$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/lKlQswO0aQDdWjBhAwyJpIloA68.mft File: lKlQswO0aQDdWjBhAwyJpIloA68.mft (raw, json) Hash identifier: PNRh2S7u5t1BjENpQYdVe8pibySrlfoyXc/e+LoSJL0= Subject key identifier: DE:39:1F:A3:25:75:27:2E:E4:D9:C2:FF:74:9D:0C:C8:84:91:AE:9C Authority key identifier: 94:A9:50:B3:03:B4:69:00:DD:5A:30:61:03:0C:89:A4:89:68:03:AF Certificate issuer: /CN=A91BAD2D/serialNumber=94A950B303B46900DD5A3061030C89A4896803AF Certificate serial: 020A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKlQswO0aQDdWjBhAwyJpIloA68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/lKlQswO0aQDdWjBhAwyJpIloA68.mft Manifest number: 01F7 Signing time: Sun 01 Nov 2026 04:31:57 +0000 Manifest this update: Sun 01 Nov 2026 04:31:57 +0000 Manifest next update: Sun 08 Nov 2026 04:31:57 +0000 Files and hashes: 1: lKlQswO0aQDdWjBhAwyJpIloA68.crl (hash: peaL7vUAFo8CUfU5oGl3U1EaMwQfAU4ZJ+hF/05lP/I=) 2: 10771E5497C211F0A9D40817C4F9AE02.roa (hash: Ih6CUVzbaPRdHejVQvZNcYEMy1tnq4yUXbGOoq+u3g0=) 3: MFzrrnK2CeuQUnvz5PQKP11bTtE.asa (hash: DmA4ar5npXQ5knPMgO2cQGi1sU3ffWw3qw4cIOL81Bo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/lKlQswO0aQDdWjBhAwyJpIloA68.crl rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/lKlQswO0aQDdWjBhAwyJpIloA68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKlQswO0aQDdWjBhAwyJpIloA68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Nov 2026 04:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 522 (0x20a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAD2D, serialNumber=94A950B303B46900DD5A3061030C89A4896803AF Validity Not Before: Nov 1 04:31:57 2026 GMT Not After : Nov 8 04:31:57 2026 GMT Subject: CN=6ae6c0bd-b619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:91:3c:a2:9c:ed:0b:cb:7f:b3:da:0c:25:00: da:72:2e:88:50:7f:38:61:1c:ee:ce:04:fe:e7:82: c4:00:d7:82:e9:a1:29:d9:79:fd:95:d1:b9:6f:86: 16:ac:f0:d2:84:90:5f:43:f9:b5:17:70:83:04:75: 99:31:44:ba:8a:db:8c:56:0b:d4:81:24:5b:66:5b: cb:af:6d:67:0e:94:e4:a8:32:65:ab:97:de:5a:12: 06:44:75:f5:51:c0:f8:d9:84:6b:4f:49:ee:32:74: 21:92:c8:4b:18:4e:27:6c:13:c4:e3:4e:6f:20:1b: 7b:e0:75:2a:fb:0b:70:06:ba:f2:97:51:e3:46:b4: 44:59:21:23:5a:fa:66:c2:56:77:5e:51:2c:71:23: a6:8d:79:8a:d2:10:d9:29:fc:f0:08:b0:ae:8e:73: 62:95:c6:7e:5a:35:31:7e:c5:d2:fc:ac:9d:7f:20: 02:d7:00:78:84:11:47:b8:36:4e:16:67:a1:99:86: d0:47:15:8f:e8:c8:0a:de:dc:42:8e:77:7e:db:70: b8:a5:cf:46:5c:bf:d5:c8:00:fd:e7:d6:fb:ee:54: 85:3a:bf:c3:3d:a9:8a:bb:d8:61:74:af:06:04:a1: a5:64:b5:d9:bf:c6:ec:71:99:b0:e1:07:73:81:52: 41:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:39:1F:A3:25:75:27:2E:E4:D9:C2:FF:74:9D:0C:C8:84:91:AE:9C X509v3 Authority Key Identifier: keyid:94:A9:50:B3:03:B4:69:00:DD:5A:30:61:03:0C:89:A4:89:68:03:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/lKlQswO0aQDdWjBhAwyJpIloA68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKlQswO0aQDdWjBhAwyJpIloA68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/lKlQswO0aQDdWjBhAwyJpIloA68.