$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft File: 0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft (raw, json) Hash identifier: 6btE/0d/iqDlzDAIW7PEiGVwqHjGBRYsUu+YcEW75kE= Subject key identifier: 72:0F:08:54:8D:F8:9A:03:DF:7A:13:BF:A7:C5:C8:24:75:79:15:A4 Authority key identifier: D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0 Certificate issuer: /CN=A91C8F27/serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0 Certificate serial: 0A84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft Manifest number: 0A29 Signing time: Sat 24 Oct 2026 19:50:24 +0000 Manifest this update: Sat 24 Oct 2026 19:50:24 +0000 Manifest next update: Sat 31 Oct 2026 19:50:24 +0000 Files and hashes: 1: 0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl (hash: 0NbVoT0TyrTC+1i6XrTpbQExOS7l5L0iSqRVc1Wf4DA=) 2: DF72CB82640811F1A119CBC19847A888.roa (hash: cEvyr/Gl0yrys7VxpYexlrU+a3/SL1hP/5swCnKr6iM=) 3: 51B031C80E8D11EE89A0B128C4F9AE02.roa (hash: /AqzGVP/RU7VivZQf679uLu1hQ4PEwap68JYs68UOUA=) 4: 6B7D02AEB4A111F08515F713C4F9AE02.roa (hash: KSjOH0qSpAK/DBNETg1G0TL4OaIKzJinGTqF6Z++SO4=) 5: 5B0320A08B4411F1945A06324611F970.roa (hash: Da4zwaxvzw5gNNRbJ84b/uhlFao3ehlVxBi7a6sytcM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 19:50:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2692 (0xa84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8F27, serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0 Validity Not Before: Oct 24 19:50:24 2026 GMT Not After : Oct 31 19:50:24 2026 GMT Subject: CN=6add0c00-b582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c2:21:6d:2c:2c:3a:98:ea:75:8a:84:84:fb: 83:de:e3:88:4c:74:f7:32:b1:01:4b:a0:0e:68:72: 19:02:21:67:d0:83:0b:b7:3d:32:c9:f9:0b:93:93: 7d:97:d2:98:aa:52:04:f1:1c:94:12:1b:cf:d7:cf: e7:de:b6:f8:d9:ac:f6:e8:b7:c5:66:53:63:40:2f: 67:ea:6d:7a:85:8b:c3:2a:ee:8d:af:9a:7b:62:6a: 9a:54:da:af:99:9f:a0:d4:f0:30:3f:c5:9b:e0:7e: 1d:cc:81:ef:da:21:bd:bc:e6:3f:4e:fd:d2:5f:ce: 06:45:47:2a:3d:51:dd:70:54:07:ff:46:9f:18:0e: bb:09:3b:4d:58:c8:be:02:e4:2e:d7:03:de:14:26: 96:92:a0:d2:48:af:8f:ae:c2:eb:f5:ac:4d:c0:c9: 90:2a:53:e3:0c:a9:da:20:3b:30:ca:89:4a:42:33: 83:7c:df:fb:70:9e:b7:83:b9:b6:d6:db:e5:3c:2e: 0f:b3:5b:6b:da:f6:7b:d0:e6:6b:87:16:ee:8f:8e: 9f:fd:02:21:86:17:a0:0a:e6:a9:41:94:1a:94:41: 4c:b3:a7:61:e4:90:fb:50:d3:be:c9:d6:f1:9c:14: 88:ea:ca:76:29:f0:cf:7f:2e:b5:d9:0b:8d:f3:c8: 4d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:0F:08:54:8D:F8:9A:03:DF:7A:13:BF:A7:C5:C8:24:75:79:15:A4 