$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft File: 64sK0sB2YghSy8N4kOZK1Aa0ieg.mft (raw, json) Hash identifier: 6pGUfniX+xzkngHePcitqHoCeLZ9vaRzJ4akAbmBBVk= Subject key identifier: 0D:68:48:5F:54:97:54:D0:35:F1:51:4D:69:1F:E7:3B:53:F1:31:EE Authority key identifier: EB:8B:0A:D2:C0:76:62:08:52:CB:C3:78:90:E6:4A:D4:06:B4:89:E8 Certificate issuer: /CN=A91C72B1/serialNumber=EB8B0AD2C076620852CBC37890E64AD406B489E8 Certificate serial: 0E18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft Manifest number: 0E0B Signing time: Sun 04 Oct 2026 17:53:07 +0000 Manifest this update: Sun 04 Oct 2026 17:53:07 +0000 Manifest next update: Sun 11 Oct 2026 17:53:07 +0000 Files and hashes: 1: 64sK0sB2YghSy8N4kOZK1Aa0ieg.crl (hash: 5PE8F3lMLVMHTq2neaQ6m4kr3wt69cwabcsuhoOe+c4=) 2: 6714424C3C9111EA9416CA78C4F9AE02.roa (hash: wM4jTVSXdRa49wS3QCPAkcV9PaMIwDAgOcfWtEI5Jsg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.crl rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 17:53:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3608 (0xe18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C72B1, serialNumber=EB8B0AD2C076620852CBC37890E64AD406B489E8 Validity Not Before: Oct 4 17:53:07 2026 GMT Not After : Oct 11 17:53:07 2026 GMT Subject: CN=6ac29283-ff5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b9:c8:1f:f6:e1:02:75:f6:a5:54:79:87:4e: 07:f7:b9:d7:be:27:f3:aa:dc:d0:30:72:09:6b:34: 1d:92:9e:51:0c:28:ef:b7:84:23:0f:77:5f:74:e2: 4c:af:19:be:e9:0e:5e:41:95:20:a4:12:ee:68:0d: e8:2a:3c:2b:90:39:3d:6d:76:b3:23:48:27:7f:b1: 8b:d1:dc:e3:80:ae:7a:2c:31:4f:ae:8f:6c:8c:0d: 08:18:ec:7b:54:c7:73:bf:e0:23:72:e4:3d:58:bb: e0:8c:f4:7f:e1:f8:60:a4:d8:36:86:d1:89:4c:f3: a2:89:b4:02:ee:c0:94:91:18:04:b6:51:ab:fb:6a: 3b:6d:08:7f:3a:5d:fe:5f:66:e4:ca:3c:08:2f:49: 81:da:82:f9:15:45:e2:f9:16:21:90:28:ba:b7:57: 37:00:c3:66:99:f4:77:57:5c:db:9f:2a:f3:6e:e0: 7b:1b:37:c9:60:6d:31:ac:b6:a8:76:c5:94:e8:a4: cd:ab:f5:e6:2e:c1:5b:e8:d4:da:b4:8d:79:b4:9a: 86:91:c9:46:4e:5c:ee:3a:d4:b1:5e:cc:be:23:07: 97:ed:1d:b3:19:33:8d:de:89:d5:d1:a8:40:d9:57: fb:28:e5:1b:74:af:1e:ee:77:51:cf:9c:c9:3b:81: e5:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:68:48:5F:54:97:54:D0:35:F1:51:4D:69:1F:E7:3B:53:F1:31:EE X509v3 Authority Key Identifier: keyid:EB:8B:0A:D2:C0:76:62:08:52:CB:C3:78:90:E6:4A:D4:06:B4:89:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:47:88:46:8c:14:47:9a:e8:69:de:f4:42:e8:fc:18:10:fb: 