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:b5:9a:53:6f:cb:27:14:57:91:5d:06:98:dc:ff:76:f4:f0: 73:db:cc:0d:97:82:e2:68:f5:66:75:1b:8b:c3:49:ac:a1:7a: 06:44:74:19:d9:a9:05:c4:1d:0e:1e:d9:f8:04:4b:31:c2:7e: 13:2b:44:b8:95:b2:d2:b8:17:b2:d5:df:25:19:3b:1a:2d:b8: 87:0f:56:a4:c5:96:61:47:4c:6f:cf:cc:32:51:08:78:96:41: dc:4f:4e:7f:28:ae:5b:94:ca:a7:7a:08:bd:0e:9a:89:da:5c: a3:f9:b9:e2:8c:c3:86:2e:a3:8a:3a:c3:05:4f:59:91:c9:2f: d5:a9:f7:79:63:8f:83:0b:7b:04:6b:df:af:f0:3a:49:93:48: ba:d1:81:dd:48:f1:db:63:58:c2:37:6f:54:83:21:c5:04:b2: 73:dd:04:bf:a8:4c:f1:be:d0:c8:37:d0:00:07:50:e0:1f:b3: 85:65:d1:83:b9:9a:71:99:48:e8:5c:99:c5:c4:39:c3:f4:f1: 45:ad:f2:08:55:45:18:5f:15:fa:a4:b2:e0:45:0d:63:c0:f4: 66:dd:fa:74:9b:fb:72:9e:70:d4:fc:00:6a:e2:60:bf:fe:15: 7e:a3:d9:40:ce:a6:b8:d3:bc:f5:ee:e6:0f:0e:64:5d:8f:51: c0:22:7c:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFEMkQxMTAvBgNVBAUTKDk0QTk1MEIzMDNCNDY5MDBERDVBMzA2MTAzMEM4OUE0 ODk2ODAzQUYwHhcNMjYxMTAxMDQzMTU3WhcNMjYxMTA4MDQzMTU3WjAYMRYwFAYD VQQDEw02YWU2YzBiZC1iNjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA75E8opztC8t/s9oMJQDaci6IUH84YRzuzgT+54LEANeC6aEp2Xn9ldG5b4YW rPDShJBfQ/m1F3CDBHWZMUS6ituMVgvUgSRbZlvLr21nDpTkqDJlq5feWhIGRHX1 UcD42YRrT0nuMnQhkshLGE4nbBPE405vIBt74HUq+wtwBrryl1HjRrREWSEjWvpm wlZ3XlEscSOmjXmK0hDZKfzwCLCujnNilcZ+WjUxfsXS/KydfyAC1wB4hBFHuDZO FmehmYbQRxWP6MgK3txCjnd+23C4pc9GXL/VyAD959b77lSFOr/DPamKu9hhdK8G BKGlZLXZv8bscZmw4QdzgVJB3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN45H6Ml dScu5NnC/3SdDMiEka6cMB8GA1UdIwQYMBaAFJSpULMDtGkA3VowYQMMiaSJaAOv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUQyRC85MDg4RUU1QUU4 MDExMUVFQUQ2QzUwMzBDNEY5QUUwMi9sS2xRc3dPMGFRRGRXakJoQXd5SnBJbG9B NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xLbFFzd08wYVFEZFdqQmhBd3lKcElsb0E2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUQyRC85MDg4RUU1QUU4MDExMUVFQUQ2QzUwMzBDNEY5QUUwMi9sS2xRc3dPMGFR RGRXakJoQXd5SnBJbG9BNjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABrWaU2/LJxRXkV0GmNz/dvTwc9vMDZeC4mj1ZnUbi8NJrKF6BkR0GdmpBcQd Dh7Z+ARLMcJ+EytEuJWy0rgXstXfJRk7Gi24hw9WpMWWYUdMb8/MMlEIeJZB3E9O fyiuW5TKp3oIvQ6aidpco/m54ozDhi6jijrDBU9Zkckv1an3eWOPgwt7BGvfr/A6 SZNIutGB3Ujx22NYwjdvVIMhxQSyc90Ev6hM8b7QyDfQAAdQ4B+zhWXRg7macZlI 6FyZxcQ5w/TxRa3yCFVFGF8V+qSy4EUNY8D0Zt36dJv7cp5w1PwAauJgv/4VfqPZ QM6muNO89e7mDw5kXY9RwCJ8Rw== -----END CERTIFICATE-----Generated at Sun Nov 1 10:51:32 2026 by rpki-client