$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft File: G0cdrc2RIJM1E26s9syYiChlSyo.mft (raw, json) Hash identifier: msSZJ2Sy1zNYxhOVCZmvaO7ff6PzVaRbfO5L5CYqUfg= Subject key identifier: 7B:A4:9C:DB:A4:7F:8A:A6:51:C3:76:47:F7:5E:4E:E0:BC:7A:32:01 Authority key identifier: 1B:47:1D:AD:CD:91:20:93:35:13:6E:AC:F6:CC:98:88:28:65:4B:2A Certificate issuer: /CN=A91C9606/serialNumber=1B471DADCD91209335136EACF6CC988828654B2A Certificate serial: 0E3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft Manifest number: 0E22 Signing time: Mon 26 Oct 2026 17:49:07 +0000 Manifest this update: Mon 26 Oct 2026 17:49:06 +0000 Manifest next update: Mon 02 Nov 2026 17:49:06 +0000 Files and hashes: 1: G0cdrc2RIJM1E26s9syYiChlSyo.crl (hash: eRqBOCu6PsSjqPj6Npw5kOJyl5QOCx4hhU/N7w3rnSM=) 2: 645EF9CADB9311E988E56C33C4F9AE02.roa (hash: giSaWoz0kPjXm5QgA1jXt8OZKatJUwxEOdzcbQiRQwI=) 3: 06370CB2DB9211E9B70EDD2EC4F9AE02.roa (hash: QJuobED8AIYNaA07H0l+GwSOVK0e9Xo+0hZGeA9Tr5g=) 4: 7A9CD75E23E311F0BB28EA29C4F9AE02.roa (hash: VZEltJw0vEDbOnRvRf9ELAdzaAN+QgrjbGf4Pt5gMhA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.crl rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 14:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3647 (0xe3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9606, serialNumber=1B471DADCD91209335136EACF6CC988828654B2A Validity Not Before: Oct 26 17:49:06 2026 GMT Not After : Nov 2 17:49:06 2026 GMT Subject: CN=6adf9293-b5fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:24:d5:31:98:93:ff:a0:ab:9b:fc:0d:15:d3: 9d:8f:f8:58:07:d2:e3:e8:e2:89:b0:d2:ea:0d:b1: 8a:93:77:4c:1b:77:2e:41:bb:23:5a:d3:4e:92:1b: 9f:7a:f5:43:b9:26:4f:f8:b8:b5:a0:a7:b7:26:c9: 91:0b:7c:16:2e:2f:2f:9b:4d:a4:89:12:d9:d7:9d: f5:2e:ed:5a:cd:3e:00:d8:e8:05:c3:40:54:3a:22: 47:37:5b:8d:f7:1b:9d:af:81:4c:a8:8f:0c:36:2d: 29:e1:6e:6c:05:e7:9c:94:fa:f0:80:e2:ff:90:54: 43:72:d6:97:98:f5:6c:af:28:e0:47:83:b8:2a:01: 58:db:70:cc:b3:d2:19:aa:89:ff:0b:2c:5f:24:19: e5:d9:c7:c0:3b:e2:37:a7:28:75:4d:c2:ce:01:5c: d8:f7:76:74:ea:7b:04:61:fe:9c:87:b1:35:83:de: 05:fd:8f:6f:b3:35:da:b7:0b:70:8b:a7:ef:80:7e: 85:0a:7d:94:e3:6d:f4:b0:19:d7:d0:1b:83:d0:21: ff:d4:3e:12:ea:11:a1:df:e4:1c:74:69:9f:8c:5f: e1:9c:bb:95:ce:e3:17:dd:77:5d:01:40:43:23:bb: f4:43:2e:08:e5:37:fd:0b:b8:9c:46:5b:fe:b9:ba: 1a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:A4:9C:DB:A4:7F:8A:A6:51:C3:76:47:F7:5E:4E:E0:BC:7A:32:01 X509v3 Authority Key Identifier: