$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft File: 33nDugFSYeOshDI5zkcDWQHWapQ.mft (raw, json) Hash identifier: mbwGi00RE49+5m5BRmdsI1nsnViNpXPAV2FtX6LeMfA= Subject key identifier: 7F:CF:98:E3:53:54:EB:10:16:4F:42:57:3C:DC:7C:08:99:F9:D6:39 Authority key identifier: DF:79:C3:BA:01:52:61:E3:AC:84:32:39:CE:47:03:59:01:D6:6A:94 Certificate issuer: /CN=A91C572B/serialNumber=DF79C3BA015261E3AC843239CE47035901D66A94 Certificate serial: 028B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft Manifest number: 027A Signing time: Wed 21 Oct 2026 02:29:43 +0000 Manifest this update: Wed 21 Oct 2026 02:29:43 +0000 Manifest next update: Wed 28 Oct 2026 02:29:43 +0000 Files and hashes: 1: 33nDugFSYeOshDI5zkcDWQHWapQ.crl (hash: WsLcc3ycaJ28FK4uo7wt732yG38XD6/YVTZDuMWtOzY=) 2: 18DC0A381C0311EE9B0F2938C4F9AE02.roa (hash: 68scz8WaLeDgN6QMKP6YxSS8bPvMLdvzqUKIuG+ai78=) 3: E40FA6ECA53A11F185933D3A4611F970.roa (hash: LgJkzUYDs/93oe3f1rx4Ur7cXfh8aWj0lMvFUfeP3jU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.crl rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 02:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 651 (0x28b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C572B, serialNumber=DF79C3BA015261E3AC843239CE47035901D66A94 Validity Not Before: Oct 21 02:29:43 2026 GMT Not After : Oct 28 02:29:43 2026 GMT Subject: CN=6ad82397-99db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:79:ee:45:bc:22:ee:36:b9:b1:2d:d4:0f:cd: f4:60:e1:a3:ca:71:55:ea:84:c0:5b:28:4b:6b:44: 98:a6:0a:29:4b:32:0e:bb:c0:60:60:8d:3c:11:13: 4a:54:a0:dd:57:3c:c0:f6:dc:3a:28:b2:72:6f:c8: db:d7:d9:10:92:34:85:4d:9b:34:f1:14:04:d4:d6: 51:4d:02:d0:12:e3:63:bb:15:c8:e0:9f:3b:94:84: 4f:00:64:ff:10:da:bc:34:08:9a:ee:a3:41:96:e0: 4c:93:82:88:87:4b:75:dc:6f:2e:14:42:73:75:39: 77:03:d0:ce:5b:cb:32:72:2b:39:cd:af:c1:51:7d: 6b:7b:99:ed:7b:8e:e8:71:ab:6c:12:98:d7:75:c0: af:8b:13:6f:a6:d6:5a:e6:a0:01:f3:02:b7:1c:53: 77:6b:e5:cc:79:f2:34:72:f4:7c:94:34:da:c8:d9: 52:09:73:92:ef:22:11:af:58:89:be:c8:86:ad:f2: b5:af:b4:06:b7:15:c5:c8:33:76:29:04:0e:83:91: 28:44:b8:66:e0:5b:bc:be:d7:c5:3b:66:16:62:26: 5d:08:85:3c:fb:04:71:02:f3:a4:7b:d6:86:89:27: 8e:f0:b9:f0:31:06:2d:8c:6e:a8:6e:3a:ea:1e:7a: a1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:CF:98:E3:53:54:EB:10:16:4F:42:57:3C:DC:7C:08:99:F9:D6:39 X509v3 Authority Key Identifier: keyid:DF:79:C3:BA:01:52:61:E3:AC:84:32:39:CE:47:03:59:01:D6:6A:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:de:e4:92:05:d7:5a:dd:5f:54:dd:3a:a5:51:8b:b1:c5:6a: 2a:f8:a6:72:92:77:a9:b8:85:a4:30:71:d2:e9:5b:f8:31:99: 6c:93:77:3c:8c:83:23:cc:a4:f0:3f:f9:0b:42:78:ed:c0:55: 10:40:e8:44:75:e2:5c:60:9f:0b:b3:0c:c6:c6:db:fc:6b:c1: 06:e6:af:35:ab:b4:fb:66:5a:16:65:f1:48:f8:8d:1f:d0:9a: 98:17:bd:d2:84:3b:25:ac:c6:ee:81:e3:d5:7a:bd:03:63:cb: f9:9c:b5:c7:a5:df:74:6c:4b:b9:e1:16:32:de:dd:85:30:7d: bf:49:24:a8:fe:13:9b:22:12:8a:be:bf:1c:d5:1e:b1:70:aa: 85:67:93:47:cd:c1:5a:fb:aa:89:18:a3:53:2a:80:d7:90:22: 54:b2:0a:00:f8:37:ce:87:f4:74:1b:f8:2b:4f:80:75:92:d3: b8:65:ee:0b:d4:01:51:11:f2:7c:dc:4d:34:b2:f1:15:31:95: 42:d6:5f:7b:c5:69:c1:49:2e:ac:9a:59:27:d7:0d:b7:6b:a8: 22:05:76:21:ff:47:2a:e7:0b:41:e9:3d:ac:06:80:ff:69:09: 3a:dc:46:b8:4d:93:95:7b:34:87:b3:2f:09:32:db:64:ee:95: 82:e5:5f:16 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU3MkIxMTAvBgNVBAUTKERGNzlDM0JBMDE1MjYxRTNBQzg0MzIzOUNFNDcwMzU5 MDFENjZBOTQwHhcNMjYxMDIxMDIyOTQzWhcNMjYxMDI4MDIyOTQzWjAYMRYwFAYD VQQDEw02YWQ4MjM5Ny05OWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqnnuRbwi7ja5sS3UD830YOGjynFV6oTAWyhLa0SYpgopSzIOu8BgYI08ERNK VKDdVzzA9tw6KLJyb8jb19kQkjSFTZs08RQE1NZRTQLQEuNjuxXI4J87lIRPAGT/ ENq8NAia7qNBluBMk4KIh0t13G8uFEJzdTl3A9DOW8sycis5za/BUX1re5nte47o catsEpjXdcCvixNvptZa5qAB8wK3HFN3a+XMefI0cvR8lDTayNlSCXOS7yIRr1iJ vsiGrfK1r7QGtxXFyDN2KQQOg5EoRLhm4Fu8vtfFO2YWYiZdCIU8+wRxAvOke9aG iSeO8LnwMQYtjG6objrqHnqhBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH/PmONT VOsQFk9CVzzcfAiZ+dY5MB8GA1UdIwQYMBaAFN95w7oBUmHjrIQyOc5HA1kB1mqU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTcyQi9GN0U1QzE2ODBF OUExMUVFQTY0NDlFNzFDNEY5QUUwMi8zM25EdWdGU1llT3NoREk1emtjRFdRSFdh cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMzbkR1Z0ZTWWVPc2hESTV6a2NEV1FIV2FwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTcyQi9GN0U1QzE2ODBFOUExMUVFQTY0NDlFNzFDNEY5QUUwMi8zM25EdWdGU1ll T3NoREk1emtjRFdRSFdhcFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAt7kkgXXWt1fVN06pVGLscVqKvimcpJ3qbiFpDBx0ulb+DGZbJN3PIyDI8yk 8D/5C0J47cBVEEDoRHXiXGCfC7MMxsbb/GvBBuavNau0+2ZaFmXxSPiNH9CamBe9 0oQ7JazG7oHj1Xq9A2PL+Zy1x6XfdGxLueEWMt7dhTB9v0kkqP4TmyISir6/HNUe sXCqhWeTR83BWvuqiRijUyqA15AiVLIKAPg3zof0dBv4K0+AdZLTuGXuC9QBURHy fNxNNLLxFTGVQtZfe8VpwUkurJpZJ9cNt2uoIgV2If9HKucLQek9rAaA/2kJOtxG uE2TlXs0h7MvCTLbZO6VguVfFg== -----END CERTIFICATE-----Generated at Thu Oct 22 16:42:37 2026 by rpki-client