34:82:26:f4:28:ea:80:e2:de:c0:56:5b:a9:60:48:bc:49:8e: e6:26:35:ae:52:74:80:fa:9a:4e:a2:3b:5d:c9:21:b1:3f:84: e9:45:db:c4:89:00:c2:51:92:75:83:19:32:63:74:96:a0:e0: cc:2c:3a:20:e7:cd:bb:f5:89:23:2b:e9:dd:dd:31:46:e0:67: 19:a1:dd:57:14:a0:9f:3a:96:3d:82:8d:7d:50:38:50:f5:48: ed:ba:33:35:f7:2f:95:30:eb:fb:34:52:aa:59:b1:a3:6e:a0: d0:e8:62:2c:86:6a:e7:2e:ed:65:03:6e:07:a6:ae:54:07:1e: 92:e6:76:7d:3a:eb:1d:c9:4c:ef:00:7f:37:05:d3:c4:ef:ce: 42:33:0d:f4:7a:2e:d5:ba:2b:99:83:93:2e:8a:05:03:6f:30: f1:ab:1e:b2:2a:00:37:8e:66:02:5b:f8:a7:6f:1e:2d:87:dc: 3a:d1:84:a7:48:bf:53:80:31:26:8b:77:e1:70:ac:3f:f7:cf: ae:bc:0c:91:8d:60:bb:13:00:7d:82:1b:e3:50:3d:b9:31:6b: 66:7f:4d:b1:e6:e4:a3:06:cd:05:99:23:1b:6e:ff:0f:e3:9e: 30:8b:68:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDhgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcyQjExMTAvBgNVBAUTKEVCOEIwQUQyQzA3NjYyMDg1MkNCQzM3ODkwRTY0QUQ0 MDZCNDg5RTgwHhcNMjYxMDA0MTc1MzA3WhcNMjYxMDExMTc1MzA3WjAYMRYwFAYD VQQDEw02YWMyOTI4My1mZjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvLnIH/bhAnX2pVR5h04H97nXvifzqtzQMHIJazQdkp5RDCjvt4QjD3dfdOJM rxm+6Q5eQZUgpBLuaA3oKjwrkDk9bXazI0gnf7GL0dzjgK56LDFPro9sjA0IGOx7 VMdzv+AjcuQ9WLvgjPR/4fhgpNg2htGJTPOiibQC7sCUkRgEtlGr+2o7bQh/Ol3+ X2bkyjwIL0mB2oL5FUXi+RYhkCi6t1c3AMNmmfR3V1zbnyrzbuB7GzfJYG0xrLao dsWU6KTNq/XmLsFb6NTatI15tJqGkclGTlzuOtSxXsy+IweX7R2zGTON3onV0ahA 2Vf7KOUbdK8e7ndRz5zJO4HlQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA1oSF9U l1TQNfFRTWkf5ztT8THuMB8GA1UdIwQYMBaAFOuLCtLAdmIIUsvDeJDmStQGtIno MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzJCMS8yQTQ1Rjk4MERF QzkxMUU5QUFBN0VDMzNDNEY5QUUwMi82NHNLMHNCMllnaFN5OE40a09aSzFBYTBp ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY0c0swc0IyWWdoU3k4TjRrT1pLMUFhMGllZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzJCMS8yQTQ1Rjk4MERFQzkxMUU5QUFBN0VDMzNDNEY5QUUwMi82NHNLMHNCMlln aFN5OE40a09aSzFBYTBpZWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKkeIRowUR5road70Quj8GBD7NIIm9CjqgOLewFZbqWBIvEmO5iY1rlJ0gPqa TqI7XckhsT+E6UXbxIkAwlGSdYMZMmN0lqDgzCw6IOfNu/WJIyvp3d0xRuBnGaHd VxSgnzqWPYKNfVA4UPVI7bozNfcvlTDr+zRSqlmxo26g0OhiLIZq5y7tZQNuB6au VAcekuZ2fTrrHclM7wB/NwXTxO/OQjMN9Hou1bormYOTLooFA28w8asesioAN45m Alv4p28eLYfcOtGEp0i/U4AxJot34XCsP/fPrrwMkY1guxMAfYIb41A9uTFrZn9N sebkowbNBZkjG27/D+OeMItolA== -----END CERTIFICATE-----Generated at Mon Oct 5 09:08:05 2026 by rpki-client