$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft File: a-rAl7V48XydcRl3ez9RFPvglxs.mft (raw, json) Hash identifier: n/NfTlxZcOmLuea6j+AJ5W2H8T3r2uFiLnqlD/EpemA= Subject key identifier: 11:EF:78:9E:6C:F3:B8:33:69:A7:BF:BF:89:CE:7A:B6:CF:EA:1A:BC Authority key identifier: 6B:EA:C0:97:B5:78:F1:7C:9D:71:19:77:7B:3F:51:14:FB:E0:97:1B Certificate issuer: /CN=A91C5A9F/serialNumber=6BEAC097B578F17C9D7119777B3F5114FBE0971B Certificate serial: 0DBC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft Manifest number: 0D9C Signing time: Sun 04 Oct 2026 18:00:55 +0000 Manifest this update: Sun 04 Oct 2026 18:00:54 +0000 Manifest next update: Sun 11 Oct 2026 18:00:54 +0000 Files and hashes: 1: a-rAl7V48XydcRl3ez9RFPvglxs.crl (hash: 1tsE8LsAEkiOSjQPmwb0x51fLp6wdo5iUPi7xNHInOw=) 2: 48B3316EFFC411EEB2369013C4F9AE02.roa (hash: /TzEAq8FwxRh3uSNCke2u1ddqX2u7x6/0usZxjH71Xs=) 3: 498956B8FFC411EEB2369013C4F9AE02.roa (hash: 1jFVpdZPWmPQeRH8UdYA1s36Irr1tgJWF5hv2XdP+kg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.crl rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 18:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3516 (0xdbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5A9F, serialNumber=6BEAC097B578F17C9D7119777B3F5114FBE0971B Validity Not Before: Oct 4 18:00:54 2026 GMT Not After : Oct 11 18:00:54 2026 GMT Subject: CN=6ac29457-1e1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b3:51:4d:44:80:14:e2:f4:b2:55:67:e3:ae: 3d:4e:59:9c:07:8f:99:34:4b:cf:1d:3b:b0:89:e0: ab:f8:a6:b0:01:33:a4:ac:21:d6:01:50:7a:4e:fb: 67:bb:9e:12:88:c7:ff:10:f1:92:a9:ee:41:d2:cf: 5f:3e:1b:59:40:09:e7:ce:e8:25:06:b1:95:36:d4: cb:83:6b:65:a8:1a:78:4b:02:d5:08:6c:d6:16:95: a1:3b:92:26:cc:88:68:9f:df:19:ee:5e:46:cd:9f: 4e:2d:ee:23:10:27:05:23:aa:5e:fe:1d:87:4d:2f: 92:43:e0:ee:1f:83:5e:7f:e3:c8:7c:14:12:aa:f1: cc:08:f4:94:e5:b4:1c:5a:74:69:35:37:36:bc:bc: 74:01:ea:c4:91:03:1e:cc:28:10:21:f4:c4:fe:d0: 42:b4:41:91:bf:9d:a1:cd:82:c7:17:13:20:bf:1a: 79:7b:4f:7b:41:61:cf:8b:d4:50:94:71:55:f6:be: 6d:b0:d7:f0:0c:32:d9:24:ea:b4:13:59:ff:7c:46: 5f:a8:c0:a2:91:af:a1:99:7d:5d:c4:fb:ae:47:01: 6f:ac:3e:12:f0:7e:60:e0:88:6b:06:46:9f:e7:2a: 47:05:1c:8b:26:71:a4:aa:1d:d4:c1:af:07:70:8d: 32:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:EF:78:9E:6C:F3:B8:33:69:A7:BF:BF:89:CE:7A:B6:CF:EA:1A:BC X509v3 Authority Key Identifier: