$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft File: T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft (raw, json) Hash identifier: qxUIfJLQAKlaqG8dYGNem9a1euVQCkKRxdJpYbUJXGE= Subject key identifier: 33:D4:1F:B9:5F:9D:7A:18:4E:CF:4C:D9:03:61:B4:41:A8:D1:EF:D2 Authority key identifier: 4F:5A:F5:65:D3:0D:D5:4F:24:14:7E:F5:E1:78:AA:0B:AA:33:FC:29 Certificate issuer: /CN=A91BB883/serialNumber=4F5AF565D30DD54F24147EF5E178AA0BAA33FC29 Certificate serial: 0D19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft Manifest number: 0D0D Signing time: Thu 08 Oct 2026 18:28:21 +0000 Manifest this update: Thu 08 Oct 2026 18:28:20 +0000 Manifest next update: Thu 15 Oct 2026 18:28:20 +0000 Files and hashes: 1: T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl (hash: U1S8ys8EIFufwe14rmTEZ18ulTtr3Baw3N9YgF9CSRQ=) 2: 8160C03610E911EA86FA6774C4F9AE02.roa (hash: 6d9x5P4qjslvkCA0UbFumpnnbX594CB88ciKOH4G9Ks=) 3: w0UxDksEhVgTbiOPi32yfBjO8Nc.asa (hash: cCNwpQu6uKNcvL+/ux8Wy6Y48MKl03STw/0+ZuYQCes=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 18:28:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3353 (0xd19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB883, serialNumber=4F5AF565D30DD54F24147EF5E178AA0BAA33FC29 Validity Not Before: Oct 8 18:28:20 2026 GMT Not After : Oct 15 18:28:20 2026 GMT Subject: CN=6ac7e0c4-6fe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7c:61:25:af:49:37:95:4a:a6:32:a3:f1:9c: 83:78:dc:01:2e:6d:fd:fb:0d:e1:22:32:2b:ae:3d: e4:58:98:ca:c4:e3:3d:39:b0:32:88:35:e0:b7:4b: d9:8a:62:e8:69:d5:36:7a:17:94:8a:d4:3a:67:d6: 7e:2e:2c:a7:9b:b8:69:78:15:9c:5b:0b:37:8e:ca: 8f:81:07:50:fc:2f:72:11:cf:9c:2f:1b:30:d6:57: cf:be:68:01:1c:21:70:d7:e9:5e:25:5c:30:5c:5a: 55:0a:aa:0b:01:41:42:73:1a:78:ee:45:44:05:6d: 1b:58:ba:93:f2:48:3d:dc:e6:bc:7d:0c:03:99:47: db:4c:49:42:4d:05:ef:46:45:c0:fa:64:5d:dd:7d: a1:f0:54:da:fc:c5:c8:c8:bf:b3:a6:29:12:a0:6c: 3c:2f:7c:a1:94:d9:69:6c:96:93:3f:89:08:a5:c3: 87:23:d7:04:e0:16:94:9c:6a:cb:b4:55:df:9e:75: 24:42:dd:09:65:12:66:e7:c3:cb:58:93:c0:d3:92: e3:12:96:55:e1:00:e7:6d:25:e6:d1:ce:3a:1e:9e: da:a1:ff:4c:62:61:8d:b3:96:04:7a:98:17:21:5e: 40:f1:49:ff:40:eb:b4:86:db:ab:25:63:59:29:aa: 0e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D4:1F:B9:5F:9D:7A:18:4E:CF:4C:D9:03:61:B4:41:A8:D1:EF:D2 X509v3 Authority Key Identifier: keyid:4F:5A:F5:65:D3:0D:D5:4F:24:14:7E:F5:E1:78:AA:0B:AA:33:FC:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:50:fd:e8:11:d3:e0:bd:6b:21:c4:11:80:5e:93:8d:24:ef: 