$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft File: ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft (raw, json) Hash identifier: CBPck0rtHOnxn6ACOF0Xhpci7WGf9YQQPdFBX9r5NLk= Subject key identifier: 14:00:56:CD:41:D8:D2:72:84:99:1E:82:69:C9:94:72:25:5F:30:D8 Authority key identifier: 92:2D:60:EA:19:39:67:17:7B:C6:C3:9A:40:68:59:8A:3B:75:A6:D3 Certificate issuer: /CN=A91CB8BA/serialNumber=922D60EA193967177BC6C39A4068598A3B75A6D3 Certificate serial: 09BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ki1g6hk5Zxd7xsOaQGhZijt1ptM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft Manifest number: 09B3 Signing time: Mon 26 Oct 2026 19:56:16 +0000 Manifest this update: Mon 26 Oct 2026 19:56:15 +0000 Manifest next update: Mon 02 Nov 2026 19:56:15 +0000 Files and hashes: 1: ki1g6hk5Zxd7xsOaQGhZijt1ptM.crl (hash: Q8VnZfoFBhtOoJZ5pCKhzNUs6D0hQWrTywrpOcPErFk=) 2: 0B6B9DE6BAAE11EA8F1DA435C4F9AE02.roa (hash: K8ifKpf1OxSentj2ShFOfGXT/u0aCJtaC2BhvsjDEzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.crl rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ki1g6hk5Zxd7xsOaQGhZijt1ptM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 19:56:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2494 (0x9be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB8BA, serialNumber=922D60EA193967177BC6C39A4068598A3B75A6D3 Validity Not Before: Oct 26 19:56:15 2026 GMT Not After : Nov 2 19:56:15 2026 GMT Subject: CN=6adfb05f-5311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:15:32:c4:01:21:0a:fa:73:e5:db:71:b1:69: e7:70:61:0f:51:c1:82:cc:68:04:f5:e6:af:cc:69: 21:27:49:95:1b:62:a8:a1:d9:28:49:f1:b8:52:65: eb:c2:83:ff:34:b6:12:52:2e:da:21:06:0e:4a:fc: 71:b7:8f:0d:9d:cd:4e:ff:e5:27:48:26:83:eb:e5: 8e:ae:41:56:38:bb:16:95:bc:ab:2b:44:62:35:2c: e9:55:b6:57:cd:b9:0f:b3:0e:18:b5:4d:35:80:f4: f9:88:8d:fb:d2:28:df:c4:e0:f9:97:ef:a6:58:8b: 38:3d:f5:e3:57:95:ae:9b:e8:40:5d:62:a4:ff:d6: 61:f3:27:7e:f6:8c:16:ed:f9:82:f2:aa:22:5d:4d: 15:29:c6:f7:46:59:3d:a0:1b:fa:50:aa:ac:5e:fa: 0e:51:a4:72:39:06:fe:cc:82:50:80:a2:b5:d2:38: 48:d9:c6:7b:8a:3a:32:d9:f4:b1:b3:2b:7e:cc:b4: 70:d9:c9:0a:b1:59:bf:cf:f9:ec:f5:82:74:4f:90: aa:ec:d4:78:0f:ce:47:b1:ce:62:e1:ce:58:5e:ad: 69:a5:9c:06:c7:5b:cd:b2:70:41:04:83:ae:df:4d: 53:df:b0:70:5d:5e:39:76:82:e8:67:ae:b4:ac:8c: bc:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:00:56:CD:41:D8:D2:72:84:99:1E:82:69:C9:94:72:25:5F:30:D8 X509v3 Authority Key Identifier: keyid:92:2D:60:EA:19:39:67:17:7B:C6:C3:9A:40:68:59:8A:3B:75:A6:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ki1g6hk5Zxd7xsOaQGhZijt1ptM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:19:e7:e0:f0:5f:b2:92:41:4d:68:52:43:47:3e:a0:c8:c2: 7a:53:f8:6e:f6:01:c6:41:d8:c4:97:47:b8:86:ba:6d:30:44: 81:91:8c:5f:b8:e0:18:5a:95:a4:8b:ef:22:db:20:47:71:64: 01:23:e6:0f:69:15:2a:c8:ff:c4:57:3c:fd:27:be:7a:f1:86: 12:f5:f5:58:db:bf:73:79:b8:9e:52:d7:18:5f:aa:80:0e:b8: 5b:08:5f:7f:df:78:81:9b:94:9f:55:b1:a7:27:ef:ad:1e:83: 18:3e:01:1c:4d:b3:ea:c4:98:2d:41:59:8d:94:e4:0c:89:b4: f1:8f:87:3f:73:28:d6:8d:2e:ce:61:b6:7b:fc:ec:00:f5:9d: cb:ab:cc:53:a7:75:5b:57:10:ba:6a:92:8d:5f:2a:dd:b0:0e: 2b:2b:ae:11:f7:e4:c8:28:ba:18:82:43:b4:cc:57:db:d6:f8: a6:72:8c:9f:c8:d3:da:27:cf:9c:5b:5a:74:83:23:78:12:ee: e5:04:ec:a1:c6:e3:03:43:d5:f8:af:31:b2:01:f6:f6:e6:7d: 5c:79:f4:f4:b9:9f:4e:6d:56:37:1f:13:c1:2c:73:ab:ab:ae: d9:9b:3f:19:16:26:4f:ae:57:25:71:f9:0f:d5:5c:44:dd:9d: 23:7b:32:06 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I4QkExMTAvBgNVBAUTKDkyMkQ2MEVBMTkzOTY3MTc3QkM2QzM5QTQwNjg1OThB M0I3NUE2RDMwHhcNMjYxMDI2MTk1NjE1WhcNMjYxMTAyMTk1NjE1WjAYMRYwFAYD VQQDEw02YWRmYjA1Zi01MzExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjBUyxAEhCvpz5dtxsWnncGEPUcGCzGgE9eavzGkhJ0mVG2KoodkoSfG4UmXr woP/NLYSUi7aIQYOSvxxt48Nnc1O/+UnSCaD6+WOrkFWOLsWlbyrK0RiNSzpVbZX zbkPsw4YtU01gPT5iI370ijfxOD5l++mWIs4PfXjV5Wum+hAXWKk/9Zh8yd+9owW 7fmC8qoiXU0VKcb3Rlk9oBv6UKqsXvoOUaRyOQb+zIJQgKK10jhI2cZ7ijoy2fSx syt+zLRw2ckKsVm/z/ns9YJ0T5Cq7NR4D85Hsc5i4c5YXq1ppZwGx1vNsnBBBIOu 301T37BwXV45doLoZ660rIy8wQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBQAVs1B 2NJyhJkegmnJlHIlXzDYMB8GA1UdIwQYMBaAFJItYOoZOWcXe8bDmkBoWYo7dabT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjhCQS8zMjA5MDFDNEJB ODUxMUVBQkE4MzhFMzBDNEY5QUUwMi9raTFnNmhrNVp4ZDd4c09hUUdoWmlqdDFw dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tpMWc2aGs1WnhkN3hzT2FRR2haaWp0MXB0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjhCQS8zMjA5MDFDNEJBODUxMUVBQkE4MzhFMzBDNEY5QUUwMi9raTFnNmhrNVp4 ZDd4c09hUUdoWmlqdDFwdE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAhnn4PBfspJBTWhSQ0c+oMjCelP4bvYBxkHYxJdHuIa6bTBEgZGMX7jgGFqV pIvvItsgR3FkASPmD2kVKsj/xFc8/Se+evGGEvX1WNu/c3m4nlLXGF+qgA64Wwhf f994gZuUn1WxpyfvrR6DGD4BHE2z6sSYLUFZjZTkDIm08Y+HP3Mo1o0uzmG2e/zs APWdy6vMU6d1W1cQumqSjV8q3bAOKyuuEffkyCi6GIJDtMxX29b4pnKMn8jT2ifP nFtadIMjeBLu5QTsocbjA0PV+K8xsgH29uZ9XHn09LmfTm1WNx8TwSxzq6uu2Zs/ GRYmT65XJXH5D9VcRN2dI3syBg== -----END CERTIFICATE-----Generated at Tue Oct 27 23:02:35 2026 by rpki-client