$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.mft File: 74x3yBft3T_cxmtjUtbqeNcsWsY.mft (raw, json) Hash identifier: Ts7bDhdKhV2qO3dcheqc3RiwPF1mos7F2gdzc2PxEIA= Subject key identifier: 41:EF:04:E8:DF:5B:7E:B2:26:A0:DD:CB:E6:5C:D2:61:1E:A7:5F:08 Authority key identifier: EF:8C:77:C8:17:ED:DD:3F:DC:C6:6B:63:52:D6:EA:78:D7:2C:5A:C6 Certificate issuer: /CN=A91DABAA/serialNumber=EF8C77C817EDDD3FDCC66B6352D6EA78D72C5AC6 Certificate serial: A1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/74x3yBft3T_cxmtjUtbqeNcsWsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.mft Manifest number: 9F Signing time: Fri 09 Oct 2026 08:00:50 +0000 Manifest this update: Fri 09 Oct 2026 08:00:49 +0000 Manifest next update: Fri 16 Oct 2026 08:00:49 +0000 Files and hashes: 1: 74x3yBft3T_cxmtjUtbqeNcsWsY.crl (hash: MqNdIdN3cWPUo0QZqpm5NYiqCmT0WSiwSv2heP7r2f8=) 2: EEEB4CEAD19D11F0B238D972C4F9AE02.roa (hash: KBecdMTFKnUpJ7QDfC5GLAYFAglDXZ+nTAZgDKN2WsU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.crl rsync://rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/74x3yBft3T_cxmtjUtbqeNcsWsY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 08:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DABAA, serialNumber=EF8C77C817EDDD3FDCC66B6352D6EA78D72C5AC6 Validity Not Before: Oct 9 08:00:49 2026 GMT Not After : Oct 16 08:00:49 2026 GMT Subject: CN=6ac89f32-84d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c1:84:c3:e7:81:09:02:ba:fd:13:ac:f3:b0: 17:ac:59:f5:c5:2d:f7:d7:1e:30:6e:3c:08:fe:cf: 87:a4:6f:06:62:c7:a2:b6:c6:49:7f:f4:0e:e3:33: b9:4e:12:ab:a1:56:e7:42:0c:c2:c6:ae:93:3a:9d: fe:b5:22:50:81:f6:07:ba:6b:cf:86:93:b8:c1:47: 01:6d:70:c8:d3:62:87:e0:6c:c4:3d:0e:c2:1a:e6: 56:3b:d0:21:83:b0:ca:02:13:b6:36:a5:ea:d5:fc: 4e:4b:bc:e8:95:1a:43:c0:b2:f2:4c:dc:eb:8e:a3: 02:a2:14:37:64:68:92:21:40:2b:4d:59:e7:ab:4a: 18:eb:b8:30:f2:15:3a:c5:2c:c4:ed:0a:ab:bf:38: 80:24:54:94:d3:80:94:a4:c9:48:41:a4:a4:ca:92: 4e:23:ee:78:13:85:8b:e5:7b:c4:03:8d:d4:3b:f1: c0:f7:e7:f8:32:aa:da:72:8d:ce:f2:4a:6f:57:b8: fe:d3:0f:a5:6f:9c:cc:17:58:46:95:43:e6:38:7f: f6:fb:a1:5f:9b:52:43:7f:db:bf:b5:03:6a:11:40: d3:e1:43:60:e0:a6:1d:e4:db:d0:3d:28:0c:59:65: b2:2d:b2:23:a0:40:a1:fb:b8:a5:62:96:c1:67:96: 8c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:EF:04:E8:DF:5B:7E:B2:26:A0:DD:CB:E6:5C:D2:61:1E:A7:5F:08 X509v3 Authority Key Identifier: keyid:EF:8C:77:C8:17:ED:DD:3F:DC:C6:6B:63:52:D6:EA:78:D7:2C:5A:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/74x3yBft3T_cxmtjUtbqeNcsWsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:e3:01:34:ac:26:d4:34:df:df:cc:b3:85:3a:18:39:61:02: 8f:09:c8:33:5e:13:2c:b1:ca:81:ed:b7:35:30:c8:23:88:8d: 03:56:3c:cf:f5:f8:26:fb:1c:b6:29:68:9c:53:96:7e:dd:b0: 4b:29:3a:6f:5d:be:68:f7:8b:cf:bb:1a:68:a2:7a:60:e2:91: 1f:45:39:2a:7c:ca:54:78:ad:32:93:70:6c:5f:1e:b0:8c:7e: ee:96:70:63:16:08:5a:c9:19:80:9a:1e:ad:b8:2e:f4:03:3f: 30:7c:f1:c3:0a:1c:36:fb:05:b8:72:6d:95:04:7c:e8:2d:e8: 30:e8:ef:1e:58:49:0c:8c:9d:74:fd:af:95:8a:a0:95:20:e4: 93:58:f2:be:70:c3:f8:72:c8:b3:6e:af:4d:83:5b:31:b5:ce: e4:7d:87:45:e2:70:c7:2b:70:b6:7b:01:42:cd:48:ea:82:a7: 6d:c1:4d:9c:86:10:f3:ff:3a:99:e1:7f:87:87:ab:b4:38:a9: bb:71:7f:9e:27:29:63:f7:f9:37:59:ef:93:a0:54:c6:16:e6: bb:2b:55:a6:d0:2b:fb:75:a7:58:9c:a0:37:81:42:56:78:1e: 64:0f:c1:fa:50:ac:8b:f8:e0:6a:36:dc:d2:49:ac:f8:28:e3: f0:a7:2b:b9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REFCQUExMTAvBgNVBAUTKEVGOEM3N0M4MTdFREREM0ZEQ0M2NkI2MzUyRDZFQTc4 RDcyQzVBQzYwHhcNMjYxMDA5MDgwMDQ5WhcNMjYxMDE2MDgwMDQ5WjAYMRYwFAYD VQQDEw02YWM4OWYzMi04NGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAusGEw+eBCQK6/ROs87AXrFn1xS331x4wbjwI/s+HpG8GYseitsZJf/QO4zO5 ThKroVbnQgzCxq6TOp3+tSJQgfYHumvPhpO4wUcBbXDI02KH4GzEPQ7CGuZWO9Ah g7DKAhO2NqXq1fxOS7zolRpDwLLyTNzrjqMCohQ3ZGiSIUArTVnnq0oY67gw8hU6 xSzE7QqrvziAJFSU04CUpMlIQaSkypJOI+54E4WL5XvEA43UO/HA9+f4Mqraco3O 8kpvV7j+0w+lb5zMF1hGlUPmOH/2+6Ffm1JDf9u/tQNqEUDT4UNg4KYd5NvQPSgM WWWyLbIjoECh+7ilYpbBZ5aMgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEHvBOjf W36yJqDdy+Zc0mEep18IMB8GA1UdIwQYMBaAFO+Md8gX7d0/3MZrY1LW6njXLFrG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQUJBQS80MjBDMEY2RUQx OUQxMUYwODM4MTQxNzBDNEY5QUUwMi83NHgzeUJmdDNUX2N4bXRqVXRicWVOY3NX c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzc0eDN5QmZ0M1RfY3htdGpVdGJxZU5jc1dzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QUJBQS80MjBDMEY2RUQxOUQxMUYwODM4MTQxNzBDNEY5QUUwMi83NHgzeUJmdDNU X2N4bXRqVXRicWVOY3NXc1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmuMBNKwm1DTf38yzhToYOWECjwnIM14TLLHKge23NTDII4iNA1Y8z/X4Jvsc tilonFOWft2wSyk6b12+aPeLz7saaKJ6YOKRH0U5KnzKVHitMpNwbF8esIx+7pZw YxYIWskZgJoerbgu9AM/MHzxwwocNvsFuHJtlQR86C3oMOjvHlhJDIyddP2vlYqg lSDkk1jyvnDD+HLIs26vTYNbMbXO5H2HReJwxytwtnsBQs1I6oKnbcFNnIYQ8/86 meF/h4ertDipu3F/nicpY/f5N1nvk6BUxhbmuytVptAr+3WnWJygN4FCVngeZA/B +lCsi/jgajbc0kms+Cjj8KcruQ== -----END CERTIFICATE-----Generated at Fri Oct 9 19:57:31 2026 by rpki-client