$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.mft File: kdo6F2N80pLOpGcN0Tpy2G6qLZE.mft (raw, json) Hash identifier: SfOWzKxgyillm4jbbnNBGod/Zv6s6Xf6Eo81NBrk+VE= Subject key identifier: FA:F4:46:0A:D6:79:41:98:99:39:7C:29:9E:E5:49:AF:A9:69:D5:28 Authority key identifier: 91:DA:3A:17:63:7C:D2:92:CE:A4:67:0D:D1:3A:72:D8:6E:AA:2D:91 Certificate issuer: /CN=A91D8157/serialNumber=91DA3A17637CD292CEA4670DD13A72D86EAA2D91 Certificate serial: 9D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kdo6F2N80pLOpGcN0Tpy2G6qLZE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.mft Manifest number: 8F Signing time: Wed 21 Oct 2026 08:20:53 +0000 Manifest this update: Wed 21 Oct 2026 08:20:52 +0000 Manifest next update: Wed 28 Oct 2026 08:20:52 +0000 Files and hashes: 1: kdo6F2N80pLOpGcN0Tpy2G6qLZE.crl (hash: VSIlDAIEgnAN8+q3yRQCWJkmvsjrkAdvdjYWyKgIfe0=) 2: 174298368DB111F18EE5B03B4611F970.roa (hash: ncEej6Lc0TJTyx32wKUoM2ogTcTqlHpXgc40wTgsiPs=) 3: D386B66251D411F185203A1790833773.roa (hash: x9YNhs52Js+F/nkP6R0eX91Umj1eirlfbF7q2WvjGA8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.crl rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kdo6F2N80pLOpGcN0Tpy2G6qLZE.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 04:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 157 (0x9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8157, serialNumber=91DA3A17637CD292CEA4670DD13A72D86EAA2D91 Validity Not Before: Oct 21 08:20:52 2026 GMT Not After : Oct 28 08:20:52 2026 GMT Subject: CN=6ad875e5-499c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0a:5a:54:aa:d6:47:11:ae:e1:b5:94:4c:54: b6:14:dd:63:02:7c:6d:97:22:86:de:d1:f4:00:09: dd:fd:d4:74:91:67:a1:9b:85:81:7c:d0:14:60:8a: 64:90:f9:a9:cb:29:ad:8b:09:0f:60:19:70:d1:82: 17:89:f6:1f:b0:81:cc:f0:5c:9b:21:4a:0f:c2:26: 0d:90:5e:65:fb:c6:c4:c5:57:99:08:c9:c8:62:ac: 7b:d1:bd:98:6c:4c:88:33:3e:dc:99:e2:fb:5a:5b: 98:1a:f2:2f:0c:18:0f:26:c7:8b:23:19:71:d6:08: d8:ff:11:b7:35:7c:fe:6c:48:53:c4:d5:a5:cd:0a: be:68:43:a3:bd:6f:e1:c4:f8:ae:21:26:99:b5:60: 3e:94:52:f8:9f:17:40:f8:93:4f:e4:79:d5:8f:14: 89:f0:4d:78:b9:15:d0:a6:43:a4:62:2d:3d:cc:f5: 26:1c:7e:64:97:a4:7a:12:0e:ce:a7:67:dd:b7:66: aa:35:3f:88:00:6b:36:34:35:f5:47:c0:9a:33:a0: b4:9d:2c:6d:6d:83:5a:88:b1:f8:15:2f:36:4b:89: 93:42:63:34:54:ac:a9:a3:aa:16:a9:44:b6:b3:5d: 92:3e:a5:5a:7e:9a:d3:42:81:79:1d:6a:d6:9e:84: 3c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:F4:46:0A:D6:79:41:98:99:39:7C:29:9E:E5:49:AF:A9:69:D5:28 X509v3 Authority Key Identifier: