$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.mft File: PQaSnY1eH2juI-yj-UjP96LklbM.mft (raw, json) Hash identifier: dDMIoYFQj/eV6+yiaDNQXXNJdyfsvybzX6NJl5nN2IQ= Subject key identifier: BC:0F:CC:6A:E7:DA:49:91:AF:52:C0:4A:02:53:88:8A:5F:4E:E2:83 Authority key identifier: 3D:06:92:9D:8D:5E:1F:68:EE:23:EC:A3:F9:48:CF:F7:A2:E4:95:B3 Certificate issuer: /CN=A91DDCD9/serialNumber=3D06929D8D5E1F68EE23ECA3F948CFF7A2E495B3 Certificate serial: D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQaSnY1eH2juI-yj-UjP96LklbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.mft Manifest number: 0CAC Signing time: Mon 26 Oct 2026 18:59:55 +0000 Manifest this update: Mon 26 Oct 2026 18:59:55 +0000 Manifest next update: Mon 02 Nov 2026 18:59:55 +0000 Files and hashes: 1: PQaSnY1eH2juI-yj-UjP96LklbM.crl (hash: xGNiqwI7IICtA23EX6wkaENxvTdDFhJYon9U4vOjmeo=) 2: 4140D222AB0511F0AD64C814C4F9AE02.roa (hash: bvr9DE6l6ItU/zlfwBlzipklAIrrtEOOEMTj7h7vxq8=) 3: 41D7A1D4AB0511F0AD64C814C4F9AE02.roa (hash: esPy6MMmYtKzPWXObL0sx4eLY1hmGAfUOV4Qg6UpVgo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.crl rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQaSnY1eH2juI-yj-UjP96LklbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 18:59:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCD9, serialNumber=3D06929D8D5E1F68EE23ECA3F948CFF7A2E495B3 Validity Not Before: Oct 26 18:59:55 2026 GMT Not After : Nov 2 18:59:55 2026 GMT Subject: CN=6adfa32b-2127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2c:d6:64:ea:5b:3f:d3:18:38:fa:86:ed:a0: e4:46:b4:85:b4:a9:4f:f4:43:b1:02:76:97:9a:0a: 34:af:ab:40:b7:00:42:d0:f1:b3:96:02:db:12:70: 74:9a:97:64:28:2c:92:3c:4a:78:35:ea:66:f8:5c: 05:d5:39:ea:38:67:f7:15:13:b4:a3:57:7f:ff:24: a5:e5:f3:5e:88:06:af:a2:4f:e9:f1:a2:bc:02:97: f7:38:d3:18:7a:d4:22:cd:c2:d7:97:07:ea:8e:c7: 0d:f5:d5:68:b6:69:38:43:3f:0a:12:aa:84:c4:c4: ed:c3:0d:82:17:1d:3f:11:91:64:c4:fd:ff:c8:36: 9f:cb:b9:41:30:00:76:9e:c7:3b:5a:49:81:0b:75: 5b:d1:b1:84:79:77:b1:39:c9:e1:46:9f:47:3d:a4: 60:61:44:14:ab:df:a5:09:f1:dd:35:23:10:b5:52: ec:42:6e:58:4b:1a:25:3f:0a:f8:9c:5e:d7:09:b2: bf:b1:3b:54:b8:58:78:59:44:c7:af:01:35:b9:af: 6b:d7:9e:8e:81:76:9b:f4:cd:76:e2:18:70:ef:3c: 8d:b5:6c:b9:b0:13:1f:9c:88:20:ab:36:b2:87:58: 06:cd:f4:32:a1:b7:5b:c8:ee:5f:1c:75:8a:d7:c5: 7f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:0F:CC:6A:E7:DA:49:91:AF:52:C0:4A:02:53:88:8A:5F:4E:E2:83 X509v3 Authority Key Identifier: