$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft File: L8Qw8eIVy9fgjyZDiDcDUALeMak.mft (raw, json) Hash identifier: PMfhkwORk8VQTvxfdSw6eVRa6PPu1vLoqax9wQFjlpc= Subject key identifier: 22:D5:FE:75:8F:BD:1D:5F:6A:32:67:E3:19:EF:64:6F:F5:71:E3:4A Authority key identifier: 2F:C4:30:F1:E2:15:CB:D7:E0:8F:26:43:88:37:03:50:02:DE:31:A9 Certificate issuer: /CN=A91CB8A3/serialNumber=2FC430F1E215CBD7E08F26438837035002DE31A9 Certificate serial: 03CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft Manifest number: 03B8 Signing time: Sat 31 Oct 2026 00:37:11 +0000 Manifest this update: Sat 31 Oct 2026 00:37:10 +0000 Manifest next update: Sat 07 Nov 2026 00:37:10 +0000 Files and hashes: 1: L8Qw8eIVy9fgjyZDiDcDUALeMak.crl (hash: RyWhgKJ0VdqWsxrf7LbJdjLr4VLTs1My0xyvMbNEr2g=) 2: 36B29DDC841711F0AB46F416C4F9AE02.roa (hash: wfGSp7+JsmcD0oEs9KhJM3F6ykDJOKd65jRk6d+1FZA=) 3: 93853096971D11F18F01422E6D11F970.roa (hash: 5yF1DXbnlSpTxNu8XT0SUNre3PW558XfVHldm3s72uM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.crl rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Nov 2026 00:37:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 973 (0x3cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB8A3, serialNumber=2FC430F1E215CBD7E08F26438837035002DE31A9 Validity Not Before: Oct 31 00:37:10 2026 GMT Not After : Nov 7 00:37:10 2026 GMT Subject: CN=6ae53836-0be0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:91:6c:5c:5d:88:5d:c3:3c:c3:0e:49:bb:b6: a1:f5:9d:89:bb:5a:59:70:14:3b:45:a9:48:71:f1: 45:b5:29:42:2e:dc:db:64:95:24:23:ca:5c:37:e3: fd:4e:31:3d:0a:45:f0:60:bf:07:36:d5:3e:e2:4e: 7a:73:f4:90:54:58:7c:33:4c:bc:20:9e:e0:93:31: 67:7e:9e:69:a0:ae:02:ac:77:c9:46:f8:12:89:18: 76:4d:bb:c7:5b:58:23:d2:52:d6:da:1f:c5:fe:a0: f4:5b:20:ff:94:b0:f0:ab:a4:a7:11:d6:67:1d:44: a2:e3:d4:a0:6a:b2:13:cc:f3:c7:d7:b2:d4:9f:24: 8e:09:ed:5f:5b:5d:8b:7e:0a:60:dd:dd:03:a7:2e: bd:ea:e0:c5:a3:24:09:66:0d:81:4d:ed:4e:34:7b: bf:8c:b2:40:f5:76:d6:ea:eb:48:ce:90:30:ef:4c: 82:8e:02:14:e5:7f:42:62:cd:7f:a1:56:00:78:18: f8:79:37:5d:24:af:27:ad:4f:6d:43:0e:6d:84:78: 5f:53:f8:e3:e3:1f:15:22:3a:d4:58:ea:58:e7:a6: 7f:fe:8b:47:0e:99:ee:ee:8f:90:77:67:d2:40:a7: f3:8a:b0:56:5b:c4:79:fc:8e:3d:32:4b:20:ae:26: 31:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D5:FE:75:8F:BD:1D:5F:6A:32:67:E3:19:EF:64:6F:F5:71:E3:4A X509v3 Authority Key Identifier: keyid:2F:C4:30:F1:E2:15:CB:D7:E0:8F:26:43:88:37:03:50:02:DE:31:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:72:c2:72:2f:ed:e6:2e:35:77:e4:ee:7a:af:dc:75:e2:ce: 