$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.mft File: tPvjSrdmEqnSCuUrCttB_PgKEv8.mft (raw, json) Hash identifier: w12tGfYpDxPchqH+CDntSxfBNUcMVzo8Dfkj81r0bCs= Subject key identifier: 8D:35:F9:5E:1B:40:0D:62:08:98:8F:49:9F:9D:21:BC:5A:57:C1:A0 Authority key identifier: B4:FB:E3:4A:B7:66:12:A9:D2:0A:E5:2B:0A:DB:41:FC:F8:0A:12:FF Certificate issuer: /CN=A91BF6CD/serialNumber=B4FBE34AB76612A9D20AE52B0ADB41FCF80A12FF Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPvjSrdmEqnSCuUrCttB_PgKEv8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.mft Manifest number: DB Signing time: Wed 21 Oct 2026 07:08:24 +0000 Manifest this update: Wed 21 Oct 2026 07:08:24 +0000 Manifest next update: Wed 28 Oct 2026 07:08:24 +0000 Files and hashes: 1: tPvjSrdmEqnSCuUrCttB_PgKEv8.crl (hash: UIak0/tKusaheNCmgoAGjzZJia1LJPMtuiD2SGG+YX0=) 2: 3E99E81C816E11F0A5992F28C4F9AE02.roa (hash: PtxDOStSKg5v1Xktyj+xGCbDFKA4GPkHNsN6+Bx9sn0=) 3: 3E1ABB8C816E11F0A5992F28C4F9AE02.roa (hash: uyOU7OWturYo16z8/9jzgKBsXU3ESi7wumKHXnMPiW4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.crl rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPvjSrdmEqnSCuUrCttB_PgKEv8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 04:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF6CD, serialNumber=B4FBE34AB76612A9D20AE52B0ADB41FCF80A12FF Validity Not Before: Oct 21 07:08:24 2026 GMT Not After : Oct 28 07:08:24 2026 GMT Subject: CN=6ad864e8-3b77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:de:1d:f1:ef:69:90:fb:ea:9f:64:ff:56:ff: aa:bc:14:d3:8f:98:59:01:79:5e:10:37:1c:69:f1: 82:35:9d:84:8c:57:60:3c:9e:31:27:72:36:7e:fd: 05:30:b3:eb:3f:b0:b4:eb:a7:1f:ba:e1:c9:68:73: 02:99:00:df:c2:cb:3c:4c:8e:77:e2:40:5b:f3:b6: 68:f6:5a:e1:ef:c4:c6:e0:63:9e:75:bd:97:a9:3f: a6:a6:f3:55:da:8b:bc:e1:0b:62:e5:5d:ff:9d:1d: f4:5f:40:0a:7e:be:d3:fc:1c:1a:25:3a:d1:13:90: fd:14:00:7f:b6:04:5a:d1:47:f2:bf:09:7d:46:72: d1:9c:f7:5d:1e:cb:cb:aa:16:19:98:51:64:dd:3b: e4:4c:c8:54:1c:42:c0:f7:a8:be:fb:5c:10:16:5b: 45:17:dd:91:f7:33:2d:78:b3:67:84:c4:8e:84:31: b2:96:6e:68:92:5a:13:31:38:c2:9c:73:e8:b2:8f: 16:e4:3a:54:35:13:a1:94:af:ef:40:96:90:a8:19: 87:1f:4f:8f:95:d0:fe:3b:64:57:dd:7c:55:fe:b9: 6d:30:ae:b3:11:3a:4b:bf:42:d9:59:0c:b9:66:98: 38:8a:07:9b:cc:21:78:6c:c4:58:5d:68:f9:ae:aa: fc:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:35:F9:5E:1B:40:0D:62:08:98:8F:49:9F:9D:21:BC:5A:57:C1:A0 X509v3 Authority Key Identifier: