$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.mft File: -Ro6mDFDhMQDqP8ipFO8oaO6bNg.mft (raw, json) Hash identifier: vU5KQhUxKljDljRzM2QeyiAYMeuVhVvdCjpi4X9LI0M= Subject key identifier: 19:49:0B:90:71:0C:2E:82:F5:EC:A7:5F:59:2E:F8:1E:7C:1C:36:1A Authority key identifier: F9:1A:3A:98:31:43:84:C4:03:A8:FF:22:A4:53:BC:A1:A3:BA:6C:D8 Certificate issuer: /CN=A91D3102/serialNumber=F91A3A98314384C403A8FF22A453BCA1A3BA6CD8 Certificate serial: 2EE2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.mft Manifest number: 2EC3 Signing time: Sat 10 Oct 2026 15:27:49 +0000 Manifest this update: Sat 10 Oct 2026 15:27:48 +0000 Manifest next update: Sat 17 Oct 2026 15:27:48 +0000 Files and hashes: 1: -Ro6mDFDhMQDqP8ipFO8oaO6bNg.crl (hash: UupxylmKTz6UwLxSmrzyVF78tv97OCakWP+1G1F0NCk=) 2: 611D8094B13D11E59299870AC4F9AE02.roa (hash: 6f1TkFWNlMl/F/acGbghOLoUP+OqCJaMnvA5r+odhLo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.crl rsync://rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 15:27:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12002 (0x2ee2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3102, serialNumber=F91A3A98314384C403A8FF22A453BCA1A3BA6CD8 Validity Not Before: Oct 10 15:27:48 2026 GMT Not After : Oct 17 15:27:48 2026 GMT Subject: CN=6aca5975-2b6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bf:87:c6:15:2d:41:bc:c5:3c:77:0c:17:40: b4:61:50:59:33:10:31:4c:15:0c:e1:6e:e6:3f:3f: cd:99:83:f6:cb:0f:69:d4:44:3c:54:f3:73:2e:56: 30:07:46:cc:bd:a3:ca:da:e0:9b:17:97:bc:80:4b: 78:d5:61:9f:06:8f:c3:d2:5f:81:7d:42:da:60:8e: a2:d4:3f:49:31:1a:f2:35:6c:30:24:09:65:1a:0f: 15:8b:df:d3:ea:74:45:8f:1d:92:14:79:f5:bf:91: 50:19:01:8f:16:cf:9d:2a:3f:66:19:07:0e:48:e9: ae:5e:b1:56:d7:d9:6d:76:bf:ab:bd:2a:9a:c4:4d: 3a:56:a1:98:65:92:8a:4e:b3:cc:83:4a:cb:b4:66: 00:39:f4:97:c6:ba:7d:a0:c0:1f:6e:d2:8b:6a:ac: d0:2a:ea:98:ce:1f:f7:1a:f7:23:a4:46:99:10:49: 7b:4d:6a:c2:1a:4d:d3:09:37:76:ca:b3:b6:c2:3c: da:db:a9:d2:f1:b5:81:b8:5f:eb:87:64:88:bb:af: 8f:6a:fc:9c:ea:5c:2a:88:db:34:fb:40:6b:04:63: 05:be:65:75:56:18:8b:8c:95:ba:20:85:c6:19:e7: 95:16:ad:61:19:5d:93:88:2d:9a:22:a2:cd:06:8d: 88:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:49:0B:90:71:0C:2E:82:F5:EC:A7:5F:59:2E:F8:1E:7C:1C:36:1A X509v3 Authority Key Identifier: keyid:F9:1A:3A:98:31:43:84:C4:03:A8:FF:22:A4:53:BC:A1:A3:BA:6C:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:24:54:f1:74:7f:a2:51:3e:5a:6e:9c:3c:6e:c6:d3:27:4d: 