$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft File: 2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft (raw, json) Hash identifier: eDtX6ResMLWvtl6M6alZJdJTb3i5cdjQXN/IHpslgt0= Subject key identifier: 96:59:6F:66:CD:08:B3:A9:BD:9E:16:3B:2F:EA:C6:0F:6D:43:AB:A0 Authority key identifier: D9:D6:5F:7F:36:09:0C:40:1B:CF:20:D4:BC:80:C4:3F:0D:C5:93:3D Certificate issuer: /CN=A91C2B93/serialNumber=D9D65F7F36090C401BCF20D4BC80C43F0DC5933D Certificate serial: 01E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft Manifest number: 01DB Signing time: Tue 03 Nov 2026 04:24:49 +0000 Manifest this update: Tue 03 Nov 2026 04:24:49 +0000 Manifest next update: Tue 10 Nov 2026 04:24:49 +0000 Files and hashes: 1: 2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl (hash: 0CNRdjWLN1y2ZxA/TYHViMABz1HwxM9Z6X+e24fu+lM=) 2: B00A68E6014A11EFA8F03B5BC4F9AE02.roa (hash: EFBskJYMHfJRXujHupPsFrdh1ToDlvL0xJdWDE7eAo8=) 3: E2037F8C019911EFAFFEEC5DC4F9AE02.roa (hash: EOqSQLbOPrsjZ56mAXCzCp42zP2pW/1hVyLkMumCHLc=) 4: B0BE3042014A11EFA8F03B5BC4F9AE02.roa (hash: i2+AU5JC1CnIuV2WebgbR1MhXzhp17jyG1HTb2dIKP0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 04:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 487 (0x1e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2B93, serialNumber=D9D65F7F36090C401BCF20D4BC80C43F0DC5933D Validity Not Before: Nov 3 04:24:49 2026 GMT Not After : Nov 10 04:24:49 2026 GMT Subject: CN=6ae96211-a2f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:75:03:e9:d7:15:f1:6f:8c:9b:ed:8b:fd:7a: 9a:67:37:4a:ec:79:25:bc:eb:39:52:30:c0:fb:32: 8f:0d:87:2d:93:71:31:67:c6:db:26:0d:44:85:35: 50:7d:fc:07:42:46:86:c6:7e:7b:8f:ae:a1:7d:f2: a9:89:21:60:a4:be:4f:c1:34:37:27:78:1c:33:d8: 1a:7a:6e:c7:cd:31:6f:05:80:03:53:ba:3c:75:c3: e8:31:4f:a4:96:1b:ae:41:14:74:20:f3:0e:03:5c: b2:78:61:b8:31:9c:b9:48:3e:d8:4c:18:da:81:fa: 87:ca:7e:60:28:0c:fa:cf:31:ba:79:14:70:46:5f: 8f:3d:3b:22:db:7d:04:e0:5f:51:41:6d:37:7a:7a: bf:fb:cf:1c:3d:af:0e:59:1e:87:4e:9f:3b:a4:da: 21:55:84:6b:8d:58:80:53:90:e5:24:4a:e2:51:94: 0c:fb:a8:fe:d8:14:d7:a4:f5:2f:d7:68:b1:1a:f5: 2d:ef:1c:59:f4:48:ed:d5:53:5e:c5:dc:e9:89:a1: 9b:20:c7:49:46:b9:fc:a0:c0:52:ab:bb:c3:10:5c: 65:dd:9a:b0:38:e4:3f:3c:8f:9b:38:1c:38:c0:1a: 62:e3:b0:d1:0d:98:9d:8b:f3:52:26:b1:b0:14:84: bf:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:59:6F:66:CD:08:B3:A9:BD:9E:16:3B:2F:EA:C6:0F:6D:43:AB:A0 X509v3 Authority Key Identifier: