$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.mft File: -mfVMKhwCqjrfU9svpZHvlN_X84.mft (raw, json) Hash identifier: 0Y9mdIOBmxcc6oqbtOBgzhyzQepjJtIYe1UZso5FTiA= Subject key identifier: 5B:7B:B2:E3:D8:9E:3C:C4:A0:BF:4C:C4:2E:3B:8A:09:C4:49:23:7E Authority key identifier: FA:67:D5:30:A8:70:0A:A8:EB:7D:4F:6C:BE:96:47:BE:53:7F:5F:CE Certificate issuer: /CN=A91CD056/serialNumber=FA67D530A8700AA8EB7D4F6CBE9647BE537F5FCE Certificate serial: 0433 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mfVMKhwCqjrfU9svpZHvlN_X84.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.mft Manifest number: 0429 Signing time: Wed 07 Oct 2026 00:25:42 +0000 Manifest this update: Wed 07 Oct 2026 00:25:41 +0000 Manifest next update: Wed 14 Oct 2026 00:25:41 +0000 Files and hashes: 1: -mfVMKhwCqjrfU9svpZHvlN_X84.crl (hash: h717n+oUOlW/huzlLwR+sad1EYXKiTwXC2CWaCMdpP8=) 2: 815A09C645F311F19D4C8BBB9A833773.roa (hash: gXEe/7OkKqUCUDk1lxEeptn1iCrY7lDmXDjXXtgnbdk=) 3: 1B979C223EE411F19E8F25E5B8833773.roa (hash: wi5Jdm400NVVrEhqsCRygJRPgFVgnSFV5lXcRFaVlfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.crl rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mfVMKhwCqjrfU9svpZHvlN_X84.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 00:25:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1075 (0x433) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD056, serialNumber=FA67D530A8700AA8EB7D4F6CBE9647BE537F5FCE Validity Not Before: Oct 7 00:25:41 2026 GMT Not After : Oct 14 00:25:41 2026 GMT Subject: CN=6ac59185-baa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:8b:33:a6:b8:a2:be:9e:c5:43:93:45:fc:3f: 72:bc:90:f6:4d:23:8c:ab:77:9e:2c:52:2a:da:97: e4:29:75:7f:1c:95:74:e7:80:9d:e6:30:41:5d:a4: f7:2c:a5:b6:70:da:35:15:2f:ef:e4:30:c9:c4:98: 9b:28:01:4c:eb:a2:0f:9c:0f:9f:e0:b4:9e:a6:7c: 45:9b:d5:12:8a:1a:f8:e0:51:63:0a:42:8f:69:a3: 8e:9c:81:b3:c7:be:ef:1b:f3:57:e4:98:22:a9:36: 77:76:fc:06:5f:1e:fc:48:61:30:b6:d1:09:1e:31: c9:1e:6c:58:12:89:cd:f6:71:a8:1b:6f:ab:d0:aa: 65:53:58:f7:a1:0a:e5:a6:bc:f2:28:98:9b:1c:f0: 14:f9:4d:9b:fc:d4:07:e5:44:f6:b3:e6:7f:6b:2f: a9:f1:57:05:47:3d:39:39:52:aa:79:95:ba:00:9a: 27:f6:f9:ec:dd:17:8d:57:5b:e2:39:bc:d0:a2:a9: 30:19:10:43:b1:5e:77:15:6c:c9:58:0c:7f:6b:af: dc:5a:c3:ff:73:77:86:6d:04:6f:be:ea:57:90:42: 8f:82:78:7d:ad:82:53:c1:47:26:ed:32:0c:36:76: d8:95:b7:63:7d:71:7b:b1:eb:03:fa:73:61:2e:34: 88:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:7B:B2:E3:D8:9E:3C:C4:A0:BF:4C:C4:2E:3B:8A:09:C4:49:23:7E X509v3 Authority Key Identifier: keyid:FA:67:D5:30:A8:70:0A:A8:EB:7D:4F:6C:BE:96:47:BE:53:7F:5F:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mfVMKhwCqjrfU9svpZHvlN_X84.