$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft File: fvLsMxvWVD0y25gMUGJsBAfKiYI.mft (raw, json) Hash identifier: ivn5eSGnL92FC8DOY/KIlRkKXlzARj2SgOJnoiFhsvQ= Subject key identifier: BB:21:86:FC:ED:FE:32:AB:7A:E4:84:17:72:43:11:A6:20:B3:13:79 Authority key identifier: 7E:F2:EC:33:1B:D6:54:3D:32:DB:98:0C:50:62:6C:04:07:CA:89:82 Certificate issuer: /CN=A91D5E23/serialNumber=7EF2EC331BD6543D32DB980C50626C0407CA8982 Certificate serial: 09E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvLsMxvWVD0y25gMUGJsBAfKiYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft Manifest number: 09DF Signing time: Sat 24 Oct 2026 19:50:11 +0000 Manifest this update: Sat 24 Oct 2026 19:50:10 +0000 Manifest next update: Sat 31 Oct 2026 19:50:10 +0000 Files and hashes: 1: fvLsMxvWVD0y25gMUGJsBAfKiYI.crl (hash: jgH3PukjPM+bP9S/HTVQwaV1cqo4CuK6JaJkco619EE=) 2: 70C35E88B07511EA8C0EC372C4F9AE02.roa (hash: nEw1J5nI/jYM2/PDdrlSv5FQkDbuSGPVtzOk8gJbumo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.crl rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvLsMxvWVD0y25gMUGJsBAfKiYI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 19:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2536 (0x9e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5E23, serialNumber=7EF2EC331BD6543D32DB980C50626C0407CA8982 Validity Not Before: Oct 24 19:50:10 2026 GMT Not After : Oct 31 19:50:10 2026 GMT Subject: CN=6add0bf3-bece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:be:0a:5e:36:4c:b9:ed:a3:cd:b0:a2:2b:b6: 22:ed:47:e1:8e:e5:5e:1b:38:73:17:c2:19:c9:e2: 5a:b5:c9:5b:d4:eb:65:ec:f4:08:67:4e:22:ae:85: 28:67:fe:32:d4:12:e3:dd:62:4d:a8:5c:6b:25:6b: 58:34:4f:25:2d:6e:59:0e:57:be:bc:4a:1b:44:43: 70:54:4d:e3:4a:d0:53:4d:91:83:48:38:87:96:19: ba:1c:e3:ae:a9:d5:d7:b8:58:cb:af:42:05:5c:91: 6f:d2:00:84:71:38:17:29:d6:8b:cb:29:e8:8a:55: d0:de:5f:ea:fe:a7:40:f1:07:ea:e9:00:1e:88:a9: fe:df:e8:ae:5c:d2:37:2b:a8:3d:d6:2d:38:95:5a: 19:43:df:25:6d:89:d1:d8:af:3c:fd:43:71:f7:71: 87:ff:c3:a8:33:71:94:8c:de:e2:12:05:c7:04:88: b7:dc:c4:ab:7d:85:9c:b7:19:a3:b5:d2:ec:1f:15: cb:dd:fa:b4:b7:16:7c:46:2e:7c:68:a2:a8:2e:9d: 50:13:b4:11:d5:7e:a4:80:b1:10:da:09:a6:64:5c: a7:68:1e:0f:fd:69:01:6c:73:2f:0e:98:33:8f:8f: 36:97:21:2c:6c:be:8d:54:06:f9:66:28:b4:07:1a: 65:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:21:86:FC:ED:FE:32:AB:7A:E4:84:17:72:43:11:A6:20:B3:13:79 X509v3 Authority Key Identifier: keyid:7E:F2:EC:33:1B:D6:54:3D:32:DB:98:0C:50:62:6C:04:07:CA:89:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvLsMxvWVD0y25gMUGJsBAfKiYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:d2:71:ed:cd:2e:b3:c4:d3:79:88:c3:29:f4:b3:c0:33:5c: 1c:76:d2:18:f4:7f:94:ca:83:e3:2e:c7:d9:ce:db:16:ff:9b: 45:45:b0:b8:88:b1:9e:8d:19:84:f9:a9:5a:3e:9e:7a:45:0d: b9:9e:e9:0e:f4:53:25:42:50:4d:f6:e9:b9:8c:ab:0e:90:a4: c8:e5:a4:ea:06:6c:59:08:d8:d5:41:b3:0f:0e:20:86:d9:f5: 47:f0:5f:20:4c:c1:ad:4c:3b:c1:e9:a1:e6:dd:06:2e:fe:06: 40:d4:28:8f:25:f5:f3:19:f1:50:48:67:10:fa:fd:5f:b9:1c: 67:90:e4:43:3f:53:e3:c0:c0:76:69:bf:ce:a2:26:cd:95:6b: ea:48:e2:c3:e5:aa:28:0f:97:ec:3e:be:c7:e0:ec:8c:c7:ce: ef:91:d0:e1:47:f5:19:ca:7c:c3:a7:59:b7:d0:50:27:f7:47: e4:e5:92:ed:46:3a:1a:78:5b:5e:b1:92:73:af:e8:2a:85:de: ee:98:e6:c1:36:5d:76:37:99:b6:49:26:97:f7:f5:d9:bb:68: 06:f3:2c:7e:4e:dd:32:f8:77:f4:9e:09:b8:98:53:f1:32:49: 59:82:5b:cc:e6:9c:b2:c9:ac:b1:10:35:a7:56:e7:c2:57:66: e8:7d:de:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVFMjMxMTAvBgNVBAUTKDdFRjJFQzMzMUJENjU0M0QzMkRCOTgwQzUwNjI2QzA0 MDdDQTg5ODIwHhcNMjYxMDI0MTk1MDEwWhcNMjYxMDMxMTk1MDEwWjAYMRYwFAYD VQQDEw02YWRkMGJmMy1iZWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAur4KXjZMue2jzbCiK7Yi7UfhjuVeGzhzF8IZyeJatclb1Otl7PQIZ04iroUo Z/4y1BLj3WJNqFxrJWtYNE8lLW5ZDle+vEobRENwVE3jStBTTZGDSDiHlhm6HOOu qdXXuFjLr0IFXJFv0gCEcTgXKdaLyynoilXQ3l/q/qdA8Qfq6QAeiKn+3+iuXNI3 K6g91i04lVoZQ98lbYnR2K88/UNx93GH/8OoM3GUjN7iEgXHBIi33MSrfYWctxmj tdLsHxXL3fq0txZ8Ri58aKKoLp1QE7QR1X6kgLEQ2gmmZFynaB4P/WkBbHMvDpgz j482lyEsbL6NVAb5Zii0BxpluwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLshhvzt /jKreuSEF3JDEaYgsxN5MB8GA1UdIwQYMBaAFH7y7DMb1lQ9MtuYDFBibAQHyomC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUUyMy84NjJBODNDQUIw NzMxMUVBOTBFQzk5NkVDNEY5QUUwMi9mdkxzTXh2V1ZEMHkyNWdNVUdKc0JBZktp WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z2THNNeHZXVkQweTI1Z01VR0pzQkFmS2lZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUUyMy84NjJBODNDQUIwNzMxMUVBOTBFQzk5NkVDNEY5QUUwMi9mdkxzTXh2V1ZE MHkyNWdNVUdKc0JBZktpWUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADtJx7c0us8TTeYjDKfSzwDNcHHbSGPR/lMqD4y7H2c7bFv+bRUWwuIixno0Z hPmpWj6eekUNuZ7pDvRTJUJQTfbpuYyrDpCkyOWk6gZsWQjY1UGzDw4ghtn1R/Bf IEzBrUw7wemh5t0GLv4GQNQojyX18xnxUEhnEPr9X7kcZ5DkQz9T48DAdmm/zqIm zZVr6kjiw+WqKA+X7D6+x+DsjMfO75HQ4Uf1Gcp8w6dZt9BQJ/dH5OWS7UY6Gnhb XrGSc6/oKoXe7pjmwTZddjeZtkkml/f12btoBvMsfk7dMvh39J4JuJhT8TJJWYJb zOacssmssRA1p1bnwldm6H3eeg== -----END CERTIFICATE-----Generated at Sun Oct 25 17:02:45 2026 by rpki-client