$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft File: aXYgUV57Huisfz9tE76uumLE7ak.mft (raw, json) Hash identifier: qUkSbf9uGWmzlGMAmyG32xF5TTh+jafVfBCEiYnpjgM= Subject key identifier: C3:55:42:C6:B3:37:64:0A:E5:4A:BC:FB:C1:AE:00:E6:93:17:12:83 Authority key identifier: 69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9 Certificate issuer: /CN=A91DE2AE/serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9 Certificate serial: 0306 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft Manifest number: 02E2 Signing time: Tue 27 Oct 2026 01:25:32 +0000 Manifest this update: Tue 27 Oct 2026 01:25:32 +0000 Manifest next update: Tue 03 Nov 2026 01:25:32 +0000 Files and hashes: 1: aXYgUV57Huisfz9tE76uumLE7ak.crl (hash: bYqMEKJserLF+V0+88i1CEdCeI7HhxYJ59I/2iTRb/w=) 2: F3B716768F2F11EE86964D62C4F9AE02.roa (hash: XbLvpieZLxPD8FqUNOF2czHZzpbSV3R5GXAyN7YF/l8=) 3: 38E45CE08C2511EDB64DB410C4F9AE02.roa (hash: 4jtKn5a6oeJ2ZvZ6jOhbyJ8NLFyq6vJ1Ql8J7L6gxEQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 01:25:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 774 (0x306) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE2AE, serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9 Validity Not Before: Oct 27 01:25:32 2026 GMT Not After : Nov 3 01:25:32 2026 GMT Subject: CN=6adffd8c-b6ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:57:99:dc:53:d5:b9:8b:e5:e3:50:49:2a:d3: 90:3a:ec:c7:a7:42:0d:69:3f:51:c3:8d:4d:4f:5b: dc:97:3a:b1:c9:fb:f6:0d:ed:b8:6c:49:b0:d2:21: 74:43:ab:3d:67:0d:2a:f5:84:1b:03:b3:4a:a6:8e: 97:78:b5:0a:83:62:5f:ec:d8:36:5b:7e:20:19:40: 9e:73:a9:ac:fe:bd:66:0c:18:ce:1e:69:d5:56:4a: d2:41:a5:c9:63:8b:d5:2e:eb:95:d8:54:52:09:f0: b3:5c:e4:af:f7:14:a4:c6:8f:6c:de:c5:25:f6:4f: b7:07:12:cb:0f:fc:44:22:5b:83:66:f9:8e:7b:f9: 1b:66:a7:27:70:60:19:6d:5d:2d:5d:27:9f:48:95: 84:33:57:43:29:c5:4a:69:f9:fd:ec:1a:50:3e:af: b0:48:32:76:3e:9c:8a:08:f7:f7:32:68:96:25:86: fc:e1:79:f6:3c:d1:b5:22:52:14:b7:25:df:68:95: 55:15:d8:08:68:15:dc:95:73:26:de:78:7c:f3:88: 7e:65:23:6a:ac:cc:a8:a1:c6:b8:c9:d7:07:6c:d5: 8f:6a:59:92:07:8d:e4:e9:dd:f2:b9:a9:1c:76:55: b9:67:63:5f:81:c2:30:ed:e1:ef:27:3b:97:3c:23: 57:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:55:42:C6:B3:37:64:0A:E5:4A:BC:FB:C1:AE:00:E6:93:17:12:83 X509v3 Authority Key Identifier: keyid:69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:65:b6:76:53:9c:90:43:89:45:75:ba:17:e4:fa:f9:4c:5e: 