$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/U8lIF-sTZfHejDwrRAIjmIHBlD0.mft File: U8lIF-sTZfHejDwrRAIjmIHBlD0.mft (raw, json) Hash identifier: zBj5PqvltgcEE6o3WvqHN3AmeIgQ/dNCi6JsOcX0c5c= Subject key identifier: 1F:79:00:23:57:60:63:3A:11:20:98:87:32:FB:1D:AF:35:0C:D2:DF Authority key identifier: 53:C9:48:17:EB:13:65:F1:DE:8C:3C:2B:44:02:23:98:81:C1:94:3D Certificate issuer: /CN=A91D3307/serialNumber=53C94817EB1365F1DE8C3C2B4402239881C1943D Certificate serial: 05B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8lIF-sTZfHejDwrRAIjmIHBlD0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/U8lIF-sTZfHejDwrRAIjmIHBlD0.mft Manifest number: 0595 Signing time: Fri 02 Oct 2026 23:36:16 +0000 Manifest this update: Fri 02 Oct 2026 23:36:16 +0000 Manifest next update: Fri 09 Oct 2026 23:36:16 +0000 Files and hashes: 1: U8lIF-sTZfHejDwrRAIjmIHBlD0.crl (hash: k3Yrs44lFunHb+IdUOJnZGByO0EjIYt3hUbhXdn3Ppw=) 2: C908B72A696F11EFA4DA475FC4F9AE02.roa (hash: W6dcDrB3RcselU+HE/a3UN93ZRWn0E/P0SOzXj78T2A=) 3: C9C70AEA696F11EFA4DA475FC4F9AE02.roa (hash: 593+o8elVRSxa1C/n0n+gLQTiowZqiqwRC7MRYiWVSc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/U8lIF-sTZfHejDwrRAIjmIHBlD0.crl rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/U8lIF-sTZfHejDwrRAIjmIHBlD0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8lIF-sTZfHejDwrRAIjmIHBlD0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 23:36:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1462 (0x5b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3307, serialNumber=53C94817EB1365F1DE8C3C2B4402239881C1943D Validity Not Before: Oct 2 23:36:16 2026 GMT Not After : Oct 9 23:36:16 2026 GMT Subject: CN=6ac03ff0-5f64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:13:d1:d8:cc:69:4f:bc:ab:10:49:6f:98:66: 63:cc:e1:ee:fa:2a:db:de:3c:65:88:a2:73:6d:62: 47:0f:98:c5:9b:67:9f:8e:e5:4f:c4:67:0f:6a:c0: 08:21:76:7b:07:c2:a1:45:cb:89:dd:b4:0c:41:ec: cf:7c:f5:3e:90:b2:cb:4e:bc:54:26:d9:cb:90:02: 66:a6:03:c4:05:8d:d6:3f:31:f6:b0:46:92:8c:38: 2d:57:c9:dc:df:e7:0f:ac:e2:d9:52:ba:14:1a:61: 4a:70:c0:db:76:f7:50:cf:89:e9:cf:81:84:93:3d: fd:81:0b:57:4b:61:49:46:5c:5f:41:8d:0f:da:63: 9a:1d:d6:31:46:43:c9:c0:6d:2d:7c:27:bd:92:2e: bc:5e:65:ed:37:87:da:7a:f7:24:46:53:25:91:4c: 6f:0a:9c:a4:5d:84:dc:6b:08:be:c0:2a:b5:34:ef: 02:b6:42:d8:40:81:f5:4c:f0:90:55:63:b6:21:98: b4:cb:29:4a:29:de:98:15:40:a4:9a:69:60:10:3d: f1:8e:dc:7e:4c:dc:e7:f4:0f:84:0b:c0:c9:8d:03: 88:04:36:c2:61:32:80:b5:4b:6d:de:95:3e:e0:ed: 9c:56:e8:5e:a6:9c:b7:a4:a3:82:32:cb:65:57:ac: 3a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:79:00:23:57:60:63:3A:11:20:98:87:32:FB:1D:AF:35:0C:D2:DF X509v3 Authority Key Identifier: keyid:53:C9:48:17:EB:13:65:F1:DE:8C:3C:2B:44:02:23:98:81:C1:94:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/U8lIF-sTZfHejDwrRAIjmIHBlD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8lIF-sTZfHejDwrRAIjmIHBlD0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/U8lIF-sTZfHejDwrRAIjmIHBlD0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:d7:9d:d4:fc:9f:ab:36:7f:55:b3:ec:ef:6f:4a:e2:b5:01: 13:97:37:4f:79:30:0a:1d:dd:2f:52:ec:bd:b9:ec:5e:43:29: cc:f1:41:47:c1:a4:2e:97:54:75:39:17:61:ce:8a:92:48:f9: cd:3d:52:fd:b2:2b:fa:3d:ef:75:dc:dc:b9:be:de:84:df:00: cc:a1:af:42:6a:cb:5d:fd:49:fe:cf:7a:ea:52:a4:2d:ab:39: a8:77:38:ea:9c:16:8d:2e:50:bd:a7:1f:48:a7:db:64:53:c9: 4f:22:30:4b:51:3f:a8:42:cf:46:2d:e7:1b:c5:47:62:ea:71: ca:7f:a2:34:f8:39:f3:5a:da:31:06:e9:5f:5c:c2:bf:5f:9a: 8f:41:ac:51:7f:91:93:54:8c:e8:cc:2a:1a:ae:fa:95:3e:07: 9f:45:56:07:42:f0:78:b2:25:a0:e1:8d:50:a9:85:29:8e:17: 5a:17:25:b7:17:78:b5:a7:11:f1:82:a8:71:af:b3:21:b0:f0: 3f:0c:95:80:63:e0:98:0b:cf:08:17:d4:35:34:44:fe:93:46: 04:a6:de:99:63:7e:13:f5:6f:21:ea:48:0b:cd:db:ec:c4:a7: d3:01:03:09:bb:4b:84:23:7c:f6:94:18:6c:97:48:1b:b1:72: 67:d0:15:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMzMDcxMTAvBgNVBAUTKDUzQzk0ODE3RUIxMzY1RjFERThDM0MyQjQ0MDIyMzk4 ODFDMTk0M0QwHhcNMjYxMDAyMjMzNjE2WhcNMjYxMDA5MjMzNjE2WjAYMRYwFAYD VQQDEw02YWMwM2ZmMC01ZjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoxPR2MxpT7yrEElvmGZjzOHu+irb3jxliKJzbWJHD5jFm2efjuVPxGcPasAI IXZ7B8KhRcuJ3bQMQezPfPU+kLLLTrxUJtnLkAJmpgPEBY3WPzH2sEaSjDgtV8nc 3+cPrOLZUroUGmFKcMDbdvdQz4npz4GEkz39gQtXS2FJRlxfQY0P2mOaHdYxRkPJ wG0tfCe9ki68XmXtN4faevckRlMlkUxvCpykXYTcawi+wCq1NO8CtkLYQIH1TPCQ VWO2IZi0yylKKd6YFUCkmmlgED3xjtx+TNzn9A+EC8DJjQOIBDbCYTKAtUtt3pU+ 4O2cVuheppy3pKOCMstlV6w6JQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB95ACNX YGM6ESCYhzL7Ha81DNLfMB8GA1UdIwQYMBaAFFPJSBfrE2Xx3ow8K0QCI5iBwZQ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzMwNy8zNDJEODMyODQy Q0MxMUVDOEYxMzMyMERDNEY5QUUwMi9VOGxJRi1zVFpmSGVqRHdyUkFJam1JSEJs RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U4bElGLXNUWmZIZWpEd3JSQUlqbUlIQmxEMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzMwNy8zNDJEODMyODQyQ0MxMUVDOEYxMzMyMERDNEY5QUUwMi9VOGxJRi1zVFpm SGVqRHdyUkFJam1JSEJsRDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhted1PyfqzZ/VbPs729K4rUBE5c3T3kwCh3dL1LsvbnsXkMpzPFBR8GkLpdU dTkXYc6Kkkj5zT1S/bIr+j3vddzcub7ehN8AzKGvQmrLXf1J/s966lKkLas5qHc4 6pwWjS5QvacfSKfbZFPJTyIwS1E/qELPRi3nG8VHYupxyn+iNPg581raMQbpX1zC v1+aj0GsUX+Rk1SM6MwqGq76lT4Hn0VWB0LweLIloOGNUKmFKY4XWhcltxd4tacR 8YKoca+zIbDwPwyVgGPgmAvPCBfUNTRE/pNGBKbemWN+E/VvIepIC83b7MSn0wED CbtLhCN89pQYbJdIG7FyZ9AV6g== -----END CERTIFICATE-----Generated at Sun Oct 4 19:52:06 2026 by rpki-client