$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft File: esDADw_KR57kZeT39UXoyUmT1hw.mft (raw, json) Hash identifier: 2+cdnzvA6h65OKckavW/gFjLZW7fZdfWERyoPl7e5SE= Subject key identifier: 45:B0:17:68:84:1E:A1:17:F6:D2:B3:C8:04:83:9D:BD:BE:BA:15:08 Authority key identifier: 7A:C0:C0:0F:0F:CA:47:9E:E4:65:E4:F7:F5:45:E8:C9:49:93:D6:1C Certificate issuer: /CN=A91D1691/serialNumber=7AC0C00F0FCA479EE465E4F7F545E8C94993D61C Certificate serial: 2567 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esDADw_KR57kZeT39UXoyUmT1hw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft Manifest number: 2532 Signing time: Wed 28 Oct 2026 15:48:01 +0000 Manifest this update: Wed 28 Oct 2026 15:48:01 +0000 Manifest next update: Wed 04 Nov 2026 15:48:01 +0000 Files and hashes: 1: esDADw_KR57kZeT39UXoyUmT1hw.crl (hash: 1Ji2hH038JgyhpbXLvO0R30ZMMJIgaeluN2yk3Le1rc=) 2: D2AD822AF2A711F0B86D5E54726F56BC.roa (hash: kPZF1f+IsmegMSPGWaL3KI6K4oWydR2UHiKi0R7o0u0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.crl rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esDADw_KR57kZeT39UXoyUmT1hw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 15:20:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9575 (0x2567) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1691, serialNumber=7AC0C00F0FCA479EE465E4F7F545E8C94993D61C Validity Not Before: Oct 28 15:48:01 2026 GMT Not After : Nov 4 15:48:01 2026 GMT Subject: CN=6ae21931-a586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f2:85:df:c3:f0:dc:bb:e8:03:ec:32:a8:4e: e1:28:0e:b7:0d:cd:3e:83:41:0e:18:f3:57:dc:01: 26:0a:2f:0b:8e:ce:12:c1:4f:a6:e1:4f:e4:a9:31: 8c:67:eb:d8:a5:6c:ca:f9:27:df:d0:93:19:cb:46: 75:62:34:ae:3e:41:f3:fe:dd:d3:24:21:61:74:59: 4c:52:68:7e:8a:66:dc:3f:77:28:e0:51:b5:1f:ac: 1c:ea:a5:45:24:9f:f6:96:93:4d:40:55:2c:be:ee: 79:ac:94:15:b3:41:de:aa:c6:58:7f:2e:43:02:33: 48:ed:57:1c:4b:d1:d2:0c:56:f7:a7:93:bd:20:49: 2b:cf:93:f7:a7:d5:73:40:1f:f6:04:1f:3d:d2:9b: ae:8b:c1:21:07:bb:fb:c5:44:da:20:4a:28:38:81: cd:f6:7e:da:ec:0e:ec:ad:ad:e9:58:42:bf:82:7a: 87:6b:03:4d:ff:1b:17:f4:2b:14:75:d8:76:07:d3: 47:ea:c3:62:9a:35:6d:49:ee:d2:f9:42:5a:3d:72: bd:0a:3b:49:e5:4e:3f:df:82:f7:61:50:c4:58:53: 6b:91:bb:12:3e:79:48:f6:43:77:50:34:d3:91:54: d7:c5:e4:8e:28:65:81:b3:9d:b9:b2:2f:60:d2:a2: aa:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:B0:17:68:84:1E:A1:17:F6:D2:B3:C8:04:83:9D:BD:BE:BA:15:08 X509v3 Authority Key Identifier: