$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft File: bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft (raw, json) Hash identifier: ZcBz3hi9KTh6x6GjqoVyGwbjy3Hr8oQHCuVf3fR8+WY= Subject key identifier: 85:4A:52:AB:49:77:3C:5B:59:8B:92:F2:B2:BD:F2:FC:A1:B9:64:19 Authority key identifier: 6D:C5:24:81:64:BB:95:2E:8B:9E:D9:23:9B:E7:10:6A:63:CE:F0:6C Certificate issuer: /CN=A91CF24F/serialNumber=6DC5248164BB952E8B9ED9239BE7106A63CEF06C Certificate serial: 0AAA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft Manifest number: 0A9A Signing time: Mon 02 Nov 2026 19:42:38 +0000 Manifest this update: Mon 02 Nov 2026 19:42:37 +0000 Manifest next update: Mon 09 Nov 2026 19:42:37 +0000 Files and hashes: 1: bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl (hash: vgMOsfWhRGkvcZyI3hvHFvcjmUWgsP0TIyhNY+TIpsY=) 2: 75D9F37C007A11ECA444E049C4F9AE02.roa (hash: 1mRV89mqNc+nLOCZGSyR4uuy7wclwLlHSJ3xFNf7VPs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 19:42:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2730 (0xaaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF24F, serialNumber=6DC5248164BB952E8B9ED9239BE7106A63CEF06C Validity Not Before: Nov 2 19:42:37 2026 GMT Not After : Nov 9 19:42:37 2026 GMT Subject: CN=6ae8e7ae-ec85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e1:4a:04:3f:58:5e:4a:83:c1:99:12:a3:ce: b3:c8:ef:93:95:4f:d0:8f:44:d5:e3:87:db:80:d9: 1c:a2:c2:4c:2a:91:cf:53:20:42:a1:f6:49:9c:e0: 45:69:31:70:23:86:2d:7c:8b:95:a9:c8:ee:2f:82: 2c:02:45:6a:5b:85:6c:83:dc:56:29:f5:a2:38:79: b9:c8:c2:80:0f:4f:0d:8a:db:72:a3:7a:6d:78:c2: c2:a5:04:29:d3:b7:d4:3e:54:e9:94:cd:19:be:a0: 76:6b:a1:c5:b8:ba:1a:27:53:92:a8:9a:4e:ff:fc: 30:8b:28:1e:14:f7:58:14:f2:b5:4b:41:6b:b6:c4: 11:1e:e1:58:c5:56:4e:a8:21:30:e0:0d:18:aa:85: 25:d9:47:84:c3:6b:d8:c1:e0:97:0c:7e:95:bd:16: de:4b:ff:12:94:2c:af:32:0a:49:69:87:6d:d7:ca: 94:83:44:8f:d9:79:36:c8:e7:bc:e8:8d:59:c5:ae: 15:0f:50:f9:bb:e8:9f:8a:97:49:2b:05:a1:38:42: fa:83:75:88:1a:b9:ea:70:35:7d:3b:4f:11:4a:de: 33:1a:13:7d:2e:c2:69:9c:a2:50:4d:92:bc:1c:eb: 7c:64:27:b3:ee:e7:cc:6a:e8:93:ad:fe:bc:65:07: 1f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:4A:52:AB:49:77:3C:5B:59:8B:92:F2:B2:BD:F2:FC:A1:B9:64:19 X509v3 Authority Key Identifier: keyid:6D:C5:24:81:64:BB:95:2E:8B:9E:D9:23:9B:E7:10:6A:63:CE:F0:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dd:df:c8:d3:39:b7:81:3e:23:bd:45:f5:2b:b1:72:0d:a5:b0: cf:63:d0:59:39:0e:f7:c0:ae:f4:32:28:93:33:ca:61:33:e6: a0:5d:9e:71:a5:36:15:10:1a:7d:e5:55:52:42:c3:fb:cb:69: d8:c2:bc:0e:f7:2b:81:6e:07:33:76:64:96:ff:06:cb:5f:8b: a2:91:da:72:e4:f5:46:a8:2a:87:a9:07:3b:a2:19:63:6f:2e: 6b:78:b1:b9:08:1c:7d:8e:36:1c:7a:40:0f:0d:2d:58:7a:83: 6c:9f:81:8a:ac:4b:31:7f:b5:05:bd:ea:0e:54:76:81:d0:39: 17:25:7e:31:c0:ad:0d:22:f4:a7:8a:19:cb:a4:55:b0:e7:8c: 8e:14:26:45:89:15:4f:92:23:57:44:03:0a:ff:57:8a:b6:5a: b4:70:67:be:28:78:58:bb:5c:b3:2f:e4:e8:67:38:6a:80:c5: 69:c5:1f:fd:6a:f8:eb:0e:12:2d:b0:7b:f9:43:71:1a:c6:34: 22:49:7a:87:ac:18:b2:42:57:f2:9f:a3:15:24:c7:e4:7a:3c: ca:5e:ad:5c:99:c3:df:92:d0:6b:1f:26:1d:f1:65:5d:5a:62: a4:a9:c2:70:93:0c:d8:98:fa:b0:31:67:96:cd:e1:9d:35:ed: ea:2d:f9:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YyNEYxMTAvBgNVBAUTKDZEQzUyNDgxNjRCQjk1MkU4QjlFRDkyMzlCRTcxMDZB NjNDRUYwNkMwHhcNMjYxMTAyMTk0MjM3WhcNMjYxMTA5MTk0MjM3WjAYMRYwFAYD VQQDEw02YWU4ZTdhZS1lYzg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl+FKBD9YXkqDwZkSo86zyO+TlU/Qj0TV44fbgNkcosJMKpHPUyBCofZJnOBF aTFwI4YtfIuVqcjuL4IsAkVqW4Vsg9xWKfWiOHm5yMKAD08Nittyo3pteMLCpQQp 07fUPlTplM0ZvqB2a6HFuLoaJ1OSqJpO//wwiygeFPdYFPK1S0FrtsQRHuFYxVZO qCEw4A0YqoUl2UeEw2vYweCXDH6VvRbeS/8SlCyvMgpJaYdt18qUg0SP2Xk2yOe8 6I1Zxa4VD1D5u+ifipdJKwWhOEL6g3WIGrnqcDV9O08RSt4zGhN9LsJpnKJQTZK8 HOt8ZCez7ufMauiTrf68ZQcfYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIVKUqtJ dzxbWYuS8rK98vyhuWQZMB8GA1UdIwQYMBaAFG3FJIFku5Uui57ZI5vnEGpjzvBs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjI0Ri8zN0MxMTBCODhG NTkxMUVBQUI3MEUyMzRDNEY5QUUwMi9iY1VrZ1dTN2xTNkxudGtqbS1jUWFtUE84 R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JjVWtnV1M3bFM2TG50a2ptLWNRYW1QTzhHdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjI0Ri8zN0MxMTBCODhGNTkxMUVBQUI3MEUyMzRDNEY5QUUwMi9iY1VrZ1dTN2xT NkxudGtqbS1jUWFtUE84R3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA3d/I0zm3gT4jvUX1K7FyDaWwz2PQWTkO98Cu9DIokzPKYTPmoF2ecaU2FRAa feVVUkLD+8tp2MK8DvcrgW4HM3Zklv8Gy1+LopHacuT1Rqgqh6kHO6IZY28ua3ix uQgcfY42HHpADw0tWHqDbJ+BiqxLMX+1Bb3qDlR2gdA5FyV+McCtDSL0p4oZy6RV sOeMjhQmRYkVT5IjV0QDCv9XirZatHBnvih4WLtcsy/k6Gc4aoDFacUf/Wr46w4S LbB7+UNxGsY0Ikl6h6wYskJX8p+jFSTH5Ho8yl6tXJnD35LQax8mHfFlXVpipKnC cJMM2Jj6sDFnls3hnTXt6i35Hg== -----END CERTIFICATE-----Generated at Wed Nov 4 11:21:25 2026 by rpki-client