$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2DDF/4F86F596B23411F1826349B35E11F970/DHT8APVkd7MNxjxYlDlCKryGiIM.mft File: DHT8APVkd7MNxjxYlDlCKryGiIM.mft (raw, json) Hash identifier: pjU+qig9/pef7t5jjOiv5EYFmBwwSnMUgeEfUWxLU1Y= Subject key identifier: 56:F7:3C:C8:EB:26:84:66:1E:20:1C:FB:6A:D2:09:46:18:9C:65:55 Authority key identifier: 0C:74:FC:00:F5:64:77:B3:0D:C6:3C:58:94:39:42:2A:BC:86:88:83 Certificate issuer: /CN=A91D2DDF/serialNumber=0C74FC00F56477B30DC63C589439422ABC868883 Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DHT8APVkd7MNxjxYlDlCKryGiIM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2DDF/4F86F596B23411F1826349B35E11F970/DHT8APVkd7MNxjxYlDlCKryGiIM.mft Manifest number: 12 Signing time: Thu 15 Oct 2026 10:17:58 +0000 Manifest this update: Thu 15 Oct 2026 10:17:57 +0000 Manifest next update: Thu 22 Oct 2026 10:17:57 +0000 Files and hashes: 1: DHT8APVkd7MNxjxYlDlCKryGiIM.crl (hash: NQu+QDQRpJLr5PGNE1ZH0lNyXeHTyphvciiRW1xfe+o=) 2: 8D5261CEB23611F193647F1D6011F970.roa (hash: Swyj/xtXs6B4h5z1HMQ81Ug9t/0dfmEs33ixMbbL9hc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2DDF/4F86F596B23411F1826349B35E11F970/DHT8APVkd7MNxjxYlDlCKryGiIM.crl rsync://rpki.apnic.net/member_repository/A91D2DDF/4F86F596B23411F1826349B35E11F970/DHT8APVkd7MNxjxYlDlCKryGiIM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DHT8APVkd7MNxjxYlDlCKryGiIM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Oct 2026 10:17:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2DDF, serialNumber=0C74FC00F56477B30DC63C589439422ABC868883 Validity Not Before: Oct 15 10:17:57 2026 GMT Not After : Oct 22 10:17:57 2026 GMT Subject: CN=6ad0a856-7097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4a:c1:c6:37:3a:5b:43:0f:38:77:c3:32:26: c4:f8:86:61:b6:6c:38:20:a1:79:4f:3b:b4:94:b4: 9b:9e:ac:45:0f:e4:4f:7e:b9:d4:e8:bf:be:45:0f: 93:54:cf:9b:26:b5:a6:9f:79:66:64:1f:01:e0:10: fe:97:f2:28:fd:59:56:1c:dc:55:51:46:2c:91:62: 0a:10:8f:45:1a:5f:49:51:89:5d:97:9f:50:f9:1f: a9:c9:cb:0c:78:8d:54:0d:9d:7a:b5:88:b9:0d:97: da:ac:a8:f5:e4:13:9e:21:bd:ec:98:e9:63:5d:7a: 77:53:d3:3d:3b:45:c4:c1:9b:85:4e:eb:ea:4b:f8: 27:95:d2:d5:a8:9b:5c:0b:b7:dd:9e:83:d0:20:e0: c8:f7:be:8b:be:f5:04:2b:98:80:40:6d:26:21:a2: 76:3d:7a:a4:41:d3:c9:ff:79:2b:59:99:7a:0d:06: b4:3b:6a:33:31:2b:ae:cb:29:65:b2:ff:6e:0f:70: db:9f:5f:56:84:ae:85:cd:f0:2f:da:d3:98:23:6b: a7:64:b7:3a:1b:01:80:80:9c:19:79:eb:5a:f7:67: f2:c5:60:47:f0:7e:b1:cc:a9:4d:91:ed:0b:1e:d9: fd:fe:04:3a:7d:5a:5d:e0:90:ea:32:26:28:0e:c2: eb:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F7:3C:C8:EB:26:84:66:1E:20:1C:FB:6A:D2:09:46:18:9C:65:55 X509v3 Authority Key Identifier: keyid:0C:74:FC:00:F5:64:77:B3:0D:C6:3C:58:94:39:42:2A:BC:86:88:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2DDF/4F86F596B23411F1826349B35E11F970/DHT8APVkd7MNxjxYlDlCKryGiIM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DHT8APVkd7MNxjxYlDlCKryGiIM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2DDF/4F86F596B23411F1826349B35E11F970/DHT8APVkd7MNxjxYlDlCKryGiIM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:0d:5d:9d:2c:f1:9e:20:7e:d5:b1:52:87:46:1c:33:a7:ae: 8f:a5:43:72:d2:5d:fd:66:28:3b:e8:5a:68:6e:ec:79:bf:12: 91:1e:41:ee:3e:2b:5e:f2:ba:61:0a:a9:fb:45:38:0e:8b:08: a8:27:6f:5c:56:fc:00:37:b2:e2:f3:ec:9f:08:4f:70:9d:7d: e0:54:2f:77:5c:94:3c:1a:ca:4e:b2:95:da:53:9e:0e:86:61: d7:2b:17:fd:b4:b2:df:3d:11:e9:b7:90:80:df:82:ad:1c:e3: ea:9d:97:5b:30:1e:1e:9e:c9:82:6e:b1:55:f8:81:ba:eb:d1: 19:1d:bf:15:96:e7:b9:59:97:99:fc:6d:38:32:28:16:0e:79: d2:f5:a6:e0:9b:a3:66:26:a3:65:b6:c8:f3:b6:5c:0b:0c:46: 45:c1:64:40:33:a3:31:33:30:83:45:56:57:7f:56:65:89:f5: 14:dd:f2:08:6a:f3:5c:30:a1:3f:b2:11:07:6c:f0:eb:29:01: 3f:7e:5d:57:93:63:cc:2f:06:d9:ba:f7:4b:ca:8f:7c:a2:43: 1d:0e:99:66:65:a2:5b:4f:1a:7e:c0:58:fa:08:9f:36:1e:e8: 81:04:15:9f:90:ea:7f:7c:df:2b:4d:41:22:ff:b2:5b:91:7c: 89:48:b7:c5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MkRERjExMC8GA1UEBRMoMEM3NEZDMDBGNTY0NzdCMzBEQzYzQzU4OTQzOTQyMkFC Qzg2ODg4MzAeFw0yNjEwMTUxMDE3NTdaFw0yNjEwMjIxMDE3NTdaMBgxFjAUBgNV BAMTDTZhZDBhODU2LTcwOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRSsHGNzpbQw84d8MyJsT4hmG2bDggoXlPO7SUtJuerEUP5E9+udTov75FD5NU z5smtaafeWZkHwHgEP6X8ij9WVYc3FVRRiyRYgoQj0UaX0lRiV2Xn1D5H6nJywx4 jVQNnXq1iLkNl9qsqPXkE54hveyY6WNdendT0z07RcTBm4VO6+pL+CeV0tWom1wL t92eg9Ag4Mj3vou+9QQrmIBAbSYhonY9eqRB08n/eStZmXoNBrQ7ajMxK67LKWWy /24PcNufX1aEroXN8C/a05gja6dktzobAYCAnBl561r3Z/LFYEfwfrHMqU2R7Qse 2f3+BDp9Wl3gkOoyJigOwuvrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUVvc8yOsm hGYeIBz7atIJRhicZVUwHwYDVR0jBBgwFoAUDHT8APVkd7MNxjxYlDlCKryGiIMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyRERGLzRGODZGNTk2QjIz NDExRjE4MjYzNDlCMzVFMTFGOTcwL0RIVDhBUFZrZDdNTnhqeFlsRGxDS3J5R2lJ TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvREhUOEFQVmtkN01OeGp4WWxEbENLcnlHaUlNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy RERGLzRGODZGNTk2QjIzNDExRjE4MjYzNDlCMzVFMTFGOTcwL0RIVDhBUFZrZDdN TnhqeFlsRGxDS3J5R2lJTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBaDV2dLPGeIH7VsVKHRhwzp66PpUNy0l39Zig76Fpobux5vxKRHkHuPite8rph Cqn7RTgOiwioJ29cVvwAN7Li8+yfCE9wnX3gVC93XJQ8GspOspXaU54OhmHXKxf9 tLLfPRHpt5CA34KtHOPqnZdbMB4ensmCbrFV+IG669EZHb8Vlue5WZeZ/G04MigW DnnS9abgm6NmJqNltsjztlwLDEZFwWRAM6MxMzCDRVZXf1ZlifUU3fIIavNcMKE/ shEHbPDrKQE/fl1Xk2PMLwbZuvdLyo98okMdDplmZaJbTxp+wFj6CJ82HuiBBBWf kOp/fN8rTUEi/7JbkXyJSLfF -----END CERTIFICATE-----Generated at Sat Oct 17 06:11:08 2026 by rpki-client