$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft File: 1ABRvI3aYMky7gd2mrhnvvqNQvY.mft (raw, json) Hash identifier: RNlUZzEBGE6ye4rN4xYdFUDqLYhU93qZ+yi7/TBBoZM= Subject key identifier: 48:F7:43:86:56:B0:28:11:AD:3A:A5:6F:C1:23:2C:FB:BB:EA:9B:5B Authority key identifier: D4:00:51:BC:8D:DA:60:C9:32:EE:07:76:9A:B8:67:BE:FA:8D:42:F6 Certificate issuer: /CN=A91D3F8E/serialNumber=D40051BC8DDA60C932EE07769AB867BEFA8D42F6 Certificate serial: 02B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft Manifest number: 0288 Signing time: Wed 07 Oct 2026 02:37:26 +0000 Manifest this update: Wed 07 Oct 2026 02:37:26 +0000 Manifest next update: Wed 14 Oct 2026 02:37:26 +0000 Files and hashes: 1: 1ABRvI3aYMky7gd2mrhnvvqNQvY.crl (hash: c68J5+hpWqaDeKrUTDoZVhDZVZnBFrxqWz9dKIlVR/0=) 2: F02954E694AA11F18168138B6F11F970.roa (hash: jdpMDiHc19U9B3dTcdf0OBI4UCQ8NKRYGsnZZyIR7FA=) 3: C0E3BC02B8B611EFBD4C6F4AC4F9AE02.roa (hash: XhHaHdOlqWYP1wfuj95iHXOiSFz6V8DkPjaDxpfW1i8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.crl rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 02:37:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 688 (0x2b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3F8E, serialNumber=D40051BC8DDA60C932EE07769AB867BEFA8D42F6 Validity Not Before: Oct 7 02:37:26 2026 GMT Not After : Oct 14 02:37:26 2026 GMT Subject: CN=6ac5b066-5ae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c7:3a:19:2a:c4:62:dd:2e:a5:10:73:88:d0: 6f:56:66:1a:25:7e:c5:a6:aa:bf:64:c4:7c:9b:1f: 09:56:4c:ee:67:84:4e:73:26:30:37:7b:76:ba:f8: fd:1d:56:6b:b9:d8:4a:a4:5c:4c:d2:26:e9:bb:64: 66:43:d4:d3:ab:4d:2d:2d:06:ba:ce:bb:b3:65:eb: 63:f4:eb:10:bf:bf:5a:31:9c:c5:02:41:9e:d8:0b: 00:33:2a:3c:4a:77:7d:5b:5b:2e:92:9b:f4:f3:09: dd:8c:55:d1:87:8a:5a:f3:1e:7c:25:15:ac:ea:2c: d1:94:17:d4:01:cd:3d:21:b6:b6:df:c8:e1:b8:f9: c9:c3:73:fa:26:7a:98:a8:b3:f1:cb:b0:55:1d:27: 69:c6:03:83:c7:ab:a6:50:dd:45:c6:0d:ca:f2:4b: e1:78:07:dc:a9:d1:83:f1:1f:ae:32:18:ce:0e:f0: 1f:18:ef:c9:9f:88:ad:4c:7d:21:33:39:35:98:14: a8:ec:80:8c:52:c7:36:54:d9:b1:75:d8:e4:34:1d: 3f:98:54:94:dc:27:34:d9:35:09:ac:94:6c:b2:bf: 0c:3a:d5:1d:9f:74:c7:e8:bb:ea:d4:67:b4:8f:c4: 70:cc:b0:75:97:2a:f0:30:19:7d:eb:e8:d4:e7:cc: 8d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:F7:43:86:56:B0:28:11:AD:3A:A5:6F:C1:23:2C:FB:BB:EA:9B:5B X509v3 Authority Key Identifier: keyid:D4:00:51:BC:8D:DA:60:C9:32:EE:07:76:9A:B8:67:BE:FA:8D:42:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:90:bd:a7:7d:d4:f1:6e:6b:22:89:2d:d7:dc:b8:95:55:45: e2:50:dd:d6:cf:4f:c1:db:76:b8:f1:7d:b6:cc:cc:d6:da:17: 69:e8:80:1e:1b:f2:41:55:4a:62:4e:c9:b7:be:d5:06:0a:0c: 20:d7:a0:22:96:31:73:60:f6:73:58:58:5b:fa:1e:35:23:c1: 08:1a:c5:06:32:4c:44:3f:d4:be:52:b0:2f:b0:da:18:79:a6: 53:62:66:ff:c7:72:a1:ac:8b:72:3d:fb:57:a5:c4:ca:9d:e7: 6c:01:eb:b0:ee:c1:ac:f0:4f:52:5c:f7:9e:ea:e1:58:57:6f: 01:41:ad:22:a6:6f:dc:5b:35:64:e5:78:4e:48:dd:42:37:48: de:87:b3:bf:d8:38:4f:ed:77:b6:10:38:94:f1:0c:78:40:a7: c7:fb:71:90:b1:c9:f8:b8:e8:4a:30:5e:5d:cd:b0:49:fc:e7: 47:aa:e2:54:65:5f:a3:6b:2c:10:14:84:5a:76:5f:2b:4b:6e: d5:2c:1d:b8:39:b9:0b:17:26:e2:b9:31:8e:1b:18:0b:66:b4: 4e:bf:6f:68:6c:b3:2f:f5:7d:dc:10:e7:d7:a2:ee:90:9d:01: 23:46:ee:e7:bc:b1:c4:b8:dc:bf:6f:26:ba:01:6f:b8:1c:2b: bf:81:e4:c9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNGOEUxMTAvBgNVBAUTKEQ0MDA1MUJDOEREQTYwQzkzMkVFMDc3NjlBQjg2N0JF RkE4RDQyRjYwHhcNMjYxMDA3MDIzNzI2WhcNMjYxMDE0MDIzNzI2WjAYMRYwFAYD VQQDEw02YWM1YjA2Ni01YWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAssc6GSrEYt0upRBziNBvVmYaJX7Fpqq/ZMR8mx8JVkzuZ4ROcyYwN3t2uvj9 HVZrudhKpFxM0ibpu2RmQ9TTq00tLQa6zruzZetj9OsQv79aMZzFAkGe2AsAMyo8 Snd9W1sukpv08wndjFXRh4pa8x58JRWs6izRlBfUAc09Iba238jhuPnJw3P6JnqY qLPxy7BVHSdpxgODx6umUN1Fxg3K8kvheAfcqdGD8R+uMhjODvAfGO/Jn4itTH0h Mzk1mBSo7ICMUsc2VNmxddjkNB0/mFSU3Cc02TUJrJRssr8MOtUdn3TH6Lvq1Ge0 j8RwzLB1lyrwMBl96+jU58yNXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEj3Q4ZW sCgRrTqlb8EjLPu76ptbMB8GA1UdIwQYMBaAFNQAUbyN2mDJMu4Hdpq4Z776jUL2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0Y4RS82QzQwODlCQTIx NkMxMUVFQjI4QkYyNENDNEY5QUUwMi8xQUJSdkkzYVlNa3k3Z2QybXJobnZ2cU5R dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFBQlJ2STNhWU1reTdnZDJtcmhudnZxTlF2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0Y4RS82QzQwODlCQTIxNkMxMUVFQjI4QkYyNENDNEY5QUUwMi8xQUJSdkkzYVlN a3k3Z2QybXJobnZ2cU5RdlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfJC9p33U8W5rIokt19y4lVVF4lDd1s9Pwdt2uPF9tszM1toXaeiAHhvyQVVK Yk7Jt77VBgoMINegIpYxc2D2c1hYW/oeNSPBCBrFBjJMRD/UvlKwL7DaGHmmU2Jm /8dyoayLcj37V6XEyp3nbAHrsO7BrPBPUlz3nurhWFdvAUGtIqZv3Fs1ZOV4Tkjd QjdI3oezv9g4T+13thA4lPEMeECnx/txkLHJ+LjoSjBeXc2wSfznR6riVGVfo2ss EBSEWnZfK0tu1SwduDm5Cxcm4rkxjhsYC2a0Tr9vaGyzL/V93BDn16LukJ0BI0bu 57yxxLjcv28mugFvuBwrv4HkyQ== -----END CERTIFICATE-----Generated at Thu Oct 8 14:02:55 2026 by rpki-client