keyid:D9:D6:5F:7F:36:09:0C:40:1B:CF:20:D4:BC:80:C4:3F:0D:C5:93:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:2f:bf:39:bf:95:4e:06:1c:af:83:5f:a5:f4:5d:3a:45:81: fd:df:74:98:b2:54:a4:a7:23:cf:7c:b4:b4:68:b5:7a:0b:65: e3:88:b8:b9:61:ed:a3:be:d7:dc:a5:67:25:d9:9a:9d:f7:e2: ef:3e:3d:a1:fc:1d:08:7f:ae:97:47:19:7c:28:9c:bf:34:e5: 42:dc:70:11:38:b9:50:c1:a7:c3:f9:33:75:6a:91:5b:0e:23: d1:5d:eb:0a:f1:e1:bc:af:03:14:d2:6d:2f:ab:79:4a:de:d8: ec:28:a8:62:e4:e0:82:e1:b1:13:cd:ba:73:e9:40:0d:6a:4b: 66:bf:0b:9b:6a:09:ef:87:73:1c:41:f9:7f:bb:d1:58:9c:eb: 5d:7b:5e:04:bf:c8:c9:78:54:63:c8:df:12:fa:7a:51:f4:30: bb:a1:ee:b9:18:4a:e1:c1:e8:02:85:96:e4:8e:c2:ee:49:7c: ac:c2:90:b4:57:15:f9:22:5d:ce:16:f0:3b:ac:b0:57:b2:47: 03:05:3f:98:32:49:3d:aa:04:2b:aa:03:06:b1:2a:5b:35:1e: 96:cd:14:c5:8c:67:42:6d:c3:e0:f5:70:a8:36:8e:f7:2b:0b: 04:ca:27:12:c6:1e:34:b3:7a:28:5d:c4:e0:6d:2f:22:f9:f5: bd:ca:1f:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJCOTMxMTAvBgNVBAUTKEQ5RDY1RjdGMzYwOTBDNDAxQkNGMjBENEJDODBDNDNG MERDNTkzM0QwHhcNMjYxMTAzMDQyNDQ5WhcNMjYxMTEwMDQyNDQ5WjAYMRYwFAYD VQQDEw02YWU5NjIxMS1hMmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHUD6dcV8W+Mm+2L/XqaZzdK7HklvOs5UjDA+zKPDYctk3ExZ8bbJg1EhTVQ ffwHQkaGxn57j66hffKpiSFgpL5PwTQ3J3gcM9gaem7HzTFvBYADU7o8dcPoMU+k lhuuQRR0IPMOA1yyeGG4MZy5SD7YTBjagfqHyn5gKAz6zzG6eRRwRl+PPTsi230E 4F9RQW03enq/+88cPa8OWR6HTp87pNohVYRrjViAU5DlJEriUZQM+6j+2BTXpPUv 12ixGvUt7xxZ9Ejt1VNexdzpiaGbIMdJRrn8oMBSq7vDEFxl3ZqwOOQ/PI+bOBw4 wBpi47DRDZidi/NSJrGwFIS/wQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJZZb2bN CLOpvZ4WOy/qxg9tQ6ugMB8GA1UdIwQYMBaAFNnWX382CQxAG88g1LyAxD8NxZM9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkI5My8zQUM4NzRFRTAx NDMxMUVGODI1QTY0NjVDNEY5QUUwMi8yZFpmZnpZSkRFQWJ6eURVdklERVB3M0Zr ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJkWmZmellKREVBYnp5RFV2SURFUHczRmt6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkI5My8zQUM4NzRFRTAxNDMxMUVGODI1QTY0NjVDNEY5QUUwMi8yZFpmZnpZSkRF QWJ6eURVdklERVB3M0ZrejAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARi+/Ob+VTgYcr4NfpfRdOkWB/d90mLJUpKcjz3y0tGi1egtl44i4uWHto77X 3KVnJdmanffi7z49ofwdCH+ul0cZfCicvzTlQtxwETi5UMGnw/kzdWqRWw4j0V3r CvHhvK8DFNJtL6t5St7Y7CioYuTgguGxE826c+lADWpLZr8Lm2oJ74dzHEH5f7vR WJzrXXteBL/IyXhUY8jfEvp6UfQwu6HuuRhK4cHoAoWW5I7C7kl8rMKQtFcV+SJd zhbwO6ywV7JHAwU/mDJJPaoEK6oDBrEqWzUels0UxYxnQm3D4PVwqDaO9ysLBMon EsYeNLN6KF3E4G0vIvn1vcofnw== -----END CERTIFICATE-----Generated at Wed Nov 4 05:49:28 2026 by rpki-client