keyid:6B:EA:C0:97:B5:78:F1:7C:9D:71:19:77:7B:3F:51:14:FB:E0:97:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:1b:20:c0:73:35:c8:ec:f9:ac:c7:9f:66:40:71:bd:02:cc: 8d:47:67:88:d8:a9:08:5d:1b:3b:e2:97:39:f1:fd:f2:b2:0b: bc:bc:48:46:b0:e1:49:02:9c:5a:6e:85:b3:86:49:73:39:10: 9a:92:57:2a:77:3c:33:7b:78:42:01:22:6c:6a:8c:75:2e:d0: 8d:bb:61:dd:37:ba:75:9c:d3:5e:c0:c6:b0:a4:25:cb:56:de: c9:7f:62:77:bb:2a:9d:28:04:4e:17:5f:98:54:f8:a2:aa:07: 77:5a:ff:47:93:16:cc:f1:da:a4:aa:53:12:3a:a7:55:0a:c7: d3:e2:5c:e1:8f:c6:03:4f:3c:95:f9:65:a0:85:4f:56:22:52: ef:83:68:76:34:f5:9d:ab:fe:52:11:17:1c:76:bd:79:3b:a0: f9:56:72:2b:3f:66:0c:36:bd:09:16:2e:b5:57:f4:c5:a8:b5: 5f:51:40:66:31:7b:7d:9c:b9:b6:74:83:81:5b:e8:6e:d9:53: 11:b4:09:cb:e5:41:e7:39:17:76:d8:54:18:f2:83:75:10:d3: 6d:cb:dc:3c:2c:4b:20:ea:c4:69:71:36:21:cc:41:25:30:7b: ec:ea:69:e5:0f:56:87:e9:63:08:96:da:f6:d0:dc:1d:c8:c0: bb:aa:c4:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVBOUYxMTAvBgNVBAUTKDZCRUFDMDk3QjU3OEYxN0M5RDcxMTk3NzdCM0Y1MTE0 RkJFMDk3MUIwHhcNMjYxMDA0MTgwMDU0WhcNMjYxMDExMTgwMDU0WjAYMRYwFAYD VQQDEw02YWMyOTQ1Ny0xZTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApbNRTUSAFOL0slVn4649TlmcB4+ZNEvPHTuwieCr+KawATOkrCHWAVB6Tvtn u54SiMf/EPGSqe5B0s9fPhtZQAnnzuglBrGVNtTLg2tlqBp4SwLVCGzWFpWhO5Im zIhon98Z7l5GzZ9OLe4jECcFI6pe/h2HTS+SQ+DuH4Nef+PIfBQSqvHMCPSU5bQc WnRpNTc2vLx0AerEkQMezCgQIfTE/tBCtEGRv52hzYLHFxMgvxp5e097QWHPi9RQ lHFV9r5tsNfwDDLZJOq0E1n/fEZfqMCika+hmX1dxPuuRwFvrD4S8H5g4IhrBkaf 5ypHBRyLJnGkqh3Uwa8HcI0ykQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBHveJ5s 87gzaae/v4nOerbP6hq8MB8GA1UdIwQYMBaAFGvqwJe1ePF8nXEZd3s/URT74Jcb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUE5Ri8wMjFBOTYwQ0Y2 NzgxMUU5QjUyMDk2MjVDNEY5QUUwMi9hLXJBbDdWNDhYeWRjUmwzZXo5UkZQdmds eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2EtckFsN1Y0OFh5ZGNSbDNlejlSRlB2Z2x4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUE5Ri8wMjFBOTYwQ0Y2NzgxMUU5QjUyMDk2MjVDNEY5QUUwMi9hLXJBbDdWNDhY eWRjUmwzZXo5UkZQdmdseHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYBsgwHM1yOz5rMefZkBxvQLMjUdniNipCF0bO+KXOfH98rILvLxIRrDhSQKc Wm6Fs4ZJczkQmpJXKnc8M3t4QgEibGqMdS7Qjbth3Te6dZzTXsDGsKQly1beyX9i d7sqnSgEThdfmFT4oqoHd1r/R5MWzPHapKpTEjqnVQrH0+Jc4Y/GA088lflloIVP ViJS74NodjT1nav+UhEXHHa9eTug+VZyKz9mDDa9CRYutVf0xai1X1FAZjF7fZy5 tnSDgVvobtlTEbQJy+VB5zkXdthUGPKDdRDTbcvcPCxLIOrEaXE2IcxBJTB77Opp 5Q9Wh+ljCJba9tDcHcjAu6rEgg== -----END CERTIFICATE-----Generated at Tue Oct 6 19:59:04 2026 by rpki-client