keyid:B4:FB:E3:4A:B7:66:12:A9:D2:0A:E5:2B:0A:DB:41:FC:F8:0A:12:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPvjSrdmEqnSCuUrCttB_PgKEv8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:70:92:8c:dd:5f:84:a8:90:60:9b:ad:a2:dc:4d:09:6f:b2: 9c:85:7b:10:75:2d:ba:5c:89:10:8b:05:e0:9b:70:d5:89:fa: 89:c5:de:b4:82:64:43:62:32:03:08:9d:70:35:d5:2d:68:b0: c2:f0:a4:63:77:56:75:45:55:01:d5:7c:65:3e:50:69:ca:e8: 5b:12:d1:18:ca:bb:1b:41:85:e0:ef:a2:30:5d:c3:3c:3c:5e: c0:3f:8c:67:f1:e5:9e:c8:e0:28:50:fb:1c:10:9b:15:f8:5d: 5a:c2:d4:dc:14:92:8f:53:92:5e:1c:8c:fc:e0:93:58:12:7f: 43:8e:a0:12:21:56:50:02:7a:35:b0:29:fd:27:dc:64:bf:f6: 3b:94:b7:3a:e2:ce:48:d5:c0:fb:62:4e:9a:1b:cc:fb:72:4f: 71:3f:66:47:66:34:55:d7:dd:0f:ee:d4:b9:86:97:e8:a6:48: 9a:45:07:04:ce:26:34:d6:06:20:e7:45:7a:1a:59:77:2c:59: 80:db:7f:da:99:7c:57:74:b6:00:73:03:2b:e2:0e:00:1a:39: 32:15:e7:3a:2f:57:9d:c3:e6:88:64:1c:1d:bd:b0:c6:66:81: 29:39:e4:42:f4:d9:f9:4c:0f:75:c0:30:cc:1e:a5:f1:ba:fd: 1e:ac:7e:1c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY2Q0QxMTAvBgNVBAUTKEI0RkJFMzRBQjc2NjEyQTlEMjBBRTUyQjBBREI0MUZD RjgwQTEyRkYwHhcNMjYxMDIxMDcwODI0WhcNMjYxMDI4MDcwODI0WjAYMRYwFAYD VQQDEw02YWQ4NjRlOC0zYjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1N4d8e9pkPvqn2T/Vv+qvBTTj5hZAXleEDccafGCNZ2EjFdgPJ4xJ3I2fv0F MLPrP7C066cfuuHJaHMCmQDfwss8TI534kBb87Zo9lrh78TG4GOedb2XqT+mpvNV 2ou84Qti5V3/nR30X0AKfr7T/BwaJTrRE5D9FAB/tgRa0Ufyvwl9RnLRnPddHsvL qhYZmFFk3TvkTMhUHELA96i++1wQFltFF92R9zMteLNnhMSOhDGylm5okloTMTjC nHPoso8W5DpUNROhlK/vQJaQqBmHH0+PldD+O2RX3XxV/rltMK6zETpLv0LZWQy5 Zpg4igebzCF4bMRYXWj5rqr8ywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI01+V4b QA1iCJiPSZ+dIbxaV8GgMB8GA1UdIwQYMBaAFLT740q3ZhKp0grlKwrbQfz4ChL/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjZDRC8zMzNCQzYwODgx NkQxMUYwQTkwNjZEMjVDNEY5QUUwMi90UHZqU3JkbUVxblNDdVVyQ3R0Ql9QZ0tF djguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RQdmpTcmRtRXFuU0N1VXJDdHRCX1BnS0V2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjZDRC8zMzNCQzYwODgxNkQxMUYwQTkwNjZEMjVDNEY5QUUwMi90UHZqU3JkbUVx blNDdVVyQ3R0Ql9QZ0tFdjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjHCSjN1fhKiQYJutotxNCW+ynIV7EHUtulyJEIsF4Jtw1Yn6icXetIJkQ2Iy AwidcDXVLWiwwvCkY3dWdUVVAdV8ZT5QacroWxLRGMq7G0GF4O+iMF3DPDxewD+M Z/HlnsjgKFD7HBCbFfhdWsLU3BSSj1OSXhyM/OCTWBJ/Q46gEiFWUAJ6NbAp/Sfc ZL/2O5S3OuLOSNXA+2JOmhvM+3JPcT9mR2Y0VdfdD+7UuYaX6KZImkUHBM4mNNYG IOdFehpZdyxZgNt/2pl8V3S2AHMDK+IOABo5MhXnOi9XncPmiGQcHb2wxmaBKTnk QvTZ+UwPdcAwzB6l8br9Hqx+HA== -----END CERTIFICATE-----Generated at Wed Oct 21 19:43:42 2026 by rpki-client