$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft File: r7CNb36XeFtvMRce-C4xux0G4uM.mft (raw, json) Hash identifier: lMFgHkv6+tpC9m8Uz8jy5Y1LlxyFvavDCFh+mL+MD9w= Subject key identifier: 76:29:E8:DC:36:B7:3C:E3:2E:85:89:D0:71:B1:29:3F:88:2E:1B:04 Authority key identifier: AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3 Certificate issuer: /CN=A91C7B15/serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3 Certificate serial: 158F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft Manifest number: 156B Signing time: Tue 20 Oct 2026 16:49:31 +0000 Manifest this update: Tue 20 Oct 2026 16:49:30 +0000 Manifest next update: Tue 27 Oct 2026 16:49:30 +0000 Files and hashes: 1: r7CNb36XeFtvMRce-C4xux0G4uM.crl (hash: GUl2O9JR3RkTUJXDuzcKH7jKLI3Pky1NFdoDf8TzfEk=) 2: CC2A0136F58C11EEB142585CC4F9AE02.roa (hash: 9thasJHdgQQ3RXCs+BHPjiNfWZD4NYRuTQ+ayukgtLg=) 3: A0375A56964511EF9481CA74C4F9AE02.roa (hash: iHRpBY8mTgfogKkV6RLUH1pT9Rubnqiw6gX0z2kYfjk=) 4: 4EED8CBE029911EF96760924C4F9AE02.roa (hash: UOD9amObCmIqDiXfNM0JkH+AqrUmQZuay9hIXFnISTk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 16:49:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5519 (0x158f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7B15, serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3 Validity Not Before: Oct 20 16:49:30 2026 GMT Not After : Oct 27 16:49:30 2026 GMT Subject: CN=6ad79b9b-1596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c3:e2:f1:ba:6a:e7:a2:64:a3:59:fd:a3:32: d7:86:b0:9a:68:da:fa:83:6f:c9:3f:dc:a3:3d:ae: 5a:11:c9:29:58:e2:e9:4f:12:1b:4a:ce:c6:4b:a8: da:62:fc:e0:0d:83:1f:ce:6b:2d:3c:fd:4a:e2:4a: 3e:3c:33:49:fa:90:0f:f5:00:81:b3:21:2c:6b:d1: 40:fa:77:62:88:16:3c:ca:ea:57:b7:96:e0:28:1c: 6e:a1:b0:49:cb:7a:0c:79:8c:99:e3:43:31:99:7e: 06:51:a3:b1:8e:b2:ab:e5:06:3d:4c:a0:e7:ee:38: ea:21:78:ee:53:91:d8:cc:da:e6:02:e3:6b:3b:96: bd:e5:40:0b:e4:68:f4:c3:83:f1:c4:8d:96:55:77: 16:95:94:f6:7a:8b:dc:30:aa:d0:87:f9:c8:f7:e9: 59:ff:1b:ed:7c:63:75:f7:7f:45:ba:d9:2b:97:aa: 92:bc:67:30:78:12:5d:2e:51:bc:97:86:57:ed:69: a7:a9:34:0a:53:ff:bf:10:e8:89:fc:7e:4c:8f:6f: 7a:bd:92:eb:39:53:8a:fc:78:94:1f:41:31:d7:9b: 23:f7:6b:98:7f:c0:bf:f6:6a:9f:79:5a:00:26:aa: 46:9d:80:78:ba:a4:72:d5:8b:cd:db:af:73:61:af: 04:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:29:E8:DC:36:B7:3C:E3:2E:85:89:D0:71:B1:29:3F:88:2E:1B:04 X509v3 Authority Key Identifier: keyid:AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:f8:c8:04:bd:9c:ac:ce:2b:ae:4d:7e:4e:a4:61:2e:30:35: 5e:da:ee:f5:ba:ef:a2:2b:aa:5f:94:40:92:3f:fd:82:47:10: cb:58:c6:32:13:72:58:c9:68:d2:c4:4a:dd:90:74:ba:36:61: c8:0d:9d:89:1d:fb:80:eb:9c:2d:a1:b2:3f:23:52:3b:14:4c: 2a:14:d5:f5:23:ce:3f:ca:54:a2:f4:3b:af:da:02:f8:ff:a9: 44:c0:cc:f7:80:43:21:b2:a0:fa:d7:db:0e:a5:ea:91:98:98: f8:87:92:6a:44:c2:38:20:d0:df:97:aa:b3:4b:65:26:1d:c5: 71:dc:9e:63:1a:69:07:a0:85:76:93:f6:76:a7:2f:d7:1f:1d: 09:d2:8f:1f:af:27:77:f5:18:90:55:5c:34:30:65:11:9e:d5: f1:b6:32:15:17:9e:c2:d1:ad:ae:98:e1:42:63:e6:8e:15:30: cc:88:d4:bd:9c:b9:ff:dd:a6:8b:ff:e1:f5:ed:79:4b:b4:a9: 63:50:b4:db:43:c7:b0:3a:9b:e4:d9:ef:d4:fb:b8:7f:54:98: ef:1f:8a:38:2c:f0:5b:27:a3:a2:11:a3:6c:77:5c:7c:a1:63: b6:2d:43:4d:18:9a:ad:34:13:77:86:42:52:16:5a:69:5b:2f: 02:9a:88:c4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdCMTUxMTAvBgNVBAUTKEFGQjA4RDZGN0U5Nzc4NUI2RjMxMTcxRUY4MkUzMUJC MUQwNkUyRTMwHhcNMjYxMDIwMTY0OTMwWhcNMjYxMDI3MTY0OTMwWjAYMRYwFAYD VQQDEw02YWQ3OWI5Yi0xNTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAisPi8bpq56Jko1n9ozLXhrCaaNr6g2/JP9yjPa5aEckpWOLpTxIbSs7GS6ja YvzgDYMfzmstPP1K4ko+PDNJ+pAP9QCBsyEsa9FA+ndiiBY8yupXt5bgKBxuobBJ y3oMeYyZ40MxmX4GUaOxjrKr5QY9TKDn7jjqIXjuU5HYzNrmAuNrO5a95UAL5Gj0 w4PxxI2WVXcWlZT2eovcMKrQh/nI9+lZ/xvtfGN1939Futkrl6qSvGcweBJdLlG8 l4ZX7WmnqTQKU/+/EOiJ/H5Mj296vZLrOVOK/HiUH0Ex15sj92uYf8C/9mqfeVoA JqpGnYB4uqRy1YvN269zYa8EBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHYp6Nw2 tzzjLoWJ0HGxKT+ILhsEMB8GA1UdIwQYMBaAFK+wjW9+l3hbbzEXHvguMbsdBuLj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0IxNS9GQUY2RkQ3ODcx RTYxMUU4OTk2RTJFNjRDNEY5QUUwMi9yN0NOYjM2WGVGdHZNUmNlLUM0eHV4MEc0 dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I3Q05iMzZYZUZ0dk1SY2UtQzR4dXgwRzR1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0IxNS9GQUY2RkQ3ODcxRTYxMUU4OTk2RTJFNjRDNEY5QUUwMi9yN0NOYjM2WGVG dHZNUmNlLUM0eHV4MEc0dU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALvjIBL2crM4rrk1+TqRhLjA1Xtru9brvoiuqX5RAkj/9gkcQy1jGMhNyWMlo 0sRK3ZB0ujZhyA2diR37gOucLaGyPyNSOxRMKhTV9SPOP8pUovQ7r9oC+P+pRMDM 94BDIbKg+tfbDqXqkZiY+IeSakTCOCDQ35eqs0tlJh3FcdyeYxppB6CFdpP2dqcv 1x8dCdKPH68nd/UYkFVcNDBlEZ7V8bYyFReewtGtrpjhQmPmjhUwzIjUvZy5/92m i//h9e15S7SpY1C020PHsDqb5Nnv1Pu4f1SY7x+KOCzwWyejohGjbHdcfKFjti1D TRiarTQTd4ZCUhZaaVsvApqIxA== -----END CERTIFICATE-----Generated at Thu Oct 22 14:34:01 2026 by rpki-client