$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft File: D6tO-YKPSvJnwW2K1HEKjuybu64.mft (raw, json) Hash identifier: OIjPnCcwtbfrE5iFhGxbYXiuFfCCY1kPrfrYzHTFoiw= Subject key identifier: 36:72:55:A6:F9:0E:3E:DD:42:A3:F6:27:E8:C9:86:B1:B0:4A:CA:C7 Authority key identifier: 0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE Certificate issuer: /CN=A91BEBE9/serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE Certificate serial: 028D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft Manifest number: 0279 Signing time: Fri 09 Oct 2026 02:25:03 +0000 Manifest this update: Fri 09 Oct 2026 02:25:03 +0000 Manifest next update: Fri 16 Oct 2026 02:25:03 +0000 Files and hashes: 1: D6tO-YKPSvJnwW2K1HEKjuybu64.crl (hash: h5WqrjUVgVOGECILoJWwOxEbpQ+VmzU5UEdzX37n3xo=) 2: A1C0742EFDF811EEA4D57274C4F9AE02.roa (hash: jxIjxLYPAa1qnB0jFN6nM/shPAzKUb5KsBQXc5gos7U=) 3: A16366C6FDF811EEA4D57274C4F9AE02.roa (hash: DAgB41BSoNhh0yFXjuFcNCWHBOk0V20tJ49xk0mHkPA=) 4: A0DEDD52FDF811EEA4D57274C4F9AE02.roa (hash: rm62Zobf+vSIv757GLuOQnassUi+6YwaOUBaAetb62A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 02:25:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 653 (0x28d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEBE9, serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE Validity Not Before: Oct 9 02:25:03 2026 GMT Not After : Oct 16 02:25:03 2026 GMT Subject: CN=6ac8507f-1d08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:3b:5b:41:3d:ef:47:77:9c:08:b4:b5:c3:e4: 79:35:5a:af:31:12:e9:27:7b:27:f2:ab:4c:d2:86: ae:de:8f:ca:8a:88:2b:1a:f9:9a:21:4f:44:41:ad: 22:12:01:66:3b:82:ac:bc:3a:6a:85:8f:5c:35:f2: dc:8b:1c:f6:b7:b7:ac:bd:67:a8:cd:62:87:51:73: a8:70:73:b7:a0:1b:76:c2:f9:9a:2f:f7:6f:e5:91: e6:7b:69:0c:86:5a:c0:20:34:fa:12:16:22:ab:35: ee:34:3c:dd:46:9e:7b:35:b1:20:f9:f7:96:fd:f5: c7:8f:4e:ef:6b:c8:1d:2e:a7:58:25:11:d8:d7:71: cf:6e:43:0e:94:0a:46:25:2c:43:36:5e:f7:33:e0: f1:1e:cd:4d:f1:84:c2:56:01:ab:8a:be:bd:27:c3: 1f:35:8b:b8:ef:2a:eb:ab:16:39:18:33:68:9b:c0: 14:36:55:d0:58:dc:6e:e4:16:d1:09:f5:ce:bf:69: 74:4d:32:8c:16:57:e1:5a:41:68:a7:5e:de:3b:3a: b4:ff:be:18:1a:d8:a1:bc:42:62:fb:35:ed:8b:08: 63:c3:c1:63:b7:0d:ca:f7:c4:3e:06:4e:30:03:13: bf:d6:78:5d:3c:66:ac:0f:cf:e1:80:f9:4d:2b:3c: af:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:72:55:A6:F9:0E:3E:DD:42:A3:F6:27:E8:C9:86:B1:B0:4A:CA:C7 X509v3 Authority Key Identifier: keyid:0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:f9:12:0c:96:bc:87:04:27:9d:be:0c:47:4a:7a:a2:8a:bd: 89:eb:25:97:df:6d:6e:86:ef:7c:5d:bd:d7:07:70:fd:bb:4a: 87:68:23:66:5f:f5:ca:e5:d2:4d:0f:c0:0f:8a:35:f8:da:93: 1f:fb:98:07:b2:f5:d2:3b:fc:59:fa:d1:6c:ad:eb:6f:ec:2b: 53:65:b7:f1:58:79:4c:10:da:6b:26:10:33:2d:9b:3c:88:4f: d2:dc:dc:82:57:c8:78:8f:a3:c7:d7:c5:5a:ff:e4:2d:61:11: 99:7b:cf:62:7c:70:ae:99:87:29:5c:b1:c6:20:ad:6b:f7:de: 3d:59:a8:c3:d2:02:ee:f1:3a:67:ce:a8:b1:af:ee:72:fd:82: 10:2b:0d:a0:1a:48:0d:ad:5a:ef:6b:11:f4:29:c4:e2:e6:2f: a8:ad:f4:4a:4f:2a:18:8e:53:56:9b:c8:ff:72:c2:dd:c8:b7: 90:91:bb:a2:76:ed:3e:19:1e:6b:eb:ee:34:d2:9c:e4:48:c5: fe:3f:c5:9f:51:5e:d1:41:eb:ac:8f:64:2e:c9:b4:b9:ac:58: b2:2a:19:38:fc:35:7a:3f:92:0b:70:68:23:5f:9d:32:e8:c0: 5e:d2:0c:64:24:ba:3d:23:5f:68:ef:55:b7:8f:5d:57:a1:18: be:7d:6a:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVCRTkxMTAvBgNVBAUTKDBGQUI0RUY5ODI4RjRBRjI2N0MxNkQ4QUQ0NzEwQThF RUM5QkJCQUUwHhcNMjYxMDA5MDIyNTAzWhcNMjYxMDE2MDIyNTAzWjAYMRYwFAYD VQQDEw02YWM4NTA3Zi0xZDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmDtbQT3vR3ecCLS1w+R5NVqvMRLpJ3sn8qtM0oau3o/KiogrGvmaIU9EQa0i EgFmO4KsvDpqhY9cNfLcixz2t7esvWeozWKHUXOocHO3oBt2wvmaL/dv5ZHme2kM hlrAIDT6EhYiqzXuNDzdRp57NbEg+feW/fXHj07va8gdLqdYJRHY13HPbkMOlApG JSxDNl73M+DxHs1N8YTCVgGrir69J8MfNYu47yrrqxY5GDNom8AUNlXQWNxu5BbR CfXOv2l0TTKMFlfhWkFop17eOzq0/74YGtihvEJi+zXtiwhjw8Fjtw3K98Q+Bk4w AxO/1nhdPGasD8/hgPlNKzyv0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDZyVab5 Dj7dQqP2J+jJhrGwSsrHMB8GA1UdIwQYMBaAFA+rTvmCj0ryZ8FtitRxCo7sm7uu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUJFOS85NEM5Qjg3ODAw NUQxMUVFQkU3QTkyNDFDNEY5QUUwMi9ENnRPLVlLUFN2Sm53VzJLMUhFS2p1eWJ1 NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0Q2dE8tWUtQU3ZKbndXMksxSEVLanV5YnU2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUJFOS85NEM5Qjg3ODAwNUQxMUVFQkU3QTkyNDFDNEY5QUUwMi9ENnRPLVlLUFN2 Sm53VzJLMUhFS2p1eWJ1NjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcvkSDJa8hwQnnb4MR0p6ooq9iesll99tbobvfF291wdw/btKh2gjZl/1yuXS TQ/AD4o1+NqTH/uYB7L10jv8WfrRbK3rb+wrU2W38Vh5TBDaayYQMy2bPIhP0tzc glfIeI+jx9fFWv/kLWERmXvPYnxwrpmHKVyxxiCta/fePVmow9IC7vE6Z86osa/u cv2CECsNoBpIDa1a72sR9CnE4uYvqK30Sk8qGI5TVpvI/3LC3ci3kJG7onbtPhke a+vuNNKc5EjF/j/Fn1Fe0UHrrI9kLsm0uaxYsioZOPw1ej+SC3BoI1+dMujAXtIM ZCS6PSNfaO9Vt49dV6EYvn1qvg== -----END CERTIFICATE-----Generated at Fri Oct 9 08:37:37 2026 by rpki-client