$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D7B93/E6B912C4A5D111F1A2E8764E3411F970/dp5BfpwYtVbAVK2cANsDne-LgmQ.mft File: dp5BfpwYtVbAVK2cANsDne-LgmQ.mft (raw, json) Hash identifier: /0EegN8nr/ttd0hoZecbCy5htuLYPHWbMKfIWrJY85o= Subject key identifier: 7A:FD:08:59:86:0A:08:68:89:92:CE:07:3F:50:A3:F0:59:83:63:F4 Authority key identifier: 76:9E:41:7E:9C:18:B5:56:C0:54:AD:9C:00:DB:03:9D:EF:8B:82:64 Certificate issuer: /CN=A91D7B93/serialNumber=769E417E9C18B556C054AD9C00DB039DEF8B8264 Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dp5BfpwYtVbAVK2cANsDne-LgmQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7B93/E6B912C4A5D111F1A2E8764E3411F970/dp5BfpwYtVbAVK2cANsDne-LgmQ.mft Manifest number: 1D Signing time: Sun 25 Oct 2026 09:18:55 +0000 Manifest this update: Sun 25 Oct 2026 09:18:54 +0000 Manifest next update: Sun 01 Nov 2026 09:18:54 +0000 Files and hashes: 1: dp5BfpwYtVbAVK2cANsDne-LgmQ.crl (hash: uxb7on7HgXSuO7rwz972KPTuA3AexsPerTh3Lw6y1Vo=) 2: 9B9231EAA5D611F1A425A8EE3511F970.roa (hash: DdRr2cpwN1Z60kmM3n3zX6qDz037pRRi3PajRxVZO2k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7B93/E6B912C4A5D111F1A2E8764E3411F970/dp5BfpwYtVbAVK2cANsDne-LgmQ.crl rsync://rpki.apnic.net/member_repository/A91D7B93/E6B912C4A5D111F1A2E8764E3411F970/dp5BfpwYtVbAVK2cANsDne-LgmQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dp5BfpwYtVbAVK2cANsDne-LgmQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 09:18:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7B93, serialNumber=769E417E9C18B556C054AD9C00DB039DEF8B8264 Validity Not Before: Oct 25 09:18:54 2026 GMT Not After : Nov 1 09:18:54 2026 GMT Subject: CN=6addc97f-7ae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:89:dd:65:d3:12:d9:56:f4:97:32:ae:84:da: b5:27:30:25:a6:5a:79:6b:11:47:37:c1:09:9b:1e: c0:4d:6e:44:ec:7d:42:5c:22:40:4b:17:95:ab:56: 1d:70:6b:23:48:2b:d6:30:06:80:66:11:53:ef:73: 6c:13:e4:8e:25:3e:83:e6:4a:7e:79:df:a3:66:99: 57:55:4f:12:3b:69:ad:2c:0f:35:4f:5e:8d:78:a2: 07:ea:0e:6a:3c:bb:d2:b2:7d:32:2b:58:15:47:28: 48:fd:b8:f6:b6:2d:83:55:9d:9e:84:1c:30:88:69: ef:71:b2:ba:6f:11:5e:96:85:98:75:f3:cb:a9:54: 01:f8:ec:73:ee:b3:e5:1c:de:56:c5:f3:c3:e5:03: 0a:93:f3:f6:66:a3:70:28:f4:53:b4:6d:d9:c4:4a: 46:3d:90:be:8b:e7:27:21:5e:af:57:28:ec:c0:f6: b1:f6:db:1f:a0:41:06:7f:7f:fa:e6:b5:c0:fb:20: ee:54:3a:38:74:3f:1b:d9:7c:cb:8d:3a:5a:f3:ef: 1a:79:ac:41:c5:d9:4d:1c:db:f7:ff:54:0f:36:ab: fa:53:c4:f6:02:f4:cb:ef:6e:f4:ce:8a:97:f9:63: e0:7b:b3:2d:59:3d:ae:ee:d1:3b:e3:d6:d0:95:7b: 96:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:FD:08:59:86:0A:08:68:89:92:CE:07:3F:50:A3:F0:59:83:63:F4 X509v3 Authority Key Identifier: keyid:76:9E:41:7E:9C:18:B5:56:C0:54:AD:9C:00:DB:03:9D:EF:8B:82:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7B93/E6B912C4A5D111F1A2E8764E3411F970/dp5BfpwYtVbAVK2cANsDne-LgmQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dp5BfpwYtVbAVK2cANsDne-LgmQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7B93/E6B912C4A5D111F1A2E8764E3411F970/dp5BfpwYtVbAVK2cANsDne-LgmQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:94:8c:c6:f3:aa:83:3a:6d:5e:4a:9a:9f:35:a9:59:54:2a: 1c:1a:84:9c:b8:93:41:39:b8:bb:0e:cd:d2:04:7e:4e:4f:c4: 05:9a:ec:fc:0e:73:40:df:f4:1a:fa:d2:ac:a2:a0:ed:da:c7: 11:91:35:85:25:64:97:87:08:8e:ba:e0:4e:d0:3f:a7:59:19: 58:e7:cb:d7:9d:13:d7:9f:27:eb:59:aa:9d:c6:14:7a:6a:c9: d9:62:96:3f:df:77:5f:c3:04:7d:56:d1:7f:75:b3:65:00:b8: 54:b2:fb:9a:66:62:c4:85:34:2a:26:3d:2a:38:be:ce:12:70: 56:df:e0:f7:a9:8c:2f:26:2f:94:f1:54:e2:1e:d8:69:69:1a: 64:6a:f2:1e:fd:47:c5:35:1f:45:50:11:79:c3:cf:2b:2e:f0: c4:4f:f1:bd:6b:ee:1a:2f:d3:31:e0:a8:01:a7:77:16:c8:a9: c9:ae:bb:d7:94:d3:bb:c0:d8:2a:60:c0:64:7d:71:00:6a:1c: c1:ad:1e:41:77:50:eb:73:8e:d6:7e:e4:a7:1f:56:17:2e:c6: 9a:57:6c:a2:41:82:44:8c:97:fe:b3:c3:0b:ba:5b:e9:f4:40: d1:a3:cd:fc:70:8b:44:c4:fa:61:31:75:1d:1f:0c:a9:9a:f4: bd:93:aa:0d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE N0I5MzExMC8GA1UEBRMoNzY5RTQxN0U5QzE4QjU1NkMwNTRBRDlDMDBEQjAzOURF RjhCODI2NDAeFw0yNjEwMjUwOTE4NTRaFw0yNjExMDEwOTE4NTRaMBgxFjAUBgNV BAMTDTZhZGRjOTdmLTdhZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD5id1l0xLZVvSXMq6E2rUnMCWmWnlrEUc3wQmbHsBNbkTsfUJcIkBLF5WrVh1w ayNIK9YwBoBmEVPvc2wT5I4lPoPmSn5536NmmVdVTxI7aa0sDzVPXo14ogfqDmo8 u9KyfTIrWBVHKEj9uPa2LYNVnZ6EHDCIae9xsrpvEV6WhZh188upVAH47HPus+Uc 3lbF88PlAwqT8/Zmo3Ao9FO0bdnESkY9kL6L5ychXq9XKOzA9rH22x+gQQZ/f/rm tcD7IO5UOjh0PxvZfMuNOlrz7xp5rEHF2U0c2/f/VA82q/pTxPYC9MvvbvTOipf5 Y+B7sy1ZPa7u0Tvj1tCVe5YtAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUev0IWYYK CGiJks4HP1Cj8FmDY/QwHwYDVR0jBBgwFoAUdp5BfpwYtVbAVK2cANsDne+LgmQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ3QjkzL0U2QjkxMkM0QTVE MTExRjFBMkU4NzY0RTM0MTFGOTcwL2RwNUJmcHdZdFZiQVZLMmNBTnNEbmUtTGdt US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZHA1QmZwd1l0VmJBVksyY0FOc0RuZS1MZ21RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ3 QjkzL0U2QjkxMkM0QTVEMTExRjFBMkU4NzY0RTM0MTFGOTcwL2RwNUJmcHdZdFZi QVZLMmNBTnNEbmUtTGdtUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCjlIzG86qDOm1eSpqfNalZVCocGoScuJNBObi7Ds3SBH5OT8QFmuz8DnNA3/Qa +tKsoqDt2scRkTWFJWSXhwiOuuBO0D+nWRlY58vXnRPXnyfrWaqdxhR6asnZYpY/ 33dfwwR9VtF/dbNlALhUsvuaZmLEhTQqJj0qOL7OEnBW3+D3qYwvJi+U8VTiHthp aRpkavIe/UfFNR9FUBF5w88rLvDET/G9a+4aL9Mx4KgBp3cWyKnJrrvXlNO7wNgq YMBkfXEAahzBrR5Bd1Drc47WfuSnH1YXLsaaV2yiQYJEjJf+s8MLulvp9EDRo838 cItExPphMXUdHwypmvS9k6oN -----END CERTIFICATE-----Generated at Tue Oct 27 06:00:29 2026 by rpki-client