$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft File: IadvO7gWz_58RmVVwrC-vJx7xW4.mft (raw, json) Hash identifier: bSGVVFXBo+JpBX0aOoIOEAHcrLY+iNlpAZ32ZHt4A5w= Subject key identifier: 3F:22:18:EA:3D:7E:EA:36:AA:5E:A5:C9:BD:EE:0E:14:71:44:15:B4 Authority key identifier: 21:A7:6F:3B:B8:16:CF:FE:7C:46:65:55:C2:B0:BE:BC:9C:7B:C5:6E Certificate issuer: /CN=A91CA559/serialNumber=21A76F3BB816CFFE7C466555C2B0BEBC9C7BC56E Certificate serial: 05CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft Manifest number: 05B9 Signing time: Mon 26 Oct 2026 23:01:34 +0000 Manifest this update: Mon 26 Oct 2026 23:01:34 +0000 Manifest next update: Mon 02 Nov 2026 23:01:34 +0000 Files and hashes: 1: IadvO7gWz_58RmVVwrC-vJx7xW4.crl (hash: tDKGilXjGpghwljupbinby62HXYAPQQDQKti7WIbXmU=) 2: 44D508E43C8311ECA86D031EC4F9AE02.roa (hash: rybthJdFuq/pPEywNNw6CY2xy0sjK2dGh2/15++J1U4=) 3: 5295B96E705F11F1BD79389570A30FBC.roa (hash: n1nOWdau1wyLHktQpIFU/BOos2aKf6aKxaZ+x98puqQ=) 4: 45CC5B763C8311ECA86D031EC4F9AE02.roa (hash: Uw2FZTkHUIqrr7yagK8cTLFCJvmGH/94ekgNsNUOejg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.crl rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 22:31:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1484 (0x5cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA559, serialNumber=21A76F3BB816CFFE7C466555C2B0BEBC9C7BC56E Validity Not Before: Oct 26 23:01:34 2026 GMT Not After : Nov 2 23:01:34 2026 GMT Subject: CN=6adfdbce-ce63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4c:71:f4:18:d9:ff:1e:e7:3e:56:71:8b:00: b1:ad:73:95:fe:22:58:5a:1e:68:26:2c:d2:ab:e3: 7f:8c:49:4e:91:4e:0d:5e:a4:6b:1a:01:98:d7:00: be:49:13:7a:f9:89:9f:cd:d8:d9:bf:e0:0a:01:50: b8:92:47:10:97:4c:6c:ed:8e:6b:cc:29:e9:40:aa: 3e:2b:36:b1:7e:a7:ff:05:d2:e3:c3:48:cf:63:38: 6b:0d:d9:7b:04:bc:02:36:52:fa:53:96:37:45:5f: 1b:33:5d:85:2a:e9:db:6f:c7:e4:ed:b7:36:02:0f: 9a:37:4c:0f:5d:ed:0e:91:3c:f3:8a:33:47:57:01: d4:15:ba:cc:ce:11:42:aa:09:ff:1e:1a:56:2e:b0: 90:f8:83:6c:96:ed:84:46:54:e0:a3:19:a3:3d:7f: 5f:a9:7d:92:ed:7e:2e:c1:29:d8:45:78:82:2c:0e: 06:3c:44:82:f3:02:fe:32:e8:4a:29:65:ce:03:c6: c7:4d:ed:2a:29:fd:18:f3:80:67:40:5d:c0:32:8e: e6:28:6a:97:b7:66:f9:10:8a:25:20:81:8c:2b:92: fc:41:bf:8f:e1:29:f6:0a:83:fd:0f:3e:03:0a:f1: ce:f0:41:81:ec:2e:9f:cb:6d:10:de:7c:d1:90:3a: 98:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:22:18:EA:3D:7E:EA:36:AA:5E:A5:C9:BD:EE:0E:14:71:44:15:B4 X509v3 Authority Key Identifier: keyid:21:A7:6F:3B:B8:16:CF:FE:7C:46:65:55:C2:B0:BE:BC:9C:7B:C5:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:56:5e:a7:70:37:11:af:0d:22:b9:6b:7b:da:26:c7:8a:93: 82:e9:53:7b:cf:07:b6:c3:f8:40:f1:25:43:b8:ba:0f:42:88: 43:36:b3:23:7e:8b:35:88:aa:77:34:a6:bd:e1:81:8d:b7:ba: 7c:10:d9:96:80:e1:1a:66:19:84:ac:6d:16:c6:1b:6d:cf:a0: c4:a9:26:44:69:0f:0d:0f:1d:17:5d:6c:34:29:09:39:1f:04: 53:99:62:10:9e:b7:d9:80:37:8b:27:00:25:99:6b:80:c8:b2: 7c:5e:57:9f:58:e5:71:60:76:ef:23:cc:a7:49:a0:95:a8:c9: de:93:53:9b:6d:28:6f:f9:96:fb:6e:00:11:52:a8:a8:30:5c: 0f:30:ba:96:06:d9:49:1b:81:2c:73:01:37:4d:90:dd:6e:37: 24:01:0b:d9:c7:7b:77:d6:93:38:37:b1:31:6e:59:cc:c5:23: 94:20:e2:dc:51:02:c9:dd:2e:ca:43:d1:76:98:b8:87:62:fe: 75:ac:42:63:6c:d0:64:26:11:84:50:ce:49:49:49:9b:6c:d5: 8e:40:f2:81:4b:55:a0:51:54:1e:27:da:4f:c0:c3:ad:76:ac: 98:a2:2e:1c:94:01:3c:c2:0b:b1:2a:a5:60:bf:09:ba:c0:93: a5:ca:58:7f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E1NTkxMTAvBgNVBAUTKDIxQTc2RjNCQjgxNkNGRkU3QzQ2NjU1NUMyQjBCRUJD OUM3QkM1NkUwHhcNMjYxMDI2MjMwMTM0WhcNMjYxMTAyMjMwMTM0WjAYMRYwFAYD VQQDEw02YWRmZGJjZS1jZTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAykxx9BjZ/x7nPlZxiwCxrXOV/iJYWh5oJizSq+N/jElOkU4NXqRrGgGY1wC+ SRN6+YmfzdjZv+AKAVC4kkcQl0xs7Y5rzCnpQKo+Kzaxfqf/BdLjw0jPYzhrDdl7 BLwCNlL6U5Y3RV8bM12FKunbb8fk7bc2Ag+aN0wPXe0OkTzzijNHVwHUFbrMzhFC qgn/HhpWLrCQ+INslu2ERlTgoxmjPX9fqX2S7X4uwSnYRXiCLA4GPESC8wL+MuhK KWXOA8bHTe0qKf0Y84BnQF3AMo7mKGqXt2b5EIolIIGMK5L8Qb+P4Sn2CoP9Dz4D CvHO8EGB7C6fy20Q3nzRkDqY8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD8iGOo9 fuo2ql6lyb3uDhRxRBW0MB8GA1UdIwQYMBaAFCGnbzu4Fs/+fEZlVcKwvryce8Vu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTU1OS9BQUMzNEY0NjMw QzQxMUVDOTlGMkY2NkNDNEY5QUUwMi9JYWR2TzdnV3pfNThSbVZWd3JDLXZKeDd4 VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lhZHZPN2dXel81OFJtVlZ3ckMtdkp4N3hXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTU1OS9BQUMzNEY0NjMwQzQxMUVDOTlGMkY2NkNDNEY5QUUwMi9JYWR2TzdnV3pf NThSbVZWd3JDLXZKeDd4VzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADVZep3A3Ea8NIrlre9omx4qTgulTe88HtsP4QPElQ7i6D0KIQzazI36LNYiq dzSmveGBjbe6fBDZloDhGmYZhKxtFsYbbc+gxKkmRGkPDQ8dF11sNCkJOR8EU5li EJ632YA3iycAJZlrgMiyfF5Xn1jlcWB27yPMp0mglajJ3pNTm20ob/mW+24AEVKo qDBcDzC6lgbZSRuBLHMBN02Q3W43JAEL2cd7d9aTODexMW5ZzMUjlCDi3FECyd0u ykPRdpi4h2L+daxCY2zQZCYRhFDOSUlJm2zVjkDygUtVoFFUHifaT8DDrXasmKIu HJQBPMILsSqlYL8JusCTpcpYfw== -----END CERTIFICATE-----Generated at Tue Oct 27 02:57:16 2026 by rpki-client