$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft File: IadvO7gWz_58RmVVwrC-vJx7xW4.mft (raw, json) Hash identifier: YjQgpeFjtH3VAHvDnbDwytmFSyPlrt80uMETwkEXvlE= Subject key identifier: 53:D4:8B:79:B0:E9:53:42:CB:67:C9:56:8B:76:8C:5F:2E:36:CD:FA Authority key identifier: 21:A7:6F:3B:B8:16:CF:FE:7C:46:65:55:C2:B0:BE:BC:9C:7B:C5:6E Certificate issuer: /CN=A91CA559/serialNumber=21A76F3BB816CFFE7C466555C2B0BEBC9C7BC56E Certificate serial: 05CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft Manifest number: 05B8 Signing time: Sat 24 Oct 2026 23:05:59 +0000 Manifest this update: Sat 24 Oct 2026 23:05:58 +0000 Manifest next update: Sat 31 Oct 2026 23:05:58 +0000 Files and hashes: 1: IadvO7gWz_58RmVVwrC-vJx7xW4.crl (hash: uN+WBi+xddybPvR3Tp2YMDEyfuOeEFAtctPN2lbDp6g=) 2: 45CC5B763C8311ECA86D031EC4F9AE02.roa (hash: Uw2FZTkHUIqrr7yagK8cTLFCJvmGH/94ekgNsNUOejg=) 3: 44D508E43C8311ECA86D031EC4F9AE02.roa (hash: rybthJdFuq/pPEywNNw6CY2xy0sjK2dGh2/15++J1U4=) 4: 5295B96E705F11F1BD79389570A30FBC.roa (hash: n1nOWdau1wyLHktQpIFU/BOos2aKf6aKxaZ+x98puqQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.crl rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 23:05:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1483 (0x5cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA559, serialNumber=21A76F3BB816CFFE7C466555C2B0BEBC9C7BC56E Validity Not Before: Oct 24 23:05:58 2026 GMT Not After : Oct 31 23:05:58 2026 GMT Subject: CN=6add39d7-adea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8f:55:52:54:81:f2:3b:94:54:88:8b:d7:1b: d1:20:3c:ec:6a:37:ba:21:2d:a7:f3:8f:9c:3f:f8: 8b:d1:21:f8:5e:6d:64:1c:30:5a:9a:bd:78:3b:7d: fc:a9:dc:19:d6:59:17:53:ff:6c:05:a1:83:28:4b: b2:ba:18:82:69:0d:53:00:8b:53:a0:12:4b:54:cd: 22:ea:12:cf:ab:94:99:c1:ac:c9:58:0a:d3:46:98: 61:89:ac:33:da:59:33:1f:69:ae:88:ec:6f:32:4a: bf:bd:db:8c:da:4f:d1:8d:a9:e0:0a:ba:9c:eb:05: a0:75:ec:72:e1:59:72:62:a8:e4:03:fc:32:37:ab: 9e:a0:b6:f6:65:5f:a2:3d:36:03:14:6f:65:c7:1d: 88:0b:db:46:b2:82:46:ff:e1:be:db:4b:21:fd:3d: 7e:a5:eb:d5:6b:c9:2c:85:32:17:2c:8c:fb:eb:d8: 1d:5d:a2:09:cd:9d:5a:ba:4d:e0:67:9a:ee:14:52: e6:5d:14:e1:34:1c:6b:e2:31:5a:9c:cc:f5:34:22: 2a:f8:41:f5:1b:fb:b4:4b:7c:b3:df:43:4c:f5:4c: 9c:ba:53:c5:4b:13:79:1a:00:65:ac:a0:a9:3c:2c: a0:18:35:27:bf:39:87:e7:ea:bb:24:1a:a2:25:d5: 43:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:D4:8B:79:B0:E9:53:42:CB:67:C9:56:8B:76:8C:5F:2E:36:CD:FA X509v3 Authority Key Identifier: keyid:21:A7:6F:3B:B8:16:CF:FE:7C:46:65:55:C2:B0:BE:BC:9C:7B:C5:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:c5:97:78:29:26:ed:42:f9:a1:89:ba:84:4a:1a:bc:9b:c7: 66:bd:f1:cd:8a:39:db:47:9d:1d:dd:90:07:40:22:6d:ca:42: 0e:c6:4e:b1:8a:3c:11:0f:66:16:37:4e:76:c9:95:39:13:40: 0f:35:fd:60:e5:30:be:21:20:ba:6a:74:7b:6e:4d:42:57:d7: 0d:13:ef:a5:88:1a:5f:fe:65:8e:bd:07:eb:f8:1a:57:f7:63: 37:75:a1:af:e0:ab:4f:43:ae:ff:f1:2a:f2:ee:2f:9d:e3:30: ca:38:bc:d6:e3:fa:b3:c5:16:0e:9d:3d:e8:f4:cd:07:94:c6: 0d:ec:83:7d:80:67:df:57:5a:60:79:25:fb:7a:84:45:cc:a1: 75:b4:a0:8e:57:dc:39:6f:b5:73:31:73:25:94:bb:4b:f9:0b: b4:6d:91:f1:e1:ec:0d:17:74:3c:47:90:ef:af:7d:49:0c:d5: 4c:f0:2a:b8:92:c2:a8:be:a1:a4:c3:b8:aa:78:ad:17:32:d6: a6:a0:fc:fe:10:eb:76:2a:44:40:cc:a6:7c:e2:26:ca:1f:03: dd:39:6a:8c:ec:77:73:7c:3a:04:9f:03:49:68:9a:35:a3:83: f5:35:20:c6:61:c6:24:5e:c0:79:6a:e0:fa:50:fe:86:a0:ac: 8d:b3:2f:53 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E1NTkxMTAvBgNVBAUTKDIxQTc2RjNCQjgxNkNGRkU3QzQ2NjU1NUMyQjBCRUJD OUM3QkM1NkUwHhcNMjYxMDI0MjMwNTU4WhcNMjYxMDMxMjMwNTU4WjAYMRYwFAYD VQQDEw02YWRkMzlkNy1hZGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwY9VUlSB8juUVIiL1xvRIDzsaje6IS2n84+cP/iL0SH4Xm1kHDBamr14O338 qdwZ1lkXU/9sBaGDKEuyuhiCaQ1TAItToBJLVM0i6hLPq5SZwazJWArTRphhiawz 2lkzH2muiOxvMkq/vduM2k/RjangCrqc6wWgdexy4VlyYqjkA/wyN6ueoLb2ZV+i PTYDFG9lxx2IC9tGsoJG/+G+20sh/T1+pevVa8kshTIXLIz769gdXaIJzZ1auk3g Z5ruFFLmXRThNBxr4jFanMz1NCIq+EH1G/u0S3yz30NM9UyculPFSxN5GgBlrKCp PCygGDUnvzmH5+q7JBqiJdVDKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFPUi3mw 6VNCy2fJVot2jF8uNs36MB8GA1UdIwQYMBaAFCGnbzu4Fs/+fEZlVcKwvryce8Vu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTU1OS9BQUMzNEY0NjMw QzQxMUVDOTlGMkY2NkNDNEY5QUUwMi9JYWR2TzdnV3pfNThSbVZWd3JDLXZKeDd4 VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lhZHZPN2dXel81OFJtVlZ3ckMtdkp4N3hXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTU1OS9BQUMzNEY0NjMwQzQxMUVDOTlGMkY2NkNDNEY5QUUwMi9JYWR2TzdnV3pf NThSbVZWd3JDLXZKeDd4VzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiMWXeCkm7UL5oYm6hEoavJvHZr3xzYo520edHd2QB0AibcpCDsZOsYo8EQ9m FjdOdsmVORNADzX9YOUwviEgump0e25NQlfXDRPvpYgaX/5ljr0H6/gaV/djN3Wh r+CrT0Ou//Eq8u4vneMwyji81uP6s8UWDp096PTNB5TGDeyDfYBn31daYHkl+3qE RcyhdbSgjlfcOW+1czFzJZS7S/kLtG2R8eHsDRd0PEeQ7699SQzVTPAquJLCqL6h pMO4qnitFzLWpqD8/hDrdipEQMymfOImyh8D3TlqjOx3c3w6BJ8DSWiaNaOD9TUg xmHGJF7AeWrg+lD+hqCsjbMvUw== -----END CERTIFICATE-----Generated at Mon Oct 26 18:01:21 2026 by rpki-client