$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft File: 1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft (raw, json) Hash identifier: nkaLAUES2+5jRfvKWEP2L5q/DzMBgxkDmDxkJNj+XwI= Subject key identifier: B1:A4:9C:CF:54:9E:84:FA:93:B1:6E:48:3F:11:AD:BC:AC:48:54:5F Authority key identifier: D4:3B:44:D5:F9:37:F6:5E:8B:AB:9B:7F:98:7A:3D:C9:D2:10:4A:32 Certificate issuer: /CN=A91B7BDC/serialNumber=D43B44D5F937F65E8BAB9B7F987A3DC9D2104A32 Certificate serial: 0576 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DtE1fk39l6Lq5t_mHo9ydIQSjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft Manifest number: 0564 Signing time: Sat 24 Oct 2026 23:24:17 +0000 Manifest this update: Sat 24 Oct 2026 23:24:16 +0000 Manifest next update: Sat 31 Oct 2026 23:24:16 +0000 Files and hashes: 1: 1DtE1fk39l6Lq5t_mHo9ydIQSjI.crl (hash: KG3R0w8IxTReNbXyub4OmpWEfuLnFN5t2l4rb22G9DM=) 2: D76AC8AC2EAB11EF9B369566C4F9AE02.roa (hash: THixLa/45ZK/Pkv9/quk4OO+SRxBsBhh9iA6Q9k83cw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.crl rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DtE1fk39l6Lq5t_mHo9ydIQSjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 23:24:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1398 (0x576) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7BDC, serialNumber=D43B44D5F937F65E8BAB9B7F987A3DC9D2104A32 Validity Not Before: Oct 24 23:24:16 2026 GMT Not After : Oct 31 23:24:16 2026 GMT Subject: CN=6add3e21-32a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6d:27:72:4c:fb:ae:0c:1b:49:77:a3:2d:8c: 3a:57:da:35:ac:58:f3:51:17:fd:ee:a4:54:a1:e6: c7:e1:f2:c5:4d:5b:07:0f:df:ab:e5:68:45:58:dd: 4c:96:f8:f3:a9:f5:5d:5c:63:18:c6:e2:40:7b:24: dd:90:c5:b2:4e:a9:32:52:82:ef:cb:f8:ed:99:cd: e7:52:95:31:b8:3e:43:d4:ea:53:8a:a5:3c:ad:3f: 39:7a:e8:aa:e2:61:58:11:98:b3:b8:9e:25:7a:e8: e1:6e:bf:67:b8:2f:b0:10:1c:0d:8d:a6:ff:e1:f8: b3:9a:9b:9f:db:b0:d4:19:34:68:2c:fb:f8:e9:a1: c6:4d:f9:7d:47:e2:7a:a0:4d:1c:05:dd:50:28:4a: 21:19:08:b8:4c:b6:d9:28:da:d4:1f:32:25:2e:35: 6d:80:e5:cc:44:63:c6:2f:c6:fe:0a:1e:f5:cc:0e: 70:8f:8e:21:57:eb:a9:21:4c:16:02:bb:0a:ff:8b: 2c:74:68:ac:12:0d:59:db:c8:d1:b6:00:63:2e:cd: ad:51:fc:55:a2:dd:15:2f:22:8f:95:e6:c1:37:e2: 9d:32:08:35:f1:24:d7:90:ed:01:d2:c1:5f:dc:d8: 50:8b:41:6a:9e:a6:fc:80:3b:45:0a:91:fb:02:c0: 4b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:A4:9C:CF:54:9E:84:FA:93:B1:6E:48:3F:11:AD:BC:AC:48:54:5F X509v3 Authority Key Identifier: keyid:D4:3B:44:D5:F9:37:F6:5E:8B:AB:9B:7F:98:7A:3D:C9:D2:10:4A:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DtE1fk39l6Lq5t_mHo9ydIQSjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:73:93:0c:bf:43:73:30:e9:ec:f7:52:34:ac:69:4b:62:0a: bb:89:3d:f7:7b:75:48:42:d7:00:c3:27:61:f9:b0:74:84:bf: 9f:ed:7c:14:02:3d:04:b8:9f:3d:6a:54:ac:e1:f7:41:2c:97: ca:05:c6:9a:93:57:8d:7c:75:ca:b6:c1:37:b4:e4:0c:a1:77: 17:c8:e4:24:63:ae:a2:de:6f:31:95:0d:c6:a1:9b:9b:20:2b: 00:04:d6:e3:2b:a3:d4:64:c0:bc:67:fe:f7:ac:aa:34:9f:86: 14:86:b5:c3:4f:c4:5f:69:90:4f:8d:d3:a4:6f:74:b0:ab:c6: 2c:9d:45:1d:05:63:06:70:49:f8:cf:b1:01:0d:e7:cf:57:f8: da:26:44:d0:81:e8:94:c2:66:e3:1e:75:70:f2:2e:42:f3:29: e9:34:e5:68:3d:63:ec:38:07:28:97:0f:c4:0c:2a:c4:00:08: f0:70:0c:ba:ad:ca:e4:48:28:5f:00:67:b4:68:d7:c5:55:68: 18:6d:ca:84:10:87:be:81:81:d2:29:2c:25:82:87:69:59:30: bc:ef:12:ce:f2:b9:b5:16:e1:fa:bf:a9:b1:d9:19:1c:37:e4: 66:a7:c0:69:2e:81:08:98:2e:c0:44:c8:01:dd:e3:24:2b:ba: 0b:79:fe:e5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCREMxMTAvBgNVBAUTKEQ0M0I0NEQ1RjkzN0Y2NUU4QkFCOUI3Rjk4N0EzREM5 RDIxMDRBMzIwHhcNMjYxMDI0MjMyNDE2WhcNMjYxMDMxMjMyNDE2WjAYMRYwFAYD VQQDEw02YWRkM2UyMS0zMmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz20nckz7rgwbSXejLYw6V9o1rFjzURf97qRUoebH4fLFTVsHD9+r5WhFWN1M lvjzqfVdXGMYxuJAeyTdkMWyTqkyUoLvy/jtmc3nUpUxuD5D1OpTiqU8rT85euiq 4mFYEZizuJ4leujhbr9nuC+wEBwNjab/4fizmpuf27DUGTRoLPv46aHGTfl9R+J6 oE0cBd1QKEohGQi4TLbZKNrUHzIlLjVtgOXMRGPGL8b+Ch71zA5wj44hV+upIUwW ArsK/4ssdGisEg1Z28jRtgBjLs2tUfxVot0VLyKPlebBN+KdMgg18STXkO0B0sFf 3NhQi0Fqnqb8gDtFCpH7AsBLRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLGknM9U noT6k7FuSD8RrbysSFRfMB8GA1UdIwQYMBaAFNQ7RNX5N/Zei6ubf5h6PcnSEEoy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0JEQy82ODFDOEY0NjU4 QkUxMUVDOEFFRDVGMkNDNEY5QUUwMi8xRHRFMWZrMzlsNkxxNXRfbUhvOXlkSVFT akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFEdEUxZmszOWw2THE1dF9tSG85eWRJUVNqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0JEQy82ODFDOEY0NjU4QkUxMUVDOEFFRDVGMkNDNEY5QUUwMi8xRHRFMWZrMzls NkxxNXRfbUhvOXlkSVFTakkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANXOTDL9DczDp7PdSNKxpS2IKu4k993t1SELXAMMnYfmwdIS/n+18FAI9BLif PWpUrOH3QSyXygXGmpNXjXx1yrbBN7TkDKF3F8jkJGOuot5vMZUNxqGbmyArAATW 4yuj1GTAvGf+96yqNJ+GFIa1w0/EX2mQT43TpG90sKvGLJ1FHQVjBnBJ+M+xAQ3n z1f42iZE0IHolMJm4x51cPIuQvMp6TTlaD1j7DgHKJcPxAwqxAAI8HAMuq3K5Ego XwBntGjXxVVoGG3KhBCHvoGB0iksJYKHaVkwvO8SzvK5tRbh+r+psdkZHDfkZqfA aS6BCJguwETIAd3jJCu6C3n+5Q== -----END CERTIFICATE-----Generated at Mon Oct 26 02:19:38 2026 by rpki-client