next update: Wed 28 Oct 2026 01:28:00 +0000 Files and hashes: 1: RITQfaaNUwUM3PaxPAwFReZFfOU.crl (hash: kaJjUMdhuO8yWpfFb1dIbVNgnHjXjoCdLpJjHR4CGO8=) 2: B3795CBC64F211ED9AEC046FC4F9AE02.roa (hash: +L8evKQDJ3nBMOn/L1rAEvoX4ISe7vPvaP460knk1K8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.crl rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RITQfaaNUwUM3PaxPAwFReZFfOU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 01:28:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 748 (0x2ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5CEA, serialNumber=4484D07DA68D53050CDCF6B13C0C0545E6457CE5 Validity Not Before: Oct 21 01:28:00 2026 GMT Not After : Oct 28 01:28:00 2026 GMT Subject: CN=6ad81521-e92d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:45:b6:0a:18:9a:40:21:ad:57:42:cf:5d:86: 19:32:f8:ff:6b:24:8d:da:e5:92:af:6f:ab:81:c8: 3a:c5:e4:55:70:89:d4:23:b7:5a:9c:7f:c1:53:3c: f0:b5:40:74:1a:f1:82:3b:38:c5:f5:17:1a:d4:a2: f7:73:c1:4e:1d:9f:47:8d:0d:e9:15:f5:36:a2:0b: ce:cf:62:e9:ba:2d:ed:45:16:91:b4:e3:da:1d:ae: 26:e2:73:8a:18:9a:2a:c8:11:20:e7:71:a2:aa:bc: c9:0a:7b:82:7e:e5:7e:78:35:79:d5:2a:b0:9d:c7: 1b:6b:98:0e:5d:1f:0c:3f:80:29:87:c2:fd:b5:0d: 0b:d3:e0:4d:39:b0:97:c3:ac:1f:0b:97:a4:b0:e7: 0c:50:05:ce:58:f1:d1:31:80:19:8f:1d:ec:88:d5: 34:77:79:31:6b:6b:76:59:d2:a4:14:fa:46:b4:fc: 1d:68:f6:64:0e:fe:1b:03:70:30:37:8c:57:89:e0: 91:83:5b:99:9a:b2:de:ef:48:19:a8:6d:04:94:2c: 1d:78:c9:e2:e6:3a:4b:f9:33:37:5d:f2:24:5c:50: 76:05:c3:54:b9:f7:da:44:51:58:fb:31:22:1a:36: 21:77:dc:bf:a7:52:40:ee:e8:d4:20:59:60:3c:8c: bf:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:66:87:3C:EA:33:E4:FA:85:7A:A8:81:16:E5:0D:04:43:B6:6E:25 X509v3 Authority Key Identifier: keyid:44:84:D0:7D:A6:8D:53:05:0C:DC:F6:B1:3C:0C:05:45:E6:45:7C:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RITQfaaNUwUM3PaxPAwFReZFfOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:1b:d1:2f:1a:3f:19:1c:0d:aa:22:41:2d:62:c3:09:23:78: 4b:86:ee:7c:db:08:ff:9b:38:01:6b:ab:a0:54:10:e2:ad:97: ec:74:8a:52:23:41:81:c6:e9:dc:5b:77:a4:41:fc:94:71:6f: 61:53:cd:3c:02:f1:ba:f6:da:5a:d7:8c:e1:85:0d:5b:de:ef: b6:5b:bb:e8:f6:78:07:e2:29:4f:49:cb:6b:11:23:23:c1:c3: ac:3f:e4:a7:54:f7:97:3b:2e:83:75:f1:45:53:1b:66:30:08: e5:42:6c:6b:23:a3:ca:fe:c8:f1:f2:07:58:27:b5:60:9c:d2: bd:cb:88:36:06:b0:af:9a:ff:c1:6c:3a:12:86:39:ec:d2:26: e4:0a:4f:80:e3:3f:ed:b8:83:ae:57:d4:a8:71:d7:b6:9e:56: 1d:cb:56:08:f7:f8:b6:33:14:ff:89:49:9f:e8:c8:48:50:45: 70:4d:89:fb:e9:ba:2d:d8:3e:24:4a:9a:77:75:fa:88:43:b9: 0c:cb:37:80:41:f6:10:ea:ad:8d:62:ba:4c:98:55:c1:4d:7b: 2a:c3:d7:29:c7:8c:94:ce:89:00:d4:24:75:ae:1f:19:22:e8: 5e:55:42:88:b8:62:b1:cb:3e:e7:d8:bf:83:70:cb:2b:09:e0: 50:6b:da:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAuwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVDRUExMTAvBgNVBAUTKDQ0ODREMDdEQTY4RDUzMDUwQ0RDRjZCMTNDMEMwNTQ1 RTY0NTdDRTUwHhcNMjYxMDIxMDEyODAwWhcNMjYxMDI4MDEyODAwWjAYMRYwFAYD VQQDEw02YWQ4MTUyMS1lOTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA30W2ChiaQCGtV0LPXYYZMvj/aySN2uWSr2+rgcg6xeRVcInUI7danH/BUzzw tUB0GvGCOzjF9Rca1KL3c8FOHZ9HjQ3pFfU2ogvOz2Lpui3tRRaRtOPaHa4m4nOK GJoqyBEg53GiqrzJCnuCfuV+eDV51Sqwnccba5gOXR8MP4Aph8L9tQ0L0+BNObCX w6wfC5eksOcMUAXOWPHRMYAZjx3siNU0d3kxa2t2WdKkFPpGtPwdaPZkDv4bA3Aw N4xXieCRg1uZmrLe70gZqG0ElCwdeMni5jpL+TM3XfIkXFB2BcNUuffaRFFY+zEi GjYhd9y/p1JA7ujUIFlgPIy/vwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHRmhzzq M+T6hXqogRblDQRDtm4lMB8GA1UdIwQYMBaAFESE0H2mjVMFDNz2sTwMBUXmRXzl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUNFQS8xRjYzQTU2ODY0 RUUxMUVEQTRBMzQ1MTNDNEY5QUUwMi9SSVRRZmFhTlV3VU0zUGF4UEF3RlJlWkZm T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1JJVFFmYWFOVXdVTTNQYXhQQXdGUmVaRmZPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUNFQS8xRjYzQTU2ODY0RUUxMUVEQTRBMzQ1MTNDNEY5QUUwMi9SSVRRZmFhTlV3 VU0zUGF4UEF3RlJlWkZmT1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGBvRLxo/GRwNqiJBLWLDCSN4S4bufNsI/5s4AWuroFQQ4q2X7HSKUiNBgcbp 3Ft3pEH8lHFvYVPNPALxuvbaWteM4YUNW97vtlu76PZ4B+IpT0nLaxEjI8HDrD/k p1T3lzsug3XxRVMbZjAI5UJsayOjyv7I8fIHWCe1YJzSvcuINgawr5r/wWw6EoY5 7NIm5ApPgOM/7biDrlfUqHHXtp5WHctWCPf4tjMU/4lJn+jISFBFcE2J++m6Ldg+ JEqad3X6iEO5DMs3gEH2EOqtjWK6TJhVwU17KsPXKceMlM6JANQkda4fGSLoXlVC iLhiscs+59i/g3DLKwngUGvaPg== -----END CERTIFICATE-----Generated at Wed Oct 21 18:19:55 2026 by rpki-client