$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft File: G0cdrc2RIJM1E26s9syYiChlSyo.mft (raw, json) Hash identifier: WPDJ9M4PE9rtryZ6/KITK59Cw432gEsZO5U6/cnZyfs= Subject key identifier: 04:7B:C6:6D:F0:44:05:5E:60:78:6B:67:84:2A:F6:56:63:F8:9D:24 Authority key identifier: 1B:47:1D:AD:CD:91:20:93:35:13:6E:AC:F6:CC:98:88:28:65:4B:2A Certificate issuer: /CN=A91C9606/serialNumber=1B471DADCD91209335136EACF6CC988828654B2A Certificate serial: 0E3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft Manifest number: 0E21 Signing time: Sat 24 Oct 2026 17:46:49 +0000 Manifest this update: Sat 24 Oct 2026 17:46:49 +0000 Manifest next update: Sat 31 Oct 2026 17:46:49 +0000 Files and hashes: 1: G0cdrc2RIJM1E26s9syYiChlSyo.crl (hash: UZxyQaRyRjldsPm3VSbTPl7mxZ6UpwIRZ8I0JZVHXi8=) 2: 06370CB2DB9211E9B70EDD2EC4F9AE02.roa (hash: QJuobED8AIYNaA07H0l+GwSOVK0e9Xo+0hZGeA9Tr5g=) 3: 7A9CD75E23E311F0BB28EA29C4F9AE02.roa (hash: VZEltJw0vEDbOnRvRf9ELAdzaAN+QgrjbGf4Pt5gMhA=) 4: 645EF9CADB9311E988E56C33C4F9AE02.roa (hash: giSaWoz0kPjXm5QgA1jXt8OZKatJUwxEOdzcbQiRQwI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.crl rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 17:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3646 (0xe3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9606, serialNumber=1B471DADCD91209335136EACF6CC988828654B2A Validity Not Before: Oct 24 17:46:49 2026 GMT Not After : Oct 31 17:46:49 2026 GMT Subject: CN=6adcef09-be0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6b:77:6f:20:25:05:a5:f2:98:55:63:27:09: 5d:95:37:8f:c8:8f:64:2b:89:c3:46:5f:1e:7d:25: 94:96:fc:45:6a:ac:5d:c2:1b:af:e3:64:ba:1e:4f: c4:04:de:62:9f:be:21:fa:03:59:e5:93:81:75:dc: 66:6d:a1:19:af:0c:b6:83:b2:b5:23:56:5d:dd:0a: b6:7f:11:c5:ff:92:cc:d2:07:a8:9f:08:94:9a:65: 9a:93:c3:1b:87:e2:8e:dd:d5:00:c7:c4:d2:82:4b: 2b:4d:17:07:44:20:40:17:93:8c:61:18:93:f7:34: 85:13:41:d3:db:11:a2:0c:46:68:a6:f9:ff:21:74: ce:b3:b5:b3:49:85:2c:6f:63:fe:cf:f2:aa:17:e4: 95:d9:78:5e:fc:f5:88:6a:09:55:0b:b2:ec:3e:6a: 5f:32:6e:e4:83:a7:fc:84:98:d7:6e:5b:aa:32:8f: 35:79:04:d6:84:52:ee:fb:b6:46:31:02:1b:f9:77: 22:28:68:66:81:74:56:90:03:c3:59:cb:72:ed:da: b7:90:4c:b6:70:72:47:66:01:3b:e1:bd:04:a2:88: 41:1e:b5:3b:ac:85:7f:92:1d:25:10:eb:e0:e8:3f: 1b:73:88:b6:53:1d:89:ed:ad:8a:64:3c:4c:c6:17: 36:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:7B:C6:6D:F0:44:05:5E:60:78:6B:67:84:2A:F6:56:63:F8:9D:24 X509v3 Authority Key Identifier: keyid:1B:47:1D:AD:CD:91:20:93:35:13:6E:AC:F6:CC:98:88:28:65:4B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:d4:62:ae:5e:9e:0f:c2:7c:78:ad:59:07:6c:07:df:b0:99: 72:53:ba:90:71:ea:d0:9a:36:40:fc:43:b1:82:08:45:c3:ae: f9:48:f2:f6:20:5f:59:67:79:03:66:87:eb:ed:75:3c:15:a6: 01:98:1f:f1:ba:6c:29:4c:f9:ed:bb:87:0c:7a:ac:d6:57:ab: 30:3d:56:a9:70:a4:54:0a:06:23:3b:8c:47:bb:44:7c:96:5f: 87:1c:6d:f6:e3:25:77:70:6e:b5:ea:d6:02:24:16:75:9c:09: f7:83:f9:c5:b2:29:25:6c:85:81:c6:d4:74:67:07:1c:18:df: f1:c8:b9:9b:6a:64:2e:60:d1:0f:d9:18:40:97:0c:a6:b5:be: 2e:67:88:6f:54:14:25:dd:5a:31:0c:23:42:9d:aa:f5:e2:3c: c4:3c:54:2e:dd:ee:9a:9c:41:b5:c0:a5:99:32:31:d0:59:94: 84:b4:ea:e6:cc:0d:84:c1:65:35:c3:9e:9a:a6:ac:a9:35:48: b5:48:ef:db:08:68:32:db:b1:14:03:f0:bd:72:ae:35:27:a8: 02:c6:57:84:4e:b9:bc:1a:07:ec:33:7a:44:aa:e4:86:fa:cb: 93:d4:f1:17:62:12:93:c2:4a:bb:89:9e:b0:d2:6f:7f:95:7a: 21:d7:20:71 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk2MDYxMTAvBgNVBAUTKDFCNDcxREFEQ0Q5MTIwOTMzNTEzNkVBQ0Y2Q0M5ODg4 Mjg2NTRCMkEwHhcNMjYxMDI0MTc0NjQ5WhcNMjYxMDMxMTc0NjQ5WjAYMRYwFAYD VQQDEw02YWRjZWYwOS1iZTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAomt3byAlBaXymFVjJwldlTePyI9kK4nDRl8efSWUlvxFaqxdwhuv42S6Hk/E BN5in74h+gNZ5ZOBddxmbaEZrwy2g7K1I1Zd3Qq2fxHF/5LM0geonwiUmmWak8Mb h+KO3dUAx8TSgksrTRcHRCBAF5OMYRiT9zSFE0HT2xGiDEZopvn/IXTOs7WzSYUs b2P+z/KqF+SV2Xhe/PWIaglVC7LsPmpfMm7kg6f8hJjXbluqMo81eQTWhFLu+7ZG MQIb+XciKGhmgXRWkAPDWcty7dq3kEy2cHJHZgE74b0EoohBHrU7rIV/kh0lEOvg 6D8bc4i2Ux2J7a2KZDxMxhc2dwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAR7xm3w RAVeYHhrZ4Qq9lZj+J0kMB8GA1UdIwQYMBaAFBtHHa3NkSCTNRNurPbMmIgoZUsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTYwNi85QzlGOUY5QURC OTAxMUU5QTNDMTJGMkNDNEY5QUUwMi9HMGNkcmMyUklKTTFFMjZzOXN5WWlDaGxT eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0cwY2RyYzJSSUpNMUUyNnM5c3lZaUNobFN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTYwNi85QzlGOUY5QURCOTAxMUU5QTNDMTJGMkNDNEY5QUUwMi9HMGNkcmMyUklK TTFFMjZzOXN5WWlDaGxTeW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAi9Rirl6eD8J8eK1ZB2wH37CZclO6kHHq0Jo2QPxDsYIIRcOu+Ujy9iBfWWd5 A2aH6+11PBWmAZgf8bpsKUz57buHDHqs1lerMD1WqXCkVAoGIzuMR7tEfJZfhxxt 9uMld3ButerWAiQWdZwJ94P5xbIpJWyFgcbUdGcHHBjf8ci5m2pkLmDRD9kYQJcM prW+LmeIb1QUJd1aMQwjQp2q9eI8xDxULt3umpxBtcClmTIx0FmUhLTq5swNhMFl NcOemqasqTVItUjv2whoMtuxFAPwvXKuNSeoAsZXhE65vBoH7DN6RKrkhvrLk9Tx F2ISk8JKu4mesNJvf5V6IdcgcQ== -----END CERTIFICATE-----Generated at Mon Oct 26 16:04:21 2026 by rpki-client