keyid:91:DA:3A:17:63:7C:D2:92:CE:A4:67:0D:D1:3A:72:D8:6E:AA:2D:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kdo6F2N80pLOpGcN0Tpy2G6qLZE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:1e:27:c6:30:d4:fc:0c:07:01:62:44:07:01:1d:7f:5c:ba: f1:35:80:87:03:c6:ba:d5:18:3d:fd:02:bf:6e:e7:ed:97:33: 43:ae:b0:09:c7:5d:5c:74:4e:b4:8a:5f:20:3a:92:e7:7a:71: ed:30:08:2c:bb:d8:1d:e1:78:a8:ce:1e:27:85:4a:65:03:2a: 55:7b:9f:4c:8f:6f:ad:b6:b3:42:c3:cd:f6:ac:90:0b:91:36: 65:32:d7:b5:d7:d9:a5:c8:96:47:ad:14:04:60:b5:9f:79:a9: ec:fe:1f:06:42:d0:b2:cb:72:58:8d:4f:72:5c:33:ea:13:a5: 8e:49:ee:f0:27:f8:01:5a:a8:7a:5f:3b:a2:5d:fb:71:af:d5: f1:17:fa:57:d2:65:56:d3:78:d6:5e:e9:65:a3:90:e3:ea:ac: e9:ab:5b:46:b8:ec:65:7e:5f:eb:dd:05:7c:4f:d2:c3:6e:cf: 6c:6e:f6:88:cd:e3:ed:27:11:51:db:03:b2:2c:c5:d8:de:c0: 8a:43:5d:c5:ab:33:9a:4f:5e:7b:81:11:a0:f5:56:4d:73:14: 4e:8c:22:8a:4f:24:16:7a:1d:4a:da:48:84:7e:9b:41:4b:5a: 1c:eb:4e:a5:74:e5:c2:79:8d:37:ce:03:26:09:2e:1e:6b:c1: 8d:a9:94:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgxNTcxMTAvBgNVBAUTKDkxREEzQTE3NjM3Q0QyOTJDRUE0NjcwREQxM0E3MkQ4 NkVBQTJEOTEwHhcNMjYxMDIxMDgyMDUyWhcNMjYxMDI4MDgyMDUyWjAYMRYwFAYD VQQDEw02YWQ4NzVlNS00OTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqgpaVKrWRxGu4bWUTFS2FN1jAnxtlyKG3tH0AAnd/dR0kWehm4WBfNAUYIpk kPmpyymtiwkPYBlw0YIXifYfsIHM8FybIUoPwiYNkF5l+8bExVeZCMnIYqx70b2Y bEyIMz7cmeL7WluYGvIvDBgPJseLIxlx1gjY/xG3NXz+bEhTxNWlzQq+aEOjvW/h xPiuISaZtWA+lFL4nxdA+JNP5HnVjxSJ8E14uRXQpkOkYi09zPUmHH5kl6R6Eg7O p2fdt2aqNT+IAGs2NDX1R8CaM6C0nSxtbYNaiLH4FS82S4mTQmM0VKypo6oWqUS2 s12SPqVafprTQoF5HWrWnoQ8LQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPr0RgrW eUGYmTl8KZ7lSa+padUoMB8GA1UdIwQYMBaAFJHaOhdjfNKSzqRnDdE6cthuqi2R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODE1Ny8yNTA4MzhBRTEx NDIxMUYxOUQzNzYyOEYyMTNEOEM2Ny9rZG82RjJOODBwTE9wR2NOMFRweTJHNnFM WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2tkbzZGMk44MHBMT3BHY04wVHB5Mkc2cUxaRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODE1Ny8yNTA4MzhBRTExNDIxMUYxOUQzNzYyOEYyMTNEOEM2Ny9rZG82RjJOODBw TE9wR2NOMFRweTJHNnFMWkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhR4nxjDU/AwHAWJEBwEdf1y68TWAhwPGutUYPf0Cv27n7ZczQ66wCcddXHRO tIpfIDqS53px7TAILLvYHeF4qM4eJ4VKZQMqVXufTI9vrbazQsPN9qyQC5E2ZTLX tdfZpciWR60UBGC1n3mp7P4fBkLQsstyWI1Pclwz6hOljknu8Cf4AVqoel87ol37 ca/V8Rf6V9JlVtN41l7pZaOQ4+qs6atbRrjsZX5f690FfE/Sw27PbG72iM3j7ScR UdsDsizF2N7AikNdxaszmk9ee4ERoPVWTXMUTowiik8kFnodStpIhH6bQUtaHOtO pXTlwnmNN84DJgkuHmvBjamUfA== -----END CERTIFICATE-----Generated at Thu Oct 22 05:08:25 2026 by rpki-client