63:fc:18:9e:fe:39:06:ea:52:58:1b:57:6f:d1:6f:3a:d1:4e: 70:73:c1:02:2b:22:7b:58:8b:a1:c4:cf:1d:ad:89:f1:d5:47: 27:de:a8:25:e2:b6:20:78:ae:6a:3d:c6:a9:48:7e:d8:76:c9: 14:0f:12:68:f4:18:d0:d1:20:f3:28:fc:97:97:d0:9b:af:fd: 67:8b:1b:75:0f:2e:83:10:e7:8e:4b:b9:d0:c4:5c:c7:54:5a: 81:b9:f1:d1:3b:0b:dd:c1:02:98:83:42:b6:bc:1e:97:c2:b9: dd:37:c3:b3:87:31:5e:79:23:0a:48:ae:dc:9a:2e:a1:a9:4f: c0:86:9d:61:b2:17:a5:d0:e2:c8:c8:3d:38:88:ae:69:72:2d: 86:57:c2:2a:8b:3b:80:1f:96:75:1e:1b:6c:7e:88:78:54:0c: 2c:fa:b9:58:6f:a4:28:0f:fd:79:61:e7:5c:c5:7f:70:b1:9c: 44:25:d6:00:01:fe:ca:50:53:5e:2e:82:23:9a:5f:cc:1e:93: 54:be:9b:8c:76:78:41:95:15:4a:be:4c:86:fc:c6:4a:43:5c: ba:a0:e4:f1:10:7a:a4:8f:fc:10:79:84:af:c0:36:cd:24:7e: 25:77:d3:86 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA80wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I4QTMxMTAvBgNVBAUTKDJGQzQzMEYxRTIxNUNCRDdFMDhGMjY0Mzg4MzcwMzUw MDJERTMxQTkwHhcNMjYxMDMxMDAzNzEwWhcNMjYxMTA3MDAzNzEwWjAYMRYwFAYD VQQDEw02YWU1MzgzNi0wYmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy5FsXF2IXcM8ww5Ju7ah9Z2Ju1pZcBQ7RalIcfFFtSlCLtzbZJUkI8pcN+P9 TjE9CkXwYL8HNtU+4k56c/SQVFh8M0y8IJ7gkzFnfp5poK4CrHfJRvgSiRh2TbvH W1gj0lLW2h/F/qD0WyD/lLDwq6SnEdZnHUSi49SgarITzPPH17LUnySOCe1fW12L fgpg3d0Dpy696uDFoyQJZg2BTe1ONHu/jLJA9XbW6utIzpAw70yCjgIU5X9CYs1/ oVYAeBj4eTddJK8nrU9tQw5thHhfU/jj4x8VIjrUWOpY56Z//otHDpnu7o+Qd2fS QKfzirBWW8R5/I49MksgriYxIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCLV/nWP vR1fajJn4xnvZG/1ceNKMB8GA1UdIwQYMBaAFC/EMPHiFcvX4I8mQ4g3A1AC3jGp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjhBMy85NjY1MEYzOEZE MTcxMUVDODI4OTgzNjVDNEY5QUUwMi9MOFF3OGVJVnk5ZmdqeVpEaURjRFVBTGVN YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w4UXc4ZUlWeTlmZ2p5WkRpRGNEVUFMZU1hay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjhBMy85NjY1MEYzOEZEMTcxMUVDODI4OTgzNjVDNEY5QUUwMi9MOFF3OGVJVnk5 ZmdqeVpEaURjRFVBTGVNYWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPHLCci/t5i41d+Tueq/cdeLOY/wYnv45BupSWBtXb9FvOtFOcHPBAisie1iL ocTPHa2J8dVHJ96oJeK2IHiuaj3GqUh+2HbJFA8SaPQY0NEg8yj8l5fQm6/9Z4sb dQ8ugxDnjku50MRcx1Ragbnx0TsL3cECmINCtrwel8K53TfDs4cxXnkjCkiu3Jou oalPwIadYbIXpdDiyMg9OIiuaXIthlfCKos7gB+WdR4bbH6IeFQMLPq5WG+kKA/9 eWHnXMV/cLGcRCXWAAH+ylBTXi6CI5pfzB6TVL6bjHZ4QZUVSr5MhvzGSkNcuqDk 8RB6pI/8EHmEr8A2zSR+JXfThg== -----END CERTIFICATE-----Generated at Sun Nov 1 01:52:05 2026 by rpki-client