$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft File: a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft (raw, json) Hash identifier: z2sscliF0Lc9hQIo3E92e42e9cL6FcYTZc4NqMnP4ak= Subject key identifier: B3:8A:7C:62:11:B6:2A:18:3C:D6:E8:8A:97:DA:6C:1C:F2:53:C0:5F Authority key identifier: 6B:63:A6:0E:7D:7F:51:D0:38:72:8C:64:25:90:60:47:01:6C:99:04 Certificate issuer: /CN=A91BDEEB/serialNumber=6B63A60E7D7F51D038728C6425906047016C9904 Certificate serial: 019A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft Manifest number: 0170 Signing time: Sun 25 Oct 2026 05:50:19 +0000 Manifest this update: Sun 25 Oct 2026 05:50:19 +0000 Manifest next update: Sun 01 Nov 2026 05:50:19 +0000 Files and hashes: 1: a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl (hash: Dd3BOw17Z0DInR4GLOzY+0qIpuOFzwn7rOGEV52KaDc=) 2: 1E2A57A4C0E411F1A831D8747011F970.roa (hash: GAuK+MFr/7oRVU4NiTouplBZKLF2zcdwy44/C6c3xMw=) 3: BC6277B8700211F19DFE431193A30FBC.roa (hash: GSeqy5s5t10nUG8tqKIEN6PcxnTZQTa977Nxb8Hr8hw=) 4: 8BB9BA0A739411F195A6A0F072A30FBC.roa (hash: FzVInQGTXeLkU7QD7YhuspnWb0dDGRHG9zYuBhHsID4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 05:33:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 410 (0x19a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDEEB, serialNumber=6B63A60E7D7F51D038728C6425906047016C9904 Validity Not Before: Oct 25 05:50:19 2026 GMT Not After : Nov 1 05:50:19 2026 GMT Subject: CN=6add989b-6e9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:26:b6:c3:be:e7:4b:a3:9d:a6:03:91:78:88: 4f:24:7e:5e:6e:bf:8d:e4:fb:2c:c0:07:16:b7:c6: db:4f:c2:2d:92:9b:8e:67:ad:a6:29:df:db:ef:ab: 6b:05:e0:bf:81:83:f9:89:f9:aa:ef:b4:ac:ab:c4: e9:00:2b:8a:c1:3f:fb:99:0f:7f:f7:fc:9c:0c:82: 15:12:51:15:25:96:7d:01:8b:1e:83:7c:a3:a5:d7: 08:d2:d1:52:f5:02:7b:b7:00:cf:6e:8e:1b:82:d2: 70:72:28:76:f8:84:c8:40:37:f9:d5:0d:23:aa:bf: ba:3d:7d:88:07:27:7d:f4:55:6e:5c:96:7b:07:2d: 3e:80:e2:3d:8d:a9:72:1f:eb:a8:c8:a9:73:64:ca: c1:e9:9e:97:1c:cb:2e:4d:f0:a1:40:39:3a:6f:78: 67:da:41:7a:a5:40:f8:68:72:08:13:8f:c7:30:76: 4f:07:b1:a9:7f:aa:c2:66:61:0d:59:2e:89:bb:8f: 65:ef:7a:3e:f3:7f:9c:8e:7d:03:60:ba:35:10:6d: da:b1:21:6f:5f:4b:08:b9:73:e4:98:07:43:14:43: f6:e1:02:1a:4d:23:7e:63:b1:a4:ec:bb:31:e1:94: aa:63:48:ce:8b:3b:50:c7:d6:87:57:61:32:c8:33: 1a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:8A:7C:62:11:B6:2A:18:3C:D6:E8:8A:97:DA:6C:1C:F2:53:C0:5F X509v3 Authority Key Identifier: keyid:6B:63:A6:0E:7D:7F:51:D0:38:72:8C:64:25:90:60:47:01:6C:99:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:2c:12:62:bc:41:4c:67:f6:69:90:6d:ff:2d:ba:4e:3a:24: b2:b0:15:9d:7f:1e:08:0b:88:c3:80:d9:0b:0f:a7:ba:70:4f: be:ed:04:b5:2a:5c:2b:10:10:4a:c4:cf:79:22:fe:15:25:ec: cb:7d:34:2f:9a:5a:5e:0d:c1:2e:ec:79:2c:cb:49:b9:a5:69: c3:f9:6b:a2:cb:4f:6c:83:12:91:a7:c5:fb:10:e2:d6:af:70: de:0e:cb:b0:87:a6:cb:29:d4:25:a0:b3:34:14:84:34:03:f9: 2b:80:75:ff:db:e1:46:e1:df:cd:e2:4e:70:ba:44:ea:1a:1e: 83:88:7f:11:11:5e:e9:d7:7c:a3:9b:1f:5e:e8:12:82:b6:92: ba:5c:d8:fd:75:4a:e6:37:7a:2e:68:fb:66:e5:60:d0:a6:58: 3f:c1:e7:35:3c:9a:eb:ff:68:12:b6:54:9d:1a:ae:00:83:77: d8:1d:69:40:1f:e2:88:e7:01:8b:ed:d5:78:a7:e0:11:16:7e: ee:80:0a:25:86:3a:e5:e7:b5:2f:b3:85:37:5a:ad:e1:1a:29: 4c:e2:63:38:7c:c5:17:3d:fb:c8:38:ff:a3:28:e4:f0:98:29: 29:6d:ae:4e:03:94:d9:33:13:5f:23:69:9a:af:d9:99:ae:78: 90:6c:6b:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRFRUIxMTAvBgNVBAUTKDZCNjNBNjBFN0Q3RjUxRDAzODcyOEM2NDI1OTA2MDQ3 MDE2Qzk5MDQwHhcNMjYxMDI1MDU1MDE5WhcNMjYxMTAxMDU1MDE5WjAYMRYwFAYD VQQDEw02YWRkOTg5Yi02ZTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqya2w77nS6OdpgOReIhPJH5ebr+N5PsswAcWt8bbT8ItkpuOZ62mKd/b76tr BeC/gYP5ifmq77Ssq8TpACuKwT/7mQ9/9/ycDIIVElEVJZZ9AYseg3yjpdcI0tFS 9QJ7twDPbo4bgtJwcih2+ITIQDf51Q0jqr+6PX2IByd99FVuXJZ7By0+gOI9jaly H+uoyKlzZMrB6Z6XHMsuTfChQDk6b3hn2kF6pUD4aHIIE4/HMHZPB7Gpf6rCZmEN WS6Ju49l73o+83+cjn0DYLo1EG3asSFvX0sIuXPkmAdDFEP24QIaTSN+Y7Gk7Lsx 4ZSqY0jOiztQx9aHV2EyyDMa8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLOKfGIR tioYPNboipfabBzyU8BfMB8GA1UdIwQYMBaAFGtjpg59f1HQOHKMZCWQYEcBbJkE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREVFQi8xRUU3RkE2MEU1 RjQxMUVGQUJEMzlEN0VDNEY5QUUwMi9hMk9tRG4xX1VkQTRjb3hrSlpCZ1J3RnNt UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2EyT21EbjFfVWRBNGNveGtKWkJnUndGc21RUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REVFQi8xRUU3RkE2MEU1RjQxMUVGQUJEMzlEN0VDNEY5QUUwMi9hMk9tRG4xX1Vk QTRjb3hrSlpCZ1J3RnNtUVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAiwSYrxBTGf2aZBt/y26TjoksrAVnX8eCAuIw4DZCw+nunBPvu0EtSpcKxAQ SsTPeSL+FSXsy300L5paXg3BLux5LMtJuaVpw/lrostPbIMSkafF+xDi1q9w3g7L sIemyynUJaCzNBSENAP5K4B1/9vhRuHfzeJOcLpE6hoeg4h/ERFe6dd8o5sfXugS graSulzY/XVK5jd6Lmj7ZuVg0KZYP8HnNTya6/9oErZUnRquAIN32B1pQB/iiOcB i+3VeKfgERZ+7oAKJYY65ee1L7OFN1qt4RopTOJjOHzFFz37yDj/oyjk8JgpKW2u TgOU2TMTXyNpmq/Zma54kGxreQ== -----END CERTIFICATE-----Generated at Sun Oct 25 14:29:38 2026 by rpki-client