$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CCB81/2861E496F86A11F0B4BBAF3C4A6F56BC/afotkTN0HoMAQ-tA5A0ivzU4684.mft File: afotkTN0HoMAQ-tA5A0ivzU4684.mft (raw, json) Hash identifier: SUQkuZGKgET4s6MjhCncKZ57PtnRwSNGQcw8V3rYgM4= Subject key identifier: 6F:88:54:12:C4:45:7D:57:20:A3:0F:7D:07:71:BF:2A:9F:0A:F1:C6 Authority key identifier: 69:FA:2D:91:33:74:1E:83:00:43:EB:40:E4:0D:22:BF:35:38:EB:CE Certificate issuer: /CN=A91CCB81/serialNumber=69FA2D9133741E830043EB40E40D22BF3538EBCE Certificate serial: 89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/afotkTN0HoMAQ-tA5A0ivzU4684.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCB81/2861E496F86A11F0B4BBAF3C4A6F56BC/afotkTN0HoMAQ-tA5A0ivzU4684.mft Manifest number: 89 Signing time: Mon 05 Oct 2026 08:04:34 +0000 Manifest this update: Mon 05 Oct 2026 08:04:34 +0000 Manifest next update: Mon 12 Oct 2026 08:04:34 +0000 Files and hashes: 1: afotkTN0HoMAQ-tA5A0ivzU4684.crl (hash: ZCJ6OzBYZ34/rrPlkT8WhoF9vE7i2eFLzA/lisT3F7w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCB81/2861E496F86A11F0B4BBAF3C4A6F56BC/afotkTN0HoMAQ-tA5A0ivzU4684.crl rsync://rpki.apnic.net/member_repository/A91CCB81/2861E496F86A11F0B4BBAF3C4A6F56BC/afotkTN0HoMAQ-tA5A0ivzU4684.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/afotkTN0HoMAQ-tA5A0ivzU4684.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 08:04:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCB81, serialNumber=69FA2D9133741E830043EB40E40D22BF3538EBCE Validity Not Before: Oct 5 08:04:34 2026 GMT Not After : Oct 12 08:04:34 2026 GMT Subject: CN=6ac35a12-d19d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2d:b9:35:ab:18:6e:c4:60:e4:97:2d:71:92: d7:2c:8a:1e:bf:14:9e:a5:10:0b:69:0a:20:f3:7d: 0c:3d:f3:cc:20:38:5e:49:19:3b:3d:e2:a8:60:08: 8f:c6:98:86:87:66:82:af:80:5e:c2:4f:07:26:d6: de:cf:1e:0a:b1:fe:e4:15:47:1b:50:89:93:0c:5e: 3c:97:5e:a0:e4:c6:4d:e5:d4:02:83:78:aa:7b:4e: 16:d9:e1:b2:51:4c:79:d9:96:c4:a3:a8:1f:81:1c: 40:e3:3f:6b:9e:f7:25:65:ff:cd:62:4d:2a:e5:41: e4:31:d4:9e:84:ea:ba:bb:23:96:0a:09:ef:f3:07: 02:79:a6:28:6a:dd:4c:cb:88:79:38:fa:93:2b:b7: a5:1e:11:18:64:e9:51:33:40:b7:ef:4f:7c:46:d6: 01:d1:11:74:d1:d2:c1:75:f4:4d:3c:d9:29:ca:db: 33:fa:f2:f0:3e:62:67:5b:44:96:84:e5:fa:ec:b0: d5:3b:b2:b0:44:68:7c:f7:af:50:24:f8:96:c6:82: 67:c5:ae:38:82:0c:63:69:70:67:65:92:5d:5f:cc: e0:12:7d:25:24:7d:e4:1f:7d:da:fd:7d:da:ed:c4: 7f:36:06:be:e1:6f:20:a7:04:af:75:c5:70:20:22: f5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:88:54:12:C4:45:7D:57:20:A3:0F:7D:07:71:BF:2A:9F:0A:F1:C6 X509v3 Authority Key Identifier: keyid:69:FA:2D:91:33:74:1E:83:00:43:EB:40:E4:0D:22:BF:35:38:EB:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCB81/2861E496F86A11F0B4BBAF3C4A6F56BC/afotkTN0HoMAQ-tA5A0ivzU4684.