$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft File: D6tO-YKPSvJnwW2K1HEKjuybu64.mft (raw, json) Hash identifier: bLxiCYnghwAr/woPjWEnhwrevS+SWUvqHD2oRLzkCM4= Subject key identifier: 23:64:DF:F2:3D:72:51:42:B4:93:B8:22:5C:B3:E9:6D:63:76:0A:C5 Authority key identifier: 0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE Certificate issuer: /CN=A91BEBE9/serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE Certificate serial: 028C Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft Manifest number: 0278 Signing time: Wed 07 Oct 2026 02:22:29 +0000 Manifest this update: Wed 07 Oct 2026 02:22:28 +0000 Manifest next update: Wed 14 Oct 2026 02:22:28 +0000 Files and hashes: 1: D6tO-YKPSvJnwW2K1HEKjuybu64.crl (hash: RoJzQsKFQum40J677ANAd3bfw+3TkBUHovvP4RhseJ8=) 2: A16366C6FDF811EEA4D57274C4F9AE02.roa (hash: DAgB41BSoNhh0yFXjuFcNCWHBOk0V20tJ49xk0mHkPA=) 3: A1C0742EFDF811EEA4D57274C4F9AE02.roa (hash: jxIjxLYPAa1qnB0jFN6nM/shPAzKUb5KsBQXc5gos7U=) 4: A0DEDD52FDF811EEA4D57274C4F9AE02.roa (hash: rm62Zobf+vSIv757GLuOQnassUi+6YwaOUBaAetb62A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 02:22:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 652 (0x28c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEBE9, serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE Validity Not Before: Oct 7 02:22:28 2026 GMT Not After : Oct 14 02:22:28 2026 GMT Subject: CN=6ac5ace4-842d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0e:7a:f7:67:62:90:d5:e9:3f:32:f8:c3:19: 2f:84:24:81:f6:45:50:79:9d:e5:ed:71:ba:69:c9: 9e:b6:a6:4c:34:02:c9:f1:39:72:df:80:5d:90:7c: 8d:93:cc:92:7c:d9:3a:df:a8:95:cc:40:aa:96:63: da:dd:6a:57:c6:a8:a6:57:26:cb:35:eb:00:a9:8f: 58:9d:4d:75:fc:40:8c:fd:c9:e8:77:b0:23:c0:8f: d5:3f:70:19:8c:19:81:8c:b2:47:5a:bf:2d:42:71: 0b:87:76:d1:77:a0:11:f5:f8:b3:33:c8:50:96:74: c2:62:eb:40:1b:79:b1:b3:61:59:28:f5:6a:61:0c: a2:67:37:9e:09:64:cd:97:85:b9:53:bf:02:35:92: 90:84:54:70:ef:ac:78:e8:5b:fb:31:f0:f2:9d:0e: b1:ef:60:60:cc:42:33:92:64:20:80:41:d2:36:b2: fa:2b:da:61:d1:47:70:77:e0:af:11:74:30:86:f7: 2f:62:bc:48:0d:76:5b:2c:38:e4:02:55:99:32:c8: 90:89:ce:ae:a6:2f:7a:7e:b1:81:94:34:66:a7:d3: 63:29:32:cf:aa:10:28:8e:9a:54:dd:91:ed:2e:85: bf:ef:16:cc:bb:fc:6e:e6:a5:9f:12:96:99:66:0b: 6b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:64:DF:F2:3D:72:51:42:B4:93:B8:22:5C:B3:E9:6D:63:76:0A:C5 X509v3 Authority Key Identifier: keyid:0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:59:0f:f7:42:f9:93:dc:b8:a8:3c:6f:69:65:f2:43:7b:f9: d4:57:a8:8e:a9:64:47:08:43:97:15:d4:01:97:c0:2c:32:e5: 40:ae:98:f7:72:66:78:24:b9:74:59:fa:d8:11:59:ee:e5:b4: 77:a6:28:bb:18:05:20:9a:e4:df:d4:24:f4:b7:9e:56:d9:a0: 28:d6:c3:8b:d0:d3:9d:0a:24:e6:f4:a2:6f:71:5a:66:20:ad: cd:3a:e4:e1:1d:02:5a:0a:54:bf:cd:96:d4:6d:4b:45:d8:86: 7a:2b:9c:87:ad:08:1b:54:aa:90:d3:61:59:d4:6a:29:73:a1: 99:0e:a4:73:0d:b6:23:3c:05:32:15:4f:ee:d7:44:0a:f6:31: 77:25:e9:2a:af:05:90:02:17:f5:f2:3f:22:c1:5e:04:4a:8a: 52:bc:e0:1f:22:52:99:e3:ed:86:cb:36:26:98:2f:9f:6f:66: 7e:fc:68:83:e2:58:c0:a1:fa:11:62:a8:cd:b6:b3:d2:cb:65: 25:2d:05:f0:33:6b:b9:43:9f:8c:b2:4f:19:bc:cd:52:ab:3a: 31:62:a2:9d:bf:97:89:28:7e:cc:b7:84:7f:ca:b6:3b:55:19: e6:cc:3a:03:17:d6:f1:4e:58:1d:3b:3e:a8:47:21:6c:2f:36: f9:bb:21:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVCRTkxMTAvBgNVBAUTKDBGQUI0RUY5ODI4RjRBRjI2N0MxNkQ4QUQ0NzEwQThF RUM5QkJCQUUwHhcNMjYxMDA3MDIyMjI4WhcNMjYxMDE0MDIyMjI4WjAYMRYwFAYD VQQDEw02YWM1YWNlNC04NDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyg5692dikNXpPzL4wxkvhCSB9kVQeZ3l7XG6acmetqZMNALJ8Tly34BdkHyN k8ySfNk636iVzECqlmPa3WpXxqimVybLNesAqY9YnU11/ECM/cnod7AjwI/VP3AZ jBmBjLJHWr8tQnELh3bRd6AR9fizM8hQlnTCYutAG3mxs2FZKPVqYQyiZzeeCWTN l4W5U78CNZKQhFRw76x46Fv7MfDynQ6x72BgzEIzkmQggEHSNrL6K9ph0Udwd+Cv EXQwhvcvYrxIDXZbLDjkAlWZMsiQic6upi96frGBlDRmp9NjKTLPqhAojppU3ZHt LoW/7xbMu/xu5qWfEpaZZgtrTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCNk3/I9 clFCtJO4Ilyz6W1jdgrFMB8GA1UdIwQYMBaAFA+rTvmCj0ryZ8FtitRxCo7sm7uu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUJFOS85NEM5Qjg3ODAw NUQxMUVFQkU3QTkyNDFDNEY5QUUwMi9ENnRPLVlLUFN2Sm53VzJLMUhFS2p1eWJ1 NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0Q2dE8tWUtQU3ZKbndXMksxSEVLanV5YnU2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUJFOS85NEM5Qjg3ODAwNUQxMUVFQkU3QTkyNDFDNEY5QUUwMi9ENnRPLVlLUFN2 Sm53VzJLMUhFS2p1eWJ1NjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjFkP90L5k9y4qDxvaWXyQ3v51FeojqlkRwhDlxXUAZfALDLlQK6Y93JmeCS5 dFn62BFZ7uW0d6YouxgFIJrk39Qk9LeeVtmgKNbDi9DTnQok5vSib3FaZiCtzTrk 4R0CWgpUv82W1G1LRdiGeiuch60IG1SqkNNhWdRqKXOhmQ6kcw22IzwFMhVP7tdE CvYxdyXpKq8FkAIX9fI/IsFeBEqKUrzgHyJSmePthss2Jpgvn29mfvxog+JYwKH6 EWKozbaz0stlJS0F8DNruUOfjLJPGbzNUqs6MWKinb+XiSh+zLeEf8q2O1UZ5sw6 AxfW8U5YHTs+qEchbC82+bshkw== -----END CERTIFICATE-----Generated at Wed Oct 7 23:03:40 2026 by rpki-client