$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft File: _0lSk8tfFeXRS6zC2xBSsuLIJcg.mft (raw, json) Hash identifier: RfZpJQ3EHFIhr3WKiTnjARbXDMf81uVUbfAo0dktgH0= Subject key identifier: B5:E9:40:B9:F2:8C:A5:BC:96:E6:14:BC:9D:3B:F9:D4:CF:EA:58:A7 Authority key identifier: FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8 Certificate issuer: /CN=A91CEAA2/serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8 Certificate serial: 35E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft Manifest number: 35AC Signing time: Sat 24 Oct 2026 14:53:12 +0000 Manifest this update: Sat 24 Oct 2026 14:53:11 +0000 Manifest next update: Sat 31 Oct 2026 14:53:11 +0000 Files and hashes: 1: _0lSk8tfFeXRS6zC2xBSsuLIJcg.crl (hash: KmpOrUOZ3L/zekoo5fN5QWEbJjrB4NRdsUdXmgsGupU=) 2: 767E7B3CA60211EFBFCDB65FC4F9AE02.roa (hash: vf7yinj1S9cWrGMf1fGP8uJmMGRAcRT+S6wc+GqOAfM=) 3: 75906378FC1F11ECAD09AF21C4F9AE02.roa (hash: 3RMRBjMY5rIEnAXqqJa1OtU6bMq0UxFTQ4CaQEQ/7hk=) 4: B2306182F3F911EAB9D11D26C4F9AE02.roa (hash: EjjdhavOBifQ/TWD+ksl2xyIA2vVpvp6HiibsqNwUc4=) 5: 0DEF13D4FC1711EC919B6757C4F9AE02.roa (hash: oZ6+TXbsKzCb1H31cqRGHknA2NY+Q5lG0k3cYCJhmRg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 14:53:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13798 (0x35e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEAA2, serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8 Validity Not Before: Oct 24 14:53:11 2026 GMT Not After : Oct 31 14:53:11 2026 GMT Subject: CN=6adcc658-0323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d9:a6:99:9b:bb:ba:60:33:e2:04:83:5b:05: c9:06:3c:39:35:84:07:92:11:31:20:6e:28:32:78: fc:6d:a0:f5:1f:45:4e:e2:91:f4:0a:3f:53:1d:62: 59:9d:89:a2:1a:a9:3c:c4:2f:aa:57:48:88:31:26: e2:44:30:ab:7a:68:a2:f9:03:cc:a6:95:67:9a:f6: 36:d2:97:72:99:ff:35:1d:3f:b0:20:30:9c:22:3e: d1:22:28:ba:8a:2c:a5:08:9d:e8:d9:b0:b3:0d:29: 9f:c8:a7:70:26:78:14:ab:63:b1:2b:86:ef:5b:bf: e0:0e:fe:c8:09:99:6b:25:6e:80:68:c9:2e:dc:29: cd:6e:69:cb:ff:fe:dd:3d:ad:39:89:23:6b:2e:f3: 6c:06:81:47:43:6c:2c:31:03:17:09:8c:1f:82:0f: 2c:19:c7:d5:a1:8a:62:31:b3:96:9f:89:02:21:91: 17:1f:34:be:1f:32:e9:43:06:b4:f5:32:39:6f:e4: 0c:e7:d4:f2:97:23:fb:9b:3f:c9:a7:bf:90:b8:75: e3:b4:80:8d:c8:22:15:30:be:b7:df:45:03:c3:c5: fa:54:9b:5b:b2:38:06:96:5c:95:55:26:15:e9:7f: 65:5d:f0:f9:1f:1a:81:d9:1e:b0:a1:c1:b0:c8:ef: 4a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:E9:40:B9:F2:8C:A5:BC:96:E6:14:BC:9D:3B:F9:D4:CF:EA:58:A7 