$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft File: jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft (raw, json) Hash identifier: PIwlQlCBd/hOKrsdI4f2iIQXQxbIMIaNmG85sIwjHxE= Subject key identifier: F9:9E:85:F1:7D:4D:47:1D:51:8C:FD:F5:27:D2:7B:04:47:A2:DD:EC Authority key identifier: 8E:11:FC:B4:E8:BD:63:D2:7B:84:EB:2D:52:67:0C:A1:74:F9:C4:3C Certificate issuer: /CN=A91C3A74/serialNumber=8E11FCB4E8BD63D27B84EB2D52670CA174F9C43C Certificate serial: 1B91 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jhH8tOi9Y9J7hOstUmcMoXT5xDw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft Manifest number: 1B87 Signing time: Tue 20 Oct 2026 15:40:24 +0000 Manifest this update: Tue 20 Oct 2026 15:40:23 +0000 Manifest next update: Tue 27 Oct 2026 15:40:23 +0000 Files and hashes: 1: jhH8tOi9Y9J7hOstUmcMoXT5xDw.crl (hash: okl3IgIWGG89kLqu2Ztcmi9TDE6M601HjZjiGTfSGx4=) 2: AFA37450139811EA807F1A26C4F9AE02.roa (hash: Y1iY5bDdtF14xe5+ecYddY6nYDDRlZBhph8kiu8Him8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.crl rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jhH8tOi9Y9J7hOstUmcMoXT5xDw.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 15:40:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7057 (0x1b91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3A74, serialNumber=8E11FCB4E8BD63D27B84EB2D52670CA174F9C43C Validity Not Before: Oct 20 15:40:23 2026 GMT Not After : Oct 27 15:40:23 2026 GMT Subject: CN=6ad78b67-60a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:81:d5:76:37:cf:3d:7d:96:de:c3:2a:dd:a6: 17:8a:cd:ed:ec:4e:03:07:b7:14:87:41:e4:4e:35: e2:02:df:ef:69:44:6f:86:cf:8c:cf:14:14:e4:47: 8f:90:de:2c:3d:d0:1e:12:ab:f8:7a:22:31:7b:d4: ed:a9:73:a0:f1:d8:13:8f:62:9d:dc:b9:59:f7:d5: 4c:9f:6b:b6:78:32:ee:cf:a2:4a:bc:13:77:8b:97: 15:e1:8c:bd:a4:90:60:f8:88:b0:35:fc:f1:5e:3f: f2:8a:3c:88:de:2c:22:7a:7f:e3:a3:51:09:f8:f1: 95:d7:8d:2a:7d:15:25:e6:5b:47:3d:f4:56:2b:3e: 26:88:c9:97:02:dc:70:07:bd:f2:74:cf:2d:4a:15: 91:19:d2:4d:c2:7f:f8:84:da:f6:35:52:f7:2f:88: 71:45:44:1c:6a:ae:b9:1a:37:d9:3d:e8:4b:3b:40: 76:ac:4b:5e:5c:a9:8b:db:ce:d5:f3:88:72:13:96: 66:d6:7a:3b:a5:4d:1b:12:52:4b:e8:8d:be:2f:d6: 0c:51:1e:8a:f7:91:9e:b9:be:45:dd:0e:22:75:cb: 7f:58:28:67:62:ce:cf:2e:73:f9:79:e2:fe:4b:eb: 20:f9:f2:7b:94:8d:90:bd:d5:93:e2:14:c5:0c:87: 29:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:9E:85:F1:7D:4D:47:1D:51:8C:FD:F5:27:D2:7B:04:47:A2:DD:EC X509v3 Authority Key Identifier: keyid:8E:11:FC:B4:E8:BD:63:D2:7B:84:EB:2D:52:67:0C:A1:74:F9:C4:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jhH8tOi9Y9J7hOstUmcMoXT5xDw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:67:85:ab:fb:56:7f:8a:ef:96:5d:16:4e:05:68:11:3e:fd: 46:43:f0:e9:12:0f:9d:12:8f:e1:b0:02:a4:bd:d1:70:d0:7f: 32:53:7f:38:d9:9b:a7:c9:d2:40:01:ff:cc:19:a6:f2:22:72: a6:06:da:df:bf:5d:d3:95:37:37:44:97:9a:f2:80:74:b8:27: 89:4b:d3:6b:8f:44:31:45:b2:88:0c:cf:66:97:67:06:2d:00: 66:0b:36:d8:f8:0a:c7:a4:02:fb:20:b0:2a:36:d7:e5:2b:e9: 6d:f0:a7:c3:f3:e2:e8:b3:6c:f4:92:24:70:7f:7a:a1:f1:07: c2:34:da:07:4c:04:99:8a:73:8f:59:f6:c3:cc:b9:b2:5a:24: 08:35:e4:a4:90:c2:0e:cd:90:2d:40:02:8d:b1:88:8b:73:f4: 39:4f:17:30:c2:36:2c:f7:51:e4:0c:66:47:9d:f7:3c:9c:67: 2e:8f:01:c4:8c:11:ae:d8:fa:f8:14:82:42:d4:03:0c:73:8d: f2:e8:80:1d:fd:1b:bb:75:87:81:be:25:7b:ec:3c:eb:68:33: 78:8b:79:32:da:92:52:d2:6e:1f:b3:1e:34:e2:dd:9d:9d:46: 9b:c6:d6:1e:8a:8c:b7:c5:da:3b:62:01:f4:3c:44:64:ed:dc: ba:f8:41:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICG5EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNBNzQxMTAvBgNVBAUTKDhFMTFGQ0I0RThCRDYzRDI3Qjg0RUIyRDUyNjcwQ0Ex NzRGOUM0M0MwHhcNMjYxMDIwMTU0MDIzWhcNMjYxMDI3MTU0MDIzWjAYMRYwFAYD VQQDEw02YWQ3OGI2Ny02MGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuIHVdjfPPX2W3sMq3aYXis3t7E4DB7cUh0HkTjXiAt/vaURvhs+MzxQU5EeP kN4sPdAeEqv4eiIxe9TtqXOg8dgTj2Kd3LlZ99VMn2u2eDLuz6JKvBN3i5cV4Yy9 pJBg+IiwNfzxXj/yijyI3iwien/jo1EJ+PGV140qfRUl5ltHPfRWKz4miMmXAtxw B73ydM8tShWRGdJNwn/4hNr2NVL3L4hxRUQcaq65GjfZPehLO0B2rEteXKmL287V 84hyE5Zm1no7pU0bElJL6I2+L9YMUR6K95Geub5F3Q4idct/WChnYs7PLnP5eeL+ S+sg+fJ7lI2QvdWT4hTFDIcpnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPmehfF9 TUcdUYz99SfSewRHot3sMB8GA1UdIwQYMBaAFI4R/LTovWPSe4TrLVJnDKF0+cQ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0E3NC83NTNENzFFRTNB QjUxMUU3Qjg2MDlGMUNDNEY5QUUwMi9qaEg4dE9pOVk5SjdoT3N0VW1jTW9YVDV4 RHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2poSDh0T2k5WTlKN2hPc3RVbWNNb1hUNXhEdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0E3NC83NTNENzFFRTNBQjUxMUU3Qjg2MDlGMUNDNEY5QUUwMi9qaEg4dE9pOVk5 SjdoT3N0VW1jTW9YVDV4RHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaGeFq/tWf4rvll0WTgVoET79RkPw6RIPnRKP4bACpL3RcNB/MlN/ONmbp8nS QAH/zBmm8iJypgba379d05U3N0SXmvKAdLgniUvTa49EMUWyiAzPZpdnBi0AZgs2 2PgKx6QC+yCwKjbX5SvpbfCnw/Pi6LNs9JIkcH96ofEHwjTaB0wEmYpzj1n2w8y5 slokCDXkpJDCDs2QLUACjbGIi3P0OU8XMMI2LPdR5AxmR533PJxnLo8BxIwRrtj6 +BSCQtQDDHON8uiAHf0bu3WHgb4le+w862gzeIt5MtqSUtJuH7MeNOLdnZ1Gm8bW HoqMt8XaO2IB9DxEZO3cuvhBeQ== -----END CERTIFICATE-----Generated at Thu Oct 22 13:10:13 2026 by rpki-client