keyid:1B:47:1D:AD:CD:91:20:93:35:13:6E:AC:F6:CC:98:88:28:65:4B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:f0:a1:49:32:18:c8:78:b7:6c:8c:86:1a:f7:3d:1d:b3:2a: 05:40:64:eb:64:7e:3b:7e:16:ea:cd:57:ff:b3:44:cd:e2:2e: c3:2a:b3:26:62:30:d6:e3:bb:f5:4a:07:13:6d:66:fa:ef:fc: a2:8f:e7:39:84:d2:51:11:07:ce:03:e3:42:fe:60:df:24:f6: 42:de:fc:68:3d:43:76:0c:4d:a6:91:c5:e7:bc:f5:52:39:d8: f4:2d:63:42:8c:96:f7:6d:28:03:17:ad:3b:2f:90:aa:71:9c: d2:83:f7:88:06:23:d0:61:69:4b:db:6a:b9:e7:89:26:77:46: 49:53:6f:7f:04:de:63:ff:6d:e2:05:82:9e:5e:36:42:b2:fb: 38:31:01:1a:36:a7:8a:4c:71:38:1b:8c:cb:f9:0f:5d:a3:b8: da:91:2a:8f:e3:57:ba:19:e9:05:e0:17:5c:eb:bc:5f:db:ce: 7d:c4:2d:a2:15:10:e8:07:21:1c:47:bd:26:da:8b:d3:ef:5b: 9d:53:7d:0a:ef:48:bd:83:52:0b:41:7f:3f:26:cc:72:ca:97: a7:0a:42:a4:73:c7:2d:36:e2:d2:39:11:cd:05:7e:d2:0a:c2: 25:19:d4:bc:df:33:b7:cb:88:ac:8e:ca:7f:e5:8c:ad:7b:36: f7:23:0f:32 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk2MDYxMTAvBgNVBAUTKDFCNDcxREFEQ0Q5MTIwOTMzNTEzNkVBQ0Y2Q0M5ODg4 Mjg2NTRCMkEwHhcNMjYxMDI2MTc0OTA2WhcNMjYxMTAyMTc0OTA2WjAYMRYwFAYD VQQDEw02YWRmOTI5My1iNWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7iTVMZiT/6Crm/wNFdOdj/hYB9Lj6OKJsNLqDbGKk3dMG3cuQbsjWtNOkhuf evVDuSZP+Li1oKe3JsmRC3wWLi8vm02kiRLZ1531Lu1azT4A2OgFw0BUOiJHN1uN 9xudr4FMqI8MNi0p4W5sBeeclPrwgOL/kFRDctaXmPVsryjgR4O4KgFY23DMs9IZ qon/CyxfJBnl2cfAO+I3pyh1TcLOAVzY93Z06nsEYf6ch7E1g94F/Y9vszXatwtw i6fvgH6FCn2U4230sBnX0BuD0CH/1D4S6hGh3+QcdGmfjF/hnLuVzuMX3XddAUBD I7v0Qy4I5Tf9C7icRlv+uboaWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHuknNuk f4qmUcN2R/deTuC8ejIBMB8GA1UdIwQYMBaAFBtHHa3NkSCTNRNurPbMmIgoZUsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTYwNi85QzlGOUY5QURC OTAxMUU5QTNDMTJGMkNDNEY5QUUwMi9HMGNkcmMyUklKTTFFMjZzOXN5WWlDaGxT eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0cwY2RyYzJSSUpNMUUyNnM5c3lZaUNobFN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTYwNi85QzlGOUY5QURCOTAxMUU5QTNDMTJGMkNDNEY5QUUwMi9HMGNkcmMyUklK TTFFMjZzOXN5WWlDaGxTeW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEfChSTIYyHi3bIyGGvc9HbMqBUBk62R+O34W6s1X/7NEzeIuwyqzJmIw1uO7 9UoHE21m+u/8oo/nOYTSUREHzgPjQv5g3yT2Qt78aD1DdgxNppHF57z1UjnY9C1j QoyW920oAxetOy+QqnGc0oP3iAYj0GFpS9tqueeJJndGSVNvfwTeY/9t4gWCnl42 QrL7ODEBGjanikxxOBuMy/kPXaO42pEqj+NXuhnpBeAXXOu8X9vOfcQtohUQ6Ach HEe9JtqL0+9bnVN9Cu9IvYNSC0F/PybMcsqXpwpCpHPHLTbi0jkRzQV+0grCJRnU vN8zt8uIrI7Kf+WMrXs29yMPMg== -----END CERTIFICATE-----Generated at Mon Oct 26 20:57:46 2026 by rpki-client