$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.mft File: mOmVvDpP8s0IxuNVS2Y3S2aXknA.mft (raw, json) Hash identifier: N60fGbbrkb8G7LRxNjCz1wRZlhkTrjo5EzHJGbGhaLM= Subject key identifier: 16:27:C5:2F:D1:1B:F6:38:F2:79:C9:43:8D:89:D8:91:75:D4:03:9D Authority key identifier: 98:E9:95:BC:3A:4F:F2:CD:08:C6:E3:55:4B:66:37:4B:66:97:92:70 Certificate issuer: /CN=A91DA5F7/serialNumber=98E995BC3A4FF2CD08C6E3554B66374B66979270 Certificate serial: 9B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mOmVvDpP8s0IxuNVS2Y3S2aXknA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.mft Manifest number: 95 Signing time: Wed 21 Oct 2026 08:04:30 +0000 Manifest this update: Wed 21 Oct 2026 08:04:30 +0000 Manifest next update: Wed 28 Oct 2026 08:04:30 +0000 Files and hashes: 1: mOmVvDpP8s0IxuNVS2Y3S2aXknA.crl (hash: L1uSE6+vgKaWe8ET77SAjeb89R6z/Mig7emhqn6lROk=) 2: 50AC9032C9E711F1A80DA5333C11F970.roa (hash: nGQ9BkXkDE16rHKidH2ESbQX6DqBjmUB5cX6HUL/W8I=) 3: 30D2517AF1F211F0B442E9B1456F56BC.roa (hash: UAtyjnkkGVt2+haohA8ppdzMqX4q+YbKNZp+6njQiaY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.crl rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mOmVvDpP8s0IxuNVS2Y3S2aXknA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 08:04:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA5F7, serialNumber=98E995BC3A4FF2CD08C6E3554B66374B66979270 Validity Not Before: Oct 21 08:04:30 2026 GMT Not After : Oct 28 08:04:30 2026 GMT Subject: CN=6ad8720e-51fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:90:4f:02:91:4c:0c:67:55:a2:0f:12:44:6c: 1f:f7:c9:6d:cc:f1:b0:54:96:74:cd:cd:09:9e:55: fd:11:6d:ba:a5:9f:1f:ed:da:47:c1:a2:dc:01:a9: 2d:5d:92:01:7d:c2:da:98:20:fa:cf:6c:2e:bd:c1: cd:40:23:33:c0:78:ed:68:38:a8:c7:f3:10:2d:47: bd:c0:34:c3:d2:c0:32:b7:cb:29:64:5c:3c:b0:8a: 6e:e8:9e:66:fe:e6:5b:77:1f:fd:0e:e2:02:0d:55: 83:c1:7c:2e:36:a4:44:bb:4d:a2:65:fe:a9:89:ee: 65:5c:16:7a:37:bc:ce:50:10:6c:f2:88:1c:27:df: 3e:04:04:fa:ac:83:9b:ec:83:d5:84:c1:48:b3:ab: 0d:a4:5a:d4:46:09:3a:03:17:4a:75:ea:ad:d3:cd: 57:ea:34:27:1c:a4:62:5c:6a:1d:1e:33:a9:61:ca: 93:dc:e2:0c:d9:9d:aa:79:71:e2:19:57:9f:63:ba: 2f:c2:cf:4f:f9:45:96:ec:e0:b0:a1:7a:8f:44:f6: 47:02:8e:c5:a4:61:1c:d0:ac:eb:9f:32:85:61:a6: 9a:05:f3:8d:d9:76:4a:d0:7d:e1:e4:58:d3:59:b6: 4a:4c:73:2f:6c:30:c7:88:37:5a:23:b9:a5:16:ff: f7:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:27:C5:2F:D1:1B:F6:38:F2:79:C9:43:8D:89:D8:91:75:D4:03:9D X509v3 Authority Key Identifier: keyid:98:E9:95:BC:3A:4F:F2:CD:08:C6:E3:55:4B:66:37:4B:66:97:92:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mOmVvDpP8s0IxuNVS2Y3S2aXknA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:b7:30:5d:e7:61:bd:29:2c:22:2c:db:13:d8:98:f9:17:88: 6d:4c:28:ea:15:01:23:97:fc:53:76:69:91:29:a6:a6:1e:73: 8d:e9:b1:c5:5d:f6:c8:c5:6b:69:d5:1b:f3:68:fb:eb:c4:12: 12:ee:9a:e9:38:fa:fa:d3:d2:86:c0:fc:85:df:69:66:eb:1f: 25:d5:b4:8c:f6:eb:ca:f9:3e:6b:2e:8f:ee:57:fb:5b:20:eb: 3e:9a:9f:bf:32:8d:16:16:8a:b6:8a:60:a0:9f:85:89:c1:a6: 4d:07:72:8d:9a:81:2d:c6:7d:84:7c:14:dd:ad:fb:29:5d:07: fb:43:f0:07:83:4d:2b:1d:59:df:c9:44:9e:4c:2d:c9:f3:27: 2a:27:d7:67:32:0f:b9:d3:a1:cb:65:5f:f0:08:aa:c7:a3:4c: 54:94:a7:57:b3:70:db:c6:75:b4:72:7b:5a:04:88:55:44:3c: af:1d:48:b1:60:ee:2b:6e:9c:c3:69:39:21:f3:5f:a1:95:86: 6e:2a:bd:9b:f4:30:75:5d:71:9f:bd:5d:68:b3:dd:8c:5f:eb: 6a:87:79:49:02:2b:52:51:17:33:b8:ef:a2:ee:92:f6:73:c7: 6c:7f:0b:d3:16:8f:81:09:68:02:fe:d3:c5:1c:85:8c:52:ce: ee:62:40:88 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REE1RjcxMTAvBgNVBAUTKDk4RTk5NUJDM0E0RkYyQ0QwOEM2RTM1NTRCNjYzNzRC NjY5NzkyNzAwHhcNMjYxMDIxMDgwNDMwWhcNMjYxMDI4MDgwNDMwWjAYMRYwFAYD VQQDEw02YWQ4NzIwZS01MWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAspBPApFMDGdVog8SRGwf98ltzPGwVJZ0zc0JnlX9EW26pZ8f7dpHwaLcAakt XZIBfcLamCD6z2wuvcHNQCMzwHjtaDiox/MQLUe9wDTD0sAyt8spZFw8sIpu6J5m /uZbdx/9DuICDVWDwXwuNqREu02iZf6pie5lXBZ6N7zOUBBs8ogcJ98+BAT6rIOb 7IPVhMFIs6sNpFrURgk6AxdKdeqt081X6jQnHKRiXGodHjOpYcqT3OIM2Z2qeXHi GVefY7ovws9P+UWW7OCwoXqPRPZHAo7FpGEc0KzrnzKFYaaaBfON2XZK0H3h5FjT WbZKTHMvbDDHiDdaI7mlFv/3DwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBYnxS/R G/Y48nnJQ42J2JF11AOdMB8GA1UdIwQYMBaAFJjplbw6T/LNCMbjVUtmN0tml5Jw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTVGNy9GMERDQ0RENEYx RjExMUYwQUIyMUY5M0I0NTZGNTZCQy9tT21WdkRwUDhzMEl4dU5WUzJZM1MyYVhr bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL21PbVZ2RHBQOHMwSXh1TlZTMlkzUzJhWGtuQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTVGNy9GMERDQ0RENEYxRjExMUYwQUIyMUY5M0I0NTZGNTZCQy9tT21WdkRwUDhz MEl4dU5WUzJZM1MyYVhrbkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVbcwXedhvSksIizbE9iY+ReIbUwo6hUBI5f8U3ZpkSmmph5zjemxxV32yMVr adUb82j768QSEu6a6Tj6+tPShsD8hd9pZusfJdW0jPbryvk+ay6P7lf7WyDrPpqf vzKNFhaKtopgoJ+FicGmTQdyjZqBLcZ9hHwU3a37KV0H+0PwB4NNKx1Z38lEnkwt yfMnKifXZzIPudOhy2Vf8Aiqx6NMVJSnV7Nw28Z1tHJ7WgSIVUQ8rx1IsWDuK26c w2k5IfNfoZWGbiq9m/QwdV1xn71daLPdjF/raod5SQIrUlEXM7jvou6S9nPHbH8L 0xaPgQloAv7TxRyFjFLO7mJAiA== -----END CERTIFICATE-----Generated at Fri Oct 23 09:55:22 2026 by rpki-client