keyid:7A:C0:C0:0F:0F:CA:47:9E:E4:65:E4:F7:F5:45:E8:C9:49:93:D6:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esDADw_KR57kZeT39UXoyUmT1hw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:e0:11:fb:00:63:e4:6e:e7:1f:3a:2e:63:f1:b5:76:d2:e0: 82:43:0f:43:bb:33:03:80:b1:03:70:59:53:6f:44:64:b3:f8: 18:30:17:35:d8:26:f4:c9:fa:db:eb:c9:27:89:1b:16:56:9e: a0:1b:32:5c:2a:dc:92:23:55:b0:13:4d:10:29:e5:6e:03:9b: be:f1:65:93:7f:43:11:79:af:d2:ab:a6:53:d5:d0:f6:b2:a0: d3:c5:cb:fa:d7:b2:be:51:76:0a:56:cd:16:d2:90:11:10:d3: e0:4c:d5:8f:9e:21:b9:10:54:68:c9:0a:12:ca:97:e5:c7:fa: 2d:24:88:14:1c:7f:26:b0:04:a0:ea:89:54:fd:3b:4c:5e:5f: 19:7e:82:a0:42:f1:9b:b9:6b:38:b2:92:7f:dc:b0:c8:65:2b: 92:9c:da:42:22:f6:b8:b5:a1:a2:44:1a:eb:e1:8e:f6:b1:74: 08:39:e2:6f:b0:06:1e:29:07:8a:1c:4f:d1:b3:b4:3e:dd:ee: ab:2d:75:0f:ac:87:55:46:ff:01:ae:8a:32:e7:80:84:3c:43: e7:81:6e:ed:79:b0:bb:7e:18:1f:2b:e8:11:b6:c1:05:7e:38: fe:7d:4a:41:81:d0:86:4d:3c:64:7f:c3:32:70:4e:9c:92:3a: 61:e4:a2:6c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE2OTExMTAvBgNVBAUTKDdBQzBDMDBGMEZDQTQ3OUVFNDY1RTRGN0Y1NDVFOEM5 NDk5M0Q2MUMwHhcNMjYxMDI4MTU0ODAxWhcNMjYxMTA0MTU0ODAxWjAYMRYwFAYD VQQDEw02YWUyMTkzMS1hNTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0PKF38Pw3LvoA+wyqE7hKA63Dc0+g0EOGPNX3AEmCi8Ljs4SwU+m4U/kqTGM Z+vYpWzK+Sff0JMZy0Z1YjSuPkHz/t3TJCFhdFlMUmh+imbcP3co4FG1H6wc6qVF JJ/2lpNNQFUsvu55rJQVs0HeqsZYfy5DAjNI7VccS9HSDFb3p5O9IEkrz5P3p9Vz QB/2BB890puui8EhB7v7xUTaIEooOIHN9n7a7A7sra3pWEK/gnqHawNN/xsX9CsU ddh2B9NH6sNimjVtSe7S+UJaPXK9CjtJ5U4/34L3YVDEWFNrkbsSPnlI9kN3UDTT kVTXxeSOKGWBs525si9g0qKqdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEWwF2iE HqEX9tKzyASDnb2+uhUIMB8GA1UdIwQYMBaAFHrAwA8Pykee5GXk9/VF6MlJk9Yc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTY5MS81QUZDMjY5MjY1 MkIxMUU1OTdBODY4ODFDNEY5QUUwMi9lc0RBRHdfS1I1N2taZVQzOVVYb3lVbVQx aHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VzREFEd19LUjU3a1plVDM5VVhveVVtVDFody5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTY5MS81QUZDMjY5MjY1MkIxMUU1OTdBODY4ODFDNEY5QUUwMi9lc0RBRHdfS1I1 N2taZVQzOVVYb3lVbVQxaHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADuAR+wBj5G7nHzouY/G1dtLggkMPQ7szA4CxA3BZU29EZLP4GDAXNdgm9Mn6 2+vJJ4kbFlaeoBsyXCrckiNVsBNNECnlbgObvvFlk39DEXmv0qumU9XQ9rKg08XL +teyvlF2ClbNFtKQERDT4EzVj54huRBUaMkKEsqX5cf6LSSIFBx/JrAEoOqJVP07 TF5fGX6CoELxm7lrOLKSf9ywyGUrkpzaQiL2uLWhokQa6+GO9rF0CDnib7AGHikH ihxP0bO0Pt3uqy11D6yHVUb/Aa6KMueAhDxD54Fu7Xmwu34YHyvoEbbBBX44/n1K QYHQhk08ZH/DMnBOnJI6YeSibA== -----END CERTIFICATE-----Generated at Wed Oct 28 18:28:52 2026 by rpki-client