X509v3 Authority Key Identifier: keyid:D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:7f:58:68:7e:2c:d6:23:d1:5b:b5:01:a6:51:8d:28:f7:95: bb:41:97:15:72:6a:00:20:26:c2:72:50:25:cb:6d:08:ed:19: d8:93:ad:c6:2d:99:33:cd:50:76:8d:9b:c0:3d:39:5b:28:01: eb:03:77:6d:d0:d2:f6:6d:62:63:78:f3:cc:cd:7a:b2:bb:94: 71:a6:e9:bf:ac:da:ed:75:77:27:06:25:6f:ff:23:a2:99:1e: fa:ae:75:2f:07:fe:d7:cc:23:46:04:28:c8:7a:74:be:9f:f2: 34:a1:df:ba:60:9e:f5:8a:ca:0c:25:3a:3c:a7:25:7b:e7:c4: b7:c8:84:80:9b:c3:ab:8c:58:2f:62:88:17:68:02:51:8e:cc: 19:56:77:92:05:8b:d7:6e:bb:6a:14:7f:43:5e:85:20:cd:b4: 03:f4:25:92:cd:ad:9e:f5:aa:f9:a4:89:54:b9:fa:f3:95:d7: e1:1b:a5:54:2e:02:f8:fd:b6:12:12:26:6a:f5:ad:d6:3e:42: 4c:6b:c6:81:66:21:28:a3:59:ac:ec:e8:39:a2:4d:fc:e3:96: cc:92:43:86:a5:f3:55:fc:fd:10:bb:19:0e:37:93:4f:8a:24: cb:61:c9:41:17:75:df:32:e9:11:5e:d5:75:03:c7:89:23:cc: 68:52:0a:62 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhGMjcxMTAvBgNVBAUTKEQxQTM2Q0Q4RUQyMzU1MDgyNzYxQTNEQjEzRUREMzBE RkRBMkNGRDAwHhcNMjYxMDI0MTk1MDI0WhcNMjYxMDMxMTk1MDI0WjAYMRYwFAYD VQQDEw02YWRkMGMwMC1iNTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqcIhbSwsOpjqdYqEhPuD3uOITHT3MrEBS6AOaHIZAiFn0IMLtz0yyfkLk5N9 l9KYqlIE8RyUEhvP18/n3rb42az26LfFZlNjQC9n6m16hYvDKu6Nr5p7YmqaVNqv mZ+g1PAwP8Wb4H4dzIHv2iG9vOY/Tv3SX84GRUcqPVHdcFQH/0afGA67CTtNWMi+ AuQu1wPeFCaWkqDSSK+PrsLr9axNwMmQKlPjDKnaIDswyolKQjODfN/7cJ63g7m2 1tvlPC4Ps1tr2vZ70OZrhxbuj46f/QIhhhegCuapQZQalEFMs6dh5JD7UNO+ydbx nBSI6sp2KfDPfy612QuN88hNkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHIPCFSN +JoD33oTv6fFyCR1eRWkMB8GA1UdIwQYMBaAFNGjbNjtI1UIJ2Gj2xPt0w39os/Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEYyNy83RjUyMjlBOEIw OTIxMUVBQjVEQkVDNThDNEY5QUUwMi8wYU5zMk8walZRZ25ZYVBiRS0zVERmMml6 OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBhTnMyTzBqVlFnbllhUGJFLTNURGYyaXo5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEYyNy83RjUyMjlBOEIwOTIxMUVBQjVEQkVDNThDNEY5QUUwMi8wYU5zMk8walZR Z25ZYVBiRS0zVERmMml6OUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl39YaH4s1iPRW7UBplGNKPeVu0GXFXJqACAmwnJQJcttCO0Z2JOtxi2ZM81Q do2bwD05WygB6wN3bdDS9m1iY3jzzM16sruUcabpv6za7XV3JwYlb/8jopke+q51 Lwf+18wjRgQoyHp0vp/yNKHfumCe9YrKDCU6PKcle+fEt8iEgJvDq4xYL2KIF2gC UY7MGVZ3kgWL1267ahR/Q16FIM20A/Qlks2tnvWq+aSJVLn685XX4RulVC4C+P22 EhImavWt1j5CTGvGgWYhKKNZrOzoOaJN/OOWzJJDhqXzVfz9ELsZDjeTT4oky2HJ QRd13zLpEV7VdQPHiSPMaFIKYg== -----END CERTIFICATE-----Generated at Mon Oct 26 20:55:19 2026 by rpki-client