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:4f:21:73:a8:e5:54:e0:be:c9:ba:93:85:7a:81:5d:13:a7: e5:5a:4d:54:7e:9b:b8:a7:aa:45:82:9a:07:72:b5:2b:da:d0: 6d:c9:5f:94:bb:99:bd:bc:66:3e:6b:f8:4d:18:86:c1:8c:4e: 46:42:c6:21:3d:ca:9e:02:61:be:7c:c8:1c:e4:2d:a3:53:4f: 01:1e:6d:df:05:f7:05:61:09:f8:dc:a3:ac:2f:4c:c7:3a:21: 91:ed:53:a1:35:70:90:65:da:fb:88:f1:48:93:88:2c:be:5a: 44:73:0d:21:61:ee:9f:0a:10:48:2a:96:63:40:28:d1:ea:5b: b3:98:34:74:47:41:c5:81:11:1d:c5:59:1c:c8:7b:e1:46:29: 02:a1:32:58:42:e8:33:73:b6:b8:69:f7:6d:57:1e:da:59:b6: 03:8d:e7:62:ab:37:d0:86:a9:75:ab:cf:40:31:0f:d9:5b:f5: 8e:5b:51:c2:93:5e:bd:4b:da:c3:4b:1e:31:13:bc:4f:25:07: 06:8f:22:38:d3:7f:05:07:67:66:76:64:84:0a:16:71:49:70: 16:fb:7f:78:93:49:9e:bb:8a:e9:fc:04:6f:f7:8c:b1:7e:05: d2:b2:1e:dd:c9:b5:70:0e:f4:af:08:11:4f:ac:b7:62:70:37: 88:83:3a:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBDMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QwNTYxMTAvBgNVBAUTKEZBNjdENTMwQTg3MDBBQThFQjdENEY2Q0JFOTY0N0JF NTM3RjVGQ0UwHhcNMjYxMDA3MDAyNTQxWhcNMjYxMDE0MDAyNTQxWjAYMRYwFAYD VQQDEw02YWM1OTE4NS1iYWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjIszpriivp7FQ5NF/D9yvJD2TSOMq3eeLFIq2pfkKXV/HJV054Cd5jBBXaT3 LKW2cNo1FS/v5DDJxJibKAFM66IPnA+f4LSepnxFm9USihr44FFjCkKPaaOOnIGz x77vG/NX5JgiqTZ3dvwGXx78SGEwttEJHjHJHmxYEonN9nGoG2+r0KplU1j3oQrl przyKJibHPAU+U2b/NQH5UT2s+Z/ay+p8VcFRz05OVKqeZW6AJon9vns3ReNV1vi ObzQoqkwGRBDsV53FWzJWAx/a6/cWsP/c3eGbQRvvupXkEKPgnh9rYJTwUcm7TIM NnbYlbdjfXF7sesD+nNhLjSIgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFt7suPY njzEoL9MxC47ignESSN+MB8GA1UdIwQYMBaAFPpn1TCocAqo631PbL6WR75Tf1/O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDA1Ni9ENzAyNjRBQUM5 RTYxMUVDQUMyMjhEMzBDNEY5QUUwMi8tbWZWTUtod0NxanJmVTlzdnBaSHZsTl9Y ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1tZlZNS2h3Q3FqcmZVOXN2cFpIdmxOX1g4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDA1Ni9ENzAyNjRBQUM5RTYxMUVDQUMyMjhEMzBDNEY5QUUwMi8tbWZWTUtod0Nx anJmVTlzdnBaSHZsTl9YODQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiE8hc6jlVOC+ybqThXqBXROn5VpNVH6buKeqRYKaB3K1K9rQbclflLuZvbxm Pmv4TRiGwYxORkLGIT3KngJhvnzIHOQto1NPAR5t3wX3BWEJ+NyjrC9Mxzohke1T oTVwkGXa+4jxSJOILL5aRHMNIWHunwoQSCqWY0Ao0epbs5g0dEdBxYERHcVZHMh7 4UYpAqEyWELoM3O2uGn3bVce2lm2A43nYqs30IapdavPQDEP2Vv1jltRwpNevUva w0seMRO8TyUHBo8iONN/BQdnZnZkhAoWcUlwFvt/eJNJnruK6fwEb/eMsX4F0rIe 3cm1cA70rwgRT6y3YnA3iIM6Eg== -----END CERTIFICATE-----Generated at Wed Oct 7 23:58:39 2026 by rpki-client