$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BA3E7/64776BEE8A1F11F19E4EC7A16811F970/Fkl8IIYtsywfe60cEQzGsoBSRXU.mft File: Fkl8IIYtsywfe60cEQzGsoBSRXU.mft (raw, json) Hash identifier: q8mJrrqEty+rE/f7dTz0cS86T1iVXLISKPDvjCnSXgc= Subject key identifier: 60:69:60:9D:7B:52:5D:8D:F9:0A:31:AB:5D:24:E3:8C:D7:47:89:C8 Authority key identifier: 16:49:7C:20:86:2D:B3:2C:1F:7B:AD:1C:11:0C:C6:B2:80:52:45:75 Certificate issuer: /CN=A91BA3E7/serialNumber=16497C20862DB32C1F7BAD1C110CC6B280524575 Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fkl8IIYtsywfe60cEQzGsoBSRXU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA3E7/64776BEE8A1F11F19E4EC7A16811F970/Fkl8IIYtsywfe60cEQzGsoBSRXU.mft Manifest number: 2E Signing time: Mon 19 Oct 2026 09:26:58 +0000 Manifest this update: Mon 19 Oct 2026 09:26:57 +0000 Manifest next update: Mon 26 Oct 2026 09:26:57 +0000 Files and hashes: 1: Fkl8IIYtsywfe60cEQzGsoBSRXU.crl (hash: 28l/Le8H3wUUXCqtoL86tvUmSRU2+X29RwH5Fc61THA=) 2: 2C58A8288A3C11F18F5718FE3111F970.roa (hash: SONSYy4tIc7OLfGgQbiSXlMj9cIg5ZBgBiRgNLwC7Qs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA3E7/64776BEE8A1F11F19E4EC7A16811F970/Fkl8IIYtsywfe60cEQzGsoBSRXU.crl rsync://rpki.apnic.net/member_repository/A91BA3E7/64776BEE8A1F11F19E4EC7A16811F970/Fkl8IIYtsywfe60cEQzGsoBSRXU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fkl8IIYtsywfe60cEQzGsoBSRXU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 09:26:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA3E7, serialNumber=16497C20862DB32C1F7BAD1C110CC6B280524575 Validity Not Before: Oct 19 09:26:57 2026 GMT Not After : Oct 26 09:26:57 2026 GMT Subject: CN=6ad5e261-d5af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9d:36:7d:68:08:44:f0:53:de:2e:b0:0f:56: bc:49:2e:2e:ee:10:de:ea:fb:b1:45:98:e0:9e:60: 65:6e:ba:b3:97:37:da:69:a5:97:f9:3f:09:6d:42: 13:33:67:9c:1d:61:62:09:f1:d6:39:45:0c:0e:ae: 04:d5:66:82:bc:0e:ec:a2:aa:63:b4:c4:f9:56:f2: 6c:98:cc:d4:11:a7:e6:a8:a7:6c:c2:65:27:05:6a: f2:98:e8:e2:ab:10:b9:6d:8d:7e:91:a0:8e:34:20: fa:7c:b8:47:63:3c:bf:60:81:95:e3:53:2f:87:61: d0:00:73:e8:7f:c5:20:3e:ee:b7:cd:32:fd:91:f1: 3d:8f:5c:e4:9d:9d:47:cf:4b:8a:75:b2:64:68:a7: 1a:11:fd:9a:8a:d5:c6:48:16:36:89:b3:17:f3:a3: 13:f9:0f:2c:a7:f8:07:a8:74:5e:e8:1e:6e:2c:02: c1:79:aa:a5:9e:e7:d6:d7:71:b4:0e:d3:c8:49:e5: 0a:0d:ef:03:7e:42:05:7d:3a:9f:e4:95:88:ea:50: 0c:3b:54:2d:d3:ff:b0:c1:fc:84:ff:fc:e0:0a:60: fd:d4:e6:83:36:71:cc:cb:7e:a0:9b:ca:2f:ab:0c: e6:06:c4:69:85:04:0c:9a:e6:b2:7a:83:3b:76:d3: 7d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:69:60:9D:7B:52:5D:8D:F9:0A:31:AB:5D:24:E3:8C:D7:47:89:C8 X509v3 Authority Key Identifier: keyid:16:49:7C:20:86:2D:B3:2C:1F:7B:AD:1C:11:0C:C6:B2:80:52:45:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA3E7/64776BEE8A1F11F19E4EC7A16811F970/Fkl8IIYtsywfe60cEQzGsoBSRXU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fkl8IIYtsywfe60cEQzGsoBSRXU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA3E7/64776BEE8A1F11F19E4EC7A16811F970/Fkl8IIYtsywfe60cEQzGsoBSRXU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:a8:9a:82:a1:a3:e8:32:a9:ce:b4:cd:16:5d:a1:85:44:4e: 70:23:ef:d0:35:b0:31:c7:f0:c4:14:ed:df:99:63:39:c1:24: e1:e4:d7:2f:45:c8:4b:70:59:c0:10:c7:3e:19:e2:19:3b:8e: ef:f0:15:45:74:ea:79:c2:9e:e5:ff:23:2c:1d:b9:ad:f1:1d: 9d:ff:a8:21:a7:9a:87:37:b9:5f:0a:e4:9a:60:f6:e5:d6:f1: f6:50:ba:19:4d:51:ed:23:46:07:9b:8c:24:a6:d3:66:2f:10: 53:32:64:ce:86:e5:58:ac:a8:2b:b0:69:c5:17:46:b6:c0:80: 7e:43:2a:cd:fc:a7:c5:8f:d4:b2:57:da:d9:f2:55:06:17:2d: a9:b3:f3:da:b7:9a:6d:5c:0b:d8:78:c1:f3:b3:dd:88:a2:96: 86:fa:c4:18:c0:ee:24:65:1b:91:bf:92:27:68:2c:10:3a:3b: 9c:f7:2b:90:bc:a8:63:06:f5:10:88:52:f2:d5:f7:9f:a7:8d: f2:cc:92:ff:43:fe:8c:6e:2f:71:f4:3f:88:9d:f7:7f:c4:04: 79:d7:21:29:46:7e:b6:39:fa:54:f1:91:a5:e6:1f:10:55:e6: dd:fb:20:5d:c4:fb:3c:ec:05:44:78:2b:19:fc:7b:83:6e:25: f7:20:d3:e6 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QTNFNzExMC8GA1UEBRMoMTY0OTdDMjA4NjJEQjMyQzFGN0JBRDFDMTEwQ0M2QjI4 MDUyNDU3NTAeFw0yNjEwMTkwOTI2NTdaFw0yNjEwMjYwOTI2NTdaMBgxFjAUBgNV BAMTDTZhZDVlMjYxLWQ1YWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDnTZ9aAhE8FPeLrAPVrxJLi7uEN7q+7FFmOCeYGVuurOXN9pppZf5PwltQhMz Z5wdYWIJ8dY5RQwOrgTVZoK8DuyiqmO0xPlW8myYzNQRp+aop2zCZScFavKY6OKr ELltjX6RoI40IPp8uEdjPL9ggZXjUy+HYdAAc+h/xSA+7rfNMv2R8T2PXOSdnUfP S4p1smRopxoR/ZqK1cZIFjaJsxfzoxP5Dyyn+AeodF7oHm4sAsF5qqWe59bXcbQO 08hJ5QoN7wN+QgV9Op/klYjqUAw7VC3T/7DB/IT//OAKYP3U5oM2cczLfqCbyi+r DOYGxGmFBAya5rJ6gzt2032hAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUYGlgnXtS XY35CjGrXSTjjNdHicgwHwYDVR0jBBgwFoAUFkl8IIYtsywfe60cEQzGsoBSRXUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJBM0U3LzY0Nzc2QkVFOEEx RjExRjE5RTRFQzdBMTY4MTFGOTcwL0ZrbDhJSVl0c3l3ZmU2MGNFUXpHc29CU1JY VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRmtsOElJWXRzeXdmZTYwY0VRekdzb0JTUlhVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJB M0U3LzY0Nzc2QkVFOEExRjExRjE5RTRFQzdBMTY4MTFGOTcwL0ZrbDhJSVl0c3l3 ZmU2MGNFUXpHc29CU1JYVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCsqJqCoaPoMqnOtM0WXaGFRE5wI+/QNbAxx/DEFO3fmWM5wSTh5NcvRchLcFnA EMc+GeIZO47v8BVFdOp5wp7l/yMsHbmt8R2d/6ghp5qHN7lfCuSaYPbl1vH2ULoZ TVHtI0YHm4wkptNmLxBTMmTOhuVYrKgrsGnFF0a2wIB+QyrN/KfFj9SyV9rZ8lUG Fy2ps/Pat5ptXAvYeMHzs92IopaG+sQYwO4kZRuRv5InaCwQOjuc9yuQvKhjBvUQ iFLy1fefp43yzJL/Q/6Mbi9x9D+Infd/xAR51yEpRn62OfpU8ZGl5h8QVebd+yBd xPs87AVEeCsZ/HuDbiX3INPm -----END CERTIFICATE-----Generated at Tue Oct 20 09:34:22 2026 by rpki-client