4f:0e:91:08:2c:0b:3e:b5:01:48:d9:5e:93:1f:2d:ce:f7:c4: 3e:56:5d:c0:a2:b2:46:e8:76:63:be:7b:12:83:19:e5:8e:2f: d3:0b:03:b7:c2:5e:ab:d3:ba:e8:4c:bd:51:28:83:a6:72:35: e3:82:9e:33:aa:da:38:50:38:90:1d:d8:3d:05:de:3b:bc:c6: 2b:8a:a7:b3:e0:f3:68:2a:93:33:bd:db:af:d2:19:3e:a4:4c: 28:34:ac:fb:7d:6c:fb:89:bd:ff:3d:6d:bd:5b:23:49:cb:1a: 59:7c:65:c8:2d:67:4a:97:c8:57:bc:97:04:cc:a2:ba:7b:55: 69:1c:dd:c4:2b:8a:92:23:58:2c:46:33:ef:25:c5:db:70:24: c5:de:80:b2:fe:bf:87:17:3e:5e:d7:dc:2b:0d:2a:9c:74:1c: 36:b7:51:9d:21:37:ec:99:79:81:54:c6:8f:75:0b:b7:be:27: 0f:d5:b7:dc:d7:ac:0a:24:ed:24:70:34:cf:32:dd:55:f3:cb: ca:14:55:53:3c:2f:ae:7d:bc:8c:e3:23:bd:08:f3:b7:61:c2: 3f:ee:bf:62:ee:cd:25:d7:8f:4d:48:16:2f:3e:98:6d:ad:38: e7:37:6c:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICLuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMxMDIxMTAvBgNVBAUTKEY5MUEzQTk4MzE0Mzg0QzQwM0E4RkYyMkE0NTNCQ0Ex QTNCQTZDRDgwHhcNMjYxMDEwMTUyNzQ4WhcNMjYxMDE3MTUyNzQ4WjAYMRYwFAYD VQQDEw02YWNhNTk3NS0yYjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7+HxhUtQbzFPHcMF0C0YVBZMxAxTBUM4W7mPz/NmYP2yw9p1EQ8VPNzLlYw B0bMvaPK2uCbF5e8gEt41WGfBo/D0l+BfULaYI6i1D9JMRryNWwwJAllGg8Vi9/T 6nRFjx2SFHn1v5FQGQGPFs+dKj9mGQcOSOmuXrFW19ltdr+rvSqaxE06VqGYZZKK TrPMg0rLtGYAOfSXxrp9oMAfbtKLaqzQKuqYzh/3GvcjpEaZEEl7TWrCGk3TCTd2 yrO2wjza26nS8bWBuF/rh2SIu6+Pavyc6lwqiNs0+0BrBGMFvmV1VhiLjJW6IIXG GeeVFq1hGV2TiC2aIqLNBo2IZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBlJC5Bx DC6C9eynX1ku+B58HDYaMB8GA1UdIwQYMBaAFPkaOpgxQ4TEA6j/IqRTvKGjumzY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzEwMi9ENEFFRTJDODc2 OEUxMUUzOTlBOTU3NDU1OTExRUEzMi8tUm82bURGRGhNUURxUDhpcEZPOG9hTzZi TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1SbzZtREZEaE1RRHFQOGlwRk84b2FPNmJOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzEwMi9ENEFFRTJDODc2OEUxMUUzOTlBOTU3NDU1OTExRUEzMi8tUm82bURGRGhN UURxUDhpcEZPOG9hTzZiTmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWyRU8XR/olE+Wm6cPG7G0ydNTw6RCCwLPrUBSNlekx8tzvfEPlZdwKKyRuh2 Y757EoMZ5Y4v0wsDt8Jeq9O66Ey9USiDpnI144KeM6raOFA4kB3YPQXeO7zGK4qn s+DzaCqTM73br9IZPqRMKDSs+31s+4m9/z1tvVsjScsaWXxlyC1nSpfIV7yXBMyi untVaRzdxCuKkiNYLEYz7yXF23Akxd6Asv6/hxc+XtfcKw0qnHQcNrdRnSE37Jl5 gVTGj3ULt74nD9W33NesCiTtJHA0zzLdVfPLyhRVUzwvrn28jOMjvQjzt2HCP+6/ Yu7NJdePTUgWLz6Yba045zdseQ== -----END CERTIFICATE-----Generated at Sun Oct 11 15:14:30 2026 by rpki-client