00:56:0d:67:15:c8:07:89:0c:e8:2a:8d:31:cf:42:b8:e9:1e: 88:5c:43:b6:0a:c5:1a:91:10:f9:d0:cc:84:5d:29:de:23:7b: 8a:45:94:8b:34:2d:fb:a2:51:9a:11:b9:2f:5e:b7:82:af:fe: 63:74:37:99:34:5f:e6:6e:6c:ef:9e:13:30:f4:a5:7c:44:fe: f7:46:c2:0f:cf:c0:20:3b:22:1e:1f:7b:6b:e0:63:9e:13:92: dd:49:90:14:17:0c:39:51:6b:05:86:30:48:6d:3f:e4:f8:a9: 96:a4:be:bc:1c:65:be:fb:a2:c4:8d:8a:57:4a:cd:22:7e:6c: 32:d2:b4:34:97:82:5d:f4:15:2d:74:00:60:3f:fa:5a:ed:6c: fa:d3:99:26:79:da:9a:29:e1:1a:89:42:06:20:1a:b0:5b:64: 94:c7:01:43:cc:6b:88:41:04:02:25:18:fe:9b:db:37:85:9a: a0:c5:71:15:84:a3:11:7d:3b:d3:b3:07:29:3d:ac:49:7b:d1: 86:4b:62:90:86:75:76:e1:30:39:6a:87:16:b2:93:db:9d:0d: a1:db:73:49:a2:ca:17:6c:bb:a8:96:78:16:10:6f:75:bb:7d: 76:11:82:ad -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDRkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI4ODMxMTAvBgNVBAUTKDRGNUFGNTY1RDMwREQ1NEYyNDE0N0VGNUUxNzhBQTBC QUEzM0ZDMjkwHhcNMjYxMDA4MTgyODIwWhcNMjYxMDE1MTgyODIwWjAYMRYwFAYD VQQDEw02YWM3ZTBjNC02ZmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsHxhJa9JN5VKpjKj8ZyDeNwBLm39+w3hIjIrrj3kWJjKxOM9ObAyiDXgt0vZ imLoadU2eheUitQ6Z9Z+Liynm7hpeBWcWws3jsqPgQdQ/C9yEc+cLxsw1lfPvmgB HCFw1+leJVwwXFpVCqoLAUFCcxp47kVEBW0bWLqT8kg93Oa8fQwDmUfbTElCTQXv RkXA+mRd3X2h8FTa/MXIyL+zpikSoGw8L3yhlNlpbJaTP4kIpcOHI9cE4BaUnGrL tFXfnnUkQt0JZRJm58PLWJPA05LjEpZV4QDnbSXm0c46Hp7aof9MYmGNs5YEepgX IV5A8Un/QOu0hturJWNZKaoODwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDPUH7lf nXoYTs9M2QNhtEGo0e/SMB8GA1UdIwQYMBaAFE9a9WXTDdVPJBR+9eF4qguqM/wp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjg4My9FOTgyQkEzNjEw RTcxMUVBOUQyMUMyNkZDNEY5QUUwMi9UMXIxWmRNTjFVOGtGSDcxNFhpcUM2b3pf Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QxcjFaZE1OMVU4a0ZINzE0WGlxQzZvel9Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qjg4My9FOTgyQkEzNjEwRTcxMUVBOUQyMUMyNkZDNEY5QUUwMi9UMXIxWmRNTjFV OGtGSDcxNFhpcUM2b3pfQ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVlD96BHT4L1rIcQRgF6TjSTvAFYNZxXIB4kM6CqNMc9CuOkeiFxDtgrFGpEQ +dDMhF0p3iN7ikWUizQt+6JRmhG5L163gq/+Y3Q3mTRf5m5s754TMPSlfET+90bC D8/AIDsiHh97a+BjnhOS3UmQFBcMOVFrBYYwSG0/5PiplqS+vBxlvvuixI2KV0rN In5sMtK0NJeCXfQVLXQAYD/6Wu1s+tOZJnnaminhGolCBiAasFtklMcBQ8xriEEE AiUY/pvbN4WaoMVxFYSjEX0707MHKT2sSXvRhktikIZ1duEwOWqHFrKT250Nodtz SaLKF2y7qJZ4FhBvdbt9dhGCrQ== -----END CERTIFICATE-----Generated at Fri Oct 9 17:47:46 2026 by rpki-client