$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2432/A70764F682CB11F1B54AB87D77A30FBC/9ezJNiwdO3OCT11Cma2_q0r4TY0.mft File: 9ezJNiwdO3OCT11Cma2_q0r4TY0.mft (raw, json) Hash identifier: Fjefpv8kZSRBOpeYhdJ1SC5BEX4aqqBEiC/8jEBdvuU= Subject key identifier: 93:19:79:8D:86:0E:73:8B:94:9D:C4:BB:8B:36:06:E9:CC:AA:A4:A1 Authority key identifier: F5:EC:C9:36:2C:1D:3B:73:82:4F:5D:42:99:AD:BF:AB:4A:F8:4D:8D Certificate issuer: /CN=A91D2432/serialNumber=F5ECC9362C1D3B73824F5D4299ADBFAB4AF84D8D Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ezJNiwdO3OCT11Cma2_q0r4TY0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2432/A70764F682CB11F1B54AB87D77A30FBC/9ezJNiwdO3OCT11Cma2_q0r4TY0.mft Manifest number: 3C Signing time: Fri 23 Oct 2026 09:12:26 +0000 Manifest this update: Fri 23 Oct 2026 09:12:25 +0000 Manifest next update: Fri 30 Oct 2026 09:12:25 +0000 Files and hashes: 1: 9ezJNiwdO3OCT11Cma2_q0r4TY0.crl (hash: ELiXLibFYgkiXZ7Ra0ud0OgRTp21PMlI23LkEN8HuYQ=) 2: 8197428E8A2F11F1979432C96D11F970.roa (hash: 3agLE6eYwjBLKD73jdTnpcDMyC6z3gyTK8QJXd1hgRY=) 3: D07522FE831D11F1B418DC1191A30FBC.roa (hash: dzwge0kLLVVM1zxaXdNhUuJZI22hm2h7bCabK14OXlI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2432/A70764F682CB11F1B54AB87D77A30FBC/9ezJNiwdO3OCT11Cma2_q0r4TY0.crl rsync://rpki.apnic.net/member_repository/A91D2432/A70764F682CB11F1B54AB87D77A30FBC/9ezJNiwdO3OCT11Cma2_q0r4TY0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ezJNiwdO3OCT11Cma2_q0r4TY0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 09:12:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2432, serialNumber=F5ECC9362C1D3B73824F5D4299ADBFAB4AF84D8D Validity Not Before: Oct 23 09:12:25 2026 GMT Not After : Oct 30 09:12:25 2026 GMT Subject: CN=6adb24fa-0f4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:27:b0:e6:ce:42:4b:03:7f:4a:42:85:3e:82: c6:d5:18:97:67:f6:7f:72:ca:64:9d:06:d9:fc:5f: 44:e1:54:7e:39:0e:51:ea:0f:27:be:b1:10:a8:50: 29:c6:9d:10:f2:0f:31:1f:9a:db:20:7c:08:90:07: c7:58:64:ff:f7:cf:5a:d3:af:0a:f5:c9:9c:66:78: 83:ad:16:19:77:ed:3f:8b:3c:a0:ab:cc:33:59:8e: 1c:f1:8f:2e:23:58:60:32:39:0c:e0:69:e9:dc:8c: d5:ad:2e:6d:72:0c:b6:c3:19:6a:b8:7a:2c:c1:2a: 50:e1:33:77:9b:5f:4f:fa:13:bc:26:e2:72:8b:29: 79:d0:21:fe:74:89:d9:9e:27:33:c3:11:97:6d:f4: 04:c3:22:f3:dc:93:e1:4d:3d:55:5f:bf:7c:d4:b5: e4:bf:d7:f9:ba:87:89:88:4b:1e:40:e8:56:38:02: 5a:01:87:21:9e:f3:fa:dd:a2:d3:ef:c1:a9:c9:fc: bb:8e:f8:39:b1:ce:38:a1:5b:ce:5e:8a:ec:29:c6: ed:ac:5e:54:f9:41:fd:e7:47:6d:09:7b:07:d4:83: c1:41:b6:13:8d:c2:64:3c:b4:a8:91:17:1d:db:ff: 01:82:5c:f7:92:62:cf:ee:be:58:d5:c0:0b:f3:92: 2d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:19:79:8D:86:0E:73:8B:94:9D:C4:BB:8B:36:06:E9:CC:AA:A4:A1 X509v3 Authority Key Identifier: keyid:F5:EC:C9:36:2C:1D:3B:73:82:4F:5D:42:99:AD:BF:AB:4A:F8:4D:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2432/A70764F682CB11F1B54AB87D77A30FBC/9ezJNiwdO3OCT11Cma2_q0r4TY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ezJNiwdO3OCT11Cma2_q0r4TY0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2432/A70764F682CB11F1B54AB87D77A30FBC/9ezJNiwdO3OCT11Cma2_q0r4TY0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:4d:94:5d:e2:a7:3a:0b:47:3d:69:90:82:97:41:d4:ea:b8: 2b:c9:76:62:78:ab:08:07:63:5c:c0:3e:18:e8:f8:f0:05:6c: 0e:6f:7b:13:4a:df:9b:04:c6:1f:e6:17:5a:5d:69:a1:09:2b: 50:15:50:1c:2c:5f:35:bf:af:a8:44:8c:dc:0e:e5:54:61:a6: 15:77:84:92:0f:c4:3b:7d:07:b8:8f:34:68:b9:cb:81:7c:d7: c8:a9:e8:da:08:4c:e7:74:e8:13:1a:1c:5b:1f:be:d8:d1:21: f5:ea:62:fb:c3:a3:a3:6a:d5:2f:d1:ef:e3:18:93:89:05:01: 80:01:aa:bd:0f:18:a9:ba:96:33:08:ed:33:20:c8:d7:5d:e9: 69:93:2f:9b:8e:9b:aa:73:b5:08:7a:94:b5:b9:40:3b:a7:bd: 80:6a:06:22:3c:83:63:3a:50:3a:eb:76:1d:19:04:cb:7a:ce: a8:91:a5:26:db:ea:77:ba:9f:8d:d3:54:16:f5:cc:50:b8:57: d7:b1:0e:3c:8f:bb:be:17:a1:00:8c:1d:53:8c:ea:11:bb:c6: 02:eb:18:67:53:4e:9c:4b:2e:c6:85:ea:0e:39:09:e2:fb:1b: bf:99:7e:b1:3b:8e:9d:d1:b6:e5:fa:4b:fb:00:0f:4e:64:7f: b3:82:19:15 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MjQzMjExMC8GA1UEBRMoRjVFQ0M5MzYyQzFEM0I3MzgyNEY1RDQyOTlBREJGQUI0 QUY4NEQ4RDAeFw0yNjEwMjMwOTEyMjVaFw0yNjEwMzAwOTEyMjVaMBgxFjAUBgNV BAMTDTZhZGIyNGZhLTBmNGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCXJ7DmzkJLA39KQoU+gsbVGJdn9n9yymSdBtn8X0ThVH45DlHqDye+sRCoUCnG nRDyDzEfmtsgfAiQB8dYZP/3z1rTrwr1yZxmeIOtFhl37T+LPKCrzDNZjhzxjy4j WGAyOQzgaencjNWtLm1yDLbDGWq4eizBKlDhM3ebX0/6E7wm4nKLKXnQIf50idme JzPDEZdt9ATDIvPck+FNPVVfv3zUteS/1/m6h4mISx5A6FY4AloBhyGe8/rdotPv wanJ/LuO+DmxzjihW85eiuwpxu2sXlT5Qf3nR20JewfUg8FBthONwmQ8tKiRFx3b /wGCXPeSYs/uvljVwAvzki2TAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUkxl5jYYO c4uUncS7izYG6cyqpKEwHwYDVR0jBBgwFoAU9ezJNiwdO3OCT11Cma2/q0r4TY0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyNDMyL0E3MDc2NEY2ODJD QjExRjFCNTRBQjg3RDc3QTMwRkJDLzllekpOaXdkTzNPQ1QxMUNtYTJfcTByNFRZ MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOWV6Sk5pd2RPM09DVDExQ21hMl9xMHI0VFkwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy NDMyL0E3MDc2NEY2ODJDQjExRjFCNTRBQjg3RDc3QTMwRkJDLzllekpOaXdkTzNP Q1QxMUNtYTJfcTByNFRZMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBPTZRd4qc6C0c9aZCCl0HU6rgryXZieKsIB2NcwD4Y6PjwBWwOb3sTSt+bBMYf 5hdaXWmhCStQFVAcLF81v6+oRIzcDuVUYaYVd4SSD8Q7fQe4jzRoucuBfNfIqeja CEzndOgTGhxbH77Y0SH16mL7w6OjatUv0e/jGJOJBQGAAaq9DxipupYzCO0zIMjX Xelpky+bjpuqc7UIepS1uUA7p72AagYiPINjOlA663YdGQTLes6okaUm2+p3up+N 01QW9cxQuFfXsQ48j7u+F6EAjB1TjOoRu8YC6xhnU06cSy7GheoOOQni+xu/mX6x O46d0bbl+kv7AA9OZH+zghkV -----END CERTIFICATE-----Generated at Sat Oct 24 20:45:56 2026 by rpki-client