$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft File: lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft (raw, json) Hash identifier: 4hkHCk9gMGBh/8Qou5MElvp8SJkB1c0ayoKUlrS4cfk= Subject key identifier: 7B:8A:C0:7D:26:E1:35:06:0E:99:57:AC:6F:12:B2:DE:90:F0:DB:7E Authority key identifier: 94:33:49:FD:B6:DC:0A:F1:5C:D5:74:DA:42:F8:EC:7B:49:DC:0D:B7 Certificate issuer: /CN=A91DEB01/serialNumber=943349FDB6DC0AF15CD574DA42F8EC7B49DC0DB7 Certificate serial: FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDNJ_bbcCvFc1XTaQvjse0ncDbc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft Manifest number: F7 Signing time: Thu 29 Oct 2026 07:08:37 +0000 Manifest this update: Thu 29 Oct 2026 07:08:36 +0000 Manifest next update: Thu 05 Nov 2026 07:08:36 +0000 Files and hashes: 1: lDNJ_bbcCvFc1XTaQvjse0ncDbc.crl (hash: rNNgQ22fzL8xPcO80hXCZ4Xy/E3iBZJ+DWtKAAc3PE0=) 2: 76B542B0A84011F194FA91243A11F970.roa (hash: Ikz0D3kqkyqo0E9vWshLiMP6ATZdwtVz365rPjNjhYQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.crl rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDNJ_bbcCvFc1XTaQvjse0ncDbc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 07:08:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 254 (0xfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEB01, serialNumber=943349FDB6DC0AF15CD574DA42F8EC7B49DC0DB7 Validity Not Before: Oct 29 07:08:36 2026 GMT Not After : Nov 5 07:08:36 2026 GMT Subject: CN=6ae2f0f5-a047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0e:64:8c:f0:cf:30:b8:08:88:4d:c3:18:fa: 82:77:30:f8:86:a9:38:9c:12:1d:c5:11:ea:cb:90: dd:d3:eb:49:3a:f1:12:98:4e:58:df:0c:18:5a:9b: cd:5e:65:57:64:4e:f9:7f:99:75:a8:71:66:2f:e3: fe:b6:26:5f:df:ef:a1:6a:a6:c7:62:dc:60:89:07: c8:47:6d:3c:e7:5f:a6:44:3f:db:fe:4e:c5:fd:52: 1d:c4:68:64:77:8f:ad:92:9f:c0:af:f6:c9:5d:38: 7f:97:b2:e1:c4:cb:5f:20:a9:e7:0c:c1:69:b8:8b: 02:e5:b3:99:53:d9:d9:cb:ca:1e:a5:a0:54:b9:c5: 5f:3f:74:e7:96:1c:35:d8:c6:09:53:0a:60:ca:ba: 42:47:8b:74:b9:95:38:a1:0f:e8:3f:a0:b2:d7:7d: 63:5b:01:b2:ab:5e:87:85:e7:61:9e:5c:3b:71:31: 19:43:25:8e:fb:a7:8b:77:78:ab:69:31:db:9f:a7: 87:63:52:5c:02:f2:87:61:36:c0:41:95:c1:97:ff: ff:53:8e:b7:53:2a:69:b3:81:87:9b:65:f2:4e:11: 24:ce:62:d2:5a:d1:27:5a:7d:1f:7c:fa:2f:05:38: b2:47:63:d4:1a:0f:59:5d:c9:95:3c:68:a0:66:27: 8b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:8A:C0:7D:26:E1:35:06:0E:99:57:AC:6F:12:B2:DE:90:F0:DB:7E X509v3 Authority Key Identifier: keyid:94:33:49:FD:B6:DC:0A:F1:5C:D5:74:DA:42:F8:EC:7B:49:DC:0D:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDNJ_bbcCvFc1XTaQvjse0ncDbc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:00:f0:7e:8a:80:0c:25:e8:05:a7:e4:5f:47:4b:01:0a:49: ab:1c:bd:3c:1c:2f:4e:3e:7b:de:aa:ce:b4:e4:f6:31:a5:a2: 1e:ed:09:78:a5:9c:1c:cd:ee:6b:39:53:87:4c:a2:c6:44:e9: 0c:16:e0:59:7d:b4:f1:79:fe:39:db:a8:5b:34:a9:af:fc:21: 7e:ab:16:60:18:12:d2:00:70:a2:37:26:bc:1c:e7:db:f1:0c: 44:ca:e9:dd:f1:9a:a5:cd:c3:65:b5:03:e7:ef:53:bf:25:bc: 15:cd:82:98:eb:00:0c:79:99:fa:10:b3:fc:39:d4:60:3f:43: db:18:7e:2c:14:ae:4f:c4:d2:1d:8e:b3:f3:76:92:fd:ff:46: 84:44:45:92:ef:d3:24:1c:e3:8a:cc:5f:e3:e3:ce:40:4e:45: 6c:64:29:ce:7c:21:a9:b9:22:dd:6e:94:5b:99:bd:5e:78:31: a0:f8:04:7f:e8:98:35:ff:95:59:62:1b:00:ff:5d:45:e9:23: b4:1b:16:4b:d6:12:91:85:d0:cf:90:88:b1:72:a8:d7:75:01: d7:e3:49:b2:9d:bb:53:36:e9:c5:a7:da:6b:98:2b:56:4e:b5: 90:53:86:fb:32:3b:c9:90:8c:8c:03:05:18:35:28:b1:e9:b6: 25:97:be:af -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVCMDExMTAvBgNVBAUTKDk0MzM0OUZEQjZEQzBBRjE1Q0Q1NzREQTQyRjhFQzdC NDlEQzBEQjcwHhcNMjYxMDI5MDcwODM2WhcNMjYxMTA1MDcwODM2WjAYMRYwFAYD VQQDEw02YWUyZjBmNS1hMDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQ5kjPDPMLgIiE3DGPqCdzD4hqk4nBIdxRHqy5Dd0+tJOvESmE5Y3wwYWpvN XmVXZE75f5l1qHFmL+P+tiZf3++haqbHYtxgiQfIR20851+mRD/b/k7F/VIdxGhk d4+tkp/Ar/bJXTh/l7LhxMtfIKnnDMFpuIsC5bOZU9nZy8oepaBUucVfP3Tnlhw1 2MYJUwpgyrpCR4t0uZU4oQ/oP6Cy131jWwGyq16Hhedhnlw7cTEZQyWO+6eLd3ir aTHbn6eHY1JcAvKHYTbAQZXBl///U463Uypps4GHm2XyThEkzmLSWtEnWn0ffPov BTiyR2PUGg9ZXcmVPGigZieLbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHuKwH0m 4TUGDplXrG8Sst6Q8Nt+MB8GA1UdIwQYMBaAFJQzSf223ArxXNV02kL47HtJ3A23 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUIwMS9GNkE2NDVENjY3 QTExMUYwQkJFQkRGMDlDNEY5QUUwMi9sRE5KX2JiY0N2RmMxWFRhUXZqc2UwbmNE YmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xETkpfYmJjQ3ZGYzFYVGFRdmpzZTBuY0RiYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUIwMS9GNkE2NDVENjY3QTExMUYwQkJFQkRGMDlDNEY5QUUwMi9sRE5KX2JiY0N2 RmMxWFRhUXZqc2UwbmNEYmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUADwfoqADCXoBafkX0dLAQpJqxy9PBwvTj573qrOtOT2MaWiHu0JeKWcHM3u azlTh0yixkTpDBbgWX208Xn+OduoWzSpr/whfqsWYBgS0gBwojcmvBzn2/EMRMrp 3fGapc3DZbUD5+9TvyW8Fc2CmOsADHmZ+hCz/DnUYD9D2xh+LBSuT8TSHY6z83aS /f9GhERFku/TJBzjisxf4+POQE5FbGQpznwhqbki3W6UW5m9XngxoPgEf+iYNf+V WWIbAP9dRekjtBsWS9YSkYXQz5CIsXKo13UB1+NJsp27Uzbpxafaa5grVk61kFOG +zI7yZCMjAMFGDUosem2JZe+rw== -----END CERTIFICATE-----Generated at Fri Oct 30 07:07:24 2026 by rpki-client