X509v3 Authority Key Identifier: keyid:FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:c0:0d:47:d2:10:b3:44:65:84:dc:de:37:21:32:84:ff:85: cb:a0:30:7c:37:a1:58:7f:19:a4:23:29:bf:78:6b:50:1d:0d: 70:d9:96:93:43:15:07:23:10:58:2c:fd:63:b5:3b:71:2d:a3: 6a:c2:5d:53:4f:bd:1c:14:53:c1:01:c4:30:82:03:c7:3c:0a: 0d:a3:81:85:8a:0e:4a:2a:7e:1b:af:3a:bd:48:2d:39:a5:03: a7:07:8f:be:f1:0c:50:8d:7f:22:2a:ed:f2:e9:ab:a6:e5:5b: 15:d5:2a:7a:bd:b7:19:f9:fc:5b:93:b2:7f:47:5c:e7:51:0c: a7:8e:d1:d1:49:53:81:99:42:4c:89:41:80:ef:4b:4d:26:87: f5:8f:71:3c:4c:7b:2c:2d:e0:c0:67:34:80:c5:b4:cc:5b:f3: 77:bf:61:da:3d:89:a3:31:b2:04:79:d5:0f:44:a9:78:04:e3: 47:e4:f0:3f:6e:f2:07:6e:57:22:f4:6f:5f:dc:a3:4f:96:6c: fd:c6:c8:80:62:01:f4:d1:e9:30:58:fe:88:94:56:93:57:b9: b4:8e:df:49:d3:c4:98:58:31:52:26:4b:9a:e4:cd:4b:93:3b: b8:1b:6c:a5:9d:6b:e6:a2:e8:43:9d:76:6f:4e:1e:69:5d:ac: 56:45:36:4c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VBQTIxMTAvBgNVBAUTKEZGNDk1MjkzQ0I1RjE1RTVEMTRCQUNDMkRCMTA1MkIy RTJDODI1QzgwHhcNMjYxMDI0MTQ1MzExWhcNMjYxMDMxMTQ1MzExWjAYMRYwFAYD VQQDEw02YWRjYzY1OC0wMzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAttmmmZu7umAz4gSDWwXJBjw5NYQHkhExIG4oMnj8baD1H0VO4pH0Cj9THWJZ nYmiGqk8xC+qV0iIMSbiRDCremii+QPMppVnmvY20pdymf81HT+wIDCcIj7RIii6 iiylCJ3o2bCzDSmfyKdwJngUq2OxK4bvW7/gDv7ICZlrJW6AaMku3CnNbmnL//7d Pa05iSNrLvNsBoFHQ2wsMQMXCYwfgg8sGcfVoYpiMbOWn4kCIZEXHzS+HzLpQwa0 9TI5b+QM59TylyP7mz/Jp7+QuHXjtICNyCIVML6330UDw8X6VJtbsjgGllyVVSYV 6X9lXfD5HxqB2R6wocGwyO9KdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLXpQLny jKW8luYUvJ07+dTP6linMB8GA1UdIwQYMBaAFP9JUpPLXxXl0UuswtsQUrLiyCXI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUFBMi9EMkFCMjkyQzFE OTkxMUUyQkE1MjlBODYwOEIwMkNEMi9fMGxTazh0ZkZlWFJTNnpDMnhCU3N1TElK Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18wbFNrOHRmRmVYUlM2ekMyeEJTc3VMSUpjZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUFBMi9EMkFCMjkyQzFEOTkxMUUyQkE1MjlBODYwOEIwMkNEMi9fMGxTazh0ZkZl WFJTNnpDMnhCU3N1TElKY2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbcANR9IQs0RlhNzeNyEyhP+Fy6AwfDehWH8ZpCMpv3hrUB0NcNmWk0MVByMQ WCz9Y7U7cS2jasJdU0+9HBRTwQHEMIIDxzwKDaOBhYoOSip+G686vUgtOaUDpweP vvEMUI1/Iirt8umrpuVbFdUqer23Gfn8W5Oyf0dc51EMp47R0UlTgZlCTIlBgO9L TSaH9Y9xPEx7LC3gwGc0gMW0zFvzd79h2j2JozGyBHnVD0SpeATjR+TwP27yB25X IvRvX9yjT5Zs/cbIgGIB9NHpMFj+iJRWk1e5tI7fSdPEmFgxUiZLmuTNS5M7uBts pZ1r5qLoQ512b04eaV2sVkU2TA== -----END CERTIFICATE-----Generated at Sun Oct 25 01:28:01 2026 by rpki-client