$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.mft File: _edM0WVtTsrysOa7wxNdTrhAeCs.mft (raw, json) Hash identifier: +Yl/LhcRS39UIAN5ZBv8MZaLNK9hyU2psGs0sHYN1/Y= Subject key identifier: 0F:72:85:C5:64:A7:E4:CF:79:25:4C:BA:B6:BD:25:08:61:AB:B2:89 Authority key identifier: FD:E7:4C:D1:65:6D:4E:CA:F2:B0:E6:BB:C3:13:5D:4E:B8:40:78:2B Certificate issuer: /CN=A91DA898/serialNumber=FDE74CD1656D4ECAF2B0E6BBC3135D4EB840782B Certificate serial: 0151 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_edM0WVtTsrysOa7wxNdTrhAeCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.mft Manifest number: 014E Signing time: Tue 20 Oct 2026 14:36:28 +0000 Manifest this update: Tue 20 Oct 2026 14:36:27 +0000 Manifest next update: Tue 27 Oct 2026 14:36:27 +0000 Files and hashes: 1: _edM0WVtTsrysOa7wxNdTrhAeCs.crl (hash: bE6wMcSUUoqLtUAkfyyn3Va8sJ43EOkKjYf+NStxcM8=) 2: 22B4D1705AF911F09FF3D30BC4F9AE02.roa (hash: I8tb2z2Hm/oVZ+/EtUi2cTvMADHbbnwoMnZaKJ+3/z0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.crl rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_edM0WVtTsrysOa7wxNdTrhAeCs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 14:36:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 337 (0x151) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA898, serialNumber=FDE74CD1656D4ECAF2B0E6BBC3135D4EB840782B Validity Not Before: Oct 20 14:36:27 2026 GMT Not After : Oct 27 14:36:27 2026 GMT Subject: CN=6ad77c6b-707c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ba:1a:47:a0:59:2c:1a:6d:1d:8a:20:12:32: da:f3:47:c9:b5:a2:71:74:3e:a4:03:44:f2:bb:3d: dc:be:58:4d:9b:a9:f0:c6:db:3f:89:96:ee:2c:fe: f4:77:fd:ff:bb:cf:74:18:e0:0c:d9:7d:12:5a:9d: 8d:ac:7c:52:d2:0c:e5:98:ea:12:49:ac:b2:02:64: ac:e4:57:ed:dd:79:0c:e7:26:0f:28:25:54:c0:e5: c3:6b:f5:c4:20:fe:50:51:31:69:45:f8:2b:ab:e0: 87:28:57:99:62:ba:e4:07:66:eb:11:9c:c3:31:6c: e2:f6:40:85:4b:a8:ca:9a:b8:9f:1f:bd:dd:33:3d: c0:a9:cc:53:2e:61:29:31:45:95:87:28:6d:27:f8: 8a:da:6d:c5:54:ec:0d:37:8b:8b:f4:59:b4:1b:1d: 0f:5a:cb:fd:42:40:1f:46:d2:e4:0e:28:82:78:dc: 3c:d3:48:4b:cd:5d:00:0f:8c:ba:0c:d8:d9:4c:98: 22:26:86:1d:3c:8e:a1:e3:e3:fa:b3:58:87:46:f3: d0:fd:7b:72:1d:af:36:81:9f:c5:11:1c:cd:ea:80: 03:38:0e:34:13:ff:5d:e2:f8:d3:7f:cb:f6:06:e6: 38:bb:9a:d8:8d:a8:87:e7:fa:df:2c:42:32:16:22: 24:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:72:85:C5:64:A7:E4:CF:79:25:4C:BA:B6:BD:25:08:61:AB:B2:89 X509v3 Authority Key Identifier: keyid:FD:E7:4C:D1:65:6D:4E:CA:F2:B0:E6:BB:C3:13:5D:4E:B8:40:78:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_edM0WVtTsrysOa7wxNdTrhAeCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:2e:db:9f:47:74:78:33:af:77:a3:cc:c8:fe:26:a7:cc:16: d6:b5:44:47:a9:d0:74:b7:0b:65:ad:19:6b:99:50:42:d9:79: 8a:12:04:0e:4f:27:56:a2:e9:88:5d:00:ad:51:73:0c:0e:a9: 9e:01:9a:c5:63:0a:40:32:4a:f9:89:71:ae:4b:cf:54:ef:b5: 6e:0d:a8:52:33:2c:ca:5f:6e:52:e2:b6:98:66:39:cf:b4:17: 4e:5a:20:58:d0:95:e5:f0:50:01:4a:b4:f7:65:51:4b:06:05: e4:d7:d7:f4:d0:d9:32:a2:cb:3a:9b:eb:7f:45:0e:16:0b:e2: 86:3c:04:61:b1:d7:c2:4b:7e:58:e6:88:b5:d7:87:58:e8:6f: b9:f0:67:f5:e3:5f:b9:dc:59:a5:45:bf:bd:6f:fe:a3:68:2f: 57:92:96:64:4b:22:6d:3d:a5:6c:57:31:3a:e6:f5:d1:0a:4f: 2c:fc:ae:d5:e3:7c:3d:ba:55:e8:22:2c:43:74:ed:57:33:76: 13:6a:15:b1:ea:f0:69:6f:39:97:57:08:6b:f8:ad:e7:7d:5e: 33:5f:a3:7b:2f:28:6d:97:8a:fa:87:8d:e8:f2:5a:2d:bd:28: 7c:8b:ac:ce:af:0f:a1:53:1e:58:74:98:36:a6:42:cd:aa:23: 02:e5:38:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REE4OTgxMTAvBgNVBAUTKEZERTc0Q0QxNjU2RDRFQ0FGMkIwRTZCQkMzMTM1RDRF Qjg0MDc4MkIwHhcNMjYxMDIwMTQzNjI3WhcNMjYxMDI3MTQzNjI3WjAYMRYwFAYD VQQDEw02YWQ3N2M2Yi03MDdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoroaR6BZLBptHYogEjLa80fJtaJxdD6kA0Tyuz3cvlhNm6nwxts/iZbuLP70 d/3/u890GOAM2X0SWp2NrHxS0gzlmOoSSayyAmSs5Fft3XkM5yYPKCVUwOXDa/XE IP5QUTFpRfgrq+CHKFeZYrrkB2brEZzDMWzi9kCFS6jKmrifH73dMz3AqcxTLmEp MUWVhyhtJ/iK2m3FVOwNN4uL9Fm0Gx0PWsv9QkAfRtLkDiiCeNw800hLzV0AD4y6 DNjZTJgiJoYdPI6h4+P6s1iHRvPQ/XtyHa82gZ/FERzN6oADOA40E/9d4vjTf8v2 BuY4u5rYjaiH5/rfLEIyFiIkjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA9yhcVk p+TPeSVMura9JQhhq7KJMB8GA1UdIwQYMBaAFP3nTNFlbU7K8rDmu8MTXU64QHgr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTg5OC80MDdBMjVFQUQ4 N0YxMUVGOTFDQzUzNDZDNEY5QUUwMi9fZWRNMFdWdFRzcnlzT2E3d3hOZFRyaEFl Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19lZE0wV1Z0VHNyeXNPYTd3eE5kVHJoQWVDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTg5OC80MDdBMjVFQUQ4N0YxMUVGOTFDQzUzNDZDNEY5QUUwMi9fZWRNMFdWdFRz cnlzT2E3d3hOZFRyaEFlQ3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAi7bn0d0eDOvd6PMyP4mp8wW1rVER6nQdLcLZa0Za5lQQtl5ihIEDk8nVqLp iF0ArVFzDA6pngGaxWMKQDJK+YlxrkvPVO+1bg2oUjMsyl9uUuK2mGY5z7QXTlog WNCV5fBQAUq092VRSwYF5NfX9NDZMqLLOpvrf0UOFgvihjwEYbHXwkt+WOaItdeH WOhvufBn9eNfudxZpUW/vW/+o2gvV5KWZEsibT2lbFcxOub10QpPLPyu1eN8PbpV 6CIsQ3TtVzN2E2oVserwaW85l1cIa/it531eM1+jey8obZeK+oeN6PJaLb0ofIus zq8PoVMeWHSYNqZCzaojAuU4oQ== -----END CERTIFICATE-----Generated at Tue Oct 20 20:45:00 2026 by rpki-client