keyid:3D:06:92:9D:8D:5E:1F:68:EE:23:EC:A3:F9:48:CF:F7:A2:E4:95:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQaSnY1eH2juI-yj-UjP96LklbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:cc:7b:ae:a3:7e:3f:dc:ad:de:ee:9a:29:27:5d:ba:4c:c1: 03:bf:b8:7f:e3:81:37:64:41:52:0d:4a:e8:a3:25:e7:77:5b: 68:90:c8:41:38:44:36:b8:06:06:8d:69:81:aa:f1:a1:a6:31: c1:b9:7b:b9:e5:76:d7:51:f3:9a:17:70:f5:ea:43:66:4b:f0: 57:2a:da:4d:48:5d:69:e3:95:17:32:68:b0:9a:8a:ba:2f:25: bf:78:92:39:f3:7b:2e:a3:7d:e2:a6:30:c4:ad:31:6d:44:00: c8:b9:5d:32:8f:d0:75:c7:81:08:0d:1e:d2:13:bc:5d:51:c4: 72:c5:f2:50:ec:ea:85:4e:ba:9b:ee:10:96:8f:f9:9a:07:72: 22:d4:35:82:0f:38:39:7f:49:82:81:f8:40:70:07:84:a1:c6: d9:68:aa:5b:f1:9e:d7:ec:d2:b6:44:90:ec:c7:92:79:2b:57: 8c:a3:68:57:fb:d5:06:00:7c:7c:0c:3b:99:d4:4d:f7:b8:67: c0:5c:7d:11:59:c6:02:ca:16:a3:3d:38:8e:db:08:c5:81:c8: b6:ae:98:42:12:b9:46:9b:94:df:27:7c:88:56:8f:59:58:e5: b1:af:ce:7d:95:85:f6:57:9f:b1:b5:81:8e:51:34:d4:91:59: df:8d:f2:89 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDRDkxMTAvBgNVBAUTKDNEMDY5MjlEOEQ1RTFGNjhFRTIzRUNBM0Y5NDhDRkY3 QTJFNDk1QjMwHhcNMjYxMDI2MTg1OTU1WhcNMjYxMTAyMTg1OTU1WjAYMRYwFAYD VQQDEw02YWRmYTMyYi0yMTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArCzWZOpbP9MYOPqG7aDkRrSFtKlP9EOxAnaXmgo0r6tAtwBC0PGzlgLbEnB0 mpdkKCySPEp4Nepm+FwF1TnqOGf3FRO0o1d//ySl5fNeiAavok/p8aK8Apf3ONMY etQizcLXlwfqjscN9dVotmk4Qz8KEqqExMTtww2CFx0/EZFkxP3/yDafy7lBMAB2 nsc7WkmBC3Vb0bGEeXexOcnhRp9HPaRgYUQUq9+lCfHdNSMQtVLsQm5YSxolPwr4 nF7XCbK/sTtUuFh4WUTHrwE1ua9r156OgXab9M124hhw7zyNtWy5sBMfnIggqzay h1gGzfQyobdbyO5fHHWK18V/XwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLwPzGrn 2kmRr1LASgJTiIpfTuKDMB8GA1UdIwQYMBaAFD0Gkp2NXh9o7iPso/lIz/ei5JWz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENEOS80MTBCQkMxNDRF NkMxMUVBODkwNDk3NDdDNEY5QUUwMi9QUWFTblkxZUgyanVJLXlqLVVqUDk2TGts Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BRYVNuWTFlSDJqdUkteWotVWpQOTZMa2xiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RENEOS80MTBCQkMxNDRFNkMxMUVBODkwNDk3NDdDNEY5QUUwMi9QUWFTblkxZUgy anVJLXlqLVVqUDk2TGtsYk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAacx7rqN+P9yt3u6aKSddukzBA7+4f+OBN2RBUg1K6KMl53dbaJDIQThENrgG Bo1pgarxoaYxwbl7ueV211Hzmhdw9epDZkvwVyraTUhdaeOVFzJosJqKui8lv3iS OfN7LqN94qYwxK0xbUQAyLldMo/QdceBCA0e0hO8XVHEcsXyUOzqhU66m+4Qlo/5 mgdyItQ1gg84OX9JgoH4QHAHhKHG2WiqW/Ge1+zStkSQ7MeSeStXjKNoV/vVBgB8 fAw7mdRN97hnwFx9EVnGAsoWoz04jtsIxYHItq6YQhK5RpuU3yd8iFaPWVjlsa/O fZWF9lefsbWBjlE01JFZ343yiQ== -----END CERTIFICATE-----Generated at Tue Oct 27 09:17:10 2026 by rpki-client