$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft File: 33nDugFSYeOshDI5zkcDWQHWapQ.mft (raw, json) Hash identifier: iQwAVmSmSqvimmVGE97JUGMrRkFRLgEM7K9R24+tR9U= Subject key identifier: A5:80:A7:5E:46:58:59:1B:2B:DD:A5:7C:36:F4:87:51:6D:9A:7E:E8 Authority key identifier: DF:79:C3:BA:01:52:61:E3:AC:84:32:39:CE:47:03:59:01:D6:6A:94 Certificate issuer: /CN=A91C572B/serialNumber=DF79C3BA015261E3AC843239CE47035901D66A94 Certificate serial: 028D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft Manifest number: 027C Signing time: Sun 25 Oct 2026 02:19:48 +0000 Manifest this update: Sun 25 Oct 2026 02:19:48 +0000 Manifest next update: Sun 01 Nov 2026 02:19:48 +0000 Files and hashes: 1: 33nDugFSYeOshDI5zkcDWQHWapQ.crl (hash: filAYYNGp8c6eeCvDSTrGL875xRjZ/G5C40Im7GXdQY=) 2: 18DC0A381C0311EE9B0F2938C4F9AE02.roa (hash: 68scz8WaLeDgN6QMKP6YxSS8bPvMLdvzqUKIuG+ai78=) 3: E40FA6ECA53A11F185933D3A4611F970.roa (hash: LgJkzUYDs/93oe3f1rx4Ur7cXfh8aWj0lMvFUfeP3jU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.crl rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 02:19:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 653 (0x28d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C572B, serialNumber=DF79C3BA015261E3AC843239CE47035901D66A94 Validity Not Before: Oct 25 02:19:48 2026 GMT Not After : Nov 1 02:19:48 2026 GMT Subject: CN=6add6744-e2cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ff:1d:af:d0:ae:eb:9e:e7:c2:dc:a1:e5:0b: f8:53:50:2a:6d:f4:7f:8b:39:28:d1:59:b2:e0:3d: e5:ee:e6:55:1f:80:58:b1:3f:9b:11:76:7f:a2:8c: 64:3b:d7:d4:42:11:13:5a:c9:67:9c:39:03:53:60: ec:ac:6e:4a:23:f7:cc:4f:54:26:08:15:ca:5f:e4: b6:0e:f7:7d:6c:7f:31:c1:b7:84:f3:f8:14:02:95: cc:66:e4:dd:9b:72:1d:9f:bf:a4:fa:93:c0:e8:f2: 93:fa:09:50:79:3e:c0:08:9a:30:6a:1f:93:63:ea: 03:b3:4f:d7:aa:85:fa:3a:a9:b9:3d:29:d3:87:3a: 37:6c:63:48:37:5c:15:ef:30:21:79:4f:de:4d:22: 4c:3b:76:e8:1b:6b:84:68:a6:80:22:5d:fc:bb:17: 90:e6:91:2a:26:f8:7d:c2:c7:78:3a:46:37:30:72: 2a:64:c1:c9:e0:de:03:65:1a:2e:40:cc:21:63:8f: c6:96:c9:93:a6:8e:54:f5:3f:c9:f0:54:4b:e7:63: 0d:ed:5b:65:f7:dd:7a:a8:0f:d4:bb:74:45:46:1e: 15:bf:9d:23:f3:6a:76:35:07:32:24:76:d1:60:d2: ba:80:11:c2:53:01:e1:d3:b4:81:8d:33:f5:f7:d0: 54:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:80:A7:5E:46:58:59:1B:2B:DD:A5:7C:36:F4:87:51:6D:9A:7E:E8 X509v3 Authority Key Identifier: keyid:DF:79:C3:BA:01:52:61:E3:AC:84:32:39:CE:47:03:59:01:D6:6A:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:be:69:51:a8:70:5d:e7:60:c7:f2:a2:c7:44:8a:5c:dd:00: b0:7d:45:78:13:8d:23:ea:63:e6:5c:45:64:b2:a7:83:3c:2a: 5a:9e:e4:66:58:0c:46:6e:f9:65:ee:23:e8:66:ca:5b:07:cc: 56:4f:46:63:37:ec:7d:ac:f2:09:72:c6:b1:0d:f5:ed:16:62: 27:ed:7c:16:d5:51:00:98:d4:5a:45:20:27:cb:99:fc:58:f4: 42:31:df:40:5a:43:76:05:c2:d3:0d:96:d2:21:ff:06:ef:62: b3:51:16:ff:e0:59:ee:57:07:83:5a:71:d8:26:10:1c:38:2b: 9b:a4:d8:c8:36:86:07:d6:d4:30:44:9a:83:bd:ef:b2:41:7c: 5f:51:0a:03:8e:d2:e8:ba:47:3b:c1:83:eb:96:04:37:6a:94: 6a:aa:a4:9f:db:70:4d:95:37:bd:80:6d:48:6c:c0:85:8d:84: e9:7e:3d:cb:62:2c:6e:23:17:87:dc:5a:0d:7a:60:e2:5c:e8: 0b:53:fe:66:5e:07:02:f0:33:a4:22:5a:57:3d:d6:ff:4a:3e: b4:79:7a:cb:78:e8:0d:0f:84:ac:e8:29:e5:69:ae:1c:8b:82: e8:64:28:51:53:c9:ab:f6:25:e4:0b:fc:18:8e:ae:df:b6:d1: d6:f8:dd:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU3MkIxMTAvBgNVBAUTKERGNzlDM0JBMDE1MjYxRTNBQzg0MzIzOUNFNDcwMzU5 MDFENjZBOTQwHhcNMjYxMDI1MDIxOTQ4WhcNMjYxMTAxMDIxOTQ4WjAYMRYwFAYD VQQDEw02YWRkNjc0NC1lMmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtv8dr9Cu657nwtyh5Qv4U1AqbfR/izko0Vmy4D3l7uZVH4BYsT+bEXZ/ooxk O9fUQhETWslnnDkDU2DsrG5KI/fMT1QmCBXKX+S2Dvd9bH8xwbeE8/gUApXMZuTd m3Idn7+k+pPA6PKT+glQeT7ACJowah+TY+oDs0/XqoX6Oqm5PSnThzo3bGNIN1wV 7zAheU/eTSJMO3boG2uEaKaAIl38uxeQ5pEqJvh9wsd4OkY3MHIqZMHJ4N4DZRou QMwhY4/GlsmTpo5U9T/J8FRL52MN7Vtl9916qA/Uu3RFRh4Vv50j82p2NQcyJHbR YNK6gBHCUwHh07SBjTP199BUpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKWAp15G WFkbK92lfDb0h1Ftmn7oMB8GA1UdIwQYMBaAFN95w7oBUmHjrIQyOc5HA1kB1mqU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTcyQi9GN0U1QzE2ODBF OUExMUVFQTY0NDlFNzFDNEY5QUUwMi8zM25EdWdGU1llT3NoREk1emtjRFdRSFdh cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMzbkR1Z0ZTWWVPc2hESTV6a2NEV1FIV2FwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTcyQi9GN0U1QzE2ODBFOUExMUVFQTY0NDlFNzFDNEY5QUUwMi8zM25EdWdGU1ll T3NoREk1emtjRFdRSFdhcFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkr5pUahwXedgx/Kix0SKXN0AsH1FeBONI+pj5lxFZLKngzwqWp7kZlgMRm75 Ze4j6GbKWwfMVk9GYzfsfazyCXLGsQ317RZiJ+18FtVRAJjUWkUgJ8uZ/Fj0QjHf QFpDdgXC0w2W0iH/Bu9is1EW/+BZ7lcHg1px2CYQHDgrm6TYyDaGB9bUMESag73v skF8X1EKA47S6LpHO8GD65YEN2qUaqqkn9twTZU3vYBtSGzAhY2E6X49y2IsbiMX h9xaDXpg4lzoC1P+Zl4HAvAzpCJaVz3W/0o+tHl6y3joDQ+ErOgp5WmuHIuC6GQo UVPJq/Yl5Av8GI6u37bR1vjdVA== -----END CERTIFICATE-----Generated at Mon Oct 26 14:21:47 2026 by rpki-client