$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft File: 7Y9dbJv8FI96u3CMUpHThHgcYf0.mft (raw, json) Hash identifier: WzwwSM3QktvtbSc27+1fDhqtsFRqzD6NN4APjdNdg7c= Subject key identifier: E9:22:9D:00:6A:8F:95:18:D0:1E:91:95:4F:7C:68:5D:E9:C0:7B:DD Authority key identifier: ED:8F:5D:6C:9B:FC:14:8F:7A:BB:70:8C:52:91:D3:84:78:1C:61:FD Certificate issuer: /CN=A91DA0AA/serialNumber=ED8F5D6C9BFC148F7ABB708C5291D384781C61FD Certificate serial: 02AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft Manifest number: 0296 Signing time: Sun 25 Oct 2026 02:14:27 +0000 Manifest this update: Sun 25 Oct 2026 02:14:26 +0000 Manifest next update: Sun 01 Nov 2026 02:14:26 +0000 Files and hashes: 1: 7Y9dbJv8FI96u3CMUpHThHgcYf0.crl (hash: CNYWktE41g4oSZXUYUiCKc+qY4/29THlPbKy10d/smU=) 2: E7B6C4DA685E11EFB77BDE0CC4F9AE02.roa (hash: V6SrxQGUuxMhaHjz0uz3/Z2ziHbiF2Bwsg8Gikl9lKg=) 3: bWGJXuuqJMcQM-lFvXq-3Lg6wr8.asa (hash: RfLYtZj4X5BF1ZyAY4I1p9QAM2RVSMuSfbxQ5HpibCY=) 4: C5AFD098167311F0916F5435C4F9AE02.roa (hash: oXr+vmkmATSoU0utBEAVuOzrUcdZ9gNuCzhDxhz21iY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.crl rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 02:14:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 685 (0x2ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA0AA, serialNumber=ED8F5D6C9BFC148F7ABB708C5291D384781C61FD Validity Not Before: Oct 25 02:14:26 2026 GMT Not After : Nov 1 02:14:26 2026 GMT Subject: CN=6add6603-6922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b0:8e:bf:08:e9:04:68:e6:e6:36:b2:56:7b: 9e:b5:6d:2d:81:6c:d8:78:aa:26:0d:9b:06:12:ed: b5:e6:b4:fc:0a:99:c7:c6:31:ba:b5:3b:87:08:3b: 18:4c:62:28:de:ef:00:9b:18:9e:db:b9:54:5c:b5: 35:08:b1:7d:1c:e6:91:18:2d:21:6d:a6:08:dc:73: 49:0f:3e:aa:ca:30:07:07:6f:88:d0:7a:ee:00:ce: b4:48:b3:97:e9:0f:1f:95:64:f9:b2:c3:51:e0:fe: 6a:11:a5:fb:1e:d4:85:c4:95:2e:7c:9c:a2:9b:90: 34:8e:39:cd:14:d5:82:f9:0f:22:57:8d:57:df:b6: 62:cb:d9:9d:a7:61:68:f1:60:e3:a1:97:06:95:11: aa:1e:d4:01:cd:13:fb:8a:aa:eb:91:5f:88:f6:45: 01:0a:93:4d:85:77:ad:30:97:81:d8:47:b2:5d:03: 22:d0:ca:03:1c:46:c6:e1:94:71:99:00:28:f5:39: 18:79:e0:82:b8:29:b4:e7:2a:4e:01:62:cd:44:6a: 84:08:ac:0b:89:ce:3d:4e:d4:47:3b:e8:4a:e8:ce: 58:ee:cb:b9:6d:87:0c:67:60:43:63:22:ab:30:ed: 7b:2f:f2:9a:1c:bc:9f:1a:97:d7:2d:b5:c9:d4:62: be:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:22:9D:00:6A:8F:95:18:D0:1E:91:95:4F:7C:68:5D:E9:C0:7B:DD X509v3 Authority Key Identifier: keyid:ED:8F:5D:6C:9B:FC:14:8F:7A:BB:70:8C:52:91:D3:84:78:1C:61:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:e1:54:35:57:87:8b:ee:2c:5d:17:83:d7:ff:ad:19:07:13: 14:6d:6b:a3:75:c1:df:61:44:80:94:05:ba:48:7e:77:3c:ff: 23:a5:c4:d6:0b:7e:85:db:01:7d:ad:05:14:05:c5:ec:e3:db: 02:23:bb:03:4a:b7:be:b3:b8:e1:67:4f:f1:96:99:1f:d3:fe: b0:a7:69:08:a0:5f:7c:32:fb:a2:d6:f1:d5:af:0a:d5:0a:5f: 43:b2:8c:ae:1c:cf:f1:bf:3f:42:2d:ab:38:f5:66:25:60:ed: f4:9e:24:79:af:23:30:20:89:ab:44:88:20:ee:da:6c:39:a6: 8f:c7:5d:59:1f:f0:53:9d:32:76:b0:66:da:cf:5a:ad:c7:21: 33:42:99:76:93:d9:6f:f5:57:02:20:bc:dc:ce:26:73:71:83: aa:fa:b4:ac:02:2d:00:3b:4a:06:8e:7f:8e:13:34:42:41:b2: 07:2e:47:c9:d5:54:ba:9a:b4:7e:de:23:42:e4:d4:a9:12:2e: 71:66:51:32:e6:a0:4a:d7:f9:14:aa:2b:0b:58:39:a9:99:82: 33:af:d9:87:4a:ef:6e:9f:a9:ec:af:8d:a2:27:0e:e7:89:06: 51:d6:d5:a3:9b:8e:38:a5:35:00:db:dc:6a:c0:65:9a:e0:ab: ca:fb:09:4f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REEwQUExMTAvBgNVBAUTKEVEOEY1RDZDOUJGQzE0OEY3QUJCNzA4QzUyOTFEMzg0 NzgxQzYxRkQwHhcNMjYxMDI1MDIxNDI2WhcNMjYxMTAxMDIxNDI2WjAYMRYwFAYD VQQDEw02YWRkNjYwMy02OTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq7COvwjpBGjm5jayVnuetW0tgWzYeKomDZsGEu215rT8CpnHxjG6tTuHCDsY TGIo3u8Amxie27lUXLU1CLF9HOaRGC0hbaYI3HNJDz6qyjAHB2+I0HruAM60SLOX 6Q8flWT5ssNR4P5qEaX7HtSFxJUufJyim5A0jjnNFNWC+Q8iV41X37Ziy9mdp2Fo 8WDjoZcGlRGqHtQBzRP7iqrrkV+I9kUBCpNNhXetMJeB2EeyXQMi0MoDHEbG4ZRx mQAo9TkYeeCCuCm05ypOAWLNRGqECKwLic49TtRHO+hK6M5Y7su5bYcMZ2BDYyKr MO17L/KaHLyfGpfXLbXJ1GK+AwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOkinQBq j5UY0B6RlU98aF3pwHvdMB8GA1UdIwQYMBaAFO2PXWyb/BSPertwjFKR04R4HGH9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTBBQS84MkJCQjU1MjAw M0QxMUVFOTYwOEYxNDdDNEY5QUUwMi83WTlkYkp2OEZJOTZ1M0NNVXBIVGhIZ2NZ ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdZOWRiSnY4Rkk5NnUzQ01VcEhUaEhnY1lmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTBBQS84MkJCQjU1MjAwM0QxMUVFOTYwOEYxNDdDNEY5QUUwMi83WTlkYkp2OEZJ OTZ1M0NNVXBIVGhIZ2NZZjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoOFUNVeHi+4sXReD1/+tGQcTFG1ro3XB32FEgJQFukh+dzz/I6XE1gt+hdsB fa0FFAXF7OPbAiO7A0q3vrO44WdP8ZaZH9P+sKdpCKBffDL7otbx1a8K1QpfQ7KM rhzP8b8/Qi2rOPVmJWDt9J4kea8jMCCJq0SIIO7abDmmj8ddWR/wU50ydrBm2s9a rcchM0KZdpPZb/VXAiC83M4mc3GDqvq0rAItADtKBo5/jhM0QkGyBy5HydVUupq0 ft4jQuTUqRIucWZRMuagStf5FKorC1g5qZmCM6/Zh0rvbp+p7K+NoicO54kGUdbV o5uOOKU1ANvcasBlmuCryvsJTw== -----END CERTIFICATE-----Generated at Sun Oct 25 20:12:24 2026 by rpki-client