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/afotkTN0HoMAQ-tA5A0ivzU4684.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCB81/2861E496F86A11F0B4BBAF3C4A6F56BC/afotkTN0HoMAQ-tA5A0ivzU4684.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:fc:73:2e:76:74:83:63:9c:c5:de:7a:c3:15:ae:8c:f8:46: 82:23:68:88:d9:0e:42:a7:7e:c7:99:6f:00:3c:95:ea:9b:8e: 9e:4a:e7:39:8b:c0:90:fa:b4:26:b2:61:f8:c4:58:5c:47:4d: c9:3a:fb:fb:55:50:37:91:54:cd:be:21:4c:c8:df:ed:e1:03: ca:3a:45:b9:f5:f0:51:e9:10:9e:ed:3e:21:26:eb:3d:c1:f6: 00:56:4e:bc:1c:57:91:1a:25:cc:bb:ba:1f:ea:3c:bc:0e:e3: cc:99:96:aa:c0:71:46:91:ed:7d:f6:c7:db:91:99:b4:a3:c0: a2:08:6f:a8:90:29:2f:9b:33:19:c6:54:c2:34:45:3e:a3:43: 29:8e:15:2b:f5:9d:9b:83:27:a5:1f:a3:be:64:c1:d8:21:cd: 18:75:df:82:50:89:39:24:ea:aa:10:73:a5:0a:2f:12:0f:34: c2:da:8d:44:86:85:da:c7:8e:de:7e:0e:42:76:86:7f:a1:69: 0e:bf:85:99:ab:9d:9e:a8:13:ec:85:8a:ec:43:cb:e1:a1:d4: 41:06:4c:da:1c:c8:ed:5f:2d:1d:13:00:74:04:e5:bb:40:d2: 9b:87:19:3a:64:1e:76:6a:ff:0e:8d:08:f4:8d:4f:f4:59:9e: 8e:98:d5:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NCODExMTAvBgNVBAUTKDY5RkEyRDkxMzM3NDFFODMwMDQzRUI0MEU0MEQyMkJG MzUzOEVCQ0UwHhcNMjYxMDA1MDgwNDM0WhcNMjYxMDEyMDgwNDM0WjAYMRYwFAYD VQQDEw02YWMzNWExMi1kMTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAni25NasYbsRg5JctcZLXLIoevxSepRALaQog830MPfPMIDheSRk7PeKoYAiP xpiGh2aCr4Bewk8HJtbezx4Ksf7kFUcbUImTDF48l16g5MZN5dQCg3iqe04W2eGy UUx52ZbEo6gfgRxA4z9rnvclZf/NYk0q5UHkMdSehOq6uyOWCgnv8wcCeaYoat1M y4h5OPqTK7elHhEYZOlRM0C37098RtYB0RF00dLBdfRNPNkpytsz+vLwPmJnW0SW hOX67LDVO7KwRGh8969QJPiWxoJnxa44ggxjaXBnZZJdX8zgEn0lJH3kH33a/X3a 7cR/Nga+4W8gpwSvdcVwICL1FwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG+IVBLE RX1XIKMPfQdxvyqfCvHGMB8GA1UdIwQYMBaAFGn6LZEzdB6DAEPrQOQNIr81OOvO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0I4MS8yODYxRTQ5NkY4 NkExMUYwQjRCQkFGM0M0QTZGNTZCQy9hZm90a1ROMEhvTUFRLXRBNUEwaXZ6VTQ2 ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Fmb3RrVE4wSG9NQVEtdEE1QTBpdnpVNDY4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0I4MS8yODYxRTQ5NkY4NkExMUYwQjRCQkFGM0M0QTZGNTZCQy9hZm90a1ROMEhv TUFRLXRBNUEwaXZ6VTQ2ODQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACPxzLnZ0g2Ocxd56wxWujPhGgiNoiNkOQqd+x5lvADyV6puOnkrnOYvAkPq0 JrJh+MRYXEdNyTr7+1VQN5FUzb4hTMjf7eEDyjpFufXwUekQnu0+ISbrPcH2AFZO vBxXkRolzLu6H+o8vA7jzJmWqsBxRpHtffbH25GZtKPAoghvqJApL5szGcZUwjRF PqNDKY4VK/Wdm4MnpR+jvmTB2CHNGHXfglCJOSTqqhBzpQovEg80wtqNRIaF2seO 3n4OQnaGf6FpDr+FmaudnqgT7IWK7EPL4aHUQQZM2hzI7V8tHRMAdATlu0DSm4cZ OmQedmr/Do0I9I1P9FmejpjVxw== -----END CERTIFICATE-----Generated at Tue Oct 6 08:40:28 2026 by rpki-client