9c:5f:ff:2f:81:46:5c:0e:01:a7:82:ed:94:c0:22:7c:91:20: 70:a0:cf:dd:b7:4c:19:64:55:34:b8:fa:ce:a6:fa:67:c1:c9: e8:6f:09:14:80:a2:f3:87:f0:40:69:81:ca:13:e7:39:da:e3: ef:d9:f0:10:63:8c:d6:93:8e:ca:65:a3:ee:57:84:71:ad:60: d4:68:cc:96:6a:5b:db:3f:22:3e:fe:95:24:22:ca:fc:e2:4a: 47:17:2b:fe:c1:d2:35:76:9c:5e:52:6d:ef:23:bb:51:3c:7d: b9:a8:b5:aa:70:e1:dd:de:ae:73:4d:ee:82:55:90:a4:77:d2: 75:1e:35:4e:be:5a:4b:b9:8f:6e:82:01:d0:8a:0a:88:6c:f1: 23:be:5e:2e:9a:b0:10:6c:5e:35:33:2c:63:21:8f:ba:b9:4d: e9:92:3c:6a:3b:fc:d7:90:54:f8:ea:ab:aa:d0:6f:34:5d:82: 68:b9:25:5e:b5:66:1e:5c:3e:dc:cc:66:58:91:3e:eb:5b:c7: 6a:1d:f3:6a:50:9c:63:03:ea:3e:a9:85:df:54:99:41:09:7b: 6e:9d:a3:7f:83:f1:db:eb:ff:8b:65:df:73:23:a0:f2:c1:ca: 5f:85:18:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAwYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUyQUUxMTAvBgNVBAUTKDY5NzYyMDUxNUU3QjFFRThBQzdGM0Y2RDEzQkVBRUJB NjJDNEVEQTkwHhcNMjYxMDI3MDEyNTMyWhcNMjYxMTAzMDEyNTMyWjAYMRYwFAYD VQQDEw02YWRmZmQ4Yy1iNmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0FeZ3FPVuYvl41BJKtOQOuzHp0INaT9Rw41NT1vclzqxyfv2De24bEmw0iF0 Q6s9Zw0q9YQbA7NKpo6XeLUKg2Jf7Ng2W34gGUCec6ms/r1mDBjOHmnVVkrSQaXJ Y4vVLuuV2FRSCfCzXOSv9xSkxo9s3sUl9k+3BxLLD/xEIluDZvmOe/kbZqcncGAZ bV0tXSefSJWEM1dDKcVKafn97BpQPq+wSDJ2PpyKCPf3MmiWJYb84Xn2PNG1IlIU tyXfaJVVFdgIaBXclXMm3nh884h+ZSNqrMyooca4ydcHbNWPalmSB43k6d3yuakc dlW5Z2NfgcIw7eHvJzuXPCNXKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMNVQsaz N2QK5Uq8+8GuAOaTFxKDMB8GA1UdIwQYMBaAFGl2IFFeex7orH8/bRO+rrpixO2p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTJBRS9DNzBGRUEyQThD MjAxMUVEQURENUM4MDlDNEY5QUUwMi9hWFlnVVY1N0h1aXNmejl0RTc2dXVtTEU3 YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FYWWdVVjU3SHVpc2Z6OXRFNzZ1dW1MRTdhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTJBRS9DNzBGRUEyQThDMjAxMUVEQURENUM4MDlDNEY5QUUwMi9hWFlnVVY1N0h1 aXNmejl0RTc2dXVtTEU3YWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfWW2dlOckEOJRXW6F+T6+UxenF//L4FGXA4Bp4LtlMAifJEgcKDP3bdMGWRV NLj6zqb6Z8HJ6G8JFICi84fwQGmByhPnOdrj79nwEGOM1pOOymWj7leEca1g1GjM lmpb2z8iPv6VJCLK/OJKRxcr/sHSNXacXlJt7yO7UTx9uai1qnDh3d6uc03uglWQ pHfSdR41Tr5aS7mPboIB0IoKiGzxI75eLpqwEGxeNTMsYyGPurlN6ZI8ajv815BU +OqrqtBvNF2CaLklXrVmHlw+3MxmWJE+61vHah3zalCcYwPqPqmF31SZQQl7bp2j f4Px2+v/i2XfcyOg8sHKX4UY8g== -----END CERTIFICATE-----Generated at Wed Oct 